./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor910318476 <...> [pid 5887] mkdir("./bus", 0777 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./130/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5886] close(4 [pid 5076] newfstatat(AT_FDCWD, "./133/binderfs", [pid 5886] <... close resumed>) = 0 [pid 5887] <... mkdir resumed>) = 0 [pid 5885] <... close resumed>) = 0 [pid 5884] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5886] mkdir("./bus", 0777 [pid 5887] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5076] unlink("./133/binderfs" [pid 5886] <... mkdir resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./130/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5884] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5886] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5075] <... openat resumed>) = 4 [pid 5075] newfstatat(4, "", [pid 5885] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5886] <... mount resumed>) = 0 [pid 5887] <... mount resumed>) = 0 [pid 5884] <... open resumed>) = 5 [pid 5076] getdents64(3, [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5886] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5887] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5884] ftruncate(5, 0 [pid 5075] getdents64(4, [pid 5886] <... openat resumed>) = 3 [pid 5887] <... openat resumed>) = 3 [pid 5884] <... ftruncate resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5886] chdir("./bus" [pid 5887] chdir("./bus" [pid 5884] exit_group(0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5886] <... chdir resumed>) = 0 [pid 5887] <... chdir resumed>) = 0 [pid 5884] <... exit_group resumed>) = ? [pid 5886] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5887] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5885] <... open resumed>) = 5 [pid 5884] +++ exited with 0 +++ [ 156.673327][ T5887] loop5: detected capacity change from 0 to 1024 [ 156.682360][ T5886] loop0: detected capacity change from 0 to 1024 [pid 5076] close(3 [pid 5075] getdents64(4, [pid 5886] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5887] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5885] ftruncate(5, 0 [pid 5076] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5884, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5886] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5887] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5076] rmdir("./133" [pid 5886] <... symlink resumed>) = 0 [pid 5887] <... symlink resumed>) = 0 [pid 5885] <... ftruncate resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] close(4 [pid 5885] exit_group(0 [pid 5075] <... close resumed>) = 0 [pid 5885] <... exit_group resumed>) = ? [pid 5886] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5887] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5075] rmdir("./130/bus" [pid 5074] umount2("./130", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] mkdir("./134", 0777) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./130", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5074] newfstatat(3, "", [pid 5886] <... creat resumed>) = 4 [pid 5887] <... creat resumed>) = 4 [pid 5885] +++ exited with 0 +++ [pid 5076] <... openat resumed>) = 3 [pid 5075] umount2("./130/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5886] rename("./bus", "./file2" [pid 5887] rename("./bus", "./file2" [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] getdents64(3, [pid 5075] newfstatat(AT_FDCWD, "./130/binderfs", [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5885, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 5075] unlink("./130/binderfs" [pid 5886] <... rename resumed>) = -1 EEXIST (File exists) [pid 5887] <... rename resumed>) = -1 EEXIST (File exists) [pid 5077] <... restart_syscall resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5074] umount2("./130/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5886] memfd_create("syzkaller", 0 [pid 5887] memfd_create("syzkaller", 0 [pid 5886] <... memfd_create resumed>) = 5 [pid 5887] <... memfd_create resumed>) = 5 [pid 5075] getdents64(3, [pid 5886] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5887] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] umount2("./132", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5886] <... mmap resumed>) = 0x7f0356e00000 [pid 5887] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] openat(AT_FDCWD, "./132", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5887] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] newfstatat(3, "", [pid 5886] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] close(3 [pid 5077] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./130") = 0 [pid 5075] mkdir("./131", 0777) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5077] <... umount2 resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5887] <... write resumed>) = 524288 [pid 5074] <... umount2 resumed>) = 0 [pid 5077] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./132/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./132/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] umount2("./130/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... openat resumed>) = 4 [pid 5077] newfstatat(4, "", [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] newfstatat(AT_FDCWD, "./130/bus", [pid 5077] getdents64(4, [pid 5887] munmap(0x7f0356e00000, 138412032 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] getdents64(4, [pid 5074] umount2("./130/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5886] <... write resumed>) = 524288 [pid 5077] close(4 [pid 5886] munmap(0x7f0356e00000, 138412032 [pid 5887] <... munmap resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./130/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] rmdir("./132/bus" [pid 5074] <... openat resumed>) = 4 [pid 5076] close(3 [pid 5077] <... rmdir resumed>) = 0 [pid 5886] <... munmap resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5074] newfstatat(4, "", [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5888 attached [pid 5886] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5887] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] umount2("./132/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5888] set_robust_list(0x55556e32a660, 24 [pid 5887] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5888] <... set_robust_list resumed>) = 0 [pid 5886] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5887] close(5 [pid 5077] newfstatat(AT_FDCWD, "./132/binderfs", [pid 5074] getdents64(4, [pid 5075] <... ioctl resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 5888 [pid 5888] chdir("./134") = 0 [pid 5888] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] close(3 [pid 5888] <... prctl resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5888] setpgid(0, 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5888] <... setpgid resumed>) = 0 [pid 5074] getdents64(4, [pid 5888] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5886] close(5 [pid 5077] unlink("./132/binderfs" [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5888] <... openat resumed>) = 3 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 5889 [pid 5074] close(4 [pid 5077] <... unlink resumed>) = 0 [pid 5077] getdents64(3, [pid 5074] <... close resumed>) = 0 [pid 5887] <... close resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] rmdir("./130/bus"./strace-static-x86_64: Process 5889 attached [pid 5888] write(3, "1000", 4 [pid 5077] close(3 [pid 5889] set_robust_list(0x55556e32a660, 24 [pid 5888] <... write resumed>) = 4 [pid 5887] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5886] <... close resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5889] <... set_robust_list resumed>) = 0 [pid 5888] close(3 [pid 5886] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] rmdir("./132" [pid 5074] umount2("./130/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5889] chdir("./131" [pid 5888] <... close resumed>) = 0 [pid 5889] <... chdir resumed>) = 0 [pid 5888] symlink("/dev/binderfs", "./binderfs" [pid 5077] <... rmdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5889] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5888] <... symlink resumed>) = 0 [pid 5887] <... open resumed>) = 5 [pid 5077] mkdir("./133", 0777 [pid 5889] <... prctl resumed>) = 0 [pid 5888] memfd_create("syzkaller", 0 [pid 5886] <... open resumed>) = 5 [pid 5074] newfstatat(AT_FDCWD, "./130/binderfs", [pid 5889] setpgid(0, 0 [pid 5888] <... memfd_create resumed>) = 3 [pid 5887] ftruncate(5, 0 [pid 5077] <... mkdir resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5889] <... setpgid resumed>) = 0 [pid 5888] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5889] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5888] <... mmap resumed>) = 0x7f0356e00000 [pid 5888] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5889] <... openat resumed>) = 3 [pid 5889] write(3, "1000", 4 [pid 5886] ftruncate(5, 0 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] unlink("./130/binderfs" [pid 5889] <... write resumed>) = 4 [pid 5886] <... ftruncate resumed>) = 0 [pid 5887] <... ftruncate resumed>) = 0 [pid 5889] close(3 [pid 5074] <... unlink resumed>) = 0 [pid 5889] <... close resumed>) = 0 [pid 5887] exit_group(0 [pid 5077] <... openat resumed>) = 3 [pid 5889] symlink("/dev/binderfs", "./binderfs" [pid 5886] exit_group(0 [pid 5887] <... exit_group resumed>) = ? [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5074] getdents64(3, [pid 5889] <... symlink resumed>) = 0 [pid 5886] <... exit_group resumed>) = ? [pid 5887] +++ exited with 0 +++ [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5887, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5886] +++ exited with 0 +++ [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3 [pid 5889] memfd_create("syzkaller", 0 [pid 5074] <... close resumed>) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5886, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5073] umount2("./131", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5889] <... memfd_create resumed>) = 3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./131", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", [pid 5889] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5889] <... mmap resumed>) = 0x7f0356e00000 [pid 5074] rmdir("./130" [pid 5889] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] getdents64(3, [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] mkdir("./131", 0777 [pid 5073] umount2("./131/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./133", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] <... mkdir resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./133", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5078] <... openat resumed>) = 3 [pid 5078] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5078] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5888] <... write resumed>) = 524288 [pid 5078] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5889] <... write resumed>) = 524288 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] <... umount2 resumed>) = 0 [pid 5888] munmap(0x7f0356e00000, 138412032) = 0 [pid 5888] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5888] ioctl(4, LOOP_SET_FD, 3 [pid 5078] <... umount2 resumed>) = 0 [pid 5077] <... ioctl resumed>) = 0 [pid 5073] umount2("./131/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] newfstatat(AT_FDCWD, "./133/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] newfstatat(AT_FDCWD, "./131/bus", [pid 5078] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] openat(AT_FDCWD, "./133/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] umount2("./131/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] newfstatat(4, "", [pid 5889] munmap(0x7f0356e00000, 138412032 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5889] <... munmap resumed>) = 0 [pid 5078] getdents64(4, [pid 5077] close(3 [pid 5073] openat(AT_FDCWD, "./131/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] <... close resumed>) = 0 [pid 5078] getdents64(4, [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... openat resumed>) = 4 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5889] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5078] close(4 [pid 5889] ioctl(4, LOOP_SET_FD, 3 [pid 5078] <... close resumed>) = 0 ./strace-static-x86_64: Process 5890 attached [pid 5073] newfstatat(4, "", [pid 5078] rmdir("./133/bus" [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 5890 [pid 5890] set_robust_list(0x55556e32a660, 24 [pid 5078] <... rmdir resumed>) = 0 [pid 5890] <... set_robust_list resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5890] chdir("./133" [pid 5078] umount2("./133/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] getdents64(4, [pid 5890] <... chdir resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5890] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5078] newfstatat(AT_FDCWD, "./133/binderfs", [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5890] <... prctl resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5890] setpgid(0, 0 [pid 5078] unlink("./133/binderfs" [pid 5073] getdents64(4, [pid 5888] <... ioctl resumed>) = 0 [pid 5890] <... setpgid resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5888] close(3 [pid 5890] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5078] getdents64(3, [pid 5073] close(4 [pid 5890] <... openat resumed>) = 3 [pid 5888] <... close resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] <... close resumed>) = 0 [pid 5890] write(3, "1000", 4 [pid 5888] close(4 [pid 5078] close(3 [pid 5073] rmdir("./131/bus" [pid 5890] <... write resumed>) = 4 [pid 5888] <... close resumed>) = 0 [pid 5890] close(3 [pid 5888] mkdir("./bus", 0777 [pid 5073] <... rmdir resumed>) = 0 [pid 5890] <... close resumed>) = 0 [pid 5888] <... mkdir resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5073] umount2("./131/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5890] symlink("/dev/binderfs", "./binderfs" [pid 5888] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5889] <... ioctl resumed>) = 0 [pid 5889] close(3) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5890] <... symlink resumed>) = 0 [pid 5889] close(4 [pid 5073] newfstatat(AT_FDCWD, "./131/binderfs", [pid 5890] memfd_create("syzkaller", 0 [pid 5889] <... close resumed>) = 0 [pid 5890] <... memfd_create resumed>) = 3 [pid 5889] mkdir("./bus", 0777 [pid 5078] rmdir("./133" [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5889] <... mkdir resumed>) = 0 [pid 5888] <... mount resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5890] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] close(3 [pid 5073] unlink("./131/binderfs" [pid 5888] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5890] <... mmap resumed>) = 0x7f0356e00000 [pid 5889] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5888] <... openat resumed>) = 3 [pid 5074] <... close resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5888] chdir("./bus" [pid 5073] getdents64(3, [pid 5888] <... chdir resumed>) = 0 [pid 5888] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5888] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] close(3 [pid 5889] <... mount resumed>) = 0 [pid 5888] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [ 156.911333][ T5888] loop3: detected capacity change from 0 to 1024 [ 156.925735][ T5889] loop2: detected capacity change from 0 to 1024 [pid 5078] mkdir("./134", 0777 [pid 5889] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5888] <... symlink resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5889] <... openat resumed>) = 3 [pid 5889] chdir("./bus" [pid 5073] rmdir("./131"./strace-static-x86_64: Process 5891 attached [pid 5889] <... chdir resumed>) = 0 [pid 5888] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] <... mkdir resumed>) = 0 [pid 5891] set_robust_list(0x55556e32a660, 24 [pid 5889] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5890] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... rmdir resumed>) = 0 [pid 5891] <... set_robust_list resumed>) = 0 [pid 5889] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... openat resumed>) = 3 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 5891 [pid 5073] mkdir("./132", 0777 [pid 5891] chdir("./131") = 0 [pid 5889] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5073] <... mkdir resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5891] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5888] <... creat resumed>) = 4 [pid 5891] <... prctl resumed>) = 0 [pid 5888] rename("./bus", "./file2" [pid 5073] <... openat resumed>) = 3 [pid 5891] setpgid(0, 0 [pid 5889] <... symlink resumed>) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5891] <... setpgid resumed>) = 0 [pid 5889] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5888] <... rename resumed>) = -1 EEXIST (File exists) [pid 5888] memfd_create("syzkaller", 0) = 5 [pid 5888] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5888] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5891] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5889] <... creat resumed>) = 4 [pid 5889] rename("./bus", "./file2") = -1 EEXIST (File exists) [pid 5890] <... write resumed>) = 524288 [pid 5889] memfd_create("syzkaller", 0) = 5 [pid 5889] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5891] <... openat resumed>) = 3 [pid 5888] <... write resumed>) = 524288 [pid 5891] write(3, "1000", 4 [pid 5890] munmap(0x7f0356e00000, 138412032 [pid 5891] <... write resumed>) = 4 [pid 5891] close(3 [pid 5890] <... munmap resumed>) = 0 [pid 5889] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5890] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5891] <... close resumed>) = 0 [pid 5891] symlink("/dev/binderfs", "./binderfs" [pid 5890] <... openat resumed>) = 4 [pid 5891] <... symlink resumed>) = 0 [pid 5890] ioctl(4, LOOP_SET_FD, 3 [pid 5891] memfd_create("syzkaller", 0 [pid 5888] munmap(0x7f0356e00000, 138412032) = 0 [pid 5888] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5888] close(5 [pid 5891] <... memfd_create resumed>) = 3 [pid 5891] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5891] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5888] <... close resumed>) = 0 [pid 5890] <... ioctl resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 5889] munmap(0x7f0356e00000, 138412032) = 0 [pid 5889] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5889] close(5) = 0 [pid 5888] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5890] close(3 [pid 5073] close(3 [pid 5890] <... close resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5890] close(4 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5891] <... write resumed>) = 524288 [pid 5890] <... close resumed>) = 0 [pid 5890] mkdir("./bus", 0777 [pid 5888] <... open resumed>) = 5 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 5892 ./strace-static-x86_64: Process 5892 attached [pid 5890] <... mkdir resumed>) = 0 [pid 5892] set_robust_list(0x55556e32a660, 24) = 0 [pid 5890] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5888] ftruncate(5, 0) = 0 [pid 5892] chdir("./132" [pid 5888] exit_group(0 [pid 5892] <... chdir resumed>) = 0 [pid 5078] <... ioctl resumed>) = 0 [pid 5892] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 157.024589][ T5890] loop4: detected capacity change from 0 to 1024 [pid 5889] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5888] <... exit_group resumed>) = ? [pid 5892] setpgid(0, 0 [pid 5891] munmap(0x7f0356e00000, 138412032 [pid 5888] +++ exited with 0 +++ [pid 5892] <... setpgid resumed>) = 0 [pid 5891] <... munmap resumed>) = 0 [pid 5889] <... open resumed>) = 5 [pid 5078] close(3 [pid 5890] <... mount resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5888, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5891] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5890] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5889] ftruncate(5, 0 [pid 5078] <... close resumed>) = 0 [pid 5892] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5891] <... openat resumed>) = 4 [pid 5890] chdir("./bus" [pid 5889] <... ftruncate resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5893 attached [pid 5892] <... openat resumed>) = 3 [pid 5891] ioctl(4, LOOP_SET_FD, 3 [pid 5890] <... chdir resumed>) = 0 [pid 5076] umount2("./134", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5889] exit_group(0 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 5893 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./134", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5893] set_robust_list(0x55556e32a660, 24 [pid 5892] write(3, "1000", 4 [pid 5890] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5889] <... exit_group resumed>) = ? [pid 5076] <... openat resumed>) = 3 [pid 5893] <... set_robust_list resumed>) = 0 [pid 5892] <... write resumed>) = 4 [pid 5890] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5889] +++ exited with 0 +++ [pid 5076] newfstatat(3, "", [pid 5893] chdir("./134" [pid 5892] close(3 [pid 5890] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5889, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5892] <... close resumed>) = 0 [pid 5891] <... ioctl resumed>) = 0 [pid 5890] <... symlink resumed>) = 0 [pid 5076] getdents64(3, [pid 5893] <... chdir resumed>) = 0 [pid 5892] symlink("/dev/binderfs", "./binderfs" [pid 5891] close(3 [pid 5890] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5893] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5892] <... symlink resumed>) = 0 [pid 5891] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5893] setpgid(0, 0 [pid 5891] close(4 [pid 5890] <... creat resumed>) = 4 [pid 5076] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5893] <... setpgid resumed>) = 0 [pid 5892] memfd_create("syzkaller", 0 [pid 5891] <... close resumed>) = 0 [pid 5890] rename("./bus", "./file2" [pid 5075] umount2("./131", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5893] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5892] <... memfd_create resumed>) = 3 [pid 5891] mkdir("./bus", 0777 [pid 5890] <... rename resumed>) = -1 EEXIST (File exists) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5893] <... openat resumed>) = 3 [pid 5891] <... mkdir resumed>) = 0 [pid 5890] memfd_create("syzkaller", 0 [pid 5075] openat(AT_FDCWD, "./131", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5893] write(3, "1000", 4 [pid 5892] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5891] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5890] <... memfd_create resumed>) = 5 [pid 5076] <... umount2 resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5893] <... write resumed>) = 4 [pid 5890] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] newfstatat(3, "", [pid 5893] close(3 [pid 5892] <... mmap resumed>) = 0x7f0356e00000 [pid 5890] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5893] <... close resumed>) = 0 [pid 5890] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(3, [pid 5893] symlink("/dev/binderfs", "./binderfs" [pid 5076] newfstatat(AT_FDCWD, "./134/bus", [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [ 157.106278][ T5891] loop1: detected capacity change from 0 to 1024 [pid 5075] umount2("./131/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5893] <... symlink resumed>) = 0 [pid 5892] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5893] memfd_create("syzkaller", 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = 0 [pid 5893] <... memfd_create resumed>) = 3 [pid 5893] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5076] openat(AT_FDCWD, "./134/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5075] umount2("./131/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5891] <... mount resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./131/bus", [pid 5893] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5891] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5891] <... openat resumed>) = 3 [pid 5891] chdir("./bus" [pid 5076] getdents64(4, [pid 5891] <... chdir resumed>) = 0 [pid 5891] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5891] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] getdents64(4, [pid 5075] umount2("./131/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5891] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] close(4) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] rmdir("./134/bus" [pid 5075] openat(AT_FDCWD, "./131/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] newfstatat(4, "", [pid 5890] <... write resumed>) = 524288 [pid 5076] umount2("./134/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5892] <... write resumed>) = 524288 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(4, [pid 5891] <... symlink resumed>) = 0 [pid 5893] <... write resumed>) = 524288 [pid 5892] munmap(0x7f0356e00000, 138412032 [pid 5890] munmap(0x7f0356e00000, 138412032 [pid 5076] newfstatat(AT_FDCWD, "./134/binderfs", [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] close(4) = 0 [pid 5075] rmdir("./131/bus" [pid 5893] munmap(0x7f0356e00000, 138412032 [pid 5892] <... munmap resumed>) = 0 [pid 5891] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5890] <... munmap resumed>) = 0 [pid 5076] unlink("./134/binderfs" [pid 5075] umount2("./131/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5893] <... munmap resumed>) = 0 [pid 5891] <... creat resumed>) = 4 [pid 5076] <... unlink resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5893] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5892] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5891] rename("./bus", "./file2" [pid 5890] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] getdents64(3, [pid 5075] newfstatat(AT_FDCWD, "./131/binderfs", [pid 5893] <... openat resumed>) = 4 [pid 5892] <... openat resumed>) = 4 [pid 5891] <... rename resumed>) = -1 EEXIST (File exists) [pid 5890] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5892] ioctl(4, LOOP_SET_FD, 3 [pid 5891] memfd_create("syzkaller", 0 [pid 5076] close(3 [pid 5075] unlink("./131/binderfs" [pid 5893] ioctl(4, LOOP_SET_FD, 3 [pid 5891] <... memfd_create resumed>) = 5 [pid 5890] close(5 [pid 5076] <... close resumed>) = 0 [pid 5891] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] rmdir("./134" [pid 5075] <... unlink resumed>) = 0 [pid 5891] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] <... rmdir resumed>) = 0 [pid 5076] mkdir("./135", 0777 [pid 5891] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... mkdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] getdents64(3, [pid 5893] <... ioctl resumed>) = 0 [pid 5890] <... close resumed>) = 0 [pid 5893] close(3 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5893] <... close resumed>) = 0 [pid 5890] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5075] close(3 [pid 5893] close(4 [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./131" [pid 5893] <... close resumed>) = 0 [pid 5893] mkdir("./bus", 0777 [pid 5075] <... rmdir resumed>) = 0 [pid 5893] <... mkdir resumed>) = 0 [pid 5075] mkdir("./132", 0777 [pid 5893] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5892] <... ioctl resumed>) = 0 [pid 5891] <... write resumed>) = 524288 [pid 5890] <... open resumed>) = 5 [pid 5075] <... mkdir resumed>) = 0 [pid 5892] close(3 [pid 5891] munmap(0x7f0356e00000, 138412032 [pid 5890] ftruncate(5, 0 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5892] <... close resumed>) = 0 [pid 5891] <... munmap resumed>) = 0 [pid 5890] <... ftruncate resumed>) = 0 [pid 5892] close(4 [pid 5075] <... openat resumed>) = 3 [pid 5890] exit_group(0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5892] <... close resumed>) = 0 [pid 5890] <... exit_group resumed>) = ? [pid 5892] mkdir("./bus", 0777 [pid 5891] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5890] +++ exited with 0 +++ [pid 5893] <... mount resumed>) = 0 [pid 5892] <... mkdir resumed>) = 0 [ 157.219333][ T5893] loop5: detected capacity change from 0 to 1024 [ 157.226565][ T5892] loop0: detected capacity change from 0 to 1024 [pid 5891] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5890, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5076] <... ioctl resumed>) = 0 [pid 5893] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5892] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5077] umount2("./133", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./133", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5077] newfstatat(3, "", [pid 5893] <... openat resumed>) = 3 [pid 5891] close(5 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5893] chdir("./bus") = 0 [pid 5077] getdents64(3, [pid 5076] close(3 [pid 5893] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] <... close resumed>) = 0 [pid 5893] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5077] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5891] <... close resumed>) = 0 [pid 5891] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5075] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 5894 attached [pid 5893] <... symlink resumed>) = 0 [pid 5892] <... mount resumed>) = 0 [pid 5891] <... open resumed>) = 5 [pid 5077] <... umount2 resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 5894 [pid 5894] set_robust_list(0x55556e32a660, 24 [pid 5892] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5891] ftruncate(5, 0 [pid 5892] <... openat resumed>) = 3 [pid 5892] chdir("./bus" [pid 5891] <... ftruncate resumed>) = 0 [pid 5894] <... set_robust_list resumed>) = 0 [pid 5892] <... chdir resumed>) = 0 [pid 5894] chdir("./135" [pid 5892] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5891] exit_group(0 [pid 5892] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5891] <... exit_group resumed>) = ? [pid 5893] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5892] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5891] +++ exited with 0 +++ [pid 5077] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] close(3 [pid 5894] <... chdir resumed>) = 0 [pid 5893] <... creat resumed>) = 4 [pid 5892] <... symlink resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... close resumed>) = 0 [pid 5893] rename("./bus", "./file2" [pid 5077] newfstatat(AT_FDCWD, "./133/bus", [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5891, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5074] umount2("./131", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./131", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] newfstatat(3, "", [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 5895 attached [pid 5894] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5892] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5074] getdents64(3, [pid 5894] <... prctl resumed>) = 0 [pid 5893] <... rename resumed>) = -1 EEXIST (File exists) [pid 5077] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 5895 [pid 5893] memfd_create("syzkaller", 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5895] set_robust_list(0x55556e32a660, 24 [pid 5894] setpgid(0, 0 [pid 5893] <... memfd_create resumed>) = 5 [pid 5077] openat(AT_FDCWD, "./133/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5895] <... set_robust_list resumed>) = 0 [pid 5894] <... setpgid resumed>) = 0 [pid 5893] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5892] <... creat resumed>) = 4 [pid 5077] <... openat resumed>) = 4 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5895] chdir("./132" [pid 5894] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5893] <... mmap resumed>) = 0x7f0356e00000 [pid 5892] rename("./bus", "./file2" [pid 5077] newfstatat(4, "", [pid 5895] <... chdir resumed>) = 0 [pid 5894] <... openat resumed>) = 3 [pid 5892] <... rename resumed>) = -1 EEXIST (File exists) [pid 5074] umount2("./131/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5895] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5894] write(3, "1000", 4 [pid 5892] memfd_create("syzkaller", 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5895] <... prctl resumed>) = 0 [pid 5894] <... write resumed>) = 4 [pid 5892] <... memfd_create resumed>) = 5 [pid 5895] setpgid(0, 0 [pid 5894] close(3 [pid 5892] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] getdents64(4, [pid 5895] <... setpgid resumed>) = 0 [pid 5894] <... close resumed>) = 0 [pid 5892] <... mmap resumed>) = 0x7f0356e00000 [pid 5895] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5894] symlink("/dev/binderfs", "./binderfs" [pid 5893] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] <... umount2 resumed>) = 0 [pid 5895] <... openat resumed>) = 3 [pid 5894] <... symlink resumed>) = 0 [pid 5892] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] umount2("./131/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5895] write(3, "1000", 4) = 4 [pid 5894] memfd_create("syzkaller", 0 [pid 5077] getdents64(4, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5895] close(3 [pid 5894] <... memfd_create resumed>) = 3 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] newfstatat(AT_FDCWD, "./131/bus", [pid 5895] <... close resumed>) = 0 [pid 5894] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] close(4 [pid 5895] symlink("/dev/binderfs", "./binderfs" [pid 5077] <... close resumed>) = 0 [pid 5894] <... mmap resumed>) = 0x7f0356e00000 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] rmdir("./133/bus" [pid 5895] <... symlink resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5074] umount2("./131/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5895] memfd_create("syzkaller", 0 [pid 5077] umount2("./133/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5893] <... write resumed>) = 524288 [pid 5077] newfstatat(AT_FDCWD, "./133/binderfs", [pid 5074] openat(AT_FDCWD, "./131/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5895] <... memfd_create resumed>) = 3 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5895] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... openat resumed>) = 4 [pid 5895] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] unlink("./133/binderfs") = 0 [pid 5894] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5893] munmap(0x7f0356e00000, 138412032 [pid 5077] getdents64(3, [pid 5893] <... munmap resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] close(3) = 0 [pid 5893] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] rmdir("./133" [pid 5893] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5895] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5892] <... write resumed>) = 524288 [pid 5077] <... rmdir resumed>) = 0 [pid 5074] newfstatat(4, "", [pid 5893] close(5) = 0 [pid 5077] mkdir("./134", 0777) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5895] <... write resumed>) = 524288 [pid 5893] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5895] munmap(0x7f0356e00000, 138412032 [pid 5894] <... write resumed>) = 524288 [pid 5892] munmap(0x7f0356e00000, 138412032 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5895] <... munmap resumed>) = 0 [pid 5074] getdents64(4, [pid 5895] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5895] <... openat resumed>) = 4 [pid 5894] munmap(0x7f0356e00000, 138412032 [pid 5074] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5895] ioctl(4, LOOP_SET_FD, 3 [pid 5074] close(4 [pid 5894] <... munmap resumed>) = 0 [pid 5893] <... open resumed>) = 5 [pid 5892] <... munmap resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5893] ftruncate(5, 0 [pid 5895] <... ioctl resumed>) = 0 [pid 5894] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5893] <... ftruncate resumed>) = 0 [pid 5892] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] rmdir("./131/bus" [pid 5895] close(3 [pid 5894] <... openat resumed>) = 4 [pid 5893] exit_group(0 [pid 5074] <... rmdir resumed>) = 0 [pid 5895] <... close resumed>) = 0 [pid 5894] ioctl(4, LOOP_SET_FD, 3 [pid 5893] <... exit_group resumed>) = ? [pid 5892] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] umount2("./131/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5895] close(4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5895] <... close resumed>) = 0 [pid 5892] close(5 [pid 5074] newfstatat(AT_FDCWD, "./131/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./131/binderfs" [pid 5895] mkdir("./bus", 0777 [pid 5892] <... close resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5895] <... mkdir resumed>) = 0 [pid 5894] <... ioctl resumed>) = 0 [pid 5893] +++ exited with 0 +++ [pid 5077] <... ioctl resumed>) = 0 [pid 5894] close(3) = 0 [pid 5894] close(4) = 0 [pid 5894] mkdir("./bus", 0777) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5893, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5894] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5078] umount2("./134", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5895] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5892] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] getdents64(3, [pid 5078] openat(AT_FDCWD, "./134", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5894] <... mount resumed>) = 0 [pid 5078] newfstatat(3, "", [pid 5074] close(3 [pid 5894] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] close(3 [pid 5894] <... openat resumed>) = 3 [pid 5078] getdents64(3, [pid 5077] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5894] chdir("./bus" [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] rmdir("./131" [pid 5894] <... chdir resumed>) = 0 [pid 5892] <... open resumed>) = 5 [pid 5078] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... rmdir resumed>) = 0 [pid 5894] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5074] mkdir("./132", 0777 [pid 5894] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5892] ftruncate(5, 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5892] <... ftruncate resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5895] <... mount resumed>) = 0 [pid 5894] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5892] exit_group(0 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 5896 [pid 5074] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5896 attached [pid 5896] set_robust_list(0x55556e32a660, 24 [pid 5895] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5892] <... exit_group resumed>) = ? [ 157.437295][ T5895] loop2: detected capacity change from 0 to 1024 [ 157.446855][ T5894] loop3: detected capacity change from 0 to 1024 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5896] <... set_robust_list resumed>) = 0 [pid 5895] <... openat resumed>) = 3 [pid 5894] <... symlink resumed>) = 0 [pid 5892] +++ exited with 0 +++ [pid 5895] chdir("./bus" [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5892, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5895] <... chdir resumed>) = 0 [pid 5896] chdir("./134" [pid 5895] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5894] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5896] <... chdir resumed>) = 0 [pid 5896] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5895] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... umount2 resumed>) = 0 [pid 5895] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5896] setpgid(0, 0 [pid 5078] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5896] <... setpgid resumed>) = 0 [pid 5894] <... creat resumed>) = 4 [pid 5078] newfstatat(AT_FDCWD, "./134/bus", [pid 5073] umount2("./132", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5895] <... symlink resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5895] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5896] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5894] rename("./bus", "./file2" [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5894] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./132", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5894] memfd_create("syzkaller", 0 [pid 5078] openat(AT_FDCWD, "./134/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5896] <... openat resumed>) = 3 [pid 5895] <... creat resumed>) = 4 [pid 5894] <... memfd_create resumed>) = 5 [pid 5078] <... openat resumed>) = 4 [pid 5073] <... openat resumed>) = 3 [pid 5896] write(3, "1000", 4 [pid 5894] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] newfstatat(4, "", [pid 5073] newfstatat(3, "", [pid 5896] <... write resumed>) = 4 [pid 5895] rename("./bus", "./file2" [pid 5894] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5896] close(3 [pid 5078] getdents64(4, [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5896] <... close resumed>) = 0 [pid 5895] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(3, [pid 5895] memfd_create("syzkaller", 0 [pid 5896] symlink("/dev/binderfs", "./binderfs" [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5895] <... memfd_create resumed>) = 5 [pid 5073] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5896] <... symlink resumed>) = 0 [pid 5895] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] getdents64(4, [pid 5895] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5896] memfd_create("syzkaller", 0 [pid 5894] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] close(4 [pid 5896] <... memfd_create resumed>) = 3 [pid 5896] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... close resumed>) = 0 [pid 5895] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5896] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] rmdir("./134/bus" [pid 5896] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... rmdir resumed>) = 0 [pid 5894] <... write resumed>) = 524288 [pid 5078] umount2("./134/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] newfstatat(AT_FDCWD, "./134/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5078] unlink("./134/binderfs") = 0 [pid 5078] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5078] close(3) = 0 [pid 5078] rmdir("./134") = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5896] <... write resumed>) = 524288 [pid 5073] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5895] <... write resumed>) = 524288 [pid 5894] munmap(0x7f0356e00000, 138412032 [pid 5078] mkdir("./135", 0777 [pid 5074] close(3 [pid 5894] <... munmap resumed>) = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5894] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5078] <... openat resumed>) = 3 [pid 5073] newfstatat(AT_FDCWD, "./132/bus", [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5895] munmap(0x7f0356e00000, 138412032 [pid 5073] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5896] munmap(0x7f0356e00000, 138412032 [pid 5895] <... munmap resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5897 attached [pid 5896] <... munmap resumed>) = 0 [pid 5894] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] openat(AT_FDCWD, "./132/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5897] set_robust_list(0x55556e32a660, 24 [pid 5894] close(5 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 5897 [pid 5073] <... openat resumed>) = 4 [pid 5895] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5073] newfstatat(4, "", [pid 5896] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5895] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5896] <... openat resumed>) = 4 [pid 5895] close(5 [pid 5073] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5897] <... set_robust_list resumed>) = 0 [pid 5073] getdents64(4, [pid 5896] ioctl(4, LOOP_SET_FD, 3 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5897] chdir("./132" [pid 5894] <... close resumed>) = 0 [pid 5897] <... chdir resumed>) = 0 [pid 5896] <... ioctl resumed>) = 0 [pid 5894] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5073] close(4 [pid 5897] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5896] close(3 [pid 5073] <... close resumed>) = 0 [pid 5897] <... prctl resumed>) = 0 [pid 5896] <... close resumed>) = 0 [pid 5895] <... close resumed>) = 0 [pid 5073] rmdir("./132/bus" [pid 5897] setpgid(0, 0 [pid 5896] close(4 [pid 5895] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5073] <... rmdir resumed>) = 0 [pid 5897] <... setpgid resumed>) = 0 [pid 5896] <... close resumed>) = 0 [pid 5894] <... open resumed>) = 5 [pid 5073] umount2("./132/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5897] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5896] mkdir("./bus", 0777 [pid 5894] ftruncate(5, 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5896] <... mkdir resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./132/binderfs", [pid 5897] <... openat resumed>) = 3 [pid 5896] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5894] <... ftruncate resumed>) = 0 [pid 5895] <... open resumed>) = 5 [pid 5894] exit_group(0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5897] write(3, "1000", 4 [pid 5895] ftruncate(5, 0 [pid 5894] <... exit_group resumed>) = ? [pid 5073] unlink("./132/binderfs" [pid 5897] <... write resumed>) = 4 [pid 5895] <... ftruncate resumed>) = 0 [pid 5897] close(3) = 0 [pid 5897] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5895] exit_group(0 [pid 5073] <... unlink resumed>) = 0 [pid 5895] <... exit_group resumed>) = ? [pid 5895] +++ exited with 0 +++ [pid 5897] memfd_create("syzkaller", 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5895, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5897] <... memfd_create resumed>) = 3 [pid 5897] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5075] umount2("./132", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] getdents64(3, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5897] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5894] +++ exited with 0 +++ [pid 5078] <... ioctl resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./132", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5894, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] <... openat resumed>) = 3 [pid 5073] close(3 [pid 5075] newfstatat(3, "", [pid 5076] umount2("./135", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... close resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] rmdir("./132" [pid 5076] openat(AT_FDCWD, "./135", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] getdents64(3, [pid 5076] <... openat resumed>) = 3 [pid 5076] newfstatat(3, "", [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... rmdir resumed>) = 0 [pid 5078] close(3 [pid 5076] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5896] <... mount resumed>) = 0 [pid 5076] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5896] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5896] chdir("./bus") = 0 [ 157.599188][ T5896] loop4: detected capacity change from 0 to 1024 [pid 5896] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5897] <... write resumed>) = 524288 [pid 5896] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... close resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] mkdir("./133", 0777 [pid 5896] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5897] munmap(0x7f0356e00000, 138412032./strace-static-x86_64: Process 5898 attached ) = 0 [pid 5896] <... symlink resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 5898] set_robust_list(0x55556e32a660, 24) = 0 [pid 5898] chdir("./135" [pid 5896] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5075] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 5898 [pid 5076] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... openat resumed>) = 3 [pid 5076] newfstatat(AT_FDCWD, "./135/bus", [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5898] <... chdir resumed>) = 0 [pid 5897] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] newfstatat(AT_FDCWD, "./132/bus", [pid 5898] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5897] <... openat resumed>) = 4 [pid 5076] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5897] ioctl(4, LOOP_SET_FD, 3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5898] <... prctl resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./135/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5898] setpgid(0, 0 [pid 5896] <... creat resumed>) = 4 [pid 5076] <... openat resumed>) = 4 [pid 5075] openat(AT_FDCWD, "./132/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] newfstatat(4, "", [pid 5898] <... setpgid resumed>) = 0 [pid 5896] rename("./bus", "./file2" [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... openat resumed>) = 4 [pid 5898] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] getdents64(4, [pid 5075] newfstatat(4, "", [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, [pid 5075] getdents64(4, [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5898] <... openat resumed>) = 3 [pid 5896] <... rename resumed>) = -1 EEXIST (File exists) [pid 5076] close(4 [pid 5898] write(3, "1000", 4 [pid 5896] memfd_create("syzkaller", 0 [pid 5075] getdents64(4, [pid 5076] <... close resumed>) = 0 [pid 5076] rmdir("./135/bus" [pid 5898] <... write resumed>) = 4 [pid 5896] <... memfd_create resumed>) = 5 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5898] close(3) = 0 [pid 5896] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] close(4 [pid 5898] symlink("/dev/binderfs", "./binderfs" [pid 5896] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5898] <... symlink resumed>) = 0 [pid 5896] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] umount2("./135/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] rmdir("./132/bus" [pid 5898] memfd_create("syzkaller", 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5898] <... memfd_create resumed>) = 3 [pid 5897] <... ioctl resumed>) = 0 [pid 5075] umount2("./132/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5898] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5897] close(3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5898] <... mmap resumed>) = 0x7f0356e00000 [pid 5897] <... close resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./135/binderfs", [pid 5075] newfstatat(AT_FDCWD, "./132/binderfs", [pid 5898] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5897] close(4 [pid 5896] <... write resumed>) = 524288 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./135/binderfs" [pid 5897] <... close resumed>) = 0 [pid 5897] mkdir("./bus", 0777 [pid 5075] unlink("./132/binderfs" [pid 5897] <... mkdir resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5897] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5075] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 5075] rmdir("./132" [pid 5897] <... mount resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 5897] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5897] chdir("./bus") = 0 [pid 5075] mkdir("./133", 0777 [pid 5897] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] getdents64(3, [pid 5073] close(3 [pid 5897] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 157.684236][ T5897] loop1: detected capacity change from 0 to 1024 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5897] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5896] munmap(0x7f0356e00000, 138412032 [pid 5076] close(3 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5896] <... munmap resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5076] rmdir("./135" [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 5899 [pid 5897] <... symlink resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5076] mkdir("./136", 0777./strace-static-x86_64: Process 5899 attached [pid 5896] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5899] set_robust_list(0x55556e32a660, 24 [pid 5896] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... mkdir resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5899] <... set_robust_list resumed>) = 0 [pid 5897] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5896] close(5 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5899] chdir("./133" [pid 5898] <... write resumed>) = 524288 [pid 5897] <... creat resumed>) = 4 [pid 5896] <... close resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5899] <... chdir resumed>) = 0 [pid 5899] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5898] munmap(0x7f0356e00000, 138412032 [pid 5897] rename("./bus", "./file2" [pid 5896] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5899] <... prctl resumed>) = 0 [pid 5898] <... munmap resumed>) = 0 [pid 5897] <... rename resumed>) = -1 EEXIST (File exists) [pid 5899] setpgid(0, 0 [pid 5898] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5897] memfd_create("syzkaller", 0 [pid 5899] <... setpgid resumed>) = 0 [pid 5898] <... openat resumed>) = 4 [pid 5897] <... memfd_create resumed>) = 5 [pid 5897] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5897] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5899] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5898] ioctl(4, LOOP_SET_FD, 3 [pid 5899] <... openat resumed>) = 3 [pid 5896] <... open resumed>) = 5 [pid 5896] ftruncate(5, 0) = 0 [pid 5896] exit_group(0) = ? [pid 5898] <... ioctl resumed>) = 0 [pid 5899] write(3, "1000", 4 [pid 5896] +++ exited with 0 +++ [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5896, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5899] <... write resumed>) = 4 [pid 5899] close(3) = 0 [pid 5899] symlink("/dev/binderfs", "./binderfs" [pid 5077] umount2("./134", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5899] <... symlink resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./134", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5899] memfd_create("syzkaller", 0 [pid 5898] close(3 [pid 5077] <... openat resumed>) = 3 [pid 5899] <... memfd_create resumed>) = 3 [pid 5898] <... close resumed>) = 0 [pid 5077] newfstatat(3, "", [pid 5075] <... ioctl resumed>) = 0 [pid 5899] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5898] close(4 [pid 5897] <... write resumed>) = 524288 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] close(3 [pid 5899] <... mmap resumed>) = 0x7f0356e00000 [pid 5898] <... close resumed>) = 0 [pid 5077] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5897] munmap(0x7f0356e00000, 138412032 [pid 5899] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5898] mkdir("./bus", 0777 [pid 5075] <... close resumed>) = 0 [pid 5897] <... munmap resumed>) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5898] <... mkdir resumed>) = 0 [pid 5897] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5898] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5897] <... openat resumed>) = -1 EBUSY (Device or resource busy) ./strace-static-x86_64: Process 5900 attached [pid 5897] close(5 [ 157.788088][ T5898] loop5: detected capacity change from 0 to 1024 [pid 5077] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5900] set_robust_list(0x55556e32a660, 24 [pid 5077] newfstatat(AT_FDCWD, "./134/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5900] <... set_robust_list resumed>) = 0 [pid 5899] <... write resumed>) = 524288 [pid 5898] <... mount resumed>) = 0 [pid 5077] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] close(3 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 5900 [pid 5900] chdir("./133" [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5900] <... chdir resumed>) = 0 [pid 5898] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5077] openat(AT_FDCWD, "./134/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... close resumed>) = 0 [pid 5900] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5898] <... openat resumed>) = 3 [pid 5077] <... openat resumed>) = 4 [pid 5900] <... prctl resumed>) = 0 [pid 5898] chdir("./bus" [pid 5077] newfstatat(4, "", [pid 5900] setpgid(0, 0 [pid 5898] <... chdir resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5898] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5897] <... close resumed>) = 0 [pid 5900] <... setpgid resumed>) = 0 [pid 5897] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] getdents64(4, [pid 5898] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 5901 attached [pid 5898] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5900] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5077] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5898] <... symlink resumed>) = 0 [pid 5077] close(4) = 0 [pid 5901] set_robust_list(0x55556e32a660, 24) = 0 [pid 5077] rmdir("./134/bus" [pid 5901] chdir("./136" [pid 5900] <... openat resumed>) = 3 [pid 5898] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5077] <... rmdir resumed>) = 0 [pid 5900] write(3, "1000", 4 [pid 5901] <... chdir resumed>) = 0 [pid 5900] <... write resumed>) = 4 [pid 5900] close(3 [pid 5897] <... open resumed>) = 5 [pid 5900] <... close resumed>) = 0 [pid 5900] symlink("/dev/binderfs", "./binderfs" [pid 5901] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5900] <... symlink resumed>) = 0 [pid 5897] ftruncate(5, 0 [pid 5077] umount2("./134/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5901] <... prctl resumed>) = 0 [pid 5899] munmap(0x7f0356e00000, 138412032 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 5901 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5899] <... munmap resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./134/binderfs", [pid 5901] setpgid(0, 0) = 0 [pid 5900] memfd_create("syzkaller", 0 [pid 5899] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5898] <... creat resumed>) = 4 [pid 5897] <... ftruncate resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] unlink("./134/binderfs" [pid 5899] <... openat resumed>) = 4 [pid 5901] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5898] rename("./bus", "./file2" [pid 5077] <... unlink resumed>) = 0 [pid 5901] <... openat resumed>) = 3 [pid 5900] <... memfd_create resumed>) = 3 [pid 5899] ioctl(4, LOOP_SET_FD, 3 [pid 5897] exit_group(0 [pid 5077] getdents64(3, [pid 5900] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5898] <... rename resumed>) = -1 EEXIST (File exists) [pid 5897] <... exit_group resumed>) = ? [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5897] +++ exited with 0 +++ [pid 5077] close(3 [pid 5900] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] <... close resumed>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5897, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5898] memfd_create("syzkaller", 0 [pid 5077] rmdir("./134" [pid 5901] write(3, "1000", 4 [pid 5898] <... memfd_create resumed>) = 5 [pid 5077] <... rmdir resumed>) = 0 [pid 5901] <... write resumed>) = 4 [pid 5898] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] mkdir("./135", 0777 [pid 5901] close(3 [pid 5898] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] <... mkdir resumed>) = 0 [pid 5074] umount2("./132", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5901] <... close resumed>) = 0 [pid 5900] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./132", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5898] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5901] symlink("/dev/binderfs", "./binderfs" [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5901] <... symlink resumed>) = 0 [pid 5899] <... ioctl resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5901] memfd_create("syzkaller", 0 [pid 5899] close(3 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5899] <... close resumed>) = 0 [pid 5901] <... memfd_create resumed>) = 3 [pid 5899] close(4 [pid 5074] <... umount2 resumed>) = 0 [pid 5901] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5899] <... close resumed>) = 0 [pid 5901] <... mmap resumed>) = 0x7f0356e00000 [pid 5899] mkdir("./bus", 0777) = 0 [pid 5899] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5074] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./132/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5901] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5900] <... write resumed>) = 524288 [pid 5074] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5898] <... write resumed>) = 524288 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5898] munmap(0x7f0356e00000, 138412032 [pid 5900] munmap(0x7f0356e00000, 138412032 [pid 5074] openat(AT_FDCWD, "./132/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5900] <... munmap resumed>) = 0 [pid 5898] <... munmap resumed>) = 0 [pid 5074] <... openat resumed>) = 4 [pid 5898] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] newfstatat(4, "", [pid 5898] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 157.895917][ T5899] loop0: detected capacity change from 0 to 1024 [pid 5074] getdents64(4, [pid 5898] close(5 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] close(4) = 0 [pid 5900] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] rmdir("./132/bus" [pid 5900] <... openat resumed>) = 4 [pid 5074] <... rmdir resumed>) = 0 [pid 5901] <... write resumed>) = 524288 [pid 5900] ioctl(4, LOOP_SET_FD, 3 [pid 5901] munmap(0x7f0356e00000, 138412032 [pid 5900] <... ioctl resumed>) = 0 [pid 5899] <... mount resumed>) = 0 [pid 5898] <... close resumed>) = 0 [pid 5077] <... ioctl resumed>) = 0 [pid 5074] umount2("./132/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5899] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5901] <... munmap resumed>) = 0 [pid 5900] close(3 [pid 5899] <... openat resumed>) = 3 [pid 5898] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5899] chdir("./bus" [pid 5900] <... close resumed>) = 0 [pid 5899] <... chdir resumed>) = 0 [ 157.957234][ T5900] loop2: detected capacity change from 0 to 1024 [pid 5074] newfstatat(AT_FDCWD, "./132/binderfs", [pid 5901] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5900] close(4 [pid 5899] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5898] <... open resumed>) = 5 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5901] <... openat resumed>) = 4 [pid 5900] <... close resumed>) = 0 [pid 5074] unlink("./132/binderfs" [pid 5899] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5899] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5077] close(3) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556e32a650) = 5902 [pid 5074] <... unlink resumed>) = 0 [pid 5898] ftruncate(5, 0 [pid 5074] getdents64(3, [pid 5900] mkdir("./bus", 0777./strace-static-x86_64: Process 5902 attached [pid 5901] ioctl(4, LOOP_SET_FD, 3 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5902] set_robust_list(0x55556e32a660, 24 [pid 5900] <... mkdir resumed>) = 0 [pid 5899] <... symlink resumed>) = 0 [pid 5898] <... ftruncate resumed>) = 0 [pid 5074] close(3 [pid 5899] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5074] <... close resumed>) = 0 [pid 5902] <... set_robust_list resumed>) = 0 [pid 5898] exit_group(0 [pid 5074] rmdir("./132") = 0 [pid 5902] chdir("./135" [pid 5900] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5898] <... exit_group resumed>) = ? [pid 5074] mkdir("./133", 0777) = 0 [pid 5898] +++ exited with 0 +++ [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5902] <... chdir resumed>) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5898, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5074] <... openat resumed>) = 3 [pid 5078] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5902] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5902] <... prctl resumed>) = 0 [pid 5078] umount2("./135", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./135", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5902] setpgid(0, 0 [pid 5078] <... openat resumed>) = 3 [pid 5902] <... setpgid resumed>) = 0 [pid 5900] <... mount resumed>) = 0 [pid 5902] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5900] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] newfstatat(3, "", [pid 5902] <... openat resumed>) = 3 [pid 5900] <... openat resumed>) = 3 [pid 5899] <... creat resumed>) = 4 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5901] <... ioctl resumed>) = 0 [pid 5902] write(3, "1000", 4 [pid 5900] chdir("./bus" [pid 5899] rename("./bus", "./file2" [pid 5078] getdents64(3, [pid 5902] <... write resumed>) = 4 [pid 5901] close(3 [pid 5900] <... chdir resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5902] close(3 [pid 5900] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5899] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5902] <... close resumed>) = 0 [pid 5900] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5899] memfd_create("syzkaller", 0 [pid 5902] symlink("/dev/binderfs", "./binderfs" [pid 5901] <... close resumed>) = 0 [pid 5900] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5899] <... memfd_create resumed>) = 5 [pid 5899] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5902] <... symlink resumed>) = 0 [pid 5899] <... mmap resumed>) = 0x7f0356e00000 [pid 5902] memfd_create("syzkaller", 0 [pid 5901] close(4 [pid 5900] <... symlink resumed>) = 0 [pid 5901] <... close resumed>) = 0 [pid 5900] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5901] mkdir("./bus", 0777) = 0 [pid 5902] <... memfd_create resumed>) = 3 [pid 5902] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5901] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5900] <... creat resumed>) = 4 [pid 5899] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5902] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... umount2 resumed>) = 0 [pid 5900] rename("./bus", "./file2" [pid 5899] <... write resumed>) = 524288 [pid 5074] <... ioctl resumed>) = 0 [ 158.004837][ T5901] loop3: detected capacity change from 0 to 1024 [pid 5078] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5900] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] newfstatat(AT_FDCWD, "./135/bus", [pid 5900] memfd_create("syzkaller", 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5900] <... memfd_create resumed>) = 5 [pid 5900] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5901] <... mount resumed>) = 0 [pid 5078] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5900] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./135/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5901] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5900] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... openat resumed>) = 4 [pid 5902] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5901] <... openat resumed>) = 3 [pid 5074] close(3) = 0 [pid 5901] chdir("./bus") = 0 [pid 5901] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5078] newfstatat(4, "", [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5901] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5901] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5900] <... write resumed>) = 524288 [pid 5078] getdents64(4, [pid 5901] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 5903 ./strace-static-x86_64: Process 5903 attached [pid 5902] <... write resumed>) = 524288 [pid 5899] munmap(0x7f0356e00000, 138412032 [pid 5903] set_robust_list(0x55556e32a660, 24 [pid 5078] getdents64(4, [pid 5903] <... set_robust_list resumed>) = 0 [pid 5899] <... munmap resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5903] chdir("./133" [pid 5078] close(4 [pid 5899] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5078] <... close resumed>) = 0 [pid 5903] <... chdir resumed>) = 0 [pid 5899] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] rmdir("./135/bus" [pid 5903] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5899] close(5 [pid 5078] <... rmdir resumed>) = 0 [pid 5903] <... prctl resumed>) = 0 [pid 5901] <... creat resumed>) = 4 [pid 5900] munmap(0x7f0356e00000, 138412032 [pid 5899] <... close resumed>) = 0 [pid 5903] setpgid(0, 0 [pid 5078] umount2("./135/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5903] <... setpgid resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5903] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5078] newfstatat(AT_FDCWD, "./135/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] unlink("./135/binderfs") = 0 [pid 5903] <... openat resumed>) = 3 [pid 5902] munmap(0x7f0356e00000, 138412032 [pid 5901] rename("./bus", "./file2" [pid 5900] <... munmap resumed>) = 0 [pid 5078] getdents64(3, [pid 5903] write(3, "1000", 4 [pid 5902] <... munmap resumed>) = 0 [pid 5903] <... write resumed>) = 4 [pid 5902] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5903] close(3 [pid 5902] <... openat resumed>) = 4 [pid 5078] close(3 [pid 5903] <... close resumed>) = 0 [pid 5902] ioctl(4, LOOP_SET_FD, 3 [pid 5901] <... rename resumed>) = -1 EEXIST (File exists) [pid 5900] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] <... close resumed>) = 0 [pid 5903] symlink("/dev/binderfs", "./binderfs" [pid 5901] memfd_create("syzkaller", 0 [pid 5903] <... symlink resumed>) = 0 [pid 5901] <... memfd_create resumed>) = 5 [pid 5900] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5903] memfd_create("syzkaller", 0 [pid 5901] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5900] close(5 [pid 5899] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] rmdir("./135" [pid 5901] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... rmdir resumed>) = 0 [pid 5903] <... memfd_create resumed>) = 3 [pid 5078] mkdir("./136", 0777 [pid 5903] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... mkdir resumed>) = 0 [pid 5903] <... mmap resumed>) = 0x7f0356e00000 [pid 5903] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5901] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5899] <... open resumed>) = 5 [pid 5899] ftruncate(5, 0 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5899] <... ftruncate resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5900] <... close resumed>) = 0 [pid 5899] exit_group(0 [pid 5902] <... ioctl resumed>) = 0 [pid 5902] close(3) = 0 [pid 5902] close(4 [pid 5899] <... exit_group resumed>) = ? [pid 5902] <... close resumed>) = 0 [pid 5900] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5899] +++ exited with 0 +++ [pid 5902] mkdir("./bus", 0777 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5899, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5073] umount2("./133", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5903] <... write resumed>) = 524288 [pid 5902] <... mkdir resumed>) = 0 [pid 5900] <... open resumed>) = 5 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./133", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", [pid 5902] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5900] ftruncate(5, 0 [ 158.125645][ T5902] loop4: detected capacity change from 0 to 1024 [pid 5903] munmap(0x7f0356e00000, 138412032) = 0 [pid 5901] <... write resumed>) = 524288 [pid 5900] <... ftruncate resumed>) = 0 [pid 5903] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5900] exit_group(0 [pid 5073] <... umount2 resumed>) = 0 [pid 5903] <... openat resumed>) = 4 [pid 5901] munmap(0x7f0356e00000, 138412032 [pid 5900] <... exit_group resumed>) = ? [pid 5900] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5900, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 5901] <... munmap resumed>) = 0 [pid 5075] <... restart_syscall resumed>) = 0 [pid 5903] ioctl(4, LOOP_SET_FD, 3 [pid 5901] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] umount2("./133", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5901] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5901] close(5 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./133", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... openat resumed>) = 3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(3, "", [pid 5073] newfstatat(AT_FDCWD, "./133/bus", [pid 5078] <... ioctl resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5902] <... mount resumed>) = 0 [pid 5075] getdents64(3, [pid 5073] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5902] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5075] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] openat(AT_FDCWD, "./133/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5902] <... openat resumed>) = 3 [pid 5902] chdir("./bus" [pid 5073] <... openat resumed>) = 4 [pid 5902] <... chdir resumed>) = 0 [pid 5901] <... close resumed>) = 0 [pid 5902] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] newfstatat(4, "", [pid 5902] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] close(3 [pid 5901] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] <... close resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] getdents64(4, [pid 5902] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 5904 attached [pid 5073] getdents64(4, [pid 5904] set_robust_list(0x55556e32a660, 24 [pid 5903] <... ioctl resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5903] close(3 [pid 5901] <... open resumed>) = 5 [pid 5073] close(4 [pid 5904] <... set_robust_list resumed>) = 0 [pid 5903] <... close resumed>) = 0 [pid 5901] ftruncate(5, 0 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 5904 [pid 5073] <... close resumed>) = 0 [pid 5904] chdir("./136" [pid 5903] close(4 [pid 5902] <... symlink resumed>) = 0 [pid 5073] rmdir("./133/bus" [pid 5904] <... chdir resumed>) = 0 [pid 5903] <... close resumed>) = 0 [pid 5902] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5075] <... umount2 resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5904] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5903] mkdir("./bus", 0777 [pid 5901] <... ftruncate resumed>) = 0 [pid 5904] <... prctl resumed>) = 0 [pid 5903] <... mkdir resumed>) = 0 [pid 5901] exit_group(0 [pid 5904] setpgid(0, 0) = 0 [pid 5901] <... exit_group resumed>) = ? [pid 5075] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./133/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5903] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5904] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./133/binderfs", [pid 5902] <... creat resumed>) = 4 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5901] +++ exited with 0 +++ [pid 5904] <... openat resumed>) = 3 [pid 5902] rename("./bus", "./file2" [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5901, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] newfstatat(AT_FDCWD, "./133/bus", [pid 5073] unlink("./133/binderfs" [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5076] umount2("./136", MNT_DETACH|UMOUNT_NOFOLLOW [ 158.194911][ T5903] loop1: detected capacity change from 0 to 1024 [pid 5075] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5904] write(3, "1000", 4 [pid 5902] <... rename resumed>) = -1 EEXIST (File exists) [pid 5073] getdents64(3, [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5904] <... write resumed>) = 4 [pid 5902] memfd_create("syzkaller", 0 [pid 5076] openat(AT_FDCWD, "./136", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] openat(AT_FDCWD, "./133/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5902] <... memfd_create resumed>) = 5 [pid 5076] <... openat resumed>) = 3 [pid 5902] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] newfstatat(3, "", [pid 5075] <... openat resumed>) = 4 [pid 5073] close(3 [pid 5904] close(3 [pid 5903] <... mount resumed>) = 0 [pid 5904] <... close resumed>) = 0 [pid 5902] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] newfstatat(4, "", [pid 5073] <... close resumed>) = 0 [pid 5904] symlink("/dev/binderfs", "./binderfs" [pid 5903] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5902] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] getdents64(3, [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5904] <... symlink resumed>) = 0 [pid 5073] rmdir("./133" [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] getdents64(4, [pid 5904] memfd_create("syzkaller", 0 [pid 5903] <... openat resumed>) = 3 [pid 5076] umount2("./136/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] <... rmdir resumed>) = 0 [pid 5904] <... memfd_create resumed>) = 3 [pid 5073] mkdir("./134", 0777 [pid 5904] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... mkdir resumed>) = 0 [pid 5904] <... mmap resumed>) = 0x7f0356e00000 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5904] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... openat resumed>) = 3 [pid 5903] chdir("./bus" [pid 5075] getdents64(4, [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5903] <... chdir resumed>) = 0 [pid 5903] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5903] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] close(4 [pid 5903] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5903] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./133/bus") = 0 [pid 5075] umount2("./133/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./133/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5903] <... creat resumed>) = 4 [pid 5902] <... write resumed>) = 524288 [pid 5076] <... umount2 resumed>) = 0 [pid 5075] unlink("./133/binderfs" [pid 5903] rename("./bus", "./file2" [pid 5076] umount2("./136/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... unlink resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(3, [pid 5076] newfstatat(AT_FDCWD, "./136/bus", [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] close(3 [pid 5076] umount2("./136/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] rmdir("./133" [pid 5076] openat(AT_FDCWD, "./136/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5903] <... rename resumed>) = -1 EEXIST (File exists) [pid 5902] munmap(0x7f0356e00000, 138412032 [pid 5075] <... rmdir resumed>) = 0 [pid 5903] memfd_create("syzkaller", 0 [pid 5902] <... munmap resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5903] <... memfd_create resumed>) = 5 [pid 5076] newfstatat(4, "", [pid 5904] <... write resumed>) = 524288 [pid 5903] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5902] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, [pid 5903] <... mmap resumed>) = 0x7f0356e00000 [pid 5902] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] mkdir("./134", 0777 [pid 5902] close(5 [pid 5076] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] close(4 [pid 5902] <... close resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5076] rmdir("./136/bus" [pid 5904] munmap(0x7f0356e00000, 138412032) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 5904] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5903] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] umount2("./136/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5904] ioctl(4, LOOP_SET_FD, 3 [pid 5076] newfstatat(AT_FDCWD, "./136/binderfs", [pid 5904] <... ioctl resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5076] unlink("./136/binderfs" [pid 5073] close(3 [pid 5076] <... unlink resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5076] getdents64(3, [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5902] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] close(3) = 0 [pid 5903] <... write resumed>) = 524288 [pid 5076] rmdir("./136") = 0 ./strace-static-x86_64: Process 5905 attached [pid 5905] set_robust_list(0x55556e32a660, 24 [pid 5902] <... open resumed>) = 5 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 5905 [pid 5905] <... set_robust_list resumed>) = 0 [pid 5076] mkdir("./137", 0777 [pid 5905] chdir("./134" [pid 5903] munmap(0x7f0356e00000, 138412032 [pid 5902] ftruncate(5, 0 [pid 5905] <... chdir resumed>) = 0 [pid 5903] <... munmap resumed>) = 0 [pid 5902] <... ftruncate resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5905] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5905] <... prctl resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5902] exit_group(0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5902] <... exit_group resumed>) = ? [pid 5905] setpgid(0, 0 [pid 5903] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5902] +++ exited with 0 +++ [pid 5905] <... setpgid resumed>) = 0 [pid 5904] close(3 [pid 5903] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5902, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5904] <... close resumed>) = 0 [pid 5903] close(5 [pid 5904] close(4) = 0 [pid 5904] mkdir("./bus", 0777 [pid 5905] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5904] <... mkdir resumed>) = 0 [pid 5077] umount2("./135", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./135", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5904] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5077] <... openat resumed>) = 3 [pid 5905] <... openat resumed>) = 3 [pid 5077] newfstatat(3, "", [pid 5905] write(3, "1000", 4 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5905] <... write resumed>) = 4 [pid 5077] getdents64(3, [pid 5905] close(3) = 0 [pid 5904] <... mount resumed>) = 0 [pid 5903] <... close resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5904] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5904] chdir("./bus") = 0 [pid 5904] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5904] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5903] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5905] symlink("/dev/binderfs", "./binderfs" [pid 5077] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... ioctl resumed>) = 0 [pid 5905] <... symlink resumed>) = 0 [pid 5904] <... symlink resumed>) = 0 [pid 5075] close(3 [pid 5905] memfd_create("syzkaller", 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5904] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5905] <... memfd_create resumed>) = 3 [pid 5903] <... open resumed>) = 5 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5903] ftruncate(5, 0) = 0 [pid 5904] <... creat resumed>) = 4 [pid 5903] exit_group(0./strace-static-x86_64: Process 5906 attached [pid 5906] set_robust_list(0x55556e32a660, 24 [ 158.337195][ T5904] loop5: detected capacity change from 0 to 1024 [pid 5904] rename("./bus", "./file2" [pid 5903] <... exit_group resumed>) = ? [pid 5077] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5906] <... set_robust_list resumed>) = 0 [pid 5905] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5903] +++ exited with 0 +++ [pid 5076] <... ioctl resumed>) = 0 [pid 5905] <... mmap resumed>) = 0x7f0356e00000 [pid 5904] <... rename resumed>) = -1 EEXIST (File exists) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./135/bus", [pid 5906] chdir("./134" [pid 5904] memfd_create("syzkaller", 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 5906 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5903, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5904] <... memfd_create resumed>) = 5 [pid 5074] umount2("./133", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5904] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5904] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./135/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] openat(AT_FDCWD, "./133", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... openat resumed>) = 4 [pid 5077] newfstatat(4, "", [pid 5074] <... openat resumed>) = 3 [pid 5074] newfstatat(3, "", [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] getdents64(4, [pid 5074] getdents64(3, [pid 5906] <... chdir resumed>) = 0 [pid 5906] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] getdents64(4, [pid 5074] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5906] <... prctl resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] close(4 [pid 5906] setpgid(0, 0 [pid 5904] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5906] <... setpgid resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5076] close(3 [pid 5906] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5904] <... write resumed>) = 524288 [pid 5077] rmdir("./135/bus" [pid 5076] <... close resumed>) = 0 [pid 5905] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... rmdir resumed>) = 0 [pid 5077] umount2("./135/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5906] <... openat resumed>) = 3 [pid 5077] newfstatat(AT_FDCWD, "./135/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5906] write(3, "1000", 4 [pid 5077] unlink("./135/binderfs" [pid 5906] <... write resumed>) = 4 [pid 5077] <... unlink resumed>) = 0 [pid 5906] close(3 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 5907 [pid 5906] <... close resumed>) = 0 ./strace-static-x86_64: Process 5907 attached [pid 5906] symlink("/dev/binderfs", "./binderfs" [pid 5074] <... umount2 resumed>) = 0 [pid 5907] set_robust_list(0x55556e32a660, 24) = 0 [pid 5906] <... symlink resumed>) = 0 [pid 5077] getdents64(3, [pid 5907] chdir("./137" [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5907] <... chdir resumed>) = 0 [pid 5077] close(3 [pid 5907] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5077] <... close resumed>) = 0 [pid 5907] <... prctl resumed>) = 0 [pid 5906] memfd_create("syzkaller", 0 [pid 5077] rmdir("./135" [pid 5074] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5907] setpgid(0, 0 [pid 5904] munmap(0x7f0356e00000, 138412032 [pid 5077] <... rmdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5907] <... setpgid resumed>) = 0 [pid 5906] <... memfd_create resumed>) = 3 [pid 5904] <... munmap resumed>) = 0 [pid 5077] mkdir("./136", 0777 [pid 5074] newfstatat(AT_FDCWD, "./133/bus", [pid 5907] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5907] write(3, "1000", 4 [pid 5904] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] <... mkdir resumed>) = 0 [pid 5074] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5907] <... write resumed>) = 4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5907] close(3 [pid 5904] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] openat(AT_FDCWD, "./133/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5907] <... close resumed>) = 0 [pid 5906] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5904] close(5 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] <... openat resumed>) = 4 [pid 5907] symlink("/dev/binderfs", "./binderfs" [pid 5906] <... mmap resumed>) = 0x7f0356e00000 [pid 5904] <... close resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5074] newfstatat(4, "", [pid 5907] <... symlink resumed>) = 0 [pid 5907] memfd_create("syzkaller", 0 [pid 5906] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5905] <... write resumed>) = 524288 [pid 5904] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, [pid 5907] <... memfd_create resumed>) = 3 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5907] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5905] munmap(0x7f0356e00000, 138412032 [pid 5074] close(4) = 0 [pid 5074] rmdir("./133/bus" [pid 5905] <... munmap resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5907] <... mmap resumed>) = 0x7f0356e00000 [pid 5907] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5905] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] umount2("./133/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5906] <... write resumed>) = 524288 [pid 5904] <... open resumed>) = 5 [pid 5906] munmap(0x7f0356e00000, 138412032 [pid 5907] <... write resumed>) = 524288 [pid 5905] <... openat resumed>) = 4 [pid 5904] ftruncate(5, 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5907] munmap(0x7f0356e00000, 138412032 [pid 5905] ioctl(4, LOOP_SET_FD, 3 [pid 5904] <... ftruncate resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./133/binderfs", [pid 5907] <... munmap resumed>) = 0 [pid 5906] <... munmap resumed>) = 0 [pid 5906] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5077] <... ioctl resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5904] exit_group(0) = ? [pid 5074] unlink("./133/binderfs" [pid 5906] <... openat resumed>) = 4 [pid 5904] +++ exited with 0 +++ [pid 5074] <... unlink resumed>) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5904, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5907] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5074] getdents64(3, [pid 5907] <... openat resumed>) = 4 [pid 5906] ioctl(4, LOOP_SET_FD, 3 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5907] ioctl(4, LOOP_SET_FD, 3 [pid 5074] close(3) = 0 [pid 5906] <... ioctl resumed>) = 0 [pid 5905] <... ioctl resumed>) = 0 [pid 5077] close(3 [pid 5907] <... ioctl resumed>) = 0 [pid 5074] rmdir("./133" [pid 5907] close(3 [pid 5077] <... close resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5907] <... close resumed>) = 0 [pid 5906] close(3 [pid 5905] close(3 [pid 5078] umount2("./136", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5907] close(4 [pid 5906] <... close resumed>) = 0 [pid 5905] <... close resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5907] <... close resumed>) = 0 [pid 5074] mkdir("./134", 0777) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5078] openat(AT_FDCWD, "./136", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5907] mkdir("./bus", 0777 [pid 5905] close(4 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 5908 [pid 5078] <... openat resumed>) = 3 [ 158.492157][ T5905] loop0: detected capacity change from 0 to 1024 [ 158.512039][ T5906] loop2: detected capacity change from 0 to 1024 [ 158.513166][ T5907] loop3: detected capacity change from 0 to 1024 [pid 5907] <... mkdir resumed>) = 0 [pid 5906] close(4 [pid 5905] <... close resumed>) = 0 [pid 5078] newfstatat(3, "", [pid 5906] <... close resumed>) = 0 [pid 5905] mkdir("./bus", 0777 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5906] mkdir("./bus", 0777./strace-static-x86_64: Process 5908 attached [pid 5907] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5906] <... mkdir resumed>) = 0 [pid 5905] <... mkdir resumed>) = 0 [pid 5078] getdents64(3, [pid 5905] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5908] set_robust_list(0x55556e32a660, 24 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5908] <... set_robust_list resumed>) = 0 [pid 5906] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5908] chdir("./136") = 0 [pid 5908] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5908] setpgid(0, 0) = 0 [pid 5908] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5078] umount2("./136/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5908] write(3, "1000", 4) = 4 [pid 5908] close(3) = 0 [pid 5908] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5908] memfd_create("syzkaller", 0 [pid 5905] <... mount resumed>) = 0 [pid 5908] <... memfd_create resumed>) = 3 [pid 5905] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5908] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5905] <... openat resumed>) = 3 [pid 5908] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5907] <... mount resumed>) = 0 [pid 5906] <... mount resumed>) = 0 [pid 5905] chdir("./bus" [pid 5074] <... ioctl resumed>) = 0 [pid 5907] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5906] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5905] <... chdir resumed>) = 0 [pid 5078] <... umount2 resumed>) = 0 [pid 5074] close(3 [pid 5906] <... openat resumed>) = 3 [pid 5074] <... close resumed>) = 0 [pid 5905] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5907] <... openat resumed>) = 3 [pid 5078] umount2("./136/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5909 attached [pid 5908] <... write resumed>) = 524288 [pid 5907] chdir("./bus" [pid 5906] chdir("./bus" [pid 5905] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] newfstatat(AT_FDCWD, "./136/bus", [pid 5907] <... chdir resumed>) = 0 [pid 5906] <... chdir resumed>) = 0 [pid 5905] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5907] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5906] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 5909 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] umount2("./136/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5906] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5907] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] openat(AT_FDCWD, "./136/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5909] set_robust_list(0x55556e32a660, 24 [pid 5906] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5905] <... symlink resumed>) = 0 [pid 5078] <... openat resumed>) = 4 [pid 5907] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5909] <... set_robust_list resumed>) = 0 [pid 5078] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, [pid 5909] chdir("./134" [pid 5907] <... symlink resumed>) = 0 [pid 5905] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5906] <... symlink resumed>) = 0 [pid 5906] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5909] <... chdir resumed>) = 0 [pid 5078] close(4 [pid 5907] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5909] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5908] munmap(0x7f0356e00000, 138412032 [pid 5078] <... close resumed>) = 0 [pid 5909] <... prctl resumed>) = 0 [pid 5908] <... munmap resumed>) = 0 [pid 5078] rmdir("./136/bus" [pid 5909] setpgid(0, 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5905] <... creat resumed>) = 4 [pid 5909] <... setpgid resumed>) = 0 [pid 5906] <... creat resumed>) = 4 [pid 5905] rename("./bus", "./file2" [pid 5909] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5908] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5907] <... creat resumed>) = 4 [pid 5906] rename("./bus", "./file2" [pid 5905] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] umount2("./136/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5908] <... openat resumed>) = 4 [pid 5907] rename("./bus", "./file2" [pid 5906] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] newfstatat(AT_FDCWD, "./136/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5908] ioctl(4, LOOP_SET_FD, 3 [pid 5907] <... rename resumed>) = -1 EEXIST (File exists) [pid 5906] memfd_create("syzkaller", 0 [pid 5078] unlink("./136/binderfs" [pid 5909] <... openat resumed>) = 3 [pid 5908] <... ioctl resumed>) = 0 [pid 5907] memfd_create("syzkaller", 0 [pid 5906] <... memfd_create resumed>) = 5 [pid 5905] memfd_create("syzkaller", 0 [pid 5078] <... unlink resumed>) = 0 [pid 5909] write(3, "1000", 4 [pid 5908] close(3 [pid 5907] <... memfd_create resumed>) = 5 [pid 5906] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5905] <... memfd_create resumed>) = 5 [pid 5078] getdents64(3, [pid 5909] <... write resumed>) = 4 [pid 5908] <... close resumed>) = 0 [pid 5907] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5906] <... mmap resumed>) = 0x7f0356e00000 [pid 5905] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5909] close(3 [pid 5908] close(4 [pid 5907] <... mmap resumed>) = 0x7f0356e00000 [pid 5905] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] close(3 [pid 5909] <... close resumed>) = 0 [pid 5908] <... close resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5909] symlink("/dev/binderfs", "./binderfs" [pid 5908] mkdir("./bus", 0777 [pid 5078] rmdir("./136" [pid 5909] <... symlink resumed>) = 0 [pid 5908] <... mkdir resumed>) = 0 [pid 5906] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5905] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... rmdir resumed>) = 0 [pid 5907] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5909] memfd_create("syzkaller", 0 [pid 5908] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5078] mkdir("./137", 0777 [pid 5909] <... memfd_create resumed>) = 3 [pid 5078] <... mkdir resumed>) = 0 [pid 5909] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5909] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5906] <... write resumed>) = 524288 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5908] <... mount resumed>) = 0 [pid 5908] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5908] chdir("./bus") = 0 [pid 5907] <... write resumed>) = 524288 [ 158.678406][ T5908] loop4: detected capacity change from 0 to 1024 [pid 5908] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5905] <... write resumed>) = 524288 [pid 5908] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5908] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5907] munmap(0x7f0356e00000, 138412032) = 0 [pid 5906] munmap(0x7f0356e00000, 138412032 [pid 5905] munmap(0x7f0356e00000, 138412032 [pid 5909] <... write resumed>) = 524288 [pid 5908] <... symlink resumed>) = 0 [pid 5907] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5906] <... munmap resumed>) = 0 [pid 5905] <... munmap resumed>) = 0 [pid 5909] munmap(0x7f0356e00000, 138412032 [pid 5907] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5908] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5907] close(5 [pid 5905] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5906] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5908] <... creat resumed>) = 4 [pid 5907] <... close resumed>) = 0 [pid 5906] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5905] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5909] <... munmap resumed>) = 0 [pid 5908] rename("./bus", "./file2" [pid 5909] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5906] close(5 [pid 5909] ioctl(4, LOOP_SET_FD, 3 [pid 5905] close(5 [pid 5908] <... rename resumed>) = -1 EEXIST (File exists) [pid 5907] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5906] <... close resumed>) = 0 [pid 5078] <... ioctl resumed>) = 0 [pid 5908] memfd_create("syzkaller", 0) = 5 [pid 5908] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] close(3 [pid 5908] <... mmap resumed>) = 0x7f0356e00000 [pid 5905] <... close resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5907] <... open resumed>) = 5 [pid 5905] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5907] ftruncate(5, 0 [pid 5905] <... open resumed>) = 5 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5907] <... ftruncate resumed>) = 0 [pid 5905] ftruncate(5, 0) = 0 [pid 5905] exit_group(0) = ? ./strace-static-x86_64: Process 5910 attached [pid 5908] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5907] exit_group(0 [pid 5906] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5905] +++ exited with 0 +++ [pid 5910] set_robust_list(0x55556e32a660, 24 [pid 5909] <... ioctl resumed>) = 0 [pid 5907] <... exit_group resumed>) = ? [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 5910 [pid 5909] close(3) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5905, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5909] close(4) = 0 [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 5909] mkdir("./bus", 0777 [pid 5073] <... restart_syscall resumed>) = 0 [pid 5910] <... set_robust_list resumed>) = 0 [pid 5910] chdir("./137") = 0 [pid 5910] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5073] umount2("./134", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5910] setpgid(0, 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5910] <... setpgid resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./134", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5910] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5909] <... mkdir resumed>) = 0 [pid 5907] +++ exited with 0 +++ [pid 5073] <... openat resumed>) = 3 [pid 5073] newfstatat(3, "", [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5907, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5910] <... openat resumed>) = 3 [pid 5076] <... restart_syscall resumed>) = 0 [pid 5910] write(3, "1000", 4 [pid 5909] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5073] getdents64(3, [pid 5910] <... write resumed>) = 4 [pid 5906] <... open resumed>) = 5 [pid 5910] close(3 [pid 5906] ftruncate(5, 0 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5910] <... close resumed>) = 0 [pid 5909] <... mount resumed>) = 0 [pid 5906] <... ftruncate resumed>) = 0 [pid 5076] umount2("./137", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5910] symlink("/dev/binderfs", "./binderfs" [pid 5909] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5909] <... openat resumed>) = 3 [ 158.782426][ T5909] loop1: detected capacity change from 0 to 1024 [pid 5076] openat(AT_FDCWD, "./137", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5910] <... symlink resumed>) = 0 [pid 5909] chdir("./bus" [pid 5076] <... openat resumed>) = 3 [pid 5910] memfd_create("syzkaller", 0 [pid 5909] <... chdir resumed>) = 0 [pid 5908] <... write resumed>) = 524288 [pid 5906] exit_group(0 [pid 5076] newfstatat(3, "", [pid 5073] <... umount2 resumed>) = 0 [pid 5909] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5909] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5906] <... exit_group resumed>) = ? [pid 5909] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5910] <... memfd_create resumed>) = 3 [pid 5076] getdents64(3, [pid 5910] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5909] <... symlink resumed>) = 0 [pid 5908] munmap(0x7f0356e00000, 138412032 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5910] <... mmap resumed>) = 0x7f0356e00000 [pid 5908] <... munmap resumed>) = 0 [pid 5906] +++ exited with 0 +++ [pid 5908] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] umount2("./137/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5906, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5909] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5908] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5908] close(5 [pid 5910] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... umount2 resumed>) = 0 [pid 5075] umount2("./134", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./134/bus", [pid 5075] openat(AT_FDCWD, "./134", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5073] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] newfstatat(3, "", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5908] <... close resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] openat(AT_FDCWD, "./134/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5909] <... creat resumed>) = 4 [pid 5075] getdents64(3, [pid 5909] rename("./bus", "./file2" [pid 5073] <... openat resumed>) = 4 [pid 5909] <... rename resumed>) = -1 EEXIST (File exists) [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5909] memfd_create("syzkaller", 0 [pid 5075] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] newfstatat(4, "", [pid 5909] <... memfd_create resumed>) = 5 [pid 5076] umount2("./137/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5909] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5908] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] getdents64(4, [pid 5909] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] newfstatat(AT_FDCWD, "./137/bus", [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./137/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5908] <... open resumed>) = 5 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] close(4 [pid 5076] openat(AT_FDCWD, "./137/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... close resumed>) = 0 [pid 5910] <... write resumed>) = 524288 [pid 5909] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5908] ftruncate(5, 0 [pid 5076] <... openat resumed>) = 4 [pid 5073] rmdir("./134/bus") = 0 [pid 5076] newfstatat(4, "", [pid 5910] munmap(0x7f0356e00000, 138412032 [pid 5073] umount2("./134/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] getdents64(4, [pid 5073] newfstatat(AT_FDCWD, "./134/binderfs", [pid 5908] <... ftruncate resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5908] exit_group(0 [pid 5076] getdents64(4, [pid 5073] unlink("./134/binderfs" [pid 5910] <... munmap resumed>) = 0 [pid 5909] <... write resumed>) = 524288 [pid 5908] <... exit_group resumed>) = ? [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5076] close(4) = 0 [pid 5910] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5908] +++ exited with 0 +++ [pid 5076] rmdir("./137/bus" [pid 5075] <... umount2 resumed>) = 0 [pid 5073] getdents64(3, [pid 5076] <... rmdir resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5910] <... openat resumed>) = 4 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5908, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5076] umount2("./137/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] close(3 [pid 5910] ioctl(4, LOOP_SET_FD, 3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... close resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./137/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] rmdir("./134" [pid 5076] unlink("./137/binderfs" [pid 5073] <... rmdir resumed>) = 0 [pid 5077] umount2("./136", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... unlink resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] getdents64(3, [pid 5073] mkdir("./135", 0777 [pid 5077] openat(AT_FDCWD, "./136", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5076] close(3 [pid 5077] newfstatat(3, "", [pid 5076] <... close resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] rmdir("./137" [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5909] munmap(0x7f0356e00000, 138412032 [pid 5077] getdents64(3, [pid 5076] <... rmdir resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5909] <... munmap resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] umount2("./136/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] mkdir("./138", 0777 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5910] <... ioctl resumed>) = 0 [pid 5909] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] <... mkdir resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./134/bus", [pid 5910] close(3 [pid 5909] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5910] <... close resumed>) = 0 [pid 5909] close(5 [pid 5077] <... umount2 resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5910] close(4 [pid 5077] umount2("./136/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5910] <... close resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] openat(AT_FDCWD, "./134/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] newfstatat(AT_FDCWD, "./136/bus", [pid 5075] <... openat resumed>) = 4 [pid 5910] mkdir("./bus", 0777 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] umount2("./136/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] getdents64(4, [pid 5910] <... mkdir resumed>) = 0 [pid 5909] <... close resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] openat(AT_FDCWD, "./136/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5075] getdents64(4, [pid 5909] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5910] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5075] close(4) = 0 [pid 5075] rmdir("./134/bus" [pid 5077] newfstatat(4, "", [pid 5075] <... rmdir resumed>) = 0 [pid 5075] umount2("./134/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5909] <... open resumed>) = 5 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 5910] <... mount resumed>) = 0 [pid 5909] ftruncate(5, 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] getdents64(4, [pid 5910] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] newfstatat(AT_FDCWD, "./134/binderfs", [pid 5910] <... openat resumed>) = 3 [pid 5909] <... ftruncate resumed>) = 0 [pid 5077] getdents64(4, [pid 5909] exit_group(0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] close(4) = 0 [pid 5077] rmdir("./136/bus" [pid 5910] chdir("./bus" [pid 5909] <... exit_group resumed>) = ? [pid 5077] <... rmdir resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5910] <... chdir resumed>) = 0 [pid 5909] +++ exited with 0 +++ [pid 5075] unlink("./134/binderfs" [pid 5910] openat(AT_FDCWD, "/dev/loop5", O_RDWR [ 158.912321][ T5910] loop5: detected capacity change from 0 to 1024 [pid 5076] close(3 [pid 5075] <... unlink resumed>) = 0 [pid 5910] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] umount2("./136/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... close resumed>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5909, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5073] close(3 [pid 5910] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] getdents64(3, [pid 5074] umount2("./134", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... close resumed>) = 0 [pid 5075] close(3 [pid 5074] openat(AT_FDCWD, "./134", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] newfstatat(AT_FDCWD, "./136/binderfs", [pid 5075] <... close resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5910] <... symlink resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] rmdir("./134" [pid 5074] newfstatat(3, "", [pid 5077] unlink("./136/binderfs"./strace-static-x86_64: Process 5912 attached ./strace-static-x86_64: Process 5911 attached [pid 5910] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5077] <... unlink resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 5911 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5912] set_robust_list(0x55556e32a660, 24) = 0 [pid 5911] set_robust_list(0x55556e32a660, 24 [pid 5077] getdents64(3, [pid 5075] mkdir("./135", 0777 [pid 5074] getdents64(3, [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5912] chdir("./135" [pid 5911] <... set_robust_list resumed>) = 0 [pid 5077] close(3 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 5912 [pid 5912] <... chdir resumed>) = 0 [pid 5911] chdir("./138" [pid 5910] <... creat resumed>) = 4 [pid 5077] <... close resumed>) = 0 [pid 5074] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5912] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5911] <... chdir resumed>) = 0 [pid 5077] rmdir("./136" [pid 5912] <... prctl resumed>) = 0 [pid 5911] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5910] rename("./bus", "./file2" [pid 5077] <... rmdir resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5912] setpgid(0, 0 [pid 5911] <... prctl resumed>) = 0 [pid 5912] <... setpgid resumed>) = 0 [pid 5911] setpgid(0, 0 [pid 5910] <... rename resumed>) = -1 EEXIST (File exists) [pid 5077] mkdir("./137", 0777) = 0 [pid 5912] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5910] memfd_create("syzkaller", 0) = 5 [pid 5912] <... openat resumed>) = 3 [pid 5910] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5910] <... mmap resumed>) = 0x7f0356e00000 [pid 5912] write(3, "1000", 4 [pid 5075] <... openat resumed>) = 3 [pid 5912] <... write resumed>) = 4 [pid 5912] close(3 [pid 5911] <... setpgid resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5912] <... close resumed>) = 0 [pid 5912] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5912] memfd_create("syzkaller", 0) = 3 [pid 5911] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5910] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... umount2 resumed>) = 0 [pid 5911] <... openat resumed>) = 3 [pid 5911] write(3, "1000", 4 [pid 5074] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5912] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5911] <... write resumed>) = 4 [pid 5912] <... mmap resumed>) = 0x7f0356e00000 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5912] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5911] close(3 [pid 5074] newfstatat(AT_FDCWD, "./134/bus", [pid 5911] <... close resumed>) = 0 [pid 5911] symlink("/dev/binderfs", "./binderfs" [pid 5912] <... write resumed>) = 524288 [pid 5910] <... write resumed>) = 524288 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5912] munmap(0x7f0356e00000, 138412032 [pid 5911] <... symlink resumed>) = 0 [pid 5910] munmap(0x7f0356e00000, 138412032 [pid 5074] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./134/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5911] memfd_create("syzkaller", 0 [pid 5074] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, [pid 5911] <... memfd_create resumed>) = 3 [pid 5910] <... munmap resumed>) = 0 [pid 5077] <... ioctl resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5911] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5912] <... munmap resumed>) = 0 [pid 5911] <... mmap resumed>) = 0x7f0356e00000 [pid 5910] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] close(3 [pid 5074] getdents64(4, [pid 5911] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] <... close resumed>) = 0 [pid 5074] close(4 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] close(3) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... close resumed>) = 0 [pid 5912] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5910] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] rmdir("./134/bus" [pid 5912] <... openat resumed>) = 4 [pid 5910] close(5 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 5913 ./strace-static-x86_64: Process 5914 attached ./strace-static-x86_64: Process 5913 attached [pid 5912] ioctl(4, LOOP_SET_FD, 3 [pid 5911] <... write resumed>) = 524288 [pid 5910] <... close resumed>) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 5914 [pid 5074] <... rmdir resumed>) = 0 [pid 5914] set_robust_list(0x55556e32a660, 24) = 0 [pid 5914] chdir("./137") = 0 [pid 5914] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5914] setpgid(0, 0) = 0 [pid 5914] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5914] write(3, "1000", 4) = 4 [pid 5914] close(3) = 0 [pid 5914] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5914] memfd_create("syzkaller", 0) = 3 [pid 5074] umount2("./134/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5913] set_robust_list(0x55556e32a660, 24 [pid 5914] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5911] munmap(0x7f0356e00000, 138412032 [pid 5913] <... set_robust_list resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5914] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5911] <... munmap resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./134/binderfs", [pid 5913] chdir("./135" [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./134/binderfs" [pid 5913] <... chdir resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5913] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5910] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5074] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 5913] <... prctl resumed>) = 0 [pid 5913] setpgid(0, 0 [pid 5074] rmdir("./134" [pid 5913] <... setpgid resumed>) = 0 [pid 5912] <... ioctl resumed>) = 0 [pid 5911] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5074] <... rmdir resumed>) = 0 [pid 5911] <... openat resumed>) = 4 [pid 5910] <... open resumed>) = 5 [pid 5913] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5912] close(3 [pid 5911] ioctl(4, LOOP_SET_FD, 3 [pid 5910] ftruncate(5, 0 [pid 5913] <... openat resumed>) = 3 [pid 5912] <... close resumed>) = 0 [pid 5913] write(3, "1000", 4 [pid 5912] close(4 [pid 5910] <... ftruncate resumed>) = 0 [pid 5074] mkdir("./135", 0777 [pid 5913] <... write resumed>) = 4 [pid 5912] <... close resumed>) = 0 [pid 5913] close(3 [pid 5912] mkdir("./bus", 0777 [pid 5910] exit_group(0 [pid 5074] <... mkdir resumed>) = 0 [pid 5913] <... close resumed>) = 0 [pid 5913] symlink("/dev/binderfs", "./binderfs" [pid 5910] <... exit_group resumed>) = ? [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5913] <... symlink resumed>) = 0 [pid 5914] <... write resumed>) = 524288 [pid 5912] <... mkdir resumed>) = 0 [pid 5910] +++ exited with 0 +++ [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5910, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5912] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5913] memfd_create("syzkaller", 0 [pid 5078] umount2("./137", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5913] <... memfd_create resumed>) = 3 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./137", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5913] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... openat resumed>) = 3 [pid 5913] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] newfstatat(3, "", [pid 5914] munmap(0x7f0356e00000, 138412032 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5914] <... munmap resumed>) = 0 [pid 5911] <... ioctl resumed>) = 0 [pid 5078] getdents64(3, [pid 5912] <... mount resumed>) = 0 [pid 5914] openat(AT_FDCWD, "/dev/loop4", O_RDWR [ 159.084935][ T5912] loop0: detected capacity change from 0 to 1024 [ 159.112599][ T5911] loop3: detected capacity change from 0 to 1024 [pid 5911] close(3 [pid 5914] <... openat resumed>) = 4 [pid 5911] <... close resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5913] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5914] ioctl(4, LOOP_SET_FD, 3 [pid 5912] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5911] close(4 [pid 5078] umount2("./137/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5913] <... write resumed>) = 524288 [pid 5914] <... ioctl resumed>) = 0 [pid 5912] <... openat resumed>) = 3 [pid 5911] <... close resumed>) = 0 [pid 5912] chdir("./bus") = 0 [pid 5911] mkdir("./bus", 0777 [pid 5912] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5911] <... mkdir resumed>) = 0 [pid 5913] munmap(0x7f0356e00000, 138412032 [pid 5912] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5911] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5074] <... ioctl resumed>) = 0 [pid 5913] <... munmap resumed>) = 0 [pid 5913] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5912] <... symlink resumed>) = 0 [pid 5078] <... umount2 resumed>) = 0 [pid 5913] <... openat resumed>) = 4 [pid 5913] ioctl(4, LOOP_SET_FD, 3 [pid 5912] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] umount2("./137/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] newfstatat(AT_FDCWD, "./137/bus", [pid 5914] close(3 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] close(3 [pid 5914] <... close resumed>) = 0 [pid 5912] <... creat resumed>) = 4 [pid 5911] <... mount resumed>) = 0 [pid 5078] umount2("./137/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... close resumed>) = 0 [pid 5914] close(4 [pid 5912] rename("./bus", "./file2" [pid 5911] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5914] <... close resumed>) = 0 [pid 5911] <... openat resumed>) = 3 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5914] mkdir("./bus", 0777 [pid 5911] chdir("./bus" [pid 5078] openat(AT_FDCWD, "./137/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5913] <... ioctl resumed>) = 0 [pid 5914] <... mkdir resumed>) = 0 [pid 5912] <... rename resumed>) = -1 EEXIST (File exists) [pid 5911] <... chdir resumed>) = 0 [pid 5913] close(3 [pid 5914] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5912] memfd_create("syzkaller", 0 [pid 5911] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5078] <... openat resumed>) = 4 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 5915 [pid 5913] <... close resumed>) = 0 [pid 5912] <... memfd_create resumed>) = 5 [pid 5911] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] newfstatat(4, "", ./strace-static-x86_64: Process 5915 attached [pid 5913] close(4 [pid 5912] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5911] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5915] set_robust_list(0x55556e32a660, 24 [pid 5913] <... close resumed>) = 0 [pid 5912] <... mmap resumed>) = 0x7f0356e00000 [pid 5911] <... symlink resumed>) = 0 [pid 5078] getdents64(4, [pid 5915] <... set_robust_list resumed>) = 0 [pid 5913] mkdir("./bus", 0777 [pid 5911] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5915] chdir("./135" [pid 5913] <... mkdir resumed>) = 0 [pid 5914] <... mount resumed>) = 0 [pid 5911] <... creat resumed>) = 4 [pid 5915] <... chdir resumed>) = 0 [pid 5914] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5915] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5914] <... openat resumed>) = 3 [pid 5915] <... prctl resumed>) = 0 [pid 5914] chdir("./bus" [pid 5915] setpgid(0, 0 [pid 5913] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5914] <... chdir resumed>) = 0 [pid 5911] rename("./bus", "./file2" [pid 5078] getdents64(4, [pid 5915] <... setpgid resumed>) = 0 [pid 5914] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5915] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5914] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5915] <... openat resumed>) = 3 [pid 5914] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] close(4 [ 159.149510][ T5914] loop4: detected capacity change from 0 to 1024 [ 159.176279][ T5913] loop2: detected capacity change from 0 to 1024 [pid 5915] write(3, "1000", 4 [pid 5912] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5915] <... write resumed>) = 4 [pid 5078] <... close resumed>) = 0 [pid 5915] close(3 [pid 5078] rmdir("./137/bus" [pid 5915] <... close resumed>) = 0 [pid 5915] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5914] <... symlink resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5078] umount2("./137/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5915] memfd_create("syzkaller", 0 [pid 5913] <... mount resumed>) = 0 [pid 5914] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5911] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5915] <... memfd_create resumed>) = 3 [pid 5913] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5911] memfd_create("syzkaller", 0 [pid 5078] newfstatat(AT_FDCWD, "./137/binderfs", [pid 5915] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5913] <... openat resumed>) = 3 [pid 5911] <... memfd_create resumed>) = 5 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5915] <... mmap resumed>) = 0x7f0356e00000 [pid 5913] chdir("./bus" [pid 5914] <... creat resumed>) = 4 [pid 5911] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] unlink("./137/binderfs" [pid 5915] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5913] <... chdir resumed>) = 0 [pid 5914] rename("./bus", "./file2" [pid 5912] <... write resumed>) = 524288 [pid 5911] <... mmap resumed>) = 0x7f0356e00000 [pid 5913] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5912] munmap(0x7f0356e00000, 138412032 [pid 5911] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... unlink resumed>) = 0 [pid 5913] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5914] <... rename resumed>) = -1 EEXIST (File exists) [pid 5912] <... munmap resumed>) = 0 [pid 5078] getdents64(3, [pid 5913] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5914] memfd_create("syzkaller", 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5914] <... memfd_create resumed>) = 5 [pid 5078] close(3 [pid 5914] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5912] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5078] <... close resumed>) = 0 [pid 5915] <... write resumed>) = 524288 [pid 5913] <... symlink resumed>) = 0 [pid 5914] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] rmdir("./137" [pid 5913] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5912] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5913] <... creat resumed>) = 4 [pid 5914] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5912] close(5 [pid 5911] <... write resumed>) = 524288 [pid 5078] <... rmdir resumed>) = 0 [pid 5913] rename("./bus", "./file2" [pid 5078] mkdir("./138", 0777) = 0 [pid 5915] munmap(0x7f0356e00000, 138412032 [pid 5913] <... rename resumed>) = -1 EEXIST (File exists) [pid 5915] <... munmap resumed>) = 0 [pid 5913] memfd_create("syzkaller", 0 [pid 5911] munmap(0x7f0356e00000, 138412032 [pid 5913] <... memfd_create resumed>) = 5 [pid 5912] <... close resumed>) = 0 [pid 5911] <... munmap resumed>) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5913] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5078] <... openat resumed>) = 3 [pid 5912] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5913] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5915] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5911] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5915] ioctl(4, LOOP_SET_FD, 3 [pid 5911] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5911] close(5 [pid 5913] <... write resumed>) = 524288 [pid 5911] <... close resumed>) = 0 [pid 5911] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5915] <... ioctl resumed>) = 0 [pid 5913] munmap(0x7f0356e00000, 138412032 [pid 5914] <... write resumed>) = 524288 [pid 5912] <... open resumed>) = 5 [pid 5911] <... open resumed>) = 5 [pid 5911] ftruncate(5, 0) = 0 [pid 5915] close(3 [pid 5911] exit_group(0 [pid 5915] <... close resumed>) = 0 [pid 5913] <... munmap resumed>) = 0 [pid 5914] munmap(0x7f0356e00000, 138412032 [pid 5912] ftruncate(5, 0 [pid 5911] <... exit_group resumed>) = ? [pid 5915] close(4 [pid 5914] <... munmap resumed>) = 0 [pid 5912] <... ftruncate resumed>) = 0 [pid 5915] <... close resumed>) = 0 [pid 5913] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5914] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5912] exit_group(0 [pid 5911] +++ exited with 0 +++ [pid 5915] mkdir("./bus", 0777 [pid 5913] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5914] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5912] <... exit_group resumed>) = ? [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5911, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5076] umount2("./138", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5912] +++ exited with 0 +++ [pid 5076] openat(AT_FDCWD, "./138", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] umount2("./138/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5915] <... mkdir resumed>) = 0 [pid 5915] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5913] close(5 [pid 5914] close(5 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5912, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5913] <... close resumed>) = 0 [pid 5914] <... close resumed>) = 0 [pid 5078] <... ioctl resumed>) = 0 [ 159.305338][ T5915] loop1: detected capacity change from 0 to 1024 [ 159.316244][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 159.316263][ T28] audit: type=1800 audit(1710613041.414:820): pid=5912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop0" ino=20 res=0 errno=0 [pid 5078] close(3 [pid 5073] umount2("./135", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./135", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... close resumed>) = 0 [pid 5913] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... openat resumed>) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 5916 [pid 5073] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5914] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5073] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5916 attached [pid 5916] set_robust_list(0x55556e32a660, 24) = 0 [pid 5913] <... open resumed>) = 5 [pid 5913] ftruncate(5, 0 [pid 5916] chdir("./138" [pid 5913] <... ftruncate resumed>) = 0 [pid 5916] <... chdir resumed>) = 0 [pid 5913] exit_group(0 [pid 5916] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5913] <... exit_group resumed>) = ? [pid 5916] <... prctl resumed>) = 0 [pid 5915] <... mount resumed>) = 0 [pid 5913] +++ exited with 0 +++ [pid 5916] setpgid(0, 0 [pid 5915] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5913, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5073] <... umount2 resumed>) = 0 [pid 5916] <... setpgid resumed>) = 0 [pid 5915] <... openat resumed>) = 3 [pid 5914] <... open resumed>) = 5 [pid 5073] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5916] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5915] chdir("./bus" [pid 5914] ftruncate(5, 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5916] <... openat resumed>) = 3 [pid 5915] <... chdir resumed>) = 0 [pid 5914] <... ftruncate resumed>) = 0 [pid 5075] umount2("./135", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] newfstatat(AT_FDCWD, "./135/bus", [pid 5916] write(3, "1000", 4 [pid 5915] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5914] exit_group(0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5915] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5915] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5075] openat(AT_FDCWD, "./135", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5915] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5075] <... openat resumed>) = 3 [pid 5914] <... exit_group resumed>) = ? [pid 5075] newfstatat(3, "", [pid 5914] +++ exited with 0 +++ [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5914, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5916] <... write resumed>) = 4 [pid 5915] <... creat resumed>) = 4 [pid 5075] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5915] rename("./bus", "./file2" [pid 5916] close(3 [pid 5073] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5916] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5915] <... rename resumed>) = -1 EEXIST (File exists) [pid 5915] memfd_create("syzkaller", 0 [pid 5077] umount2("./137", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5915] <... memfd_create resumed>) = 5 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5915] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] openat(AT_FDCWD, "./137", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5915] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] <... openat resumed>) = 3 [pid 5916] symlink("/dev/binderfs", "./binderfs" [pid 5915] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] newfstatat(3, "", [pid 5076] <... umount2 resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./135/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5077] getdents64(3, [pid 5075] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] umount2("./137/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] newfstatat(AT_FDCWD, "./135/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./135/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5075] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] close(4) = 0 [pid 5075] rmdir("./135/bus") = 0 [ 159.416284][ T28] audit: type=1800 audit(1710613041.434:821): pid=5911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop3" ino=20 res=0 errno=0 [pid 5075] umount2("./135/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./138/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... openat resumed>) = 4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(4, "", [pid 5075] newfstatat(AT_FDCWD, "./135/binderfs", [pid 5916] <... symlink resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] newfstatat(AT_FDCWD, "./138/bus", [pid 5075] unlink("./135/binderfs") = 0 [pid 5075] getdents64(3, [pid 5915] <... write resumed>) = 524288 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5077] umount2("./137/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] close(3 [pid 5077] newfstatat(AT_FDCWD, "./137/bus", [pid 5075] <... close resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] rmdir("./135" [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... rmdir resumed>) = 0 [ 159.449617][ T28] audit: type=1800 audit(1710613041.504:822): pid=5913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop2" ino=20 res=0 errno=0 [pid 5073] getdents64(4, [pid 5916] memfd_create("syzkaller", 0 [pid 5915] munmap(0x7f0356e00000, 138412032 [pid 5077] umount2("./137/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./138/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] mkdir("./136", 0777 [pid 5915] <... munmap resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... mkdir resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./137/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5077] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] getdents64(4, [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5915] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5915] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] getdents64(4, [pid 5075] <... openat resumed>) = 3 [pid 5915] close(5 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5077] close(4 [pid 5915] <... close resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5077] rmdir("./137/bus") = 0 [pid 5077] umount2("./137/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./137/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] unlink("./137/binderfs") = 0 [pid 5077] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] close(3) = 0 [pid 5077] rmdir("./137" [pid 5915] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./138/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5916] <... memfd_create resumed>) = 3 [pid 5077] mkdir("./138", 0777 [pid 5916] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... openat resumed>) = 4 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5916] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] <... mkdir resumed>) = 0 [pid 5076] newfstatat(4, "", [pid 5073] getdents64(4, [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5076] getdents64(4, [pid 5073] close(4) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, [pid 5073] rmdir("./135/bus" [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] close(4) = 0 [pid 5076] rmdir("./138/bus" [pid 5073] <... rmdir resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5073] umount2("./135/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./138/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./138/binderfs", [pid 5073] newfstatat(AT_FDCWD, "./135/binderfs", [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./138/binderfs" [pid 5073] unlink("./135/binderfs" [pid 5076] <... unlink resumed>) = 0 [pid 5076] getdents64(3, [pid 5073] <... unlink resumed>) = 0 [pid 5916] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5915] <... open resumed>) = 5 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5916] <... write resumed>) = 524288 [pid 5915] ftruncate(5, 0 [pid 5073] getdents64(3, [pid 5916] munmap(0x7f0356e00000, 138412032 [pid 5915] <... ftruncate resumed>) = 0 [ 159.487825][ T28] audit: type=1800 audit(1710613041.514:823): pid=5914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop4" ino=20 res=0 errno=0 [pid 5916] <... munmap resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5915] exit_group(0 [pid 5073] close(3) = 0 [pid 5915] <... exit_group resumed>) = ? [pid 5916] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5915] +++ exited with 0 +++ [pid 5073] rmdir("./135" [pid 5916] <... openat resumed>) = 4 [pid 5076] close(3 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5915, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5916] ioctl(4, LOOP_SET_FD, 3 [pid 5076] <... close resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 5075] close(3 [pid 5074] <... restart_syscall resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5917 attached [pid 5074] umount2("./135", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5917] set_robust_list(0x55556e32a660, 24 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 5917 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5917] <... set_robust_list resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./135", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5917] chdir("./136" [pid 5916] <... ioctl resumed>) = 0 [pid 5077] <... ioctl resumed>) = 0 [pid 5076] rmdir("./138" [pid 5074] <... openat resumed>) = 3 [pid 5073] <... rmdir resumed>) = 0 [pid 5917] <... chdir resumed>) = 0 [pid 5916] close(3 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] newfstatat(3, "", [pid 5073] mkdir("./136", 0777 [pid 5917] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5916] <... close resumed>) = 0 [pid 5076] mkdir("./139", 0777 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 5917] <... prctl resumed>) = 0 [pid 5916] close(4 [pid 5077] close(3 [pid 5076] <... mkdir resumed>) = 0 [pid 5074] getdents64(3, [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5916] <... close resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] <... openat resumed>) = 3 [pid 5916] mkdir("./bus", 0777 [pid 5076] <... openat resumed>) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5916] <... mkdir resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5916] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5917] setpgid(0, 0 [pid 5077] <... close resumed>) = 0 [pid 5074] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5917] <... setpgid resumed>) = 0 [ 159.523300][ T28] audit: type=1800 audit(1710613041.624:824): pid=5915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 159.554111][ T5916] loop5: detected capacity change from 0 to 1024 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5918 attached [pid 5917] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5916] <... mount resumed>) = 0 [pid 5916] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5917] <... openat resumed>) = 3 [pid 5916] <... openat resumed>) = 3 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 5918 [pid 5917] write(3, "1000", 4) = 4 [pid 5917] close(3 [pid 5916] chdir("./bus" [pid 5917] <... close resumed>) = 0 [pid 5916] <... chdir resumed>) = 0 [pid 5916] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5918] set_robust_list(0x55556e32a660, 24 [pid 5917] symlink("/dev/binderfs", "./binderfs" [pid 5916] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5918] <... set_robust_list resumed>) = 0 [pid 5917] <... symlink resumed>) = 0 [pid 5916] <... symlink resumed>) = 0 [pid 5918] chdir("./138" [pid 5916] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5918] <... chdir resumed>) = 0 [pid 5917] memfd_create("syzkaller", 0 [pid 5918] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5917] <... memfd_create resumed>) = 3 [pid 5918] <... prctl resumed>) = 0 [pid 5917] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5918] setpgid(0, 0 [pid 5917] <... mmap resumed>) = 0x7f0356e00000 [pid 5916] <... creat resumed>) = 4 [pid 5916] rename("./bus", "./file2") = -1 EEXIST (File exists) [pid 5916] memfd_create("syzkaller", 0) = 5 [pid 5916] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5918] <... setpgid resumed>) = 0 [pid 5916] <... mmap resumed>) = 0x7f0356e00000 [pid 5918] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5917] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5916] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5918] <... openat resumed>) = 3 [pid 5918] write(3, "1000", 4) = 4 [pid 5918] close(3) = 0 [pid 5918] symlink("/dev/binderfs", "./binderfs" [pid 5917] <... write resumed>) = 524288 [pid 5076] <... ioctl resumed>) = 0 [pid 5918] <... symlink resumed>) = 0 [pid 5918] memfd_create("syzkaller", 0) = 3 [pid 5918] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5918] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... umount2 resumed>) = 0 [pid 5917] munmap(0x7f0356e00000, 138412032 [pid 5076] close(3 [pid 5917] <... munmap resumed>) = 0 [pid 5917] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5916] <... write resumed>) = 524288 [pid 5076] <... close resumed>) = 0 [pid 5074] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... ioctl resumed>) = 0 [pid 5917] <... openat resumed>) = 4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5916] munmap(0x7f0356e00000, 138412032) = 0 [pid 5916] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] newfstatat(AT_FDCWD, "./135/bus", [pid 5916] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5916] close(5 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5917] ioctl(4, LOOP_SET_FD, 3 [pid 5074] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 5919 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] close(3 [pid 5916] <... close resumed>) = 0 [pid 5073] <... close resumed>) = 0 ./strace-static-x86_64: Process 5919 attached [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5919] set_robust_list(0x55556e32a660, 24 [pid 5917] <... ioctl resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./135/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5919] <... set_robust_list resumed>) = 0 [pid 5917] close(3 [pid 5919] chdir("./139" [pid 5917] <... close resumed>) = 0 [pid 5074] <... openat resumed>) = 4 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 5920 [pid 5917] close(4 [pid 5074] newfstatat(4, "", [pid 5917] <... close resumed>) = 0 [pid 5919] <... chdir resumed>) = 0 [pid 5916] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5919] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5917] mkdir("./bus", 0777 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5919] <... prctl resumed>) = 0 [pid 5919] setpgid(0, 0 [pid 5917] <... mkdir resumed>) = 0 [pid 5074] getdents64(4, [pid 5919] <... setpgid resumed>) = 0 [pid 5916] <... open resumed>) = 5 [pid 5919] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5918] <... write resumed>) = 524288 [pid 5917] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5916] ftruncate(5, 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 5920 attached [pid 5074] getdents64(4, [pid 5920] set_robust_list(0x55556e32a660, 24 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] close(4 [pid 5916] <... ftruncate resumed>) = 0 [pid 5916] exit_group(0 [pid 5074] <... close resumed>) = 0 [pid 5920] <... set_robust_list resumed>) = 0 [pid 5074] rmdir("./135/bus" [pid 5920] chdir("./136" [pid 5074] <... rmdir resumed>) = 0 [pid 5920] <... chdir resumed>) = 0 [pid 5074] umount2("./135/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5920] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5920] <... prctl resumed>) = 0 [pid 5916] <... exit_group resumed>) = ? [pid 5074] newfstatat(AT_FDCWD, "./135/binderfs", [pid 5920] setpgid(0, 0) = 0 [pid 5920] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5918] munmap(0x7f0356e00000, 138412032 [pid 5916] +++ exited with 0 +++ [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5920] <... openat resumed>) = 3 [pid 5920] write(3, "1000", 4 [pid 5919] <... openat resumed>) = 3 [pid 5918] <... munmap resumed>) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5916, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5074] unlink("./135/binderfs" [pid 5920] <... write resumed>) = 4 [pid 5920] close(3) = 0 [pid 5920] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5919] write(3, "1000", 4 [pid 5078] umount2("./138", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... unlink resumed>) = 0 [pid 5920] memfd_create("syzkaller", 0 [pid 5919] <... write resumed>) = 4 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] getdents64(3, [pid 5918] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5920] <... memfd_create resumed>) = 3 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3 [pid 5920] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5919] close(3 [pid 5918] <... openat resumed>) = 4 [pid 5917] <... mount resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./138", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... close resumed>) = 0 [pid 5919] <... close resumed>) = 0 [ 159.689083][ T5917] loop2: detected capacity change from 0 to 1024 [ 159.711138][ T28] audit: type=1800 audit(1710613041.814:825): pid=5916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop5" ino=20 res=0 errno=0 [pid 5078] <... openat resumed>) = 3 [pid 5919] symlink("/dev/binderfs", "./binderfs" [pid 5918] ioctl(4, LOOP_SET_FD, 3 [pid 5917] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] newfstatat(3, "", [pid 5074] rmdir("./135" [pid 5920] <... mmap resumed>) = 0x7f0356e00000 [pid 5919] <... symlink resumed>) = 0 [pid 5917] <... openat resumed>) = 3 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5919] memfd_create("syzkaller", 0 [pid 5078] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] umount2("./138/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5919] <... memfd_create resumed>) = 3 [pid 5919] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5920] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5919] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5918] <... ioctl resumed>) = 0 [pid 5917] chdir("./bus" [pid 5074] <... rmdir resumed>) = 0 [pid 5917] <... chdir resumed>) = 0 [pid 5917] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] mkdir("./136", 0777 [pid 5917] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5917] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5074] <... mkdir resumed>) = 0 [pid 5918] close(3 [pid 5917] <... symlink resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5917] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] <... umount2 resumed>) = 0 [pid 5918] <... close resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5918] close(4 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5918] <... close resumed>) = 0 [pid 5918] mkdir("./bus", 0777 [pid 5078] umount2("./138/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5919] <... write resumed>) = 524288 [pid 5917] <... creat resumed>) = 4 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] newfstatat(AT_FDCWD, "./138/bus", [pid 5917] rename("./bus", "./file2" [pid 5919] munmap(0x7f0356e00000, 138412032 [pid 5918] <... mkdir resumed>) = 0 [pid 5917] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5917] memfd_create("syzkaller", 0 [pid 5078] umount2("./138/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5917] <... memfd_create resumed>) = 5 [pid 5078] openat(AT_FDCWD, "./138/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5078] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(4, [pid 5919] <... munmap resumed>) = 0 [pid 5918] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5917] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5917] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5078] close(4 [pid 5919] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5078] <... close resumed>) = 0 [ 159.771294][ T5918] loop4: detected capacity change from 0 to 1024 [pid 5078] rmdir("./138/bus") = 0 [pid 5919] ioctl(4, LOOP_SET_FD, 3 [pid 5920] <... write resumed>) = 524288 [pid 5078] umount2("./138/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5920] munmap(0x7f0356e00000, 138412032 [pid 5919] <... ioctl resumed>) = 0 [pid 5918] <... mount resumed>) = 0 [pid 5917] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] newfstatat(AT_FDCWD, "./138/binderfs", [pid 5918] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5918] <... openat resumed>) = 3 [pid 5918] chdir("./bus" [pid 5078] unlink("./138/binderfs" [pid 5920] <... munmap resumed>) = 0 [pid 5918] <... chdir resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5918] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] getdents64(3, [pid 5920] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5919] close(3 [pid 5918] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5917] <... write resumed>) = 524288 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5920] <... openat resumed>) = 4 [pid 5919] <... close resumed>) = 0 [pid 5918] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] close(3 [pid 5917] munmap(0x7f0356e00000, 138412032 [pid 5918] <... symlink resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5919] close(4 [pid 5917] <... munmap resumed>) = 0 [pid 5078] rmdir("./138" [pid 5919] <... close resumed>) = 0 [pid 5918] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5919] mkdir("./bus", 0777 [pid 5078] <... rmdir resumed>) = 0 [pid 5920] ioctl(4, LOOP_SET_FD, 3 [pid 5919] <... mkdir resumed>) = 0 [ 159.817661][ T5919] loop3: detected capacity change from 0 to 1024 [pid 5917] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] mkdir("./139", 0777 [pid 5920] <... ioctl resumed>) = 0 [pid 5919] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5917] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... mkdir resumed>) = 0 [pid 5074] close(3) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5917] close(5 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 5921 [pid 5918] <... creat resumed>) = 4 [pid 5918] rename("./bus", "./file2") = -1 EEXIST (File exists) [pid 5078] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5921 attached [pid 5918] memfd_create("syzkaller", 0 [pid 5921] set_robust_list(0x55556e32a660, 24 [pid 5918] <... memfd_create resumed>) = 5 [pid 5918] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5918] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5917] <... close resumed>) = 0 [pid 5921] <... set_robust_list resumed>) = 0 [pid 5920] close(3 [pid 5918] <... write resumed>) = 524288 [pid 5917] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5921] chdir("./136") = 0 [pid 5920] <... close resumed>) = 0 [pid 5920] close(4 [pid 5921] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5920] <... close resumed>) = 0 [pid 5921] <... prctl resumed>) = 0 [pid 5921] setpgid(0, 0) = 0 [pid 5921] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5920] mkdir("./bus", 0777 [pid 5921] <... openat resumed>) = 3 [pid 5917] <... open resumed>) = 5 [ 159.858902][ T5920] loop0: detected capacity change from 0 to 1024 [pid 5921] write(3, "1000", 4 [pid 5920] <... mkdir resumed>) = 0 [pid 5917] ftruncate(5, 0 [pid 5921] <... write resumed>) = 4 [pid 5921] close(3) = 0 [pid 5921] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5921] memfd_create("syzkaller", 0) = 3 [pid 5921] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5918] munmap(0x7f0356e00000, 138412032 [pid 5921] <... mmap resumed>) = 0x7f0356e00000 [pid 5918] <... munmap resumed>) = 0 [pid 5921] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5918] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5918] close(5) = 0 [pid 5921] <... write resumed>) = 524288 [pid 5920] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5917] <... ftruncate resumed>) = 0 [pid 5918] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5917] exit_group(0 [pid 5921] munmap(0x7f0356e00000, 138412032 [pid 5917] <... exit_group resumed>) = ? [pid 5919] <... mount resumed>) = 0 [pid 5918] <... open resumed>) = 5 [pid 5921] <... munmap resumed>) = 0 [ 159.901535][ T28] audit: type=1800 audit(1710613042.004:826): pid=5917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop2" ino=20 res=0 errno=0 [pid 5919] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5921] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5920] <... mount resumed>) = 0 [pid 5919] <... openat resumed>) = 3 [pid 5917] +++ exited with 0 +++ [pid 5078] <... ioctl resumed>) = 0 [pid 5921] <... openat resumed>) = 4 [pid 5918] ftruncate(5, 0 [pid 5921] ioctl(4, LOOP_SET_FD, 3 [pid 5918] <... ftruncate resumed>) = 0 [pid 5920] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5919] chdir("./bus" [pid 5918] exit_group(0 [pid 5920] <... openat resumed>) = 3 [pid 5918] <... exit_group resumed>) = ? [pid 5919] <... chdir resumed>) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5917, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5919] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5918] +++ exited with 0 +++ [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 5919] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... restart_syscall resumed>) = 0 [pid 5919] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5920] chdir("./bus") = 0 [pid 5078] close(3 [pid 5075] umount2("./136", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5920] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5920] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... close resumed>) = 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5918, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] openat(AT_FDCWD, "./136", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 5075] <... openat resumed>) = 3 [pid 5075] newfstatat(3, "", [pid 5920] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5919] <... symlink resumed>) = 0 [pid 5077] <... restart_syscall resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, [pid 5919] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5921] <... ioctl resumed>) = 0 [pid 5077] umount2("./138", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 5922 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5922 attached [pid 5077] openat(AT_FDCWD, "./138", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5922] set_robust_list(0x55556e32a660, 24 [pid 5077] newfstatat(3, "", [pid 5921] close(3 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5921] <... close resumed>) = 0 [pid 5077] getdents64(3, [pid 5921] close(4 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] umount2("./136/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5921] <... close resumed>) = 0 [pid 5077] umount2("./138/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5921] mkdir("./bus", 0777) = 0 [ 159.938315][ T28] audit: type=1800 audit(1710613042.034:827): pid=5918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 159.963093][ T5921] loop1: detected capacity change from 0 to 1024 [pid 5922] <... set_robust_list resumed>) = 0 [pid 5921] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5920] <... symlink resumed>) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5922] chdir("./139" [pid 5920] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5919] <... creat resumed>) = 4 [pid 5922] <... chdir resumed>) = 0 [pid 5922] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5921] <... mount resumed>) = 0 [pid 5077] umount2("./138/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5922] <... prctl resumed>) = 0 [pid 5922] setpgid(0, 0 [pid 5921] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5077] newfstatat(AT_FDCWD, "./138/bus", [pid 5919] rename("./bus", "./file2" [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5921] <... openat resumed>) = 3 [pid 5922] <... setpgid resumed>) = 0 [pid 5921] chdir("./bus" [pid 5077] umount2("./138/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5922] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5921] <... chdir resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5921] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5077] openat(AT_FDCWD, "./138/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5921] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... openat resumed>) = 4 [pid 5077] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5921] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5077] close(4 [pid 5921] <... symlink resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5077] rmdir("./138/bus") = 0 [pid 5077] umount2("./138/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = 0 [pid 5920] <... creat resumed>) = 4 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5922] <... openat resumed>) = 3 [pid 5077] newfstatat(AT_FDCWD, "./138/binderfs", [pid 5920] rename("./bus", "./file2" [pid 5921] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5922] write(3, "1000", 4 [pid 5921] <... creat resumed>) = 4 [pid 5919] <... rename resumed>) = -1 EEXIST (File exists) [pid 5077] unlink("./138/binderfs" [pid 5075] umount2("./136/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5922] <... write resumed>) = 4 [pid 5920] <... rename resumed>) = -1 EEXIST (File exists) [pid 5919] memfd_create("syzkaller", 0 [pid 5077] <... unlink resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5922] close(3 [pid 5921] rename("./bus", "./file2" [pid 5920] memfd_create("syzkaller", 0 [pid 5919] <... memfd_create resumed>) = 5 [pid 5077] getdents64(3, [pid 5075] newfstatat(AT_FDCWD, "./136/bus", [pid 5922] <... close resumed>) = 0 [pid 5921] <... rename resumed>) = -1 EEXIST (File exists) [pid 5919] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5922] symlink("/dev/binderfs", "./binderfs" [pid 5921] memfd_create("syzkaller", 0 [pid 5920] <... memfd_create resumed>) = 5 [pid 5919] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] close(3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5922] <... symlink resumed>) = 0 [pid 5921] <... memfd_create resumed>) = 5 [pid 5077] <... close resumed>) = 0 [pid 5921] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] rmdir("./138" [pid 5921] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] <... rmdir resumed>) = 0 [pid 5920] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5922] memfd_create("syzkaller", 0 [pid 5921] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] umount2("./136/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] mkdir("./139", 0777 [pid 5922] <... memfd_create resumed>) = 3 [pid 5920] <... mmap resumed>) = 0x7f0356e00000 [pid 5919] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... mkdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5922] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] openat(AT_FDCWD, "./136/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5922] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] newfstatat(4, "", [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5075] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] close(4) = 0 [pid 5075] rmdir("./136/bus") = 0 [pid 5921] <... write resumed>) = 524288 [pid 5922] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5920] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5919] <... write resumed>) = 524288 [pid 5075] umount2("./136/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./136/binderfs", [pid 5921] munmap(0x7f0356e00000, 138412032 [pid 5919] munmap(0x7f0356e00000, 138412032 [pid 5077] <... ioctl resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5921] <... munmap resumed>) = 0 [pid 5075] unlink("./136/binderfs") = 0 [pid 5919] <... munmap resumed>) = 0 [pid 5075] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 5919] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] rmdir("./136" [pid 5921] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5920] <... write resumed>) = 524288 [pid 5919] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... rmdir resumed>) = 0 [pid 5922] <... write resumed>) = 524288 [pid 5921] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5919] close(5 [pid 5921] close(5) = 0 [pid 5922] munmap(0x7f0356e00000, 138412032 [pid 5075] mkdir("./137", 0777 [pid 5920] munmap(0x7f0356e00000, 138412032 [pid 5077] close(3 [pid 5920] <... munmap resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5922] <... munmap resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5922] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5919] <... close resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 5923 attached [pid 5922] <... openat resumed>) = 4 [pid 5920] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] <... openat resumed>) = 3 [pid 5920] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 5923 [pid 5922] ioctl(4, LOOP_SET_FD, 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5923] set_robust_list(0x55556e32a660, 24 [pid 5921] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5920] close(5 [pid 5919] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5923] <... set_robust_list resumed>) = 0 [pid 5920] <... close resumed>) = 0 [pid 5923] chdir("./139") = 0 [pid 5921] <... open resumed>) = 5 [pid 5923] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5923] setpgid(0, 0) = 0 [pid 5921] ftruncate(5, 0 [pid 5923] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5921] <... ftruncate resumed>) = 0 [pid 5923] <... openat resumed>) = 3 [pid 5922] <... ioctl resumed>) = 0 [pid 5921] exit_group(0 [pid 5923] write(3, "1000", 4 [pid 5921] <... exit_group resumed>) = ? [pid 5923] <... write resumed>) = 4 [pid 5922] close(3 [pid 5921] +++ exited with 0 +++ [pid 5920] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5923] close(3 [pid 5922] <... close resumed>) = 0 [pid 5922] close(4 [pid 5923] <... close resumed>) = 0 [pid 5922] <... close resumed>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5921, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5923] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5074] umount2("./136", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./136", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] newfstatat(3, "", [pid 5922] mkdir("./bus", 0777 [pid 5919] <... open resumed>) = 5 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5919] ftruncate(5, 0 [pid 5923] memfd_create("syzkaller", 0 [pid 5919] <... ftruncate resumed>) = 0 [pid 5074] getdents64(3, [pid 5923] <... memfd_create resumed>) = 3 [pid 5922] <... mkdir resumed>) = 0 [pid 5919] exit_group(0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5919] <... exit_group resumed>) = ? [ 160.109121][ T5922] loop5: detected capacity change from 0 to 1024 [ 160.120866][ T28] audit: type=1800 audit(1710613042.224:828): pid=5921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop1" ino=20 res=0 errno=0 [pid 5922] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5923] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5920] <... open resumed>) = 5 [pid 5919] +++ exited with 0 +++ [pid 5074] umount2("./136/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5923] <... mmap resumed>) = 0x7f0356e00000 [pid 5920] ftruncate(5, 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5923] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5920] <... ftruncate resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5919, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5923] <... write resumed>) = 524288 [pid 5920] exit_group(0 [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5074] umount2("./136/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5920] <... exit_group resumed>) = ? [pid 5076] <... restart_syscall resumed>) = 0 [pid 5922] <... mount resumed>) = 0 [pid 5920] +++ exited with 0 +++ [pid 5075] <... ioctl resumed>) = 0 [pid 5922] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5076] umount2("./139", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5922] chdir("./bus" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5920, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5922] <... chdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./139", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 5922] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5076] <... openat resumed>) = 3 [pid 5922] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] newfstatat(3, "", [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... restart_syscall resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, [pid 5074] newfstatat(AT_FDCWD, "./136/bus", [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5922] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5076] umount2("./139/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./136/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./136", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5923] munmap(0x7f0356e00000, 138412032 [pid 5076] <... umount2 resumed>) = 0 [pid 5075] close(3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5923] <... munmap resumed>) = 0 [pid 5076] umount2("./139/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... close resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./136/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5922] <... symlink resumed>) = 0 [ 160.155250][ T28] audit: type=1800 audit(1710613042.254:829): pid=5919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop3" ino=20 res=0 errno=0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... openat resumed>) = 4 [pid 5073] openat(AT_FDCWD, "./136", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5923] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5922] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5076] newfstatat(AT_FDCWD, "./139/bus", [pid 5074] newfstatat(4, "", [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5923] <... openat resumed>) = 4 [pid 5076] umount2("./139/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5923] ioctl(4, LOOP_SET_FD, 3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 5924 [pid 5074] getdents64(4, [pid 5073] newfstatat(3, "", ./strace-static-x86_64: Process 5924 attached [pid 5076] openat(AT_FDCWD, "./139/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] newfstatat(4, "", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5924] set_robust_list(0x55556e32a660, 24) = 0 [pid 5073] getdents64(3, [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5924] chdir("./137") = 0 [pid 5076] getdents64(4, [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5924] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] umount2("./136/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5924] setpgid(0, 0) = 0 [pid 5076] getdents64(4, [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5924] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] close(4 [pid 5924] <... openat resumed>) = 3 [pid 5922] <... creat resumed>) = 4 [pid 5076] <... close resumed>) = 0 [pid 5074] getdents64(4, [pid 5073] <... umount2 resumed>) = 0 [pid 5076] rmdir("./139/bus" [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] close(4) = 0 [pid 5074] rmdir("./136/bus") = 0 [pid 5924] write(3, "1000", 4) = 4 [pid 5924] close(3) = 0 [pid 5922] rename("./bus", "./file2" [pid 5076] umount2("./139/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5924] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./139/binderfs", [pid 5924] <... symlink resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5922] <... rename resumed>) = -1 EEXIST (File exists) [pid 5076] unlink("./139/binderfs" [pid 5074] umount2("./136/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5924] memfd_create("syzkaller", 0 [pid 5922] memfd_create("syzkaller", 0 [pid 5076] <... unlink resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./136/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5922] <... memfd_create resumed>) = 5 [pid 5076] getdents64(3, [pid 5074] newfstatat(AT_FDCWD, "./136/binderfs", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5923] <... ioctl resumed>) = 0 [pid 5922] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] newfstatat(AT_FDCWD, "./136/bus", [pid 5924] <... memfd_create resumed>) = 3 [pid 5922] <... mmap resumed>) = 0x7f0356e00000 [pid 5924] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5076] close(3 [pid 5074] unlink("./136/binderfs" [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5923] close(3 [pid 5076] <... close resumed>) = 0 [pid 5923] <... close resumed>) = 0 [pid 5076] rmdir("./139" [pid 5073] umount2("./136/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5923] close(4 [pid 5074] <... unlink resumed>) = 0 [pid 5924] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5923] <... close resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] getdents64(3, [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5923] mkdir("./bus", 0777 [pid 5922] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] mkdir("./140", 0777 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] openat(AT_FDCWD, "./136/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5923] <... mkdir resumed>) = 0 [pid 5074] close(3 [pid 5073] <... openat resumed>) = 4 [pid 5923] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5076] <... mkdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5073] newfstatat(4, "", [pid 5074] rmdir("./136" [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] mkdir("./137", 0777 [ 160.223072][ T5923] loop4: detected capacity change from 0 to 1024 [pid 5073] close(4 [pid 5076] <... openat resumed>) = 3 [pid 5074] <... mkdir resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] rmdir("./136/bus" [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5073] <... rmdir resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] umount2("./136/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5924] <... write resumed>) = 524288 [pid 5924] munmap(0x7f0356e00000, 138412032 [pid 5923] <... mount resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./136/binderfs", [pid 5923] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5924] <... munmap resumed>) = 0 [pid 5922] <... write resumed>) = 524288 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5924] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5923] <... openat resumed>) = 3 [pid 5922] munmap(0x7f0356e00000, 138412032 [pid 5073] unlink("./136/binderfs" [pid 5924] <... openat resumed>) = 4 [pid 5923] chdir("./bus" [pid 5922] <... munmap resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5923] <... chdir resumed>) = 0 [pid 5924] ioctl(4, LOOP_SET_FD, 3 [pid 5923] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5922] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] getdents64(3, [pid 5924] <... ioctl resumed>) = 0 [pid 5923] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5922] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5924] close(3 [pid 5923] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5922] close(5 [pid 5073] close(3 [pid 5924] <... close resumed>) = 0 [pid 5924] close(4 [pid 5923] <... symlink resumed>) = 0 [pid 5922] <... close resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5924] <... close resumed>) = 0 [pid 5923] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5922] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5073] rmdir("./136" [pid 5924] mkdir("./bus", 0777 [pid 5073] <... rmdir resumed>) = 0 [pid 5924] <... mkdir resumed>) = 0 [pid 5073] mkdir("./137", 0777 [pid 5924] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5073] <... mkdir resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD [ 160.308933][ T5924] loop2: detected capacity change from 0 to 1024 [pid 5076] close(3) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5924] <... mount resumed>) = 0 [pid 5922] <... open resumed>) = 5 [pid 5923] <... creat resumed>) = 4 [pid 5074] close(3 [pid 5924] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5923] rename("./bus", "./file2"./strace-static-x86_64: Process 5925 attached [pid 5074] <... close resumed>) = 0 [pid 5925] set_robust_list(0x55556e32a660, 24 [pid 5924] <... openat resumed>) = 3 [pid 5923] <... rename resumed>) = -1 EEXIST (File exists) [pid 5922] ftruncate(5, 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5925] <... set_robust_list resumed>) = 0 [pid 5924] chdir("./bus" [pid 5923] memfd_create("syzkaller", 0 [pid 5922] <... ftruncate resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 5925 [pid 5925] chdir("./140" [pid 5924] <... chdir resumed>) = 0 [pid 5923] <... memfd_create resumed>) = 5 [pid 5922] exit_group(0./strace-static-x86_64: Process 5926 attached [pid 5925] <... chdir resumed>) = 0 [pid 5924] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5923] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5922] <... exit_group resumed>) = ? [pid 5926] set_robust_list(0x55556e32a660, 24) = 0 [pid 5926] chdir("./137") = 0 [pid 5926] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5924] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5923] <... mmap resumed>) = 0x7f0356e00000 [pid 5922] +++ exited with 0 +++ [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 5926 [pid 5926] setpgid(0, 0 [pid 5925] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5924] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5926] <... setpgid resumed>) = 0 [pid 5925] <... prctl resumed>) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5922, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5926] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5078] umount2("./139", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5926] <... openat resumed>) = 3 [pid 5925] setpgid(0, 0 [pid 5923] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5926] write(3, "1000", 4 [pid 5925] <... setpgid resumed>) = 0 [pid 5924] <... symlink resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./139", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5926] <... write resumed>) = 4 [pid 5925] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5924] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] <... openat resumed>) = 3 [pid 5926] close(3) = 0 [pid 5925] <... openat resumed>) = 3 [pid 5078] newfstatat(3, "", [pid 5926] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5924] <... creat resumed>) = 4 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5925] write(3, "1000", 4 [pid 5926] memfd_create("syzkaller", 0 [pid 5925] <... write resumed>) = 4 [pid 5078] getdents64(3, [pid 5925] close(3 [pid 5924] rename("./bus", "./file2" [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5926] <... memfd_create resumed>) = 3 [pid 5925] <... close resumed>) = 0 [pid 5078] umount2("./139/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5925] symlink("/dev/binderfs", "./binderfs" [pid 5926] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5925] <... symlink resumed>) = 0 [pid 5926] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5925] memfd_create("syzkaller", 0 [pid 5924] <... rename resumed>) = -1 EEXIST (File exists) [pid 5073] <... ioctl resumed>) = 0 [pid 5925] <... memfd_create resumed>) = 3 [pid 5924] memfd_create("syzkaller", 0 [pid 5925] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5924] <... memfd_create resumed>) = 5 [pid 5923] <... write resumed>) = 524288 [pid 5078] <... umount2 resumed>) = 0 [pid 5925] <... mmap resumed>) = 0x7f0356e00000 [pid 5924] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5925] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5924] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] umount2("./139/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] close(3 [pid 5078] newfstatat(AT_FDCWD, "./139/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... close resumed>) = 0 [pid 5078] umount2("./139/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5924] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5926] <... write resumed>) = 524288 [pid 5078] openat(AT_FDCWD, "./139/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5927 attached [pid 5927] set_robust_list(0x55556e32a660, 24 [pid 5925] <... write resumed>) = 524288 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 5927 [pid 5927] <... set_robust_list resumed>) = 0 [pid 5078] <... openat resumed>) = 4 [pid 5927] chdir("./137" [pid 5078] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5927] <... chdir resumed>) = 0 [pid 5078] getdents64(4, [pid 5927] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5923] munmap(0x7f0356e00000, 138412032 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5927] <... prctl resumed>) = 0 [pid 5078] close(4 [pid 5927] setpgid(0, 0 [pid 5078] <... close resumed>) = 0 [pid 5927] <... setpgid resumed>) = 0 [pid 5078] rmdir("./139/bus") = 0 [pid 5927] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5078] umount2("./139/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5927] <... openat resumed>) = 3 [pid 5924] <... write resumed>) = 524288 [pid 5923] <... munmap resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5927] write(3, "1000", 4 [pid 5078] newfstatat(AT_FDCWD, "./139/binderfs", [pid 5927] <... write resumed>) = 4 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5927] close(3 [pid 5078] unlink("./139/binderfs" [pid 5927] <... close resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5927] symlink("/dev/binderfs", "./binderfs" [pid 5923] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] getdents64(3, [pid 5927] <... symlink resumed>) = 0 [pid 5926] munmap(0x7f0356e00000, 138412032 [pid 5925] munmap(0x7f0356e00000, 138412032 [pid 5923] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5927] memfd_create("syzkaller", 0 [pid 5926] <... munmap resumed>) = 0 [pid 5925] <... munmap resumed>) = 0 [pid 5923] close(5 [pid 5078] close(3 [pid 5927] <... memfd_create resumed>) = 3 [pid 5078] <... close resumed>) = 0 [pid 5927] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] rmdir("./139" [pid 5927] <... mmap resumed>) = 0x7f0356e00000 [pid 5926] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5925] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5078] <... rmdir resumed>) = 0 [pid 5927] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5926] <... openat resumed>) = 4 [pid 5925] <... openat resumed>) = 4 [pid 5078] mkdir("./140", 0777 [pid 5926] ioctl(4, LOOP_SET_FD, 3 [pid 5925] ioctl(4, LOOP_SET_FD, 3 [pid 5078] <... mkdir resumed>) = 0 [pid 5924] munmap(0x7f0356e00000, 138412032 [pid 5923] <... close resumed>) = 0 [pid 5925] <... ioctl resumed>) = 0 [pid 5924] <... munmap resumed>) = 0 [pid 5923] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5924] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5924] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5923] <... open resumed>) = 5 [pid 5078] <... openat resumed>) = 3 [pid 5924] close(5 [pid 5923] ftruncate(5, 0 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5924] <... close resumed>) = 0 [pid 5927] <... write resumed>) = 524288 [pid 5923] <... ftruncate resumed>) = 0 [pid 5923] exit_group(0) = ? [pid 5926] <... ioctl resumed>) = 0 [pid 5927] munmap(0x7f0356e00000, 138412032 [pid 5926] close(3 [pid 5925] close(3 [pid 5927] <... munmap resumed>) = 0 [pid 5926] <... close resumed>) = 0 [pid 5925] <... close resumed>) = 0 [pid 5924] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5923] +++ exited with 0 +++ [pid 5926] close(4 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5923, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5926] <... close resumed>) = 0 [pid 5925] close(4 [pid 5077] umount2("./139", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5927] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5926] mkdir("./bus", 0777 [pid 5925] <... close resumed>) = 0 [pid 5924] <... open resumed>) = 5 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5927] <... openat resumed>) = 4 [pid 5926] <... mkdir resumed>) = 0 [pid 5925] mkdir("./bus", 0777 [pid 5924] ftruncate(5, 0 [pid 5077] openat(AT_FDCWD, "./139", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5927] ioctl(4, LOOP_SET_FD, 3 [pid 5925] <... mkdir resumed>) = 0 [pid 5924] <... ftruncate resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [ 160.487007][ T5925] loop3: detected capacity change from 0 to 1024 [ 160.493561][ T5926] loop1: detected capacity change from 0 to 1024 [pid 5926] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5924] exit_group(0 [pid 5077] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5924] <... exit_group resumed>) = ? [pid 5077] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] umount2("./139/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5925] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5924] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5924, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5078] <... ioctl resumed>) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5075] umount2("./137", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] close(3 [pid 5927] <... ioctl resumed>) = 0 [pid 5926] <... mount resumed>) = 0 [pid 5925] <... mount resumed>) = 0 [pid 5077] umount2("./139/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5925] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5075] openat(AT_FDCWD, "./137", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5926] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5925] <... openat resumed>) = 3 [pid 5927] close(3 [pid 5926] <... openat resumed>) = 3 [pid 5078] <... close resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... openat resumed>) = 3 [pid 5927] <... close resumed>) = 0 [pid 5926] chdir("./bus" [pid 5925] chdir("./bus" [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] newfstatat(AT_FDCWD, "./139/bus", [pid 5927] close(4 [pid 5926] <... chdir resumed>) = 0 [pid 5925] <... chdir resumed>) = 0 [pid 5927] <... close resumed>) = 0 [pid 5926] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5925] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] newfstatat(3, "", [pid 5927] mkdir("./bus", 0777 [pid 5926] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5925] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 5928 attached [pid 5927] <... mkdir resumed>) = 0 [pid 5926] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5925] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 5928 [pid 5077] umount2("./139/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./139/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] getdents64(3, [pid 5928] set_robust_list(0x55556e32a660, 24) = 0 [pid 5927] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5926] <... symlink resumed>) = 0 [pid 5925] <... symlink resumed>) = 0 [pid 5077] <... openat resumed>) = 4 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5928] chdir("./140" [ 160.531944][ T5927] loop0: detected capacity change from 0 to 1024 [pid 5926] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5925] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5077] newfstatat(4, "", [pid 5075] umount2("./137/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5928] <... chdir resumed>) = 0 [pid 5928] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5928] <... prctl resumed>) = 0 [pid 5077] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5928] setpgid(0, 0 [pid 5077] getdents64(4, [pid 5927] <... mount resumed>) = 0 [pid 5927] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5927] chdir("./bus") = 0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5928] <... setpgid resumed>) = 0 [pid 5077] close(4 [pid 5928] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5927] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5926] <... creat resumed>) = 4 [pid 5077] <... close resumed>) = 0 [pid 5926] rename("./bus", "./file2" [pid 5927] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5926] <... rename resumed>) = -1 EEXIST (File exists) [pid 5925] <... creat resumed>) = 4 [pid 5927] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5926] memfd_create("syzkaller", 0 [pid 5925] rename("./bus", "./file2" [pid 5926] <... memfd_create resumed>) = 5 [pid 5925] <... rename resumed>) = -1 EEXIST (File exists) [pid 5926] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5925] memfd_create("syzkaller", 0 [pid 5926] <... mmap resumed>) = 0x7f0356e00000 [pid 5925] <... memfd_create resumed>) = 5 [pid 5925] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] rmdir("./139/bus" [pid 5927] <... symlink resumed>) = 0 [pid 5925] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] <... rmdir resumed>) = 0 [pid 5928] <... openat resumed>) = 3 [pid 5927] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5925] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] umount2("./139/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./139/binderfs", [pid 5928] write(3, "1000", 4 [pid 5927] <... creat resumed>) = 4 [pid 5926] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5927] rename("./bus", "./file2") = -1 EEXIST (File exists) [pid 5928] <... write resumed>) = 4 [pid 5927] memfd_create("syzkaller", 0 [pid 5077] unlink("./139/binderfs" [pid 5075] umount2("./137/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5928] close(3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5928] <... close resumed>) = 0 [pid 5928] symlink("/dev/binderfs", "./binderfs" [pid 5927] <... memfd_create resumed>) = 5 [pid 5077] <... unlink resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./137/bus", [pid 5928] <... symlink resumed>) = 0 [pid 5927] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5928] memfd_create("syzkaller", 0 [pid 5927] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] getdents64(3, [pid 5075] umount2("./137/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5928] <... memfd_create resumed>) = 3 [pid 5927] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./137/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5077] close(3 [pid 5075] newfstatat(4, "", [pid 5928] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, [pid 5928] <... mmap resumed>) = 0x7f0356e00000 [pid 5927] <... write resumed>) = 524288 [pid 5926] <... write resumed>) = 524288 [pid 5925] <... write resumed>) = 524288 [pid 5077] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] rmdir("./139" [pid 5925] munmap(0x7f0356e00000, 138412032 [pid 5075] close(4 [pid 5926] munmap(0x7f0356e00000, 138412032 [pid 5925] <... munmap resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5926] <... munmap resumed>) = 0 [pid 5925] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] rmdir("./137/bus" [pid 5926] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5925] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... rmdir resumed>) = 0 [pid 5926] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5925] close(5 [pid 5077] mkdir("./140", 0777 [pid 5928] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5926] close(5 [pid 5925] <... close resumed>) = 0 [pid 5926] <... close resumed>) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 5075] umount2("./137/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5927] munmap(0x7f0356e00000, 138412032 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5927] <... munmap resumed>) = 0 [pid 5925] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5075] newfstatat(AT_FDCWD, "./137/binderfs", [pid 5927] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5925] <... open resumed>) = 5 [pid 5077] <... openat resumed>) = 3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5928] <... write resumed>) = 524288 [pid 5927] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5926] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5925] ftruncate(5, 0 [pid 5075] unlink("./137/binderfs" [pid 5927] close(5) = 0 [pid 5925] <... ftruncate resumed>) = 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5075] <... unlink resumed>) = 0 [pid 5926] <... open resumed>) = 5 [pid 5926] ftruncate(5, 0 [pid 5075] getdents64(3, [pid 5926] <... ftruncate resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5928] munmap(0x7f0356e00000, 138412032 [pid 5926] exit_group(0 [pid 5075] close(3 [pid 5925] exit_group(0 [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./137" [pid 5926] <... exit_group resumed>) = ? [pid 5928] <... munmap resumed>) = 0 [pid 5926] +++ exited with 0 +++ [pid 5075] <... rmdir resumed>) = 0 [pid 5928] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] mkdir("./138", 0777 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5926, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5925] <... exit_group resumed>) = ? [pid 5928] <... openat resumed>) = 4 [pid 5925] +++ exited with 0 +++ [pid 5074] umount2("./137", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5925, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./137", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] umount2("./140", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... openat resumed>) = 3 [pid 5927] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5928] ioctl(4, LOOP_SET_FD, 3 [pid 5076] openat(AT_FDCWD, "./140", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... mkdir resumed>) = 0 [pid 5074] newfstatat(3, "", [pid 5076] <... openat resumed>) = 3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] newfstatat(3, "", [pid 5074] getdents64(3, [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5927] <... open resumed>) = 5 [pid 5927] ftruncate(5, 0) = 0 [pid 5928] <... ioctl resumed>) = 0 [pid 5076] getdents64(3, [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] umount2("./137/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5928] close(3) = 0 [pid 5927] exit_group(0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] <... openat resumed>) = 3 [pid 5928] close(4) = 0 [pid 5927] <... exit_group resumed>) = ? [pid 5076] umount2("./140/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5928] mkdir("./bus", 0777 [pid 5927] +++ exited with 0 +++ [pid 5928] <... mkdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5927, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5928] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5074] umount2("./137/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./137", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./137/bus", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./137", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] umount2("./137/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] getdents64(3, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./140/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] openat(AT_FDCWD, "./137/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] <... ioctl resumed>) = 0 [pid 5077] close(3) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... openat resumed>) = 4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./140/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./140/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./140/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] newfstatat(4, "", [pid 5073] umount2("./137/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... openat resumed>) = 4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 5929 attached [pid 5074] getdents64(4, [pid 5929] set_robust_list(0x55556e32a660, 24 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 5929 [pid 5929] <... set_robust_list resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5929] chdir("./140" [pid 5076] newfstatat(4, "", [pid 5074] getdents64(4, [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5929] <... chdir resumed>) = 0 [pid 5076] getdents64(4, [ 160.729518][ T5928] loop5: detected capacity change from 0 to 1024 [pid 5074] close(4 [pid 5929] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5928] <... mount resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] <... ioctl resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5928] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5929] <... prctl resumed>) = 0 [pid 5928] <... openat resumed>) = 3 [pid 5075] close(3 [pid 5074] rmdir("./137/bus" [pid 5928] chdir("./bus" [pid 5075] <... close resumed>) = 0 [pid 5929] setpgid(0, 0) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5929] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5076] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] close(4./strace-static-x86_64: Process 5930 attached [pid 5929] write(3, "1000", 4 [pid 5928] <... chdir resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 5930 [pid 5074] umount2("./137/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5930] set_robust_list(0x55556e32a660, 24 [pid 5928] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5930] <... set_robust_list resumed>) = 0 [pid 5929] <... write resumed>) = 4 [pid 5928] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] rmdir("./140/bus" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = 0 [pid 5930] chdir("./138" [pid 5928] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5076] <... rmdir resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./137/binderfs", [pid 5073] umount2("./137/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./140/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./137/bus", [pid 5929] close(3 [pid 5076] newfstatat(AT_FDCWD, "./140/binderfs", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5930] <... chdir resumed>) = 0 [pid 5929] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./137/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5930] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5929] symlink("/dev/binderfs", "./binderfs" [pid 5076] unlink("./140/binderfs" [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5930] <... prctl resumed>) = 0 [pid 5929] <... symlink resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5074] unlink("./137/binderfs" [pid 5073] openat(AT_FDCWD, "./137/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5930] setpgid(0, 0 [pid 5929] memfd_create("syzkaller", 0 [pid 5928] <... symlink resumed>) = 0 [pid 5076] getdents64(3, [pid 5074] <... unlink resumed>) = 0 [pid 5073] <... openat resumed>) = 4 [pid 5930] <... setpgid resumed>) = 0 [pid 5929] <... memfd_create resumed>) = 3 [pid 5929] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] newfstatat(4, "", [pid 5929] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] close(3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... close resumed>) = 0 [pid 5073] getdents64(4, [pid 5076] rmdir("./140" [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5930] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5929] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... rmdir resumed>) = 0 [pid 5073] getdents64(4, [pid 5074] getdents64(3, [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] close(4 [pid 5930] <... openat resumed>) = 3 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5928] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5076] mkdir("./141", 0777 [pid 5073] <... close resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5074] close(3 [pid 5073] rmdir("./137/bus" [pid 5930] write(3, "1000", 4 [pid 5074] <... close resumed>) = 0 [pid 5930] <... write resumed>) = 4 [pid 5928] <... creat resumed>) = 4 [pid 5074] rmdir("./137" [pid 5073] <... rmdir resumed>) = 0 [pid 5930] close(3 [pid 5928] rename("./bus", "./file2" [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] umount2("./137/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5930] <... close resumed>) = 0 [pid 5928] <... rename resumed>) = -1 EEXIST (File exists) [pid 5076] <... openat resumed>) = 3 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5930] symlink("/dev/binderfs", "./binderfs" [pid 5928] memfd_create("syzkaller", 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5073] newfstatat(AT_FDCWD, "./137/binderfs", [pid 5930] <... symlink resumed>) = 0 [pid 5928] <... memfd_create resumed>) = 5 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5928] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] unlink("./137/binderfs" [pid 5930] memfd_create("syzkaller", 0 [pid 5928] <... mmap resumed>) = 0x7f0356e00000 [pid 5074] mkdir("./138", 0777 [pid 5073] <... unlink resumed>) = 0 [pid 5930] <... memfd_create resumed>) = 3 [pid 5074] <... mkdir resumed>) = 0 [pid 5073] getdents64(3, [pid 5930] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./137" [pid 5930] <... mmap resumed>) = 0x7f0356e00000 [pid 5929] <... write resumed>) = 524288 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] <... rmdir resumed>) = 0 [pid 5073] mkdir("./138", 0777 [pid 5930] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5929] munmap(0x7f0356e00000, 138412032 [pid 5928] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... openat resumed>) = 3 [pid 5930] <... write resumed>) = 524288 [pid 5929] <... munmap resumed>) = 0 [pid 5928] <... write resumed>) = 524288 [pid 5073] <... mkdir resumed>) = 0 [pid 5929] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5928] munmap(0x7f0356e00000, 138412032 [pid 5929] <... openat resumed>) = 4 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5930] munmap(0x7f0356e00000, 138412032 [pid 5929] ioctl(4, LOOP_SET_FD, 3 [pid 5928] <... munmap resumed>) = 0 [pid 5930] <... munmap resumed>) = 0 [pid 5929] <... ioctl resumed>) = 0 [pid 5928] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5930] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5929] close(3 [pid 5928] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5930] ioctl(4, LOOP_SET_FD, 3 [pid 5929] <... close resumed>) = 0 [pid 5928] close(5 [pid 5929] close(4 [pid 5928] <... close resumed>) = 0 [pid 5930] <... ioctl resumed>) = 0 [pid 5929] <... close resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5929] mkdir("./bus", 0777 [pid 5930] close(3 [pid 5929] <... mkdir resumed>) = 0 [pid 5076] close(3 [pid 5930] <... close resumed>) = 0 [pid 5930] close(4 [pid 5076] <... close resumed>) = 0 [pid 5929] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5930] <... close resumed>) = 0 [pid 5928] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5930] mkdir("./bus", 0777 [pid 5073] <... ioctl resumed>) = 0 [pid 5930] <... mkdir resumed>) = 0 [pid 5930] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5928] <... open resumed>) = 5 ./strace-static-x86_64: Process 5931 attached [pid 5928] ftruncate(5, 0 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 5931 [pid 5931] set_robust_list(0x55556e32a660, 24) = 0 [pid 5930] <... mount resumed>) = 0 [pid 5928] <... ftruncate resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5073] close(3 [pid 5929] <... mount resumed>) = 0 [pid 5931] chdir("./141" [pid 5073] <... close resumed>) = 0 [pid 5930] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5929] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5928] exit_group(0 [pid 5929] <... openat resumed>) = 3 [pid 5928] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 5932 attached [pid 5931] <... chdir resumed>) = 0 [pid 5930] <... openat resumed>) = 3 [pid 5929] chdir("./bus" [pid 5931] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5930] chdir("./bus" [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 5932 [ 160.896105][ T5929] loop4: detected capacity change from 0 to 1024 [ 160.904337][ T5930] loop2: detected capacity change from 0 to 1024 [pid 5931] <... prctl resumed>) = 0 [pid 5930] <... chdir resumed>) = 0 [pid 5932] set_robust_list(0x55556e32a660, 24 [pid 5931] setpgid(0, 0 [pid 5930] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5929] <... chdir resumed>) = 0 [pid 5928] +++ exited with 0 +++ [pid 5074] close(3 [pid 5932] <... set_robust_list resumed>) = 0 [pid 5931] <... setpgid resumed>) = 0 [pid 5930] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5929] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] <... close resumed>) = 0 [pid 5932] chdir("./138" [pid 5931] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5930] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5929] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5928, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5932] <... chdir resumed>) = 0 [pid 5931] <... openat resumed>) = 3 [pid 5929] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] restart_syscall(<... resuming interrupted clone ...> [pid 5932] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5931] write(3, "1000", 4 [pid 5078] <... restart_syscall resumed>) = 0 [pid 5932] <... prctl resumed>) = 0 [pid 5931] <... write resumed>) = 4 [pid 5929] <... symlink resumed>) = 0 [pid 5932] setpgid(0, 0 [pid 5931] close(3 [pid 5930] <... symlink resumed>) = 0 [pid 5932] <... setpgid resumed>) = 0 [pid 5931] <... close resumed>) = 0 [pid 5930] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5932] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5931] symlink("/dev/binderfs", "./binderfs" [pid 5929] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 5933 attached [pid 5932] <... openat resumed>) = 3 [pid 5931] <... symlink resumed>) = 0 [pid 5078] umount2("./140", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 5933 [pid 5933] set_robust_list(0x55556e32a660, 24 [pid 5929] <... creat resumed>) = 4 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5933] <... set_robust_list resumed>) = 0 [pid 5932] write(3, "1000", 4 [pid 5078] openat(AT_FDCWD, "./140", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5933] chdir("./138" [pid 5932] <... write resumed>) = 4 [pid 5931] memfd_create("syzkaller", 0 [pid 5930] <... creat resumed>) = 4 [pid 5078] <... openat resumed>) = 3 [pid 5929] rename("./bus", "./file2" [pid 5933] <... chdir resumed>) = 0 [pid 5932] close(3 [pid 5931] <... memfd_create resumed>) = 3 [pid 5930] rename("./bus", "./file2" [pid 5933] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5932] <... close resumed>) = 0 [pid 5931] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] newfstatat(3, "", [pid 5933] <... prctl resumed>) = 0 [pid 5932] symlink("/dev/binderfs", "./binderfs" [pid 5931] <... mmap resumed>) = 0x7f0356e00000 [pid 5930] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5933] setpgid(0, 0 [pid 5932] <... symlink resumed>) = 0 [pid 5931] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5930] memfd_create("syzkaller", 0 [pid 5929] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] getdents64(3, [pid 5933] <... setpgid resumed>) = 0 [pid 5932] memfd_create("syzkaller", 0 [pid 5933] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5930] <... memfd_create resumed>) = 5 [pid 5932] <... memfd_create resumed>) = 3 [pid 5930] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5932] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5930] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] umount2("./140/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5933] <... openat resumed>) = 3 [pid 5932] <... mmap resumed>) = 0x7f0356e00000 [pid 5932] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5929] memfd_create("syzkaller", 0 [pid 5933] write(3, "1000", 4 [pid 5929] <... memfd_create resumed>) = 5 [pid 5933] <... write resumed>) = 4 [pid 5929] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5933] close(3 [pid 5929] <... mmap resumed>) = 0x7f0356e00000 [pid 5933] <... close resumed>) = 0 [pid 5933] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5933] memfd_create("syzkaller", 0 [pid 5078] <... umount2 resumed>) = 0 [pid 5931] <... write resumed>) = 524288 [pid 5929] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5933] <... memfd_create resumed>) = 3 [pid 5930] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5933] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5933] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] umount2("./140/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5930] <... write resumed>) = 524288 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5931] munmap(0x7f0356e00000, 138412032) = 0 [pid 5078] newfstatat(AT_FDCWD, "./140/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] umount2("./140/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5932] <... write resumed>) = 524288 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5933] <... write resumed>) = 524288 [pid 5931] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5929] <... write resumed>) = 524288 [pid 5078] openat(AT_FDCWD, "./140/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5931] <... openat resumed>) = 4 [pid 5078] newfstatat(4, "", [pid 5932] munmap(0x7f0356e00000, 138412032 [pid 5931] ioctl(4, LOOP_SET_FD, 3 [pid 5930] munmap(0x7f0356e00000, 138412032 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(4, [pid 5932] <... munmap resumed>) = 0 [pid 5930] <... munmap resumed>) = 0 [pid 5929] munmap(0x7f0356e00000, 138412032 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5929] <... munmap resumed>) = 0 [pid 5078] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5932] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5078] close(4 [pid 5929] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] <... close resumed>) = 0 [pid 5932] <... openat resumed>) = 4 [pid 5078] rmdir("./140/bus" [pid 5929] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5929] close(5 [pid 5078] <... rmdir resumed>) = 0 [pid 5930] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5932] ioctl(4, LOOP_SET_FD, 3 [pid 5930] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5929] <... close resumed>) = 0 [pid 5078] umount2("./140/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5933] munmap(0x7f0356e00000, 138412032 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5933] <... munmap resumed>) = 0 [pid 5078] newfstatat(AT_FDCWD, "./140/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] unlink("./140/binderfs" [pid 5930] close(5) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5933] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5078] getdents64(3, [pid 5933] <... openat resumed>) = 4 [pid 5933] ioctl(4, LOOP_SET_FD, 3 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5931] <... ioctl resumed>) = 0 [pid 5931] close(3) = 0 [pid 5932] <... ioctl resumed>) = 0 [pid 5931] close(4 [pid 5930] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5932] close(3 [pid 5931] <... close resumed>) = 0 [pid 5931] mkdir("./bus", 0777) = 0 [pid 5931] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5932] <... close resumed>) = 0 [pid 5932] close(4) = 0 [pid 5932] mkdir("./bus", 0777) = 0 [pid 5932] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5930] <... open resumed>) = 5 [pid 5929] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] close(3 [pid 5930] ftruncate(5, 0 [pid 5078] <... close resumed>) = 0 [pid 5930] <... ftruncate resumed>) = 0 [pid 5078] rmdir("./140" [pid 5929] <... open resumed>) = 5 [pid 5930] exit_group(0) = ? [pid 5929] ftruncate(5, 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5930] +++ exited with 0 +++ [pid 5929] <... ftruncate resumed>) = 0 [pid 5078] mkdir("./141", 0777 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5930, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5075] umount2("./138", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./138", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5933] <... ioctl resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5075] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5933] close(3 [pid 5075] umount2("./138/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5933] <... close resumed>) = 0 [pid 5933] close(4) = 0 [pid 5933] mkdir("./bus", 0777) = 0 [pid 5929] exit_group(0 [pid 5078] <... mkdir resumed>) = 0 [ 161.066071][ T5931] loop3: detected capacity change from 0 to 1024 [ 161.080321][ T5932] loop0: detected capacity change from 0 to 1024 [ 161.098932][ T5933] loop1: detected capacity change from 0 to 1024 [pid 5929] <... exit_group resumed>) = ? [pid 5931] <... mount resumed>) = 0 [pid 5933] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5931] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5932] <... mount resumed>) = 0 [pid 5931] <... openat resumed>) = 3 [pid 5932] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5931] chdir("./bus" [pid 5932] <... openat resumed>) = 3 [pid 5932] chdir("./bus" [pid 5931] <... chdir resumed>) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5932] <... chdir resumed>) = 0 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5932] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5931] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5932] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5931] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5933] <... mount resumed>) = 0 [pid 5932] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5931] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5933] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5932] <... symlink resumed>) = 0 [pid 5931] <... symlink resumed>) = 0 [pid 5929] +++ exited with 0 +++ [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5929, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5933] <... openat resumed>) = 3 [pid 5932] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5931] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5933] chdir("./bus" [pid 5077] umount2("./140", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5933] <... chdir resumed>) = 0 [pid 5931] <... creat resumed>) = 4 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5933] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5077] openat(AT_FDCWD, "./140", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5933] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5932] <... creat resumed>) = 4 [pid 5931] rename("./bus", "./file2" [pid 5077] <... openat resumed>) = 3 [pid 5933] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5077] newfstatat(3, "", [pid 5932] rename("./bus", "./file2" [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5931] <... rename resumed>) = -1 EEXIST (File exists) [pid 5077] getdents64(3, [pid 5932] <... rename resumed>) = -1 EEXIST (File exists) [pid 5931] memfd_create("syzkaller", 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] <... umount2 resumed>) = 0 [pid 5075] umount2("./138/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5933] <... symlink resumed>) = 0 [pid 5931] <... memfd_create resumed>) = 5 [pid 5077] umount2("./140/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5933] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5931] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5932] memfd_create("syzkaller", 0 [pid 5931] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] newfstatat(AT_FDCWD, "./138/bus", [pid 5932] <... memfd_create resumed>) = 5 [pid 5932] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./138/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./138/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5931] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5932] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5933] <... creat resumed>) = 4 [pid 5933] rename("./bus", "./file2" [pid 5932] <... write resumed>) = 524288 [pid 5077] <... umount2 resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 5933] <... rename resumed>) = -1 EEXIST (File exists) [pid 5933] memfd_create("syzkaller", 0 [pid 5931] <... write resumed>) = 524288 [pid 5075] newfstatat(4, "", [pid 5933] <... memfd_create resumed>) = 5 [pid 5933] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] <... ioctl resumed>) = 0 [pid 5078] close(3 [pid 5077] umount2("./140/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... close resumed>) = 0 [pid 5075] getdents64(4, [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] newfstatat(AT_FDCWD, "./140/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5933] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5932] munmap(0x7f0356e00000, 138412032 [pid 5077] umount2("./140/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5932] <... munmap resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(4, [pid 5931] munmap(0x7f0356e00000, 138412032 [pid 5077] openat(AT_FDCWD, "./140/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5934 attached [pid 5932] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5931] <... munmap resumed>) = 0 [pid 5077] <... openat resumed>) = 4 [pid 5075] close(4 [pid 5934] set_robust_list(0x55556e32a660, 24 [pid 5932] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 5934 [pid 5077] newfstatat(4, "", [pid 5075] <... close resumed>) = 0 [pid 5934] <... set_robust_list resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] rmdir("./138/bus" [pid 5077] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] getdents64(4, [pid 5934] chdir("./141" [pid 5933] <... write resumed>) = 524288 [pid 5932] close(5 [pid 5931] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5934] <... chdir resumed>) = 0 [pid 5931] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] close(4 [pid 5075] umount2("./138/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5934] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5931] close(5 [pid 5077] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5934] <... prctl resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./138/binderfs", [pid 5934] setpgid(0, 0 [pid 5931] <... close resumed>) = 0 [pid 5077] rmdir("./140/bus" [pid 5934] <... setpgid resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5932] <... close resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5075] unlink("./138/binderfs" [pid 5077] umount2("./140/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] <... unlink resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./140/binderfs", [pid 5932] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5075] getdents64(3, [pid 5934] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] unlink("./140/binderfs") = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] getdents64(3, [pid 5075] close(3 [pid 5934] <... openat resumed>) = 3 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] <... close resumed>) = 0 [pid 5077] close(3) = 0 [pid 5077] rmdir("./140" [pid 5934] write(3, "1000", 4 [pid 5933] munmap(0x7f0356e00000, 138412032 [pid 5931] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] <... rmdir resumed>) = 0 [pid 5075] rmdir("./138" [pid 5077] mkdir("./141", 0777) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5075] mkdir("./139", 0777 [pid 5077] <... openat resumed>) = 3 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5933] <... munmap resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5934] <... write resumed>) = 4 [pid 5934] close(3 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5934] <... close resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5934] symlink("/dev/binderfs", "./binderfs" [pid 5933] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5933] close(5 [pid 5934] <... symlink resumed>) = 0 [pid 5931] <... open resumed>) = 5 [pid 5934] memfd_create("syzkaller", 0 [pid 5932] <... open resumed>) = 5 [pid 5932] ftruncate(5, 0) = 0 [pid 5932] exit_group(0 [pid 5934] <... memfd_create resumed>) = 3 [pid 5931] ftruncate(5, 0 [pid 5934] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5933] <... close resumed>) = 0 [pid 5932] <... exit_group resumed>) = ? [pid 5931] <... ftruncate resumed>) = 0 [pid 5934] <... mmap resumed>) = 0x7f0356e00000 [pid 5932] +++ exited with 0 +++ [pid 5931] exit_group(0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5932, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5073] umount2("./138", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] <... ioctl resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./138", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5933] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5073] <... openat resumed>) = 3 [pid 5931] <... exit_group resumed>) = ? [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] umount2("./138/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] close(3 [pid 5934] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5933] <... open resumed>) = 5 [pid 5933] ftruncate(5, 0) = 0 [pid 5931] +++ exited with 0 +++ [pid 5077] <... close resumed>) = 0 [pid 5933] exit_group(0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... umount2 resumed>) = 0 [pid 5933] <... exit_group resumed>) = ? [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5931, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5076] umount2("./141", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./141", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] umount2("./138/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5935 attached [pid 5934] <... write resumed>) = 524288 [pid 5933] +++ exited with 0 +++ [pid 5076] newfstatat(3, "", [pid 5075] <... ioctl resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, [pid 5934] munmap(0x7f0356e00000, 138412032 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5933, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5073] newfstatat(AT_FDCWD, "./138/bus", [pid 5076] umount2("./141/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5935] set_robust_list(0x55556e32a660, 24 [pid 5074] umount2("./138", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./138/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] openat(AT_FDCWD, "./138", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5935] <... set_robust_list resumed>) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 5935 [pid 5935] chdir("./141") = 0 [pid 5935] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5935] setpgid(0, 0) = 0 [pid 5935] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5934] <... munmap resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(3, "", [pid 5073] openat(AT_FDCWD, "./138/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5934] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5935] <... openat resumed>) = 3 [pid 5934] <... openat resumed>) = 4 [pid 5074] getdents64(3, [pid 5073] <... openat resumed>) = 4 [pid 5935] write(3, "1000", 4 [pid 5934] ioctl(4, LOOP_SET_FD, 3 [pid 5935] <... write resumed>) = 4 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] newfstatat(4, "", [pid 5935] close(3) = 0 [pid 5935] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5935] memfd_create("syzkaller", 0 [pid 5934] <... ioctl resumed>) = 0 [pid 5075] close(3 [pid 5074] umount2("./138/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... close resumed>) = 0 [pid 5073] getdents64(4, [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5935] <... memfd_create resumed>) = 3 [pid 5073] getdents64(4, [pid 5935] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5936 attached [pid 5934] close(3 [pid 5073] close(4 [pid 5936] set_robust_list(0x55556e32a660, 24) = 0 [pid 5934] <... close resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 5936 [pid 5073] <... close resumed>) = 0 [pid 5936] chdir("./139" [pid 5935] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5934] close(4 [pid 5076] <... umount2 resumed>) = 0 [pid 5936] <... chdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5073] rmdir("./138/bus" [pid 5936] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5934] <... close resumed>) = 0 [pid 5074] umount2("./138/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5936] <... prctl resumed>) = 0 [pid 5934] mkdir("./bus", 0777 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... rmdir resumed>) = 0 [pid 5936] setpgid(0, 0 [pid 5076] umount2("./141/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./141/bus", [pid 5936] <... setpgid resumed>) = 0 [pid 5934] <... mkdir resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] newfstatat(AT_FDCWD, "./138/bus", [pid 5073] umount2("./138/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./141/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5936] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./141/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5936] <... openat resumed>) = 3 [pid 5076] <... openat resumed>) = 4 [pid 5073] newfstatat(AT_FDCWD, "./138/binderfs", [pid 5074] umount2("./138/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] newfstatat(4, "", [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] openat(AT_FDCWD, "./138/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] unlink("./138/binderfs" [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... openat resumed>) = 4 [pid 5076] getdents64(4, [pid 5073] <... unlink resumed>) = 0 [pid 5074] newfstatat(4, "", [pid 5073] getdents64(3, [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] getdents64(4, [ 161.384648][ T5934] loop5: detected capacity change from 0 to 1024 [pid 5074] getdents64(4, [pid 5073] close(3 [pid 5936] write(3, "1000", 4 [pid 5935] <... write resumed>) = 524288 [pid 5934] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] <... close resumed>) = 0 [pid 5936] <... write resumed>) = 4 [pid 5935] munmap(0x7f0356e00000, 138412032 [pid 5076] close(4 [pid 5074] getdents64(4, [pid 5073] rmdir("./138" [pid 5936] close(3 [pid 5935] <... munmap resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5936] <... close resumed>) = 0 [pid 5076] rmdir("./141/bus" [pid 5074] close(4 [pid 5073] mkdir("./139", 0777 [pid 5936] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... rmdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 5936] <... symlink resumed>) = 0 [pid 5935] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] umount2("./141/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] rmdir("./138/bus" [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5936] memfd_create("syzkaller", 0 [pid 5935] <... openat resumed>) = 4 [pid 5934] <... mount resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5936] <... memfd_create resumed>) = 3 [pid 5935] ioctl(4, LOOP_SET_FD, 3 [pid 5934] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5076] newfstatat(AT_FDCWD, "./141/binderfs", [pid 5074] umount2("./138/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5936] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5934] <... openat resumed>) = 3 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./141/binderfs") = 0 [pid 5076] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3) = 0 [pid 5076] rmdir("./141") = 0 [pid 5076] mkdir("./142", 0777 [pid 5936] <... mmap resumed>) = 0x7f0356e00000 [pid 5935] <... ioctl resumed>) = 0 [pid 5934] chdir("./bus" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5935] close(3 [pid 5934] <... chdir resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./138/binderfs", [pid 5935] <... close resumed>) = 0 [pid 5934] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5935] close(4 [pid 5934] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5936] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5935] <... close resumed>) = 0 [pid 5934] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5074] unlink("./138/binderfs") = 0 [pid 5074] getdents64(3, [pid 5935] mkdir("./bus", 0777 [pid 5076] <... openat resumed>) = 3 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 5935] <... mkdir resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5934] <... symlink resumed>) = 0 [pid 5074] rmdir("./138") = 0 [pid 5934] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5935] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5074] mkdir("./139", 0777 [pid 5934] <... creat resumed>) = 4 [pid 5074] <... mkdir resumed>) = 0 [pid 5934] rename("./bus", "./file2") = -1 EEXIST (File exists) [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5934] memfd_create("syzkaller", 0) = 5 [pid 5074] <... openat resumed>) = 3 [pid 5934] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [ 161.468489][ T5935] loop4: detected capacity change from 0 to 1024 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5934] <... mmap resumed>) = 0x7f0356e00000 [pid 5936] <... write resumed>) = 524288 [pid 5935] <... mount resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 5935] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5934] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] close(3 [pid 5935] chdir("./bus" [pid 5073] <... close resumed>) = 0 [pid 5935] <... chdir resumed>) = 0 [pid 5936] munmap(0x7f0356e00000, 138412032 [pid 5935] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5935] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5935] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5936] <... munmap resumed>) = 0 ./strace-static-x86_64: Process 5937 attached [pid 5936] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5935] <... symlink resumed>) = 0 [pid 5936] <... openat resumed>) = 4 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 5937 [pid 5936] ioctl(4, LOOP_SET_FD, 3 [pid 5937] set_robust_list(0x55556e32a660, 24) = 0 [pid 5937] chdir("./139") = 0 [pid 5937] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5937] setpgid(0, 0) = 0 [pid 5937] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5937] write(3, "1000", 4 [pid 5934] <... write resumed>) = 524288 [pid 5937] <... write resumed>) = 4 [pid 5935] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5937] close(3) = 0 [pid 5937] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5937] memfd_create("syzkaller", 0) = 3 [pid 5937] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5935] <... creat resumed>) = 4 [pid 5935] rename("./bus", "./file2" [pid 5937] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5935] <... rename resumed>) = -1 EEXIST (File exists) [pid 5934] munmap(0x7f0356e00000, 138412032) = 0 [pid 5935] memfd_create("syzkaller", 0) = 5 [pid 5076] close(3 [pid 5935] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5936] <... ioctl resumed>) = 0 [pid 5934] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5076] <... close resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5936] close(3 [pid 5935] <... mmap resumed>) = 0x7f0356e00000 [pid 5934] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] close(3 [pid 5936] <... close resumed>) = 0 [pid 5935] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5934] close(5 [pid 5936] close(4 [pid 5934] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5936] <... close resumed>) = 0 [pid 5937] <... write resumed>) = 524288 [pid 5936] mkdir("./bus", 0777 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5938 attached [ 161.542687][ T5936] loop2: detected capacity change from 0 to 1024 [pid 5938] set_robust_list(0x55556e32a660, 24) = 0 [pid 5938] chdir("./142" [pid 5936] <... mkdir resumed>) = 0 [pid 5936] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 5939 [pid 5938] <... chdir resumed>) = 0 [pid 5938] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5938] setpgid(0, 0) = 0 [pid 5937] munmap(0x7f0356e00000, 138412032./strace-static-x86_64: Process 5939 attached [pid 5938] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5937] <... munmap resumed>) = 0 [pid 5934] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 5938 [pid 5939] set_robust_list(0x55556e32a660, 24 [pid 5938] <... openat resumed>) = 3 [pid 5939] <... set_robust_list resumed>) = 0 [pid 5938] write(3, "1000", 4 [pid 5937] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5935] <... write resumed>) = 524288 [pid 5934] <... open resumed>) = 5 [pid 5939] chdir("./139" [pid 5938] <... write resumed>) = 4 [pid 5937] <... openat resumed>) = 4 [pid 5938] close(3 [pid 5937] ioctl(4, LOOP_SET_FD, 3 [pid 5934] ftruncate(5, 0 [pid 5939] <... chdir resumed>) = 0 [pid 5938] <... close resumed>) = 0 [pid 5934] <... ftruncate resumed>) = 0 [pid 5938] symlink("/dev/binderfs", "./binderfs" [pid 5939] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5934] exit_group(0 [pid 5939] <... prctl resumed>) = 0 [pid 5938] <... symlink resumed>) = 0 [pid 5936] <... mount resumed>) = 0 [pid 5935] munmap(0x7f0356e00000, 138412032 [pid 5934] <... exit_group resumed>) = ? [pid 5939] setpgid(0, 0 [pid 5936] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5935] <... munmap resumed>) = 0 [pid 5939] <... setpgid resumed>) = 0 [pid 5936] <... openat resumed>) = 3 [pid 5939] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5938] memfd_create("syzkaller", 0 [pid 5936] chdir("./bus" [pid 5935] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5936] <... chdir resumed>) = 0 [pid 5936] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5935] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5935] close(5 [pid 5939] <... openat resumed>) = 3 [pid 5936] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5935] <... close resumed>) = 0 [pid 5934] +++ exited with 0 +++ [pid 5939] write(3, "1000", 4 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5934, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5938] <... memfd_create resumed>) = 3 [pid 5937] <... ioctl resumed>) = 0 [pid 5078] umount2("./141", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5939] <... write resumed>) = 4 [pid 5938] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5937] close(3 [pid 5936] <... symlink resumed>) = 0 [pid 5935] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5939] close(3 [pid 5938] <... mmap resumed>) = 0x7f0356e00000 [pid 5937] <... close resumed>) = 0 [pid 5936] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5935] <... open resumed>) = 5 [pid 5078] openat(AT_FDCWD, "./141", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5939] <... close resumed>) = 0 [pid 5937] close(4 [pid 5935] ftruncate(5, 0 [pid 5078] <... openat resumed>) = 3 [pid 5939] symlink("/dev/binderfs", "./binderfs" [pid 5937] <... close resumed>) = 0 [pid 5078] newfstatat(3, "", [pid 5939] <... symlink resumed>) = 0 [pid 5938] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5937] mkdir("./bus", 0777 [pid 5936] <... creat resumed>) = 4 [pid 5935] <... ftruncate resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5939] memfd_create("syzkaller", 0 [pid 5938] <... write resumed>) = 524288 [pid 5937] <... mkdir resumed>) = 0 [pid 5936] rename("./bus", "./file2" [pid 5935] exit_group(0 [pid 5078] getdents64(3, [pid 5939] <... memfd_create resumed>) = 3 [pid 5937] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [ 161.627436][ T5937] loop0: detected capacity change from 0 to 1024 [pid 5939] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5937] <... mount resumed>) = 0 [pid 5078] umount2("./141/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5939] <... mmap resumed>) = 0x7f0356e00000 [pid 5937] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5935] <... exit_group resumed>) = ? [pid 5937] <... openat resumed>) = 3 [pid 5937] chdir("./bus" [pid 5936] <... rename resumed>) = -1 EEXIST (File exists) [pid 5935] +++ exited with 0 +++ [pid 5938] munmap(0x7f0356e00000, 138412032 [pid 5937] <... chdir resumed>) = 0 [pid 5937] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5936] memfd_create("syzkaller", 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5935, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5938] <... munmap resumed>) = 0 [pid 5937] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5936] <... memfd_create resumed>) = 5 [pid 5077] umount2("./141", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5937] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5936] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./141", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5938] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5077] <... openat resumed>) = 3 [pid 5938] <... openat resumed>) = 4 [pid 5937] <... symlink resumed>) = 0 [pid 5936] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] newfstatat(3, "", [pid 5938] ioctl(4, LOOP_SET_FD, 3 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5939] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5937] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5077] umount2("./141/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5936] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5939] <... write resumed>) = 524288 [pid 5938] <... ioctl resumed>) = 0 [pid 5937] <... creat resumed>) = 4 [pid 5078] <... umount2 resumed>) = 0 [pid 5939] munmap(0x7f0356e00000, 138412032) = 0 [pid 5938] close(3 [pid 5937] rename("./bus", "./file2" [pid 5936] munmap(0x7f0356e00000, 138412032 [pid 5078] umount2("./141/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = 0 [pid 5939] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5938] <... close resumed>) = 0 [pid 5077] umount2("./141/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5939] <... openat resumed>) = 4 [pid 5936] <... munmap resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5939] ioctl(4, LOOP_SET_FD, 3 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./141/bus", [pid 5938] close(4 [pid 5937] <... rename resumed>) = -1 EEXIST (File exists) [pid 5936] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] newfstatat(AT_FDCWD, "./141/bus", [pid 5938] <... close resumed>) = 0 [pid 5937] memfd_create("syzkaller", 0 [pid 5936] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5939] <... ioctl resumed>) = 0 [pid 5938] mkdir("./bus", 0777 [pid 5937] <... memfd_create resumed>) = 5 [pid 5936] close(5 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5938] <... mkdir resumed>) = 0 [pid 5078] umount2("./141/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] umount2("./141/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5939] close(3 [pid 5938] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5937] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] openat(AT_FDCWD, "./141/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5939] <... close resumed>) = 0 [pid 5937] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] newfstatat(4, "", [pid 5077] openat(AT_FDCWD, "./141/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5939] close(4 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] <... openat resumed>) = 4 [pid 5939] <... close resumed>) = 0 [pid 5937] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] getdents64(4, [pid 5077] newfstatat(4, "", [pid 5939] mkdir("./bus", 0777 [pid 5936] <... close resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5939] <... mkdir resumed>) = 0 [pid 5937] <... write resumed>) = 524288 [pid 5936] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] getdents64(4, [pid 5077] getdents64(4, [pid 5939] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5937] munmap(0x7f0356e00000, 138412032 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5936] <... open resumed>) = 5 [pid 5078] close(4 [pid 5077] getdents64(4, [pid 5938] <... mount resumed>) = 0 [pid 5937] <... munmap resumed>) = 0 [pid 5936] ftruncate(5, 0 [pid 5078] <... close resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5938] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5936] <... ftruncate resumed>) = 0 [pid 5938] <... openat resumed>) = 3 [pid 5078] rmdir("./141/bus" [pid 5077] close(4 [pid 5938] chdir("./bus" [pid 5937] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5078] <... rmdir resumed>) = 0 [pid 5077] <... close resumed>) = 0 [ 161.707244][ T5938] loop3: detected capacity change from 0 to 1024 [ 161.733142][ T5939] loop1: detected capacity change from 0 to 1024 [pid 5938] <... chdir resumed>) = 0 [pid 5937] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5936] exit_group(0 [pid 5078] umount2("./141/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] rmdir("./141/bus" [pid 5938] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5937] close(5 [pid 5936] <... exit_group resumed>) = ? [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... rmdir resumed>) = 0 [pid 5938] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] umount2("./141/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5938] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5077] newfstatat(AT_FDCWD, "./141/binderfs", [pid 5078] newfstatat(AT_FDCWD, "./141/binderfs", [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] unlink("./141/binderfs" [pid 5938] <... symlink resumed>) = 0 [pid 5936] +++ exited with 0 +++ [pid 5078] unlink("./141/binderfs" [pid 5077] <... unlink resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5077] getdents64(3, [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5936, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5939] <... mount resumed>) = 0 [pid 5938] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] getdents64(3, [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5939] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5937] <... close resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] close(3 [pid 5939] <... openat resumed>) = 3 [pid 5078] close(3 [pid 5077] <... close resumed>) = 0 [pid 5939] chdir("./bus" [pid 5078] <... close resumed>) = 0 [pid 5077] rmdir("./141" [pid 5939] <... chdir resumed>) = 0 [pid 5937] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] rmdir("./141" [pid 5077] <... rmdir resumed>) = 0 [pid 5939] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5078] <... rmdir resumed>) = 0 [pid 5075] umount2("./139", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5939] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5938] <... creat resumed>) = 4 [pid 5077] mkdir("./142", 0777 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5939] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5077] <... mkdir resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./139", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5938] rename("./bus", "./file2" [pid 5078] mkdir("./142", 0777 [pid 5075] <... openat resumed>) = 3 [pid 5937] <... open resumed>) = 5 [pid 5078] <... mkdir resumed>) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5075] newfstatat(3, "", [pid 5077] <... openat resumed>) = 3 [pid 5939] <... symlink resumed>) = 0 [pid 5938] <... rename resumed>) = -1 EEXIST (File exists) [pid 5937] ftruncate(5, 0 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5938] memfd_create("syzkaller", 0 [pid 5937] <... ftruncate resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5938] <... memfd_create resumed>) = 5 [pid 5939] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5938] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5937] exit_group(0 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5938] <... mmap resumed>) = 0x7f0356e00000 [pid 5938] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5937] <... exit_group resumed>) = ? [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5937] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5937, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] getdents64(3, [pid 5938] <... write resumed>) = 524288 [pid 5939] <... creat resumed>) = 4 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5939] rename("./bus", "./file2" [pid 5938] munmap(0x7f0356e00000, 138412032 [pid 5075] umount2("./139/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5939] <... rename resumed>) = -1 EEXIST (File exists) [pid 5938] <... munmap resumed>) = 0 [pid 5939] memfd_create("syzkaller", 0) = 5 [pid 5073] umount2("./139", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5939] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5938] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] openat(AT_FDCWD, "./139", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5938] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... openat resumed>) = 3 [pid 5073] newfstatat(3, "", [pid 5939] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5938] close(5 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] umount2("./139/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5938] <... close resumed>) = 0 [pid 5939] <... write resumed>) = 524288 [pid 5077] <... ioctl resumed>) = 0 [pid 5075] umount2("./139/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./139/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5938] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] close(3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... close resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./139/bus", [pid 5073] newfstatat(AT_FDCWD, "./139/bus", [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./139/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./139/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./139/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5940 attached [pid 5939] munmap(0x7f0356e00000, 138412032 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... openat resumed>) = 4 [pid 5075] openat(AT_FDCWD, "./139/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] newfstatat(4, "", [pid 5940] set_robust_list(0x55556e32a660, 24 [pid 5939] <... munmap resumed>) = 0 [pid 5938] <... open resumed>) = 5 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 5940 [pid 5075] <... openat resumed>) = 4 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5940] <... set_robust_list resumed>) = 0 [pid 5939] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5938] ftruncate(5, 0 [pid 5075] newfstatat(4, "", [pid 5073] getdents64(4, [pid 5940] chdir("./142" [pid 5939] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5940] <... chdir resumed>) = 0 [pid 5939] close(5 [pid 5938] <... ftruncate resumed>) = 0 [pid 5075] getdents64(4, [pid 5073] getdents64(4, [pid 5940] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5938] exit_group(0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5939] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5940] <... prctl resumed>) = 0 [pid 5939] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] <... ioctl resumed>) = 0 [pid 5075] getdents64(4, [pid 5073] close(4 [pid 5940] setpgid(0, 0) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5078] close(3 [pid 5073] <... close resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5075] close(4) = 0 [pid 5940] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5073] rmdir("./139/bus" [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5938] <... exit_group resumed>) = ? [pid 5075] rmdir("./139/bus" [pid 5073] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 5941 attached [pid 5940] <... openat resumed>) = 3 [pid 5939] <... open resumed>) = 5 [pid 5938] +++ exited with 0 +++ [pid 5075] <... rmdir resumed>) = 0 [pid 5941] set_robust_list(0x55556e32a660, 24 [pid 5940] write(3, "1000", 4 [pid 5939] ftruncate(5, 0 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 5941 [pid 5073] umount2("./139/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5941] <... set_robust_list resumed>) = 0 [pid 5940] <... write resumed>) = 4 [pid 5075] umount2("./139/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5941] chdir("./142" [pid 5940] close(3 [pid 5939] <... ftruncate resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5941] <... chdir resumed>) = 0 [pid 5940] <... close resumed>) = 0 [pid 5939] exit_group(0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5938, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5941] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5940] symlink("/dev/binderfs", "./binderfs" [pid 5939] <... exit_group resumed>) = ? [pid 5076] umount2("./142", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] newfstatat(AT_FDCWD, "./139/binderfs", [pid 5073] newfstatat(AT_FDCWD, "./139/binderfs", [pid 5940] <... symlink resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5941] <... prctl resumed>) = 0 [pid 5940] memfd_create("syzkaller", 0 [pid 5076] openat(AT_FDCWD, "./142", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] unlink("./139/binderfs" [pid 5073] unlink("./139/binderfs" [pid 5076] <... openat resumed>) = 3 [pid 5075] <... unlink resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5076] newfstatat(3, "", [pid 5075] getdents64(3, [pid 5073] getdents64(3, [pid 5941] setpgid(0, 0 [pid 5940] <... memfd_create resumed>) = 3 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5941] <... setpgid resumed>) = 0 [pid 5940] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5939] +++ exited with 0 +++ [pid 5076] getdents64(3, [pid 5075] close(3 [pid 5073] close(3 [pid 5941] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5940] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] <... close resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5076] umount2("./142/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] rmdir("./139" [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5939, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5073] rmdir("./139" [pid 5075] <... rmdir resumed>) = 0 [pid 5074] umount2("./139", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... rmdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] mkdir("./140", 0777 [pid 5941] <... openat resumed>) = 3 [pid 5940] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] mkdir("./140", 0777 [pid 5076] <... umount2 resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./139", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... mkdir resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5074] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] umount2("./139/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5941] write(3, "1000", 4 [pid 5075] <... openat resumed>) = 3 [pid 5073] <... openat resumed>) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5941] <... write resumed>) = 4 [pid 5940] <... write resumed>) = 524288 [pid 5076] umount2("./142/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5941] close(3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./142/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5941] <... close resumed>) = 0 [pid 5940] munmap(0x7f0356e00000, 138412032 [pid 5076] umount2("./142/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = 0 [pid 5941] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./142/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5941] <... symlink resumed>) = 0 [pid 5076] newfstatat(4, "", [pid 5941] memfd_create("syzkaller", 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5941] <... memfd_create resumed>) = 3 [pid 5076] getdents64(4, [pid 5940] <... munmap resumed>) = 0 [pid 5941] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] umount2("./139/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5941] <... mmap resumed>) = 0x7f0356e00000 [pid 5940] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5940] ioctl(4, LOOP_SET_FD, 3 [pid 5941] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] getdents64(4, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./139/bus", [pid 5940] <... ioctl resumed>) = 0 [pid 5940] close(3 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5940] <... close resumed>) = 0 [pid 5940] close(4 [pid 5076] close(4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... close resumed>) = 0 [pid 5074] umount2("./139/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] rmdir("./142/bus" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5940] <... close resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./139/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] umount2("./142/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... openat resumed>) = 4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./142/binderfs", [pid 5074] newfstatat(4, "", [pid 5940] mkdir("./bus", 0777 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] unlink("./142/binderfs") = 0 [pid 5074] getdents64(4, [pid 5940] <... mkdir resumed>) = 0 [pid 5076] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] close(3) = 0 [pid 5074] getdents64(4, [pid 5076] rmdir("./142") = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] mkdir("./143", 0777 [pid 5074] close(4 [pid 5076] <... mkdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5074] rmdir("./139/bus" [pid 5940] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5941] <... write resumed>) = 524288 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 5941] munmap(0x7f0356e00000, 138412032 [pid 5074] umount2("./139/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5941] <... munmap resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./139/binderfs", [pid 5075] close(3) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5942 attached [pid 5941] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5940] <... mount resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] close(3 [pid 5942] set_robust_list(0x55556e32a660, 24 [pid 5941] <... openat resumed>) = 4 [pid 5940] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 5942 [ 161.977986][ T5940] loop4: detected capacity change from 0 to 1024 [pid 5074] unlink("./139/binderfs" [pid 5942] <... set_robust_list resumed>) = 0 [pid 5940] <... openat resumed>) = 3 [pid 5074] <... unlink resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5941] ioctl(4, LOOP_SET_FD, 3 [pid 5940] chdir("./bus" [pid 5074] getdents64(3, [pid 5942] chdir("./140" [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5942] <... chdir resumed>) = 0 [pid 5942] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5940] <... chdir resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 5943 [pid 5942] <... prctl resumed>) = 0 [pid 5940] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] close(3 [pid 5942] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 5943 attached [pid 5942] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5940] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... ioctl resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5943] set_robust_list(0x55556e32a660, 24 [pid 5940] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5074] rmdir("./139" [pid 5943] <... set_robust_list resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5943] chdir("./140" [pid 5942] <... openat resumed>) = 3 [pid 5074] mkdir("./140", 0777 [pid 5943] <... chdir resumed>) = 0 [pid 5940] <... symlink resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5943] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5940] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5942] write(3, "1000", 4 [pid 5943] <... prctl resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5942] <... write resumed>) = 4 [pid 5943] setpgid(0, 0 [pid 5074] <... openat resumed>) = 3 [pid 5943] <... setpgid resumed>) = 0 [pid 5942] close(3 [pid 5943] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5942] <... close resumed>) = 0 [pid 5941] <... ioctl resumed>) = 0 [pid 5076] close(3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5943] write(3, "1000", 4 [pid 5942] symlink("/dev/binderfs", "./binderfs" [pid 5941] close(3 [pid 5076] <... close resumed>) = 0 [pid 5943] <... write resumed>) = 4 [pid 5941] <... close resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5943] close(3 [pid 5942] <... symlink resumed>) = 0 [pid 5941] close(4 [pid 5943] <... close resumed>) = 0 [pid 5941] <... close resumed>) = 0 [pid 5940] <... creat resumed>) = 4 [pid 5943] symlink("/dev/binderfs", "./binderfs" [pid 5941] mkdir("./bus", 0777 [pid 5943] <... symlink resumed>) = 0 [pid 5942] memfd_create("syzkaller", 0 [pid 5941] <... mkdir resumed>) = 0 [pid 5940] rename("./bus", "./file2" [pid 5943] memfd_create("syzkaller", 0 [pid 5942] <... memfd_create resumed>) = 3 [pid 5941] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, ""./strace-static-x86_64: Process 5944 attached [pid 5943] <... memfd_create resumed>) = 3 [pid 5942] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5940] <... rename resumed>) = -1 EEXIST (File exists) [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 5944 [pid 5944] set_robust_list(0x55556e32a660, 24 [pid 5943] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5942] <... mmap resumed>) = 0x7f0356e00000 [pid 5940] memfd_create("syzkaller", 0 [pid 5943] <... mmap resumed>) = 0x7f0356e00000 [ 162.033590][ T5941] loop5: detected capacity change from 0 to 1024 [pid 5940] <... memfd_create resumed>) = 5 [pid 5944] <... set_robust_list resumed>) = 0 [pid 5943] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5940] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5940] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5944] chdir("./143" [pid 5943] <... write resumed>) = 524288 [pid 5942] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5941] <... mount resumed>) = 0 [pid 5944] <... chdir resumed>) = 0 [pid 5944] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5944] setpgid(0, 0 [pid 5942] <... write resumed>) = 524288 [pid 5941] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5944] <... setpgid resumed>) = 0 [pid 5943] munmap(0x7f0356e00000, 138412032 [pid 5941] <... openat resumed>) = 3 [pid 5944] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5943] <... munmap resumed>) = 0 [pid 5941] chdir("./bus" [pid 5944] write(3, "1000", 4 [pid 5942] munmap(0x7f0356e00000, 138412032 [pid 5941] <... chdir resumed>) = 0 [pid 5941] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5942] <... munmap resumed>) = 0 [pid 5944] <... write resumed>) = 4 [pid 5942] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5944] close(3) = 0 [pid 5943] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5942] <... openat resumed>) = 4 [pid 5944] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5943] <... openat resumed>) = 4 [pid 5942] ioctl(4, LOOP_SET_FD, 3 [pid 5941] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5944] memfd_create("syzkaller", 0 [pid 5943] ioctl(4, LOOP_SET_FD, 3 [pid 5941] <... symlink resumed>) = 0 [pid 5944] <... memfd_create resumed>) = 3 [pid 5944] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5944] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5941] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5940] <... write resumed>) = 524288 [pid 5943] <... ioctl resumed>) = 0 [pid 5942] <... ioctl resumed>) = 0 [pid 5940] munmap(0x7f0356e00000, 138412032 [pid 5943] close(3 [pid 5942] close(3 [pid 5940] <... munmap resumed>) = 0 [pid 5943] <... close resumed>) = 0 [pid 5942] <... close resumed>) = 0 [pid 5943] close(4 [pid 5942] close(4 [pid 5940] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5942] <... close resumed>) = 0 [pid 5940] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5940] close(5 [pid 5944] <... write resumed>) = 524288 [pid 5940] <... close resumed>) = 0 [pid 5943] <... close resumed>) = 0 [pid 5942] mkdir("./bus", 0777 [pid 5943] mkdir("./bus", 0777 [pid 5941] <... creat resumed>) = 4 [pid 5944] munmap(0x7f0356e00000, 138412032 [pid 5943] <... mkdir resumed>) = 0 [pid 5942] <... mkdir resumed>) = 0 [pid 5941] rename("./bus", "./file2" [pid 5074] <... ioctl resumed>) = 0 [pid 5944] <... munmap resumed>) = 0 [ 162.132285][ T5942] loop2: detected capacity change from 0 to 1024 [ 162.134420][ T5943] loop0: detected capacity change from 0 to 1024 [pid 5943] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5942] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5944] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5941] <... rename resumed>) = -1 EEXIST (File exists) [pid 5944] <... openat resumed>) = 4 [pid 5944] ioctl(4, LOOP_SET_FD, 3 [pid 5941] memfd_create("syzkaller", 0) = 5 [pid 5940] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5941] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] close(3 [pid 5941] <... mmap resumed>) = 0x7f0356e00000 [pid 5074] <... close resumed>) = 0 [pid 5941] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5945 attached [pid 5940] <... open resumed>) = 5 [pid 5945] set_robust_list(0x55556e32a660, 24 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 5945 [pid 5945] <... set_robust_list resumed>) = 0 [pid 5945] chdir("./140") = 0 [pid 5945] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5945] setpgid(0, 0) = 0 [pid 5945] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5940] ftruncate(5, 0) = 0 [pid 5945] <... openat resumed>) = 3 [pid 5945] write(3, "1000", 4 [pid 5940] exit_group(0 [pid 5945] <... write resumed>) = 4 [pid 5945] close(3 [pid 5943] <... mount resumed>) = 0 [pid 5945] <... close resumed>) = 0 [pid 5945] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5943] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5940] <... exit_group resumed>) = ? [pid 5945] memfd_create("syzkaller", 0 [pid 5944] <... ioctl resumed>) = 0 [pid 5943] <... openat resumed>) = 3 [pid 5942] <... mount resumed>) = 0 [pid 5940] +++ exited with 0 +++ [pid 5945] <... memfd_create resumed>) = 3 [pid 5945] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5944] close(3 [pid 5943] chdir("./bus" [pid 5942] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5943] <... chdir resumed>) = 0 [pid 5942] <... openat resumed>) = 3 [pid 5945] <... mmap resumed>) = 0x7f0356e00000 [pid 5944] <... close resumed>) = 0 [pid 5943] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5942] chdir("./bus" [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5940, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5945] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5944] close(4 [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 5943] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... restart_syscall resumed>) = 0 [pid 5944] <... close resumed>) = 0 [pid 5943] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5942] <... chdir resumed>) = 0 [pid 5941] <... write resumed>) = 524288 [pid 5077] umount2("./142", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5944] mkdir("./bus", 0777 [pid 5943] <... symlink resumed>) = 0 [pid 5942] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./142", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5941] munmap(0x7f0356e00000, 138412032 [pid 5077] newfstatat(3, "", [pid 5944] <... mkdir resumed>) = 0 [pid 5942] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 162.184754][ T5944] loop3: detected capacity change from 0 to 1024 [pid 5945] <... write resumed>) = 524288 [pid 5943] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5942] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5941] <... munmap resumed>) = 0 [pid 5944] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5941] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5941] close(5 [pid 5077] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5945] munmap(0x7f0356e00000, 138412032 [pid 5077] umount2("./142/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5945] <... munmap resumed>) = 0 [pid 5944] <... mount resumed>) = 0 [pid 5943] <... creat resumed>) = 4 [pid 5942] <... symlink resumed>) = 0 [pid 5944] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5943] rename("./bus", "./file2" [pid 5942] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5944] <... openat resumed>) = 3 [pid 5943] <... rename resumed>) = -1 EEXIST (File exists) [pid 5945] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5944] chdir("./bus" [pid 5943] memfd_create("syzkaller", 0 [pid 5941] <... close resumed>) = 0 [pid 5945] <... openat resumed>) = 4 [pid 5944] <... chdir resumed>) = 0 [pid 5943] <... memfd_create resumed>) = 5 [pid 5945] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5944] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5943] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5944] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5943] <... mmap resumed>) = 0x7f0356e00000 [pid 5941] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5944] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5943] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5942] <... creat resumed>) = 4 [pid 5942] rename("./bus", "./file2" [pid 5945] close(3 [pid 5941] <... open resumed>) = 5 [pid 5944] <... symlink resumed>) = 0 [pid 5945] <... close resumed>) = 0 [pid 5941] ftruncate(5, 0 [pid 5945] close(4 [pid 5941] <... ftruncate resumed>) = 0 [pid 5945] <... close resumed>) = 0 [pid 5945] mkdir("./bus", 0777 [pid 5944] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5942] <... rename resumed>) = -1 EEXIST (File exists) [pid 5077] <... umount2 resumed>) = 0 [pid 5942] memfd_create("syzkaller", 0 [pid 5941] exit_group(0 [pid 5944] <... creat resumed>) = 4 [pid 5942] <... memfd_create resumed>) = 5 [pid 5941] <... exit_group resumed>) = ? [pid 5077] umount2("./142/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5945] <... mkdir resumed>) = 0 [pid 5944] rename("./bus", "./file2" [pid 5942] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5945] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5943] <... write resumed>) = 524288 [pid 5942] <... mmap resumed>) = 0x7f0356e00000 [pid 5941] +++ exited with 0 +++ [pid 5077] newfstatat(AT_FDCWD, "./142/bus", [pid 5944] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5941, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] umount2("./142/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5944] memfd_create("syzkaller", 0 [pid 5077] openat(AT_FDCWD, "./142/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5944] <... memfd_create resumed>) = 5 [pid 5077] <... openat resumed>) = 4 [pid 5944] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] umount2("./142", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] newfstatat(4, "", [pid 5944] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./142", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5078] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] umount2("./142/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5945] <... mount resumed>) = 0 [pid 5077] getdents64(4, [ 162.257730][ T5945] loop1: detected capacity change from 0 to 1024 [pid 5945] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5945] <... openat resumed>) = 3 [pid 5943] munmap(0x7f0356e00000, 138412032 [pid 5945] chdir("./bus" [pid 5943] <... munmap resumed>) = 0 [pid 5077] getdents64(4, [pid 5945] <... chdir resumed>) = 0 [pid 5945] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5945] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5942] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5944] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] close(4 [pid 5945] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5943] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5078] <... umount2 resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5943] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] rmdir("./142/bus" [pid 5943] close(5 [pid 5945] <... creat resumed>) = 4 [pid 5943] <... close resumed>) = 0 [pid 5078] umount2("./142/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... rmdir resumed>) = 0 [pid 5077] umount2("./142/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./142/binderfs", [pid 5945] rename("./bus", "./file2" [pid 5944] <... write resumed>) = 524288 [pid 5942] <... write resumed>) = 524288 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5942] munmap(0x7f0356e00000, 138412032 [pid 5077] unlink("./142/binderfs" [pid 5942] <... munmap resumed>) = 0 [pid 5078] newfstatat(AT_FDCWD, "./142/bus", [pid 5945] <... rename resumed>) = -1 EEXIST (File exists) [pid 5942] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 5942] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] getdents64(3, [pid 5942] close(5 [pid 5945] memfd_create("syzkaller", 0 [pid 5078] umount2("./142/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5945] <... memfd_create resumed>) = 5 [pid 5943] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] close(3 [pid 5945] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5944] munmap(0x7f0356e00000, 138412032 [pid 5942] <... close resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./142/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... close resumed>) = 0 [pid 5945] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... openat resumed>) = 4 [pid 5945] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5944] <... munmap resumed>) = 0 [pid 5942] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] newfstatat(4, "", [pid 5077] rmdir("./142" [pid 5944] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5943] <... open resumed>) = 5 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5078] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5078] close(4 [pid 5944] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... close resumed>) = 0 [pid 5078] rmdir("./142/bus" [pid 5944] close(5 [pid 5943] ftruncate(5, 0 [pid 5942] <... open resumed>) = 5 [pid 5078] <... rmdir resumed>) = 0 [pid 5077] mkdir("./143", 0777 [pid 5943] <... ftruncate resumed>) = 0 [pid 5942] ftruncate(5, 0 [pid 5078] umount2("./142/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5943] exit_group(0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5943] <... exit_group resumed>) = ? [pid 5942] <... ftruncate resumed>) = 0 [pid 5078] newfstatat(AT_FDCWD, "./142/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 5944] <... close resumed>) = 0 [pid 5943] +++ exited with 0 +++ [pid 5942] exit_group(0 [pid 5078] unlink("./142/binderfs") = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5943, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5078] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5942] <... exit_group resumed>) = ? [pid 5078] close(3 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] <... close resumed>) = 0 [pid 5078] rmdir("./142" [pid 5077] <... openat resumed>) = 3 [pid 5078] <... rmdir resumed>) = 0 [pid 5078] mkdir("./143", 0777 [pid 5945] <... write resumed>) = 524288 [pid 5078] <... mkdir resumed>) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] umount2("./140", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5945] munmap(0x7f0356e00000, 138412032 [pid 5944] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5942] +++ exited with 0 +++ [pid 5078] <... openat resumed>) = 3 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5942, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=3 /* 0.03 s */} --- [pid 5073] openat(AT_FDCWD, "./140", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5073] <... openat resumed>) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] umount2("./140", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5945] <... munmap resumed>) = 0 [pid 5073] getdents64(3, [pid 5945] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] umount2("./140/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "./140", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5945] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... openat resumed>) = 3 [pid 5944] <... open resumed>) = 5 [pid 5945] close(5 [pid 5075] newfstatat(3, "", [pid 5944] ftruncate(5, 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5944] <... ftruncate resumed>) = 0 [pid 5075] getdents64(3, [pid 5945] <... close resumed>) = 0 [pid 5944] exit_group(0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] <... umount2 resumed>) = 0 [pid 5945] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5944] <... exit_group resumed>) = ? [pid 5073] umount2("./140/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5944] +++ exited with 0 +++ [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5944, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] umount2("./140/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5945] <... open resumed>) = 5 [pid 5945] ftruncate(5, 0) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5945] exit_group(0) = ? [pid 5073] newfstatat(AT_FDCWD, "./140/bus", [pid 5076] umount2("./143", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5945] +++ exited with 0 +++ [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5945, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] openat(AT_FDCWD, "./143", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] umount2("./140", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] newfstatat(3, "", [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./140/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, [pid 5075] <... umount2 resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./140", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] <... openat resumed>) = 3 [pid 5073] openat(AT_FDCWD, "./140/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] umount2("./143/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] newfstatat(3, "", [pid 5073] <... openat resumed>) = 4 [pid 5075] umount2("./140/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... ioctl resumed>) = 0 [pid 5077] <... ioctl resumed>) = 0 [pid 5074] getdents64(3, [pid 5073] newfstatat(4, "", [pid 5075] newfstatat(AT_FDCWD, "./140/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./140/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = 0 [pid 5076] umount2("./143/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./140/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5075] newfstatat(4, "", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, [pid 5076] newfstatat(AT_FDCWD, "./143/bus", [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] getdents64(4, [pid 5076] umount2("./143/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] umount2("./140/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] getdents64(4, [pid 5078] close(3) = 0 [pid 5075] close(4) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5946 attached [pid 5077] close(3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] rmdir("./140/bus" [pid 5074] <... umount2 resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5946] set_robust_list(0x55556e32a660, 24 [pid 5077] <... close resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./143/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... rmdir resumed>) = 0 [pid 5074] umount2("./140/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] getdents64(4, [pid 5946] <... set_robust_list resumed>) = 0 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 5946 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... openat resumed>) = 4 [pid 5075] umount2("./140/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5947 attached [pid 5946] chdir("./143" [pid 5076] newfstatat(4, "", [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./140/bus", [pid 5073] close(4 [pid 5946] <... chdir resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5946] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5073] <... close resumed>) = 0 [pid 5074] umount2("./140/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5946] <... prctl resumed>) = 0 [pid 5073] rmdir("./140/bus" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5946] setpgid(0, 0 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 5947 [pid 5076] getdents64(4, [pid 5946] <... setpgid resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./140/binderfs", [pid 5074] openat(AT_FDCWD, "./140/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... rmdir resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5946] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] getdents64(4, [pid 5075] unlink("./140/binderfs" [pid 5074] <... openat resumed>) = 4 [pid 5073] umount2("./140/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5947] set_robust_list(0x55556e32a660, 24 [pid 5946] <... openat resumed>) = 3 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5074] newfstatat(4, "", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5947] <... set_robust_list resumed>) = 0 [pid 5946] write(3, "1000", 4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] newfstatat(AT_FDCWD, "./140/binderfs", [pid 5947] chdir("./143" [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] getdents64(4, [pid 5947] <... chdir resumed>) = 0 [pid 5073] unlink("./140/binderfs" [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] close(4 [pid 5075] getdents64(3, [pid 5947] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] <... close resumed>) = 0 [pid 5074] getdents64(4, [pid 5073] <... unlink resumed>) = 0 [pid 5946] <... write resumed>) = 4 [pid 5947] <... prctl resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5946] close(3 [pid 5073] getdents64(3, [pid 5947] setpgid(0, 0 [pid 5946] <... close resumed>) = 0 [pid 5074] close(4 [pid 5947] <... setpgid resumed>) = 0 [pid 5946] symlink("/dev/binderfs", "./binderfs" [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] <... close resumed>) = 0 [pid 5947] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] rmdir("./143/bus" [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5946] <... symlink resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] close(3 [pid 5074] rmdir("./140/bus" [pid 5073] close(3 [pid 5075] <... close resumed>) = 0 [pid 5076] umount2("./143/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] rmdir("./140" [pid 5073] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] rmdir("./140" [pid 5947] <... openat resumed>) = 3 [pid 5076] newfstatat(AT_FDCWD, "./143/binderfs", [pid 5946] memfd_create("syzkaller", 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./143/binderfs" [pid 5947] write(3, "1000", 4 [pid 5946] <... memfd_create resumed>) = 3 [pid 5076] <... unlink resumed>) = 0 [pid 5074] umount2("./140/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... rmdir resumed>) = 0 [pid 5075] mkdir("./141", 0777 [pid 5947] <... write resumed>) = 4 [pid 5946] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] getdents64(3, [pid 5075] <... mkdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] mkdir("./141", 0777 [pid 5947] close(3 [pid 5946] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] <... close resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5073] <... mkdir resumed>) = 0 [pid 5076] rmdir("./143") = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5076] mkdir("./144", 0777 [pid 5947] <... close resumed>) = 0 [pid 5946] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] newfstatat(AT_FDCWD, "./140/binderfs", [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5947] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... mkdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5947] <... symlink resumed>) = 0 [pid 5946] <... write resumed>) = 524288 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5947] memfd_create("syzkaller", 0 [pid 5076] <... openat resumed>) = 3 [pid 5074] unlink("./140/binderfs" [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5947] <... memfd_create resumed>) = 3 [pid 5947] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5947] <... mmap resumed>) = 0x7f0356e00000 [pid 5946] munmap(0x7f0356e00000, 138412032 [pid 5074] <... unlink resumed>) = 0 [pid 5947] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5946] <... munmap resumed>) = 0 [pid 5074] getdents64(3, [pid 5947] <... write resumed>) = 524288 [pid 5946] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5947] munmap(0x7f0356e00000, 138412032 [pid 5946] <... openat resumed>) = 4 [pid 5075] <... ioctl resumed>) = 0 [pid 5074] close(3 [pid 5073] <... ioctl resumed>) = 0 [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5947] <... munmap resumed>) = 0 [pid 5946] ioctl(4, LOOP_SET_FD, 3 [pid 5074] <... close resumed>) = 0 ./strace-static-x86_64: Process 5948 attached [pid 5948] set_robust_list(0x55556e32a660, 24 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 5948 [pid 5074] rmdir("./140" [pid 5946] <... ioctl resumed>) = 0 [pid 5948] <... set_robust_list resumed>) = 0 [pid 5948] chdir("./141" [pid 5074] <... rmdir resumed>) = 0 [pid 5948] <... chdir resumed>) = 0 [pid 5948] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5948] setpgid(0, 0) = 0 [pid 5948] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5947] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] mkdir("./141", 0777 [pid 5948] <... openat resumed>) = 3 [pid 5948] write(3, "1000", 4 [pid 5947] <... openat resumed>) = 4 [pid 5074] <... mkdir resumed>) = 0 [pid 5948] <... write resumed>) = 4 [pid 5948] close(3 [pid 5947] ioctl(4, LOOP_SET_FD, 3 [pid 5075] close(3 [pid 5948] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5948] symlink("/dev/binderfs", "./binderfs" [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... openat resumed>) = 3 [pid 5948] <... symlink resumed>) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5948] memfd_create("syzkaller", 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 5949 [pid 5946] close(3 [pid 5076] close(3 [pid 5948] <... memfd_create resumed>) = 3 [pid 5947] <... ioctl resumed>) = 0 [pid 5946] <... close resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5948] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5947] close(3 [pid 5946] close(4 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5948] <... mmap resumed>) = 0x7f0356e00000 [pid 5946] <... close resumed>) = 0 ./strace-static-x86_64: Process 5949 attached ./strace-static-x86_64: Process 5950 attached [pid 5949] set_robust_list(0x55556e32a660, 24 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 5950 [pid 5950] set_robust_list(0x55556e32a660, 24 [pid 5949] <... set_robust_list resumed>) = 0 [pid 5948] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5947] <... close resumed>) = 0 [pid 5946] mkdir("./bus", 0777 [pid 5947] close(4) = 0 [pid 5949] chdir("./141") = 0 [pid 5946] <... mkdir resumed>) = 0 [pid 5947] mkdir("./bus", 0777 [pid 5946] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5950] <... set_robust_list resumed>) = 0 [pid 5950] chdir("./144") = 0 [pid 5949] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5950] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5949] <... prctl resumed>) = 0 [pid 5950] <... prctl resumed>) = 0 [ 162.577198][ T5946] loop5: detected capacity change from 0 to 1024 [ 162.590568][ T5947] loop4: detected capacity change from 0 to 1024 [pid 5949] setpgid(0, 0 [pid 5950] setpgid(0, 0 [pid 5949] <... setpgid resumed>) = 0 [pid 5947] <... mkdir resumed>) = 0 [pid 5946] <... mount resumed>) = 0 [pid 5950] <... setpgid resumed>) = 0 [pid 5949] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5947] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5946] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5950] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5949] <... openat resumed>) = 3 [pid 5949] write(3, "1000", 4 [pid 5946] <... openat resumed>) = 3 [pid 5950] <... openat resumed>) = 3 [pid 5949] <... write resumed>) = 4 [pid 5946] chdir("./bus" [pid 5950] write(3, "1000", 4 [pid 5949] close(3 [pid 5950] <... write resumed>) = 4 [pid 5949] <... close resumed>) = 0 [pid 5950] close(3 [pid 5949] symlink("/dev/binderfs", "./binderfs" [pid 5950] <... close resumed>) = 0 [pid 5949] <... symlink resumed>) = 0 [pid 5950] symlink("/dev/binderfs", "./binderfs" [pid 5949] memfd_create("syzkaller", 0 [pid 5950] <... symlink resumed>) = 0 [pid 5946] <... chdir resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5950] memfd_create("syzkaller", 0 [pid 5949] <... memfd_create resumed>) = 3 [pid 5946] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5949] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5950] <... memfd_create resumed>) = 3 [pid 5949] <... mmap resumed>) = 0x7f0356e00000 [pid 5950] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5949] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5950] <... mmap resumed>) = 0x7f0356e00000 [pid 5950] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5948] <... write resumed>) = 524288 [pid 5946] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5948] munmap(0x7f0356e00000, 138412032) = 0 [pid 5948] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5948] ioctl(4, LOOP_SET_FD, 3 [pid 5946] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5074] close(3) = 0 [pid 5949] <... write resumed>) = 524288 [pid 5946] <... symlink resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556e32a650) = 5951 ./strace-static-x86_64: Process 5951 attached [pid 5947] <... mount resumed>) = 0 [pid 5947] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5951] set_robust_list(0x55556e32a660, 24 [pid 5947] <... openat resumed>) = 3 [pid 5947] chdir("./bus") = 0 [pid 5946] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5947] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5951] <... set_robust_list resumed>) = 0 [pid 5950] <... write resumed>) = 524288 [pid 5947] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5951] chdir("./141" [pid 5947] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5951] <... chdir resumed>) = 0 [pid 5947] <... symlink resumed>) = 0 [pid 5946] <... creat resumed>) = 4 [pid 5951] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5950] munmap(0x7f0356e00000, 138412032 [pid 5947] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5946] rename("./bus", "./file2" [pid 5951] <... prctl resumed>) = 0 [pid 5950] <... munmap resumed>) = 0 [pid 5949] munmap(0x7f0356e00000, 138412032 [pid 5948] <... ioctl resumed>) = 0 [pid 5951] setpgid(0, 0 [pid 5949] <... munmap resumed>) = 0 [pid 5948] close(3 [pid 5946] <... rename resumed>) = -1 EEXIST (File exists) [pid 5951] <... setpgid resumed>) = 0 [pid 5950] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5948] <... close resumed>) = 0 [pid 5951] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5950] <... openat resumed>) = 4 [pid 5949] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5948] close(4 [pid 5951] <... openat resumed>) = 3 [pid 5950] ioctl(4, LOOP_SET_FD, 3 [pid 5949] <... openat resumed>) = 4 [pid 5948] <... close resumed>) = 0 [pid 5951] write(3, "1000", 4 [pid 5947] <... creat resumed>) = 4 [pid 5946] memfd_create("syzkaller", 0 [pid 5951] <... write resumed>) = 4 [pid 5946] <... memfd_create resumed>) = 5 [pid 5951] close(3 [pid 5946] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5951] <... close resumed>) = 0 [pid 5946] <... mmap resumed>) = 0x7f0356e00000 [pid 5951] symlink("/dev/binderfs", "./binderfs" [pid 5948] mkdir("./bus", 0777 [pid 5951] <... symlink resumed>) = 0 [pid 5948] <... mkdir resumed>) = 0 [pid 5948] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5951] memfd_create("syzkaller", 0 [ 162.672017][ T5948] loop0: detected capacity change from 0 to 1024 [ 162.710804][ T5950] loop3: detected capacity change from 0 to 1024 [pid 5949] ioctl(4, LOOP_SET_FD, 3 [pid 5950] <... ioctl resumed>) = 0 [pid 5951] <... memfd_create resumed>) = 3 [pid 5947] rename("./bus", "./file2" [pid 5946] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5950] close(3) = 0 [pid 5950] close(4) = 0 [pid 5950] mkdir("./bus", 0777) = 0 [pid 5951] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5950] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5948] <... mount resumed>) = 0 [pid 5947] <... rename resumed>) = -1 EEXIST (File exists) [pid 5951] <... mmap resumed>) = 0x7f0356e00000 [pid 5948] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5947] memfd_create("syzkaller", 0 [pid 5948] <... openat resumed>) = 3 [pid 5947] <... memfd_create resumed>) = 5 [pid 5950] <... mount resumed>) = 0 [pid 5949] <... ioctl resumed>) = 0 [pid 5948] chdir("./bus" [pid 5947] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5950] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5949] close(3 [pid 5948] <... chdir resumed>) = 0 [pid 5951] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5947] <... mmap resumed>) = 0x7f0356e00000 [pid 5950] <... openat resumed>) = 3 [pid 5948] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5947] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5950] chdir("./bus" [pid 5949] <... close resumed>) = 0 [pid 5948] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5950] <... chdir resumed>) = 0 [pid 5949] close(4 [pid 5948] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5950] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5949] <... close resumed>) = 0 [pid 5946] <... write resumed>) = 524288 [pid 5950] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5949] mkdir("./bus", 0777 [pid 5946] munmap(0x7f0356e00000, 138412032 [pid 5950] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5949] <... mkdir resumed>) = 0 [pid 5948] <... symlink resumed>) = 0 [pid 5947] <... write resumed>) = 524288 [pid 5946] <... munmap resumed>) = 0 [pid 5949] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5948] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5951] <... write resumed>) = 524288 [pid 5950] <... symlink resumed>) = 0 [pid 5948] <... creat resumed>) = 4 [pid 5946] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5951] munmap(0x7f0356e00000, 138412032 [pid 5950] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5948] rename("./bus", "./file2" [pid 5951] <... munmap resumed>) = 0 [pid 5951] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5948] <... rename resumed>) = -1 EEXIST (File exists) [ 162.732018][ T5949] loop2: detected capacity change from 0 to 1024 [pid 5946] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5951] <... openat resumed>) = 4 [pid 5950] <... creat resumed>) = 4 [pid 5949] <... mount resumed>) = 0 [pid 5948] memfd_create("syzkaller", 0 [pid 5947] munmap(0x7f0356e00000, 138412032 [pid 5946] close(5 [pid 5951] ioctl(4, LOOP_SET_FD, 3 [pid 5950] rename("./bus", "./file2" [pid 5949] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5948] <... memfd_create resumed>) = 5 [pid 5947] <... munmap resumed>) = 0 [pid 5949] <... openat resumed>) = 3 [pid 5948] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5949] chdir("./bus") = 0 [pid 5947] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5949] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5947] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5949] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5948] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5947] close(5 [pid 5949] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5950] <... rename resumed>) = -1 EEXIST (File exists) [pid 5949] <... symlink resumed>) = 0 [pid 5947] <... close resumed>) = 0 [pid 5950] memfd_create("syzkaller", 0) = 5 [pid 5950] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5946] <... close resumed>) = 0 [pid 5951] <... ioctl resumed>) = 0 [pid 5950] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5949] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5946] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5951] close(3) = 0 [pid 5948] <... write resumed>) = 524288 [pid 5946] <... open resumed>) = 5 [pid 5951] close(4) = 0 [pid 5947] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5951] mkdir("./bus", 0777 [pid 5949] <... creat resumed>) = 4 [pid 5946] ftruncate(5, 0 [pid 5949] rename("./bus", "./file2" [pid 5951] <... mkdir resumed>) = 0 [pid 5949] <... rename resumed>) = -1 EEXIST (File exists) [pid 5946] <... ftruncate resumed>) = 0 [pid 5950] <... write resumed>) = 524288 [ 162.795203][ T5951] loop1: detected capacity change from 0 to 1024 [pid 5949] memfd_create("syzkaller", 0 [pid 5951] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5947] <... open resumed>) = 5 [pid 5946] exit_group(0 [pid 5949] <... memfd_create resumed>) = 5 [pid 5947] ftruncate(5, 0 [pid 5949] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5947] <... ftruncate resumed>) = 0 [pid 5946] <... exit_group resumed>) = ? [pid 5949] <... mmap resumed>) = 0x7f0356e00000 [pid 5947] exit_group(0 [pid 5949] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5947] <... exit_group resumed>) = ? [pid 5946] +++ exited with 0 +++ [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5946, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5948] munmap(0x7f0356e00000, 138412032 [pid 5947] +++ exited with 0 +++ [pid 5948] <... munmap resumed>) = 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5947, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5951] <... mount resumed>) = 0 [pid 5078] umount2("./143", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5951] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5951] <... openat resumed>) = 3 [pid 5948] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5078] openat(AT_FDCWD, "./143", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5951] chdir("./bus" [pid 5948] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5951] <... chdir resumed>) = 0 [pid 5949] <... write resumed>) = 524288 [pid 5948] close(5 [pid 5078] <... openat resumed>) = 3 [pid 5951] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5950] munmap(0x7f0356e00000, 138412032 [pid 5078] newfstatat(3, "", [pid 5077] umount2("./143", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5951] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5950] <... munmap resumed>) = 0 [pid 5948] <... close resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5950] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5950] close(5 [pid 5951] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] getdents64(3, [pid 5077] openat(AT_FDCWD, "./143", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5951] <... symlink resumed>) = 0 [pid 5950] <... close resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] newfstatat(3, "", [pid 5951] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] umount2("./143/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5949] munmap(0x7f0356e00000, 138412032 [pid 5948] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] getdents64(3, [pid 5949] <... munmap resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5950] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5949] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5077] umount2("./143/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5949] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5949] close(5 [pid 5951] <... creat resumed>) = 4 [pid 5949] <... close resumed>) = 0 [pid 5078] <... umount2 resumed>) = 0 [pid 5948] <... open resumed>) = 5 [pid 5951] rename("./bus", "./file2" [pid 5948] ftruncate(5, 0) = 0 [pid 5951] <... rename resumed>) = -1 EEXIST (File exists) [pid 5948] exit_group(0 [pid 5951] memfd_create("syzkaller", 0 [pid 5950] <... open resumed>) = 5 [pid 5951] <... memfd_create resumed>) = 5 [pid 5948] <... exit_group resumed>) = ? [pid 5951] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5950] ftruncate(5, 0 [pid 5948] +++ exited with 0 +++ [pid 5951] <... mmap resumed>) = 0x7f0356e00000 [pid 5950] <... ftruncate resumed>) = 0 [pid 5078] umount2("./143/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5948, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5950] exit_group(0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5951] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] newfstatat(AT_FDCWD, "./143/bus", [pid 5950] <... exit_group resumed>) = ? [pid 5949] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5073] umount2("./141", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5950] +++ exited with 0 +++ [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] umount2("./143/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] umount2("./143/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] openat(AT_FDCWD, "./141", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5950, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5073] <... openat resumed>) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5949] <... open resumed>) = 5 [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5073] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] umount2("./141/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5949] ftruncate(5, 0) = 0 [pid 5078] openat(AT_FDCWD, "./143/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] newfstatat(AT_FDCWD, "./143/bus", [pid 5076] <... restart_syscall resumed>) = 0 [pid 5951] <... write resumed>) = 524288 [pid 5073] <... umount2 resumed>) = 0 [pid 5951] munmap(0x7f0356e00000, 138412032 [pid 5949] exit_group(0 [pid 5078] <... openat resumed>) = 4 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] umount2("./143/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./141/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./144", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] openat(AT_FDCWD, "./143/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] newfstatat(4, "", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... openat resumed>) = 4 [pid 5073] newfstatat(AT_FDCWD, "./141/bus", [pid 5949] <... exit_group resumed>) = ? [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] newfstatat(4, "", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5951] <... munmap resumed>) = 0 [pid 5949] +++ exited with 0 +++ [pid 5078] getdents64(4, [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./141/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5951] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5077] getdents64(4, [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5949, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5076] openat(AT_FDCWD, "./144", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5951] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] getdents64(4, [pid 5077] getdents64(4, [pid 5076] <... openat resumed>) = 3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] openat(AT_FDCWD, "./141/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5951] close(5 [pid 5078] close(4 [pid 5077] close(4 [pid 5076] newfstatat(3, "", [pid 5075] umount2("./141", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... openat resumed>) = 4 [pid 5078] <... close resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(4, "", [pid 5078] rmdir("./143/bus" [pid 5077] rmdir("./143/bus" [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] openat(AT_FDCWD, "./141", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5076] getdents64(3, [pid 5073] getdents64(4, [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] newfstatat(3, "", [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, [pid 5077] <... rmdir resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] umount2("./144/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] close(4 [pid 5078] <... rmdir resumed>) = 0 [pid 5077] umount2("./143/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] getdents64(3, [pid 5073] <... close resumed>) = 0 [pid 5951] <... close resumed>) = 0 [pid 5078] umount2("./143/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] rmdir("./141/bus") = 0 [pid 5073] umount2("./141/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5951] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./143/binderfs", [pid 5076] umount2("./144/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./141/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] newfstatat(AT_FDCWD, "./143/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./141/binderfs", [pid 5078] unlink("./143/binderfs" [pid 5077] unlink("./143/binderfs" [pid 5076] newfstatat(AT_FDCWD, "./144/bus", [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5951] <... open resumed>) = 5 [pid 5078] <... unlink resumed>) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./141/binderfs" [pid 5951] ftruncate(5, 0) = 0 [pid 5076] umount2("./144/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... unlink resumed>) = 0 [pid 5078] getdents64(3, [pid 5077] getdents64(3, [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5951] exit_group(0) = ? [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] openat(AT_FDCWD, "./144/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] close(3 [pid 5077] close(3 [pid 5076] <... openat resumed>) = 4 [pid 5073] getdents64(3, [pid 5078] <... close resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5076] newfstatat(4, "", [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5078] rmdir("./143" [pid 5951] +++ exited with 0 +++ [pid 5077] rmdir("./143" [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] close(3 [pid 5078] <... rmdir resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] getdents64(4, [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5951, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5075] <... umount2 resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5078] mkdir("./144", 0777 [pid 5077] mkdir("./144", 0777 [pid 5075] umount2("./141/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] rmdir("./141" [pid 5078] <... mkdir resumed>) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 5076] getdents64(4, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] newfstatat(AT_FDCWD, "./141/bus", [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] umount2("./141", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... rmdir resumed>) = 0 [pid 5076] close(4 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... openat resumed>) = 3 [pid 5073] mkdir("./142", 0777 [pid 5076] <... close resumed>) = 0 [pid 5075] umount2("./141/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] openat(AT_FDCWD, "./141", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5076] rmdir("./144/bus" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... openat resumed>) = 3 [pid 5073] <... mkdir resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./141/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... rmdir resumed>) = 0 [pid 5074] newfstatat(3, "", [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] umount2("./144/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... openat resumed>) = 4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] newfstatat(4, "", [pid 5074] getdents64(3, [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] getdents64(4, [pid 5074] umount2("./141/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] <... openat resumed>) = 3 [pid 5076] newfstatat(AT_FDCWD, "./144/binderfs", [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] getdents64(4, [pid 5076] unlink("./144/binderfs") = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] getdents64(3, [pid 5075] close(4 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5075] rmdir("./141/bus" [pid 5074] umount2("./141/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] close(3) = 0 [pid 5076] rmdir("./144") = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./141/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] newfstatat(AT_FDCWD, "./141/bus", [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] mkdir("./145", 0777 [pid 5078] <... ioctl resumed>) = 0 [pid 5077] <... ioctl resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./141/binderfs", [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] close(3 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./141/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... ioctl resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5077] close(3 [pid 5075] unlink("./141/binderfs" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] <... close resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] <... unlink resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5953 attached [pid 5075] getdents64(3, [pid 5074] openat(AT_FDCWD, "./141/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] <... openat resumed>) = 4 [pid 5953] set_robust_list(0x55556e32a660, 24 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 5952 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 5953 [pid 5075] close(3 [pid 5074] newfstatat(4, "", [pid 5953] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 5952 attached [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... close resumed>) = 0 [pid 5074] getdents64(4, [pid 5075] rmdir("./141" [pid 5952] set_robust_list(0x55556e32a660, 24 [pid 5953] chdir("./144" [pid 5952] <... set_robust_list resumed>) = 0 [pid 5953] <... chdir resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] close(3 [pid 5953] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] mkdir("./142", 0777 [pid 5074] getdents64(4, [pid 5073] <... close resumed>) = 0 [pid 5952] chdir("./144" [pid 5953] <... prctl resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5952] <... chdir resumed>) = 0 [pid 5953] setpgid(0, 0 [pid 5952] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5952] setpgid(0, 0) = 0 [pid 5952] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5953] <... setpgid resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 5954 [pid 5075] <... openat resumed>) = 3 [pid 5952] write(3, "1000", 4) = 4 ./strace-static-x86_64: Process 5954 attached [pid 5952] close(3 [pid 5954] set_robust_list(0x55556e32a660, 24 [pid 5952] <... close resumed>) = 0 [pid 5954] <... set_robust_list resumed>) = 0 [pid 5952] symlink("/dev/binderfs", "./binderfs" [pid 5954] chdir("./142" [pid 5952] <... symlink resumed>) = 0 [pid 5953] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] close(4 [pid 5954] <... chdir resumed>) = 0 [pid 5952] memfd_create("syzkaller", 0 [pid 5074] <... close resumed>) = 0 [pid 5953] <... openat resumed>) = 3 [pid 5954] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5952] <... memfd_create resumed>) = 3 [pid 5953] write(3, "1000", 4 [pid 5074] rmdir("./141/bus" [pid 5953] <... write resumed>) = 4 [pid 5954] <... prctl resumed>) = 0 [pid 5952] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5954] setpgid(0, 0 [pid 5952] <... mmap resumed>) = 0x7f0356e00000 [pid 5953] close(3 [pid 5074] <... rmdir resumed>) = 0 [pid 5953] <... close resumed>) = 0 [pid 5074] umount2("./141/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5954] <... setpgid resumed>) = 0 [pid 5953] symlink("/dev/binderfs", "./binderfs" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5954] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5953] <... symlink resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./141/binderfs", [pid 5954] <... openat resumed>) = 3 [pid 5954] write(3, "1000", 4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5954] <... write resumed>) = 4 [pid 5952] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5953] memfd_create("syzkaller", 0 [pid 5074] unlink("./141/binderfs" [pid 5954] close(3 [pid 5953] <... memfd_create resumed>) = 3 [pid 5074] <... unlink resumed>) = 0 [pid 5954] <... close resumed>) = 0 [pid 5953] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] getdents64(3, [pid 5954] symlink("/dev/binderfs", "./binderfs" [pid 5953] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] <... ioctl resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5954] <... symlink resumed>) = 0 [pid 5076] close(3 [pid 5074] close(3 [pid 5954] memfd_create("syzkaller", 0 [pid 5076] <... close resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5954] <... memfd_create resumed>) = 3 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] rmdir("./141") = 0 [pid 5074] mkdir("./142", 0777./strace-static-x86_64: Process 5955 attached [pid 5954] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5953] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... mkdir resumed>) = 0 [pid 5955] set_robust_list(0x55556e32a660, 24 [pid 5954] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 5955 [pid 5955] <... set_robust_list resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5954] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5955] chdir("./145" [pid 5952] <... write resumed>) = 524288 [pid 5953] <... write resumed>) = 524288 [pid 5075] close(3 [pid 5952] munmap(0x7f0356e00000, 138412032 [pid 5955] <... chdir resumed>) = 0 [pid 5955] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] <... close resumed>) = 0 [pid 5955] <... prctl resumed>) = 0 [pid 5952] <... munmap resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5955] setpgid(0, 0) = 0 [pid 5952] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5955] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5952] <... openat resumed>) = 4 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 5956 [pid 5952] ioctl(4, LOOP_SET_FD, 3 [pid 5955] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5956 attached [pid 5955] write(3, "1000", 4 [pid 5954] <... write resumed>) = 524288 [pid 5074] <... ioctl resumed>) = 0 [pid 5956] set_robust_list(0x55556e32a660, 24 [pid 5955] <... write resumed>) = 4 [pid 5954] munmap(0x7f0356e00000, 138412032 [pid 5952] <... ioctl resumed>) = 0 [pid 5953] munmap(0x7f0356e00000, 138412032 [pid 5956] <... set_robust_list resumed>) = 0 [pid 5955] close(3 [pid 5954] <... munmap resumed>) = 0 [pid 5952] close(3 [pid 5953] <... munmap resumed>) = 0 [pid 5074] close(3 [pid 5956] chdir("./142" [pid 5955] <... close resumed>) = 0 [pid 5954] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5952] <... close resumed>) = 0 [pid 5953] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5952] close(4 [pid 5953] <... openat resumed>) = 4 [pid 5955] symlink("/dev/binderfs", "./binderfs" [pid 5954] <... openat resumed>) = 4 [pid 5952] <... close resumed>) = 0 [pid 5953] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5954] ioctl(4, LOOP_SET_FD, 3 [pid 5952] mkdir("./bus", 0777 [pid 5955] <... symlink resumed>) = 0 [pid 5952] <... mkdir resumed>) = 0 [pid 5952] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5956] <... chdir resumed>) = 0 [pid 5955] memfd_create("syzkaller", 0 [pid 5954] <... ioctl resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5956] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5955] <... memfd_create resumed>) = 3 [pid 5956] <... prctl resumed>) = 0 [pid 5956] setpgid(0, 0) = 0 [pid 5952] <... mount resumed>) = 0 [pid 5952] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5952] chdir("./bus") = 0 [pid 5956] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5952] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5955] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5956] <... openat resumed>) = 3 [pid 5952] <... openat resumed>) = -1 EBUSY (Device or resource busy) ./strace-static-x86_64: Process 5957 attached [pid 5952] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5957] set_robust_list(0x55556e32a660, 24) = 0 [pid 5953] close(3 [pid 5957] chdir("./142" [pid 5952] <... symlink resumed>) = 0 [pid 5953] <... close resumed>) = 0 [pid 5957] <... chdir resumed>) = 0 [pid 5953] close(4 [pid 5957] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5952] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5953] <... close resumed>) = 0 [pid 5957] <... prctl resumed>) = 0 [pid 5956] write(3, "1000", 4 [pid 5955] <... mmap resumed>) = 0x7f0356e00000 [pid 5954] close(3 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 5957 [pid 5957] setpgid(0, 0 [pid 5956] <... write resumed>) = 4 [pid 5953] mkdir("./bus", 0777 [pid 5957] <... setpgid resumed>) = 0 [pid 5956] close(3 [pid 5955] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5954] <... close resumed>) = 0 [pid 5953] <... mkdir resumed>) = 0 [pid 5957] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5956] <... close resumed>) = 0 [pid 5954] close(4 [pid 5953] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5956] symlink("/dev/binderfs", "./binderfs" [pid 5954] <... close resumed>) = 0 [pid 5952] <... creat resumed>) = 4 [pid 5957] <... openat resumed>) = 3 [pid 5956] <... symlink resumed>) = 0 [pid 5954] mkdir("./bus", 0777 [pid 5952] rename("./bus", "./file2" [pid 5957] write(3, "1000", 4 [pid 5956] memfd_create("syzkaller", 0 [pid 5955] <... write resumed>) = 524288 [pid 5954] <... mkdir resumed>) = 0 [pid 5952] <... rename resumed>) = -1 EEXIST (File exists) [pid 5957] <... write resumed>) = 4 [pid 5956] <... memfd_create resumed>) = 3 [pid 5954] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5952] memfd_create("syzkaller", 0 [pid 5953] <... mount resumed>) = 0 [ 163.187308][ T5952] loop5: detected capacity change from 0 to 1024 [ 163.209678][ T5953] loop4: detected capacity change from 0 to 1024 [ 163.217621][ T5954] loop0: detected capacity change from 0 to 1024 [pid 5957] close(3 [pid 5956] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5955] munmap(0x7f0356e00000, 138412032 [pid 5952] <... memfd_create resumed>) = 5 [pid 5953] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5957] <... close resumed>) = 0 [pid 5955] <... munmap resumed>) = 0 [pid 5952] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5953] <... openat resumed>) = 3 [pid 5957] symlink("/dev/binderfs", "./binderfs" [pid 5952] <... mmap resumed>) = 0x7f0356e00000 [pid 5953] chdir("./bus" [pid 5957] <... symlink resumed>) = 0 [pid 5956] <... mmap resumed>) = 0x7f0356e00000 [pid 5955] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5952] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5953] <... chdir resumed>) = 0 [pid 5955] <... openat resumed>) = 4 [pid 5953] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5955] ioctl(4, LOOP_SET_FD, 3 [pid 5953] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5957] memfd_create("syzkaller", 0) = 3 [pid 5957] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5953] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5957] <... mmap resumed>) = 0x7f0356e00000 [pid 5955] <... ioctl resumed>) = 0 [pid 5953] <... symlink resumed>) = 0 [pid 5957] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5955] close(3 [pid 5954] <... mount resumed>) = 0 [pid 5952] <... write resumed>) = 524288 [pid 5955] <... close resumed>) = 0 [pid 5954] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5955] close(4 [pid 5956] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5955] <... close resumed>) = 0 [pid 5954] <... openat resumed>) = 3 [pid 5955] mkdir("./bus", 0777 [pid 5954] chdir("./bus" [pid 5955] <... mkdir resumed>) = 0 [pid 5954] <... chdir resumed>) = 0 [pid 5953] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5955] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5954] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5956] <... write resumed>) = 524288 [pid 5955] <... mount resumed>) = 0 [pid 5954] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5953] <... creat resumed>) = 4 [pid 5955] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5954] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5953] rename("./bus", "./file2" [pid 5955] <... openat resumed>) = 3 [pid 5953] <... rename resumed>) = -1 EEXIST (File exists) [pid 5957] <... write resumed>) = 524288 [pid 5956] munmap(0x7f0356e00000, 138412032 [pid 5955] chdir("./bus" [pid 5954] <... symlink resumed>) = 0 [pid 5952] munmap(0x7f0356e00000, 138412032) = 0 [pid 5955] <... chdir resumed>) = 0 [pid 5954] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [ 163.276460][ T5955] loop3: detected capacity change from 0 to 1024 [pid 5953] memfd_create("syzkaller", 0 [pid 5956] <... munmap resumed>) = 0 [pid 5955] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5954] <... creat resumed>) = 4 [pid 5952] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5953] <... memfd_create resumed>) = 5 [pid 5957] munmap(0x7f0356e00000, 138412032 [pid 5955] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5953] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5955] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5954] rename("./bus", "./file2" [pid 5953] <... mmap resumed>) = 0x7f0356e00000 [pid 5954] <... rename resumed>) = -1 EEXIST (File exists) [pid 5952] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5952] close(5 [pid 5954] memfd_create("syzkaller", 0) = 5 [pid 5954] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5957] <... munmap resumed>) = 0 [pid 5956] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5954] <... mmap resumed>) = 0x7f0356e00000 [pid 5956] <... openat resumed>) = 4 [pid 5956] ioctl(4, LOOP_SET_FD, 3 [pid 5957] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5954] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5957] <... openat resumed>) = 4 [pid 5955] <... symlink resumed>) = 0 [pid 5952] <... close resumed>) = 0 [pid 5953] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5952] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5957] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5956] <... ioctl resumed>) = 0 [pid 5955] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5954] <... write resumed>) = 524288 [pid 5952] <... open resumed>) = 5 [pid 5953] <... write resumed>) = 524288 [pid 5957] close(3 [pid 5956] close(3 [pid 5955] <... creat resumed>) = 4 [pid 5954] munmap(0x7f0356e00000, 138412032 [pid 5952] ftruncate(5, 0 [pid 5956] <... close resumed>) = 0 [pid 5952] <... ftruncate resumed>) = 0 [pid 5957] <... close resumed>) = 0 [pid 5956] close(4 [pid 5955] rename("./bus", "./file2" [pid 5954] <... munmap resumed>) = 0 [pid 5952] exit_group(0 [pid 5957] close(4 [pid 5956] <... close resumed>) = 0 [pid 5952] <... exit_group resumed>) = ? [pid 5956] mkdir("./bus", 0777 [pid 5955] <... rename resumed>) = -1 EEXIST (File exists) [pid 5954] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5953] munmap(0x7f0356e00000, 138412032 [pid 5955] memfd_create("syzkaller", 0 [pid 5954] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5953] <... munmap resumed>) = 0 [pid 5955] <... memfd_create resumed>) = 5 [pid 5957] <... close resumed>) = 0 [pid 5956] <... mkdir resumed>) = 0 [pid 5955] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5954] close(5 [pid 5957] mkdir("./bus", 0777 [pid 5956] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5955] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5954] <... close resumed>) = 0 [pid 5952] +++ exited with 0 +++ [pid 5953] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5952, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5953] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 163.351408][ T5956] loop2: detected capacity change from 0 to 1024 [ 163.371326][ T5957] loop1: detected capacity change from 0 to 1024 [pid 5953] close(5 [pid 5957] <... mkdir resumed>) = 0 [pid 5078] umount2("./144", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5954] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5957] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5956] <... mount resumed>) = 0 [pid 5955] <... write resumed>) = 524288 [pid 5953] <... close resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5955] munmap(0x7f0356e00000, 138412032 [pid 5956] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5955] <... munmap resumed>) = 0 [pid 5957] <... mount resumed>) = 0 [pid 5956] chdir("./bus" [pid 5954] <... open resumed>) = 5 [pid 5953] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] openat(AT_FDCWD, "./144", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5957] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5956] <... chdir resumed>) = 0 [pid 5956] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] <... openat resumed>) = 3 [pid 5956] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] newfstatat(3, "", [pid 5956] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5955] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5954] ftruncate(5, 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5955] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5954] <... ftruncate resumed>) = 0 [pid 5078] getdents64(3, [pid 5955] close(5 [pid 5954] exit_group(0 [pid 5957] <... openat resumed>) = 3 [pid 5956] <... symlink resumed>) = 0 [pid 5955] <... close resumed>) = 0 [pid 5954] <... exit_group resumed>) = ? [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5957] chdir("./bus" [pid 5956] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5953] <... open resumed>) = 5 [pid 5078] umount2("./144/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5957] <... chdir resumed>) = 0 [pid 5957] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5953] ftruncate(5, 0 [pid 5957] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5953] <... ftruncate resumed>) = 0 [pid 5956] <... creat resumed>) = 4 [pid 5953] exit_group(0 [pid 5956] rename("./bus", "./file2" [pid 5953] <... exit_group resumed>) = ? [pid 5955] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5954] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5954, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5956] <... rename resumed>) = -1 EEXIST (File exists) [pid 5956] memfd_create("syzkaller", 0 [pid 5955] <... open resumed>) = 5 [pid 5956] <... memfd_create resumed>) = 5 [pid 5073] umount2("./142", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5957] <... symlink resumed>) = 0 [pid 5955] ftruncate(5, 0 [pid 5957] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5956] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5955] <... ftruncate resumed>) = 0 [pid 5953] +++ exited with 0 +++ [pid 5078] <... umount2 resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./142", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5956] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5953, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5073] <... openat resumed>) = 3 [pid 5077] umount2("./144", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./144", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5955] exit_group(0) = ? [pid 5077] newfstatat(3, "", [pid 5956] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5955] +++ exited with 0 +++ [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] newfstatat(3, "", [pid 5078] umount2("./144/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] getdents64(3, [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5955, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5957] <... creat resumed>) = 4 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5957] rename("./bus", "./file2" [pid 5078] newfstatat(AT_FDCWD, "./144/bus", [pid 5073] getdents64(3, [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./145", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./144/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./145", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] umount2("./142/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] openat(AT_FDCWD, "./144/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] umount2("./144/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... openat resumed>) = 3 [pid 5957] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] <... openat resumed>) = 4 [pid 5076] newfstatat(3, "", [pid 5957] memfd_create("syzkaller", 0 [pid 5956] <... write resumed>) = 524288 [pid 5078] newfstatat(4, "", [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5957] <... memfd_create resumed>) = 5 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, [pid 5957] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5956] munmap(0x7f0356e00000, 138412032 [pid 5078] getdents64(4, [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] umount2("./145/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = 0 [pid 5957] <... mmap resumed>) = 0x7f0356e00000 [pid 5956] <... munmap resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] <... umount2 resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5957] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5956] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] getdents64(4, [pid 5073] umount2("./142/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./145/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] umount2("./144/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5956] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] close(4 [pid 5956] close(5 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./145/bus", [pid 5078] rmdir("./144/bus" [pid 5077] newfstatat(AT_FDCWD, "./144/bus", [pid 5073] newfstatat(AT_FDCWD, "./142/bus", [pid 5078] <... rmdir resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] umount2("./144/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] umount2("./144/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./145/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] newfstatat(AT_FDCWD, "./144/binderfs", [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./142/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] openat(AT_FDCWD, "./145/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... openat resumed>) = 4 [pid 5076] newfstatat(4, "", [pid 5073] openat(AT_FDCWD, "./142/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] openat(AT_FDCWD, "./144/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... openat resumed>) = 4 [pid 5077] <... openat resumed>) = 4 [pid 5078] unlink("./144/binderfs") = 0 [pid 5077] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] newfstatat(4, "", [pid 5078] getdents64(3, [pid 5077] getdents64(4, [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, [pid 5073] getdents64(4, [pid 5078] close(3 [pid 5077] getdents64(4, [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5956] <... close resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] getdents64(4, [pid 5073] getdents64(4, [pid 5956] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] rmdir("./144" [pid 5077] close(4 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] <... close resumed>) = 0 [pid 5076] close(4 [pid 5073] close(4 [pid 5077] rmdir("./144/bus" [pid 5076] <... close resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5076] rmdir("./145/bus" [pid 5073] rmdir("./142/bus" [pid 5077] <... rmdir resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5076] umount2("./145/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./142/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... rmdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./145/binderfs", [pid 5073] newfstatat(AT_FDCWD, "./142/binderfs", [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] mkdir("./145", 0777 [pid 5077] umount2("./144/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] unlink("./145/binderfs" [pid 5957] <... write resumed>) = 524288 [pid 5076] <... unlink resumed>) = 0 [pid 5073] unlink("./142/binderfs" [pid 5956] <... open resumed>) = 5 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5957] munmap(0x7f0356e00000, 138412032 [pid 5956] ftruncate(5, 0 [pid 5078] <... mkdir resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./144/binderfs", [pid 5073] <... unlink resumed>) = 0 [pid 5076] getdents64(3, [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5956] <... ftruncate resumed>) = 0 [pid 5076] close(3 [pid 5957] <... munmap resumed>) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] unlink("./144/binderfs" [pid 5076] <... close resumed>) = 0 [pid 5073] getdents64(3, [pid 5956] exit_group(0 [pid 5078] <... openat resumed>) = 3 [pid 5076] rmdir("./145" [pid 5957] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5956] <... exit_group resumed>) = ? [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5077] <... unlink resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3 [pid 5076] <... rmdir resumed>) = 0 [pid 5957] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... close resumed>) = 0 [pid 5957] close(5 [pid 5077] getdents64(3, [pid 5076] mkdir("./146", 0777 [pid 5073] rmdir("./142" [pid 5956] +++ exited with 0 +++ [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5077] close(3 [pid 5073] mkdir("./143", 0777 [pid 5077] <... close resumed>) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5956, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5073] <... mkdir resumed>) = 0 [pid 5957] <... close resumed>) = 0 [pid 5077] rmdir("./144" [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 5076] <... openat resumed>) = 3 [pid 5075] <... restart_syscall resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5957] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] <... rmdir resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5077] mkdir("./145", 0777) = 0 [pid 5075] umount2("./142", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5075] openat(AT_FDCWD, "./142", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5957] <... open resumed>) = 5 [pid 5077] <... openat resumed>) = 3 [pid 5075] newfstatat(3, "", [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5957] ftruncate(5, 0 [pid 5075] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] umount2("./142/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5957] <... ftruncate resumed>) = 0 [pid 5957] exit_group(0) = ? [pid 5075] <... umount2 resumed>) = 0 [pid 5075] umount2("./142/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./142/bus", [pid 5957] +++ exited with 0 +++ [pid 5076] <... ioctl resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5957, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5074] umount2("./142", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./142/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./142/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] openat(AT_FDCWD, "./142", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... ioctl resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 5074] <... openat resumed>) = 3 [pid 5075] newfstatat(4, "", [pid 5074] newfstatat(3, "", [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, [pid 5074] getdents64(3, [pid 5076] close(3) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] <... ioctl resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] close(3 [pid 5075] getdents64(4, [pid 5074] umount2("./142/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] close(4./strace-static-x86_64: Process 5958 attached [pid 5078] <... close resumed>) = 0 [pid 5077] <... ioctl resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 5958 [pid 5075] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5073] close(3 [pid 5958] set_robust_list(0x55556e32a660, 24 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] close(3 [pid 5075] rmdir("./142/bus" [pid 5958] <... set_robust_list resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5073] <... close resumed>) = 0 ./strace-static-x86_64: Process 5959 attached [pid 5958] chdir("./146" [pid 5077] <... close resumed>) = 0 [pid 5075] umount2("./142/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5958] <... chdir resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] umount2("./142/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./142/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./142/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./142/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5074] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] close(4 [pid 5075] newfstatat(AT_FDCWD, "./142/binderfs", [pid 5959] set_robust_list(0x55556e32a660, 24 [pid 5958] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] <... close resumed>) = 0 ./strace-static-x86_64: Process 5960 attached [pid 5958] <... prctl resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 5960 [pid 5958] setpgid(0, 0 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 5961 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] rmdir("./142/bus" [pid 5960] set_robust_list(0x55556e32a660, 24 [pid 5958] <... setpgid resumed>) = 0 [pid 5960] <... set_robust_list resumed>) = 0 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 5959 [pid 5959] <... set_robust_list resumed>) = 0 [pid 5958] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] unlink("./142/binderfs" [pid 5960] chdir("./143" [pid 5074] <... rmdir resumed>) = 0 [pid 5960] <... chdir resumed>) = 0 [pid 5960] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5959] chdir("./145" [pid 5958] <... openat resumed>) = 3 [pid 5075] <... unlink resumed>) = 0 [pid 5074] umount2("./142/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5960] <... prctl resumed>) = 0 [pid 5958] write(3, "1000", 4 [pid 5960] setpgid(0, 0) = 0 [pid 5958] <... write resumed>) = 4 ./strace-static-x86_64: Process 5961 attached [pid 5959] <... chdir resumed>) = 0 [pid 5075] getdents64(3, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5961] set_robust_list(0x55556e32a660, 24 [pid 5959] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5958] close(3 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5961] <... set_robust_list resumed>) = 0 [pid 5959] <... prctl resumed>) = 0 [pid 5958] <... close resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./142/binderfs", [pid 5961] chdir("./145" [pid 5960] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5959] setpgid(0, 0 [pid 5958] symlink("/dev/binderfs", "./binderfs" [pid 5075] close(3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5961] <... chdir resumed>) = 0 [pid 5959] <... setpgid resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5074] unlink("./142/binderfs" [pid 5961] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5959] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] rmdir("./142" [pid 5074] <... unlink resumed>) = 0 [pid 5961] <... prctl resumed>) = 0 [pid 5960] <... openat resumed>) = 3 [pid 5959] <... openat resumed>) = 3 [pid 5958] <... symlink resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] getdents64(3, [pid 5961] setpgid(0, 0 [pid 5960] write(3, "1000", 4 [pid 5959] write(3, "1000", 4 [pid 5958] memfd_create("syzkaller", 0 [pid 5075] mkdir("./143", 0777 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5961] <... setpgid resumed>) = 0 [pid 5959] <... write resumed>) = 4 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] close(3 [pid 5961] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5960] <... write resumed>) = 4 [pid 5959] close(3 [pid 5958] <... memfd_create resumed>) = 3 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] <... close resumed>) = 0 [pid 5961] <... openat resumed>) = 3 [pid 5960] close(3 [pid 5959] <... close resumed>) = 0 [pid 5958] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... openat resumed>) = 3 [pid 5074] rmdir("./142" [pid 5960] <... close resumed>) = 0 [pid 5960] symlink("/dev/binderfs", "./binderfs" [pid 5959] symlink("/dev/binderfs", "./binderfs" [pid 5958] <... mmap resumed>) = 0x7f0356e00000 [pid 5074] <... rmdir resumed>) = 0 [pid 5960] <... symlink resumed>) = 0 [pid 5959] <... symlink resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] mkdir("./143", 0777 [pid 5959] memfd_create("syzkaller", 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5961] write(3, "1000", 4 [pid 5959] <... memfd_create resumed>) = 3 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5961] <... write resumed>) = 4 [pid 5960] memfd_create("syzkaller", 0 [pid 5959] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... openat resumed>) = 3 [pid 5961] close(3 [pid 5959] <... mmap resumed>) = 0x7f0356e00000 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5961] <... close resumed>) = 0 [pid 5960] <... memfd_create resumed>) = 3 [pid 5958] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5960] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5961] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5961] memfd_create("syzkaller", 0) = 3 [pid 5959] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5961] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5960] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5961] <... mmap resumed>) = 0x7f0356e00000 [pid 5960] <... write resumed>) = 524288 [pid 5959] <... write resumed>) = 524288 [pid 5960] munmap(0x7f0356e00000, 138412032 [pid 5961] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5959] munmap(0x7f0356e00000, 138412032 [pid 5958] <... write resumed>) = 524288 [pid 5075] <... ioctl resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5075] close(3 [pid 5960] <... munmap resumed>) = 0 [pid 5961] <... write resumed>) = 524288 [pid 5959] <... munmap resumed>) = 0 [pid 5958] munmap(0x7f0356e00000, 138412032 [pid 5075] <... close resumed>) = 0 [pid 5074] close(3 [pid 5958] <... munmap resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5958] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5958] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5962 attached [pid 5962] set_robust_list(0x55556e32a660, 24 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 5962 [pid 5962] <... set_robust_list resumed>) = 0 [pid 5960] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5959] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5960] <... openat resumed>) = 4 [pid 5959] <... openat resumed>) = 4 [pid 5962] chdir("./143" [pid 5959] ioctl(4, LOOP_SET_FD, 3 [pid 5962] <... chdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5961] munmap(0x7f0356e00000, 138412032 [pid 5960] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5963 attached [pid 5962] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5961] <... munmap resumed>) = 0 [pid 5961] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5958] <... ioctl resumed>) = 0 [pid 5961] ioctl(4, LOOP_SET_FD, 3 [pid 5958] close(3 [pid 5963] set_robust_list(0x55556e32a660, 24 [pid 5962] <... prctl resumed>) = 0 [pid 5958] <... close resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 5963 [pid 5962] setpgid(0, 0) = 0 [pid 5963] <... set_robust_list resumed>) = 0 [pid 5958] close(4 [pid 5963] chdir("./143" [pid 5958] <... close resumed>) = 0 [pid 5963] <... chdir resumed>) = 0 [pid 5962] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5958] mkdir("./bus", 0777 [pid 5963] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5962] <... openat resumed>) = 3 [pid 5960] <... ioctl resumed>) = 0 [pid 5961] <... ioctl resumed>) = 0 [pid 5959] <... ioctl resumed>) = 0 [pid 5958] <... mkdir resumed>) = 0 [pid 5958] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5963] <... prctl resumed>) = 0 [pid 5962] write(3, "1000", 4 [pid 5963] setpgid(0, 0 [pid 5962] <... write resumed>) = 4 [pid 5961] close(3 [pid 5960] close(3 [pid 5959] close(3 [pid 5963] <... setpgid resumed>) = 0 [pid 5962] close(3 [pid 5961] <... close resumed>) = 0 [pid 5960] <... close resumed>) = 0 [pid 5959] <... close resumed>) = 0 [pid 5963] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5962] <... close resumed>) = 0 [pid 5961] close(4 [pid 5960] close(4 [pid 5959] close(4 [pid 5963] <... openat resumed>) = 3 [pid 5962] symlink("/dev/binderfs", "./binderfs" [pid 5961] <... close resumed>) = 0 [pid 5960] <... close resumed>) = 0 [pid 5959] <... close resumed>) = 0 [pid 5962] <... symlink resumed>) = 0 [pid 5961] mkdir("./bus", 0777 [pid 5960] mkdir("./bus", 0777 [pid 5959] mkdir("./bus", 0777 [pid 5958] <... mount resumed>) = 0 [pid 5958] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5958] chdir("./bus" [pid 5963] write(3, "1000", 4 [pid 5962] memfd_create("syzkaller", 0 [pid 5961] <... mkdir resumed>) = 0 [pid 5960] <... mkdir resumed>) = 0 [pid 5959] <... mkdir resumed>) = 0 [pid 5963] <... write resumed>) = 4 [pid 5959] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5962] <... memfd_create resumed>) = 3 [pid 5960] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5958] <... chdir resumed>) = 0 [pid 5958] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5963] close(3 [pid 5962] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5961] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [ 163.793147][ T5958] loop3: detected capacity change from 0 to 1024 [ 163.802335][ T5959] loop5: detected capacity change from 0 to 1024 [ 163.810660][ T5960] loop0: detected capacity change from 0 to 1024 [ 163.821193][ T5961] loop4: detected capacity change from 0 to 1024 [pid 5958] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5962] <... mmap resumed>) = 0x7f0356e00000 [pid 5963] <... close resumed>) = 0 [pid 5958] <... symlink resumed>) = 0 [pid 5958] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5962] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5963] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5963] memfd_create("syzkaller", 0) = 3 [pid 5963] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5961] <... mount resumed>) = 0 [pid 5960] <... mount resumed>) = 0 [pid 5959] <... mount resumed>) = 0 [pid 5958] <... creat resumed>) = 4 [pid 5958] rename("./bus", "./file2" [pid 5961] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5960] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5959] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5958] <... rename resumed>) = -1 EEXIST (File exists) [pid 5961] <... openat resumed>) = 3 [pid 5960] <... openat resumed>) = 3 [pid 5959] <... openat resumed>) = 3 [pid 5958] memfd_create("syzkaller", 0 [pid 5960] chdir("./bus" [pid 5958] <... memfd_create resumed>) = 5 [pid 5961] chdir("./bus" [pid 5960] <... chdir resumed>) = 0 [pid 5959] chdir("./bus" [pid 5958] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5961] <... chdir resumed>) = 0 [pid 5960] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5958] <... mmap resumed>) = 0x7f0356e00000 [pid 5959] <... chdir resumed>) = 0 [pid 5961] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5960] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5959] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5958] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5963] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5960] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5959] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5962] <... write resumed>) = 524288 [pid 5961] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5959] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5960] <... symlink resumed>) = 0 [pid 5960] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5961] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5959] <... symlink resumed>) = 0 [pid 5961] <... symlink resumed>) = 0 [pid 5959] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5961] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5960] <... creat resumed>) = 4 [pid 5960] rename("./bus", "./file2" [pid 5962] munmap(0x7f0356e00000, 138412032) = 0 [pid 5961] <... creat resumed>) = 4 [pid 5960] <... rename resumed>) = -1 EEXIST (File exists) [pid 5959] <... creat resumed>) = 4 [pid 5960] memfd_create("syzkaller", 0) = 5 [pid 5959] rename("./bus", "./file2" [pid 5960] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5963] <... write resumed>) = 524288 [pid 5962] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5961] rename("./bus", "./file2" [pid 5960] <... mmap resumed>) = 0x7f0356e00000 [pid 5959] <... rename resumed>) = -1 EEXIST (File exists) [pid 5963] munmap(0x7f0356e00000, 138412032 [pid 5962] <... openat resumed>) = 4 [pid 5961] <... rename resumed>) = -1 EEXIST (File exists) [pid 5958] <... write resumed>) = 524288 [pid 5961] memfd_create("syzkaller", 0 [pid 5962] ioctl(4, LOOP_SET_FD, 3 [pid 5961] <... memfd_create resumed>) = 5 [pid 5958] munmap(0x7f0356e00000, 138412032) = 0 [pid 5960] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5958] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5963] <... munmap resumed>) = 0 [pid 5961] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5958] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5958] close(5 [pid 5961] <... mmap resumed>) = 0x7f0356e00000 [pid 5959] memfd_create("syzkaller", 0 [pid 5963] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5961] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5959] <... memfd_create resumed>) = 5 [pid 5963] <... openat resumed>) = 4 [pid 5959] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5963] ioctl(4, LOOP_SET_FD, 3 [pid 5959] <... mmap resumed>) = 0x7f0356e00000 [pid 5960] <... write resumed>) = 524288 [pid 5959] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5958] <... close resumed>) = 0 [pid 5958] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5962] <... ioctl resumed>) = 0 [pid 5962] close(3) = 0 [pid 5961] <... write resumed>) = 524288 [pid 5958] <... open resumed>) = 5 [pid 5960] munmap(0x7f0356e00000, 138412032) = 0 [pid 5963] <... ioctl resumed>) = 0 [pid 5963] close(3 [pid 5962] close(4 [pid 5963] <... close resumed>) = 0 [pid 5962] <... close resumed>) = 0 [pid 5960] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5962] mkdir("./bus", 0777 [pid 5960] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5963] close(4 [pid 5962] <... mkdir resumed>) = 0 [pid 5960] close(5 [pid 5963] <... close resumed>) = 0 [pid 5963] mkdir("./bus", 0777 [pid 5960] <... close resumed>) = 0 [pid 5958] ftruncate(5, 0 [pid 5962] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5963] <... mkdir resumed>) = 0 [pid 5959] <... write resumed>) = 524288 [pid 5958] <... ftruncate resumed>) = 0 [pid 5958] exit_group(0) = ? [pid 5963] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5959] munmap(0x7f0356e00000, 138412032 [pid 5958] +++ exited with 0 +++ [pid 5961] munmap(0x7f0356e00000, 138412032 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5958, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5961] <... munmap resumed>) = 0 [pid 5959] <... munmap resumed>) = 0 [pid 5961] openat(AT_FDCWD, "/dev/loop4", O_RDWR [ 163.929990][ T5962] loop2: detected capacity change from 0 to 1024 [ 163.954812][ T5963] loop1: detected capacity change from 0 to 1024 [pid 5959] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5961] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5959] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5961] close(5 [pid 5959] close(5 [pid 5960] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5076] umount2("./146", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5961] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./146", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5962] <... mount resumed>) = 0 [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5962] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5960] <... open resumed>) = 5 [pid 5076] getdents64(3, [pid 5962] <... openat resumed>) = 3 [pid 5960] ftruncate(5, 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5962] chdir("./bus" [pid 5960] <... ftruncate resumed>) = 0 [pid 5076] umount2("./146/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5962] <... chdir resumed>) = 0 [pid 5960] exit_group(0 [pid 5959] <... close resumed>) = 0 [pid 5962] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5960] <... exit_group resumed>) = ? [pid 5962] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5961] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5959] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5963] <... mount resumed>) = 0 [pid 5960] +++ exited with 0 +++ [pid 5963] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5959] <... open resumed>) = 5 [pid 5963] <... openat resumed>) = 3 [pid 5962] <... symlink resumed>) = 0 [pid 5959] ftruncate(5, 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5960, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5963] chdir("./bus") = 0 [pid 5961] <... open resumed>) = 5 [pid 5959] <... ftruncate resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5073] umount2("./143", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5963] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5962] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5961] ftruncate(5, 0 [pid 5959] exit_group(0 [pid 5963] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5959] <... exit_group resumed>) = ? [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5963] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5962] <... creat resumed>) = 4 [pid 5961] <... ftruncate resumed>) = 0 [pid 5959] +++ exited with 0 +++ [pid 5076] umount2("./146/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] openat(AT_FDCWD, "./143", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5963] <... symlink resumed>) = 0 [pid 5962] rename("./bus", "./file2" [pid 5961] exit_group(0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5959, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... openat resumed>) = 3 [pid 5963] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5961] <... exit_group resumed>) = ? [pid 5073] newfstatat(3, "", [pid 5962] <... rename resumed>) = -1 EEXIST (File exists) [pid 5076] newfstatat(AT_FDCWD, "./146/bus", [pid 5962] memfd_create("syzkaller", 0 [pid 5078] umount2("./145", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5962] <... memfd_create resumed>) = 5 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5962] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] openat(AT_FDCWD, "./145", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] umount2("./146/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5963] <... creat resumed>) = 4 [pid 5962] <... mmap resumed>) = 0x7f0356e00000 [pid 5961] +++ exited with 0 +++ [pid 5078] <... openat resumed>) = 3 [pid 5073] getdents64(3, [pid 5962] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5961, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5076] openat(AT_FDCWD, "./146/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5963] rename("./bus", "./file2" [pid 5076] <... openat resumed>) = 4 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] umount2("./143/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] newfstatat(4, "", [pid 5078] getdents64(3, [pid 5077] umount2("./145", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5963] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] getdents64(4, [pid 5963] memfd_create("syzkaller", 0) = 5 [pid 5078] umount2("./145/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] openat(AT_FDCWD, "./145", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5963] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5077] <... openat resumed>) = 3 [pid 5076] getdents64(4, [pid 5073] <... umount2 resumed>) = 0 [pid 5077] newfstatat(3, "", [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] close(4 [pid 5077] getdents64(3, [pid 5076] <... close resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] rmdir("./146/bus" [pid 5963] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] umount2("./145/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... rmdir resumed>) = 0 [pid 5073] umount2("./143/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5963] <... write resumed>) = 524288 [pid 5962] <... write resumed>) = 524288 [pid 5078] <... umount2 resumed>) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5076] umount2("./146/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] newfstatat(AT_FDCWD, "./143/bus", [pid 5963] munmap(0x7f0356e00000, 138412032 [pid 5962] munmap(0x7f0356e00000, 138412032 [pid 5077] umount2("./145/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] newfstatat(AT_FDCWD, "./146/binderfs", [pid 5073] umount2("./143/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] unlink("./146/binderfs" [pid 5073] openat(AT_FDCWD, "./143/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5962] <... munmap resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./145/bus", [pid 5076] <... unlink resumed>) = 0 [pid 5073] <... openat resumed>) = 4 [pid 5073] newfstatat(4, "", [pid 5076] getdents64(3, [pid 5963] <... munmap resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] getdents64(4, [pid 5076] close(3 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5078] umount2("./145/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5963] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5962] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] <... close resumed>) = 0 [pid 5073] getdents64(4, [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] rmdir("./146" [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5963] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5962] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] umount2("./145/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5963] close(5 [pid 5962] close(5 [pid 5078] newfstatat(AT_FDCWD, "./145/bus", [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... rmdir resumed>) = 0 [pid 5073] close(4 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] mkdir("./147", 0777 [pid 5073] <... close resumed>) = 0 [pid 5078] umount2("./145/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... mkdir resumed>) = 0 [pid 5073] rmdir("./143/bus" [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./145/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... rmdir resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./145/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... openat resumed>) = 4 [pid 5077] <... openat resumed>) = 4 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] umount2("./143/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] newfstatat(4, "", [pid 5077] newfstatat(4, "", [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] getdents64(4, [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] newfstatat(AT_FDCWD, "./143/binderfs", [pid 5963] <... close resumed>) = 0 [pid 5962] <... close resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] getdents64(4, [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] close(4) = 0 [pid 5963] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5962] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] getdents64(4, [pid 5077] rmdir("./145/bus" [pid 5073] unlink("./143/binderfs" [pid 5963] <... open resumed>) = 5 [pid 5962] <... open resumed>) = 5 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5962] ftruncate(5, 0 [pid 5078] close(4 [pid 5077] umount2("./145/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5963] ftruncate(5, 0 [pid 5078] <... close resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] getdents64(3, [pid 5963] <... ftruncate resumed>) = 0 [pid 5962] <... ftruncate resumed>) = 0 [pid 5078] rmdir("./145/bus" [pid 5077] newfstatat(AT_FDCWD, "./145/binderfs", [pid 5962] exit_group(0 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5962] <... exit_group resumed>) = ? [pid 5073] close(3 [pid 5963] exit_group(0 [pid 5078] <... rmdir resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./143" [pid 5963] <... exit_group resumed>) = ? [pid 5962] +++ exited with 0 +++ [pid 5078] umount2("./145/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... rmdir resumed>) = 0 [pid 5077] unlink("./145/binderfs" [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5962, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... unlink resumed>) = 0 [pid 5078] newfstatat(AT_FDCWD, "./145/binderfs", [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 5963] +++ exited with 0 +++ [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] getdents64(3, [pid 5075] <... restart_syscall resumed>) = 0 [pid 5073] mkdir("./144", 0777 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5963, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5078] unlink("./145/binderfs" [pid 5074] <... restart_syscall resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 5077] close(3) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] umount2("./143", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] getdents64(3, [pid 5077] rmdir("./145" [pid 5075] umount2("./143", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... openat resumed>) = 3 [pid 5077] <... rmdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./143", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... openat resumed>) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5075] openat(AT_FDCWD, "./143", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] newfstatat(3, "", [pid 5078] close(3 [pid 5077] mkdir("./146", 0777 [pid 5075] <... openat resumed>) = 3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] <... close resumed>) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 5074] getdents64(3, [pid 5078] rmdir("./145" [pid 5075] newfstatat(3, "", [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] <... rmdir resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] umount2("./143/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] getdents64(3, [pid 5078] mkdir("./146", 0777 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] <... ioctl resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] umount2("./143/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./143/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... openat resumed>) = 3 [pid 5074] newfstatat(AT_FDCWD, "./143/bus", [pid 5078] <... mkdir resumed>) = 0 [pid 5076] close(3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5076] <... close resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5964 attached [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 5964 [pid 5075] <... umount2 resumed>) = 0 [pid 5074] umount2("./143/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5964] set_robust_list(0x55556e32a660, 24 [pid 5078] <... openat resumed>) = 3 [pid 5964] <... set_robust_list resumed>) = 0 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5075] umount2("./143/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5964] chdir("./147" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./143/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5964] <... chdir resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./143/bus", [pid 5074] <... openat resumed>) = 4 [pid 5964] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] newfstatat(4, "", [pid 5964] <... prctl resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5964] setpgid(0, 0 [pid 5074] getdents64(4, [pid 5964] <... setpgid resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5964] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] getdents64(4, [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./143/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5964] <... openat resumed>) = 3 [pid 5075] openat(AT_FDCWD, "./143/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] close(4 [pid 5964] write(3, "1000", 4 [pid 5075] <... openat resumed>) = 4 [pid 5074] <... close resumed>) = 0 [pid 5964] <... write resumed>) = 4 [pid 5075] newfstatat(4, "", [pid 5074] rmdir("./143/bus" [pid 5964] close(3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5964] <... close resumed>) = 0 [pid 5075] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] close(4 [pid 5964] symlink("/dev/binderfs", "./binderfs" [pid 5075] <... close resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5075] rmdir("./143/bus" [pid 5964] <... symlink resumed>) = 0 [pid 5074] umount2("./143/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5964] memfd_create("syzkaller", 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./143/binderfs", [pid 5964] <... memfd_create resumed>) = 3 [pid 5077] <... ioctl resumed>) = 0 [pid 5075] umount2("./143/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] close(3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5964] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5964] <... mmap resumed>) = 0x7f0356e00000 [pid 5074] unlink("./143/binderfs") = 0 [pid 5074] getdents64(3, [pid 5073] <... ioctl resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 5074] rmdir("./143" [pid 5077] <... close resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./143/binderfs", [pid 5074] <... rmdir resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] mkdir("./144", 0777 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] unlink("./143/binderfs" [pid 5074] <... mkdir resumed>) = 0 [pid 5964] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... unlink resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] getdents64(3, ./strace-static-x86_64: Process 5965 attached [pid 5078] <... ioctl resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5073] close(3 [pid 5965] set_robust_list(0x55556e32a660, 24 [pid 5075] close(3 [pid 5964] <... write resumed>) = 524288 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 5965 [pid 5965] <... set_robust_list resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5078] close(3 [pid 5965] chdir("./146" [pid 5078] <... close resumed>) = 0 [pid 5075] rmdir("./143" [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] <... close resumed>) = 0 [pid 5965] <... chdir resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... rmdir resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5966 attached [pid 5965] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] mkdir("./144", 0777 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 5967 ./strace-static-x86_64: Process 5967 attached [pid 5967] set_robust_list(0x55556e32a660, 24) = 0 [pid 5967] chdir("./144" [pid 5966] set_robust_list(0x55556e32a660, 24 [pid 5965] <... prctl resumed>) = 0 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 5966 [pid 5075] <... mkdir resumed>) = 0 [pid 5965] setpgid(0, 0 [pid 5966] <... set_robust_list resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5967] <... chdir resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5967] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5967] setpgid(0, 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5966] chdir("./146" [pid 5967] <... setpgid resumed>) = 0 [pid 5967] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5966] <... chdir resumed>) = 0 [pid 5965] <... setpgid resumed>) = 0 [pid 5964] munmap(0x7f0356e00000, 138412032 [pid 5966] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5965] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5964] <... munmap resumed>) = 0 [pid 5966] <... prctl resumed>) = 0 [pid 5967] <... openat resumed>) = 3 [pid 5966] setpgid(0, 0 [pid 5967] write(3, "1000", 4) = 4 [pid 5964] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5967] close(3 [pid 5966] <... setpgid resumed>) = 0 [pid 5965] <... openat resumed>) = 3 [pid 5964] <... openat resumed>) = 4 [pid 5967] <... close resumed>) = 0 [pid 5964] ioctl(4, LOOP_SET_FD, 3 [pid 5967] symlink("/dev/binderfs", "./binderfs" [pid 5966] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5965] write(3, "1000", 4) = 4 [pid 5965] close(3) = 0 [pid 5967] <... symlink resumed>) = 0 [pid 5966] <... openat resumed>) = 3 [pid 5967] memfd_create("syzkaller", 0 [pid 5966] write(3, "1000", 4 [pid 5965] symlink("/dev/binderfs", "./binderfs" [pid 5966] <... write resumed>) = 4 [pid 5967] <... memfd_create resumed>) = 3 [pid 5966] close(3) = 0 [pid 5967] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5965] <... symlink resumed>) = 0 [pid 5966] symlink("/dev/binderfs", "./binderfs" [pid 5964] <... ioctl resumed>) = 0 [pid 5967] <... mmap resumed>) = 0x7f0356e00000 [pid 5966] <... symlink resumed>) = 0 [pid 5965] memfd_create("syzkaller", 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5967] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5966] memfd_create("syzkaller", 0 [pid 5965] <... memfd_create resumed>) = 3 [pid 5966] <... memfd_create resumed>) = 3 [pid 5965] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] close(3 [pid 5966] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5964] close(3 [pid 5074] <... close resumed>) = 0 [pid 5966] <... mmap resumed>) = 0x7f0356e00000 [pid 5965] <... mmap resumed>) = 0x7f0356e00000 [pid 5964] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5967] <... write resumed>) = 524288 [pid 5966] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5965] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5964] close(4) = 0 [pid 5964] mkdir("./bus", 0777) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 5968 [pid 5964] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, ""./strace-static-x86_64: Process 5968 attached [pid 5968] set_robust_list(0x55556e32a660, 24) = 0 [pid 5968] chdir("./144" [pid 5964] <... mount resumed>) = 0 [pid 5968] <... chdir resumed>) = 0 [ 164.294673][ T5964] loop3: detected capacity change from 0 to 1024 [pid 5964] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5964] chdir("./bus") = 0 [pid 5964] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5968] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5967] munmap(0x7f0356e00000, 138412032 [pid 5964] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5968] <... prctl resumed>) = 0 [pid 5967] <... munmap resumed>) = 0 [pid 5964] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5968] setpgid(0, 0 [pid 5964] <... symlink resumed>) = 0 [pid 5968] <... setpgid resumed>) = 0 [pid 5967] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5964] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5968] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5967] ioctl(4, LOOP_SET_FD, 3 [pid 5075] <... ioctl resumed>) = 0 [pid 5968] <... openat resumed>) = 3 [pid 5965] <... write resumed>) = 524288 [pid 5075] close(3 [pid 5968] write(3, "1000", 4 [pid 5966] <... write resumed>) = 524288 [pid 5968] <... write resumed>) = 4 [pid 5968] close(3 [pid 5965] munmap(0x7f0356e00000, 138412032 [pid 5075] <... close resumed>) = 0 [pid 5966] munmap(0x7f0356e00000, 138412032 [pid 5968] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5969 attached [pid 5968] symlink("/dev/binderfs", "./binderfs" [pid 5966] <... munmap resumed>) = 0 [pid 5965] <... munmap resumed>) = 0 [pid 5969] set_robust_list(0x55556e32a660, 24 [pid 5968] <... symlink resumed>) = 0 [pid 5966] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5965] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5964] <... creat resumed>) = 4 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 5969 [pid 5969] <... set_robust_list resumed>) = 0 [pid 5966] <... openat resumed>) = 4 [pid 5965] <... openat resumed>) = 4 [pid 5969] chdir("./144" [pid 5968] memfd_create("syzkaller", 0 [pid 5967] <... ioctl resumed>) = 0 [pid 5966] ioctl(4, LOOP_SET_FD, 3 [ 164.368855][ T5967] loop0: detected capacity change from 0 to 1024 [pid 5965] ioctl(4, LOOP_SET_FD, 3 [pid 5964] rename("./bus", "./file2" [pid 5969] <... chdir resumed>) = 0 [pid 5967] close(3) = 0 [pid 5967] close(4 [pid 5969] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5967] <... close resumed>) = 0 [pid 5969] <... prctl resumed>) = 0 [pid 5968] <... memfd_create resumed>) = 3 [pid 5967] mkdir("./bus", 0777) = 0 [pid 5964] <... rename resumed>) = -1 EEXIST (File exists) [pid 5964] memfd_create("syzkaller", 0 [pid 5967] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5964] <... memfd_create resumed>) = 5 [pid 5964] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5969] setpgid(0, 0 [pid 5968] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5966] <... ioctl resumed>) = 0 [pid 5965] <... ioctl resumed>) = 0 [pid 5964] <... mmap resumed>) = 0x7f0356e00000 [pid 5969] <... setpgid resumed>) = 0 [pid 5968] <... mmap resumed>) = 0x7f0356e00000 [pid 5966] close(3 [pid 5965] close(3 [pid 5969] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5968] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5966] <... close resumed>) = 0 [pid 5965] <... close resumed>) = 0 [pid 5964] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5969] <... openat resumed>) = 3 [pid 5966] close(4 [pid 5965] close(4 [pid 5969] write(3, "1000", 4 [pid 5966] <... close resumed>) = 0 [pid 5965] <... close resumed>) = 0 [pid 5969] <... write resumed>) = 4 [pid 5966] mkdir("./bus", 0777 [pid 5965] mkdir("./bus", 0777 [pid 5969] close(3) = 0 [pid 5966] <... mkdir resumed>) = 0 [pid 5969] symlink("/dev/binderfs", "./binderfs" [pid 5966] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5965] <... mkdir resumed>) = 0 [pid 5969] <... symlink resumed>) = 0 [pid 5968] <... write resumed>) = 524288 [pid 5965] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5967] <... mount resumed>) = 0 [pid 5964] <... write resumed>) = 524288 [pid 5969] memfd_create("syzkaller", 0 [pid 5967] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5966] <... mount resumed>) = 0 [pid 5969] <... memfd_create resumed>) = 3 [pid 5967] <... openat resumed>) = 3 [pid 5969] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5967] chdir("./bus" [pid 5969] <... mmap resumed>) = 0x7f0356e00000 [pid 5967] <... chdir resumed>) = 0 [pid 5969] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5967] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5966] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5967] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5966] <... openat resumed>) = 3 [pid 5967] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5966] chdir("./bus" [pid 5965] <... mount resumed>) = 0 [pid 5964] munmap(0x7f0356e00000, 138412032 [pid 5967] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5966] <... chdir resumed>) = 0 [pid 5965] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [ 164.412273][ T5966] loop5: detected capacity change from 0 to 1024 [ 164.420663][ T5965] loop4: detected capacity change from 0 to 1024 [pid 5968] munmap(0x7f0356e00000, 138412032 [pid 5966] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5965] <... openat resumed>) = 3 [pid 5964] <... munmap resumed>) = 0 [pid 5969] <... write resumed>) = 524288 [pid 5968] <... munmap resumed>) = 0 [pid 5967] <... creat resumed>) = 4 [pid 5966] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5965] chdir("./bus" [pid 5964] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5965] <... chdir resumed>) = 0 [pid 5966] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5965] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5964] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5964] close(5 [pid 5968] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5967] rename("./bus", "./file2" [pid 5965] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5968] <... openat resumed>) = 4 [pid 5965] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5968] ioctl(4, LOOP_SET_FD, 3 [pid 5966] <... symlink resumed>) = 0 [pid 5964] <... close resumed>) = 0 [pid 5969] munmap(0x7f0356e00000, 138412032 [pid 5967] <... rename resumed>) = -1 EEXIST (File exists) [pid 5966] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5965] <... symlink resumed>) = 0 [pid 5964] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5967] memfd_create("syzkaller", 0 [pid 5965] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5967] <... memfd_create resumed>) = 5 [pid 5967] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5969] <... munmap resumed>) = 0 [pid 5966] <... creat resumed>) = 4 [pid 5965] <... creat resumed>) = 4 [pid 5964] <... open resumed>) = 5 [pid 5967] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5968] <... ioctl resumed>) = 0 [pid 5967] <... write resumed>) = 524288 [pid 5965] rename("./bus", "./file2" [pid 5968] close(3 [pid 5966] rename("./bus", "./file2" [pid 5964] ftruncate(5, 0 [pid 5968] <... close resumed>) = 0 [pid 5968] close(4) = 0 [pid 5968] mkdir("./bus", 0777) = 0 [pid 5968] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5967] munmap(0x7f0356e00000, 138412032 [pid 5965] <... rename resumed>) = -1 EEXIST (File exists) [pid 5967] <... munmap resumed>) = 0 [pid 5965] memfd_create("syzkaller", 0 [pid 5967] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5965] <... memfd_create resumed>) = 5 [pid 5967] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5965] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5967] close(5 [pid 5965] <... mmap resumed>) = 0x7f0356e00000 [pid 5969] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5966] <... rename resumed>) = -1 EEXIST (File exists) [pid 5964] <... ftruncate resumed>) = 0 [pid 5969] <... openat resumed>) = 4 [pid 5966] memfd_create("syzkaller", 0 [pid 5965] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5964] exit_group(0 [pid 5969] ioctl(4, LOOP_SET_FD, 3 [pid 5966] <... memfd_create resumed>) = 5 [pid 5964] <... exit_group resumed>) = ? [ 164.491347][ T5968] loop1: detected capacity change from 0 to 1024 [ 164.506782][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 164.506799][ T28] audit: type=1800 audit(1710613046.614:873): pid=5964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop3" ino=20 res=0 errno=0 [pid 5966] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5967] <... close resumed>) = 0 [pid 5968] <... mount resumed>) = 0 [pid 5966] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5965] <... write resumed>) = 524288 [pid 5964] +++ exited with 0 +++ [pid 5968] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5964, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5967] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5965] munmap(0x7f0356e00000, 138412032 [pid 5076] umount2("./147", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5968] <... openat resumed>) = 3 [pid 5968] chdir("./bus" [pid 5965] <... munmap resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5968] <... chdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./147", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5968] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] <... openat resumed>) = 3 [pid 5076] newfstatat(3, "", [pid 5968] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5968] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5965] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5965] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] getdents64(3, [pid 5965] close(5 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5969] <... ioctl resumed>) = 0 [pid 5969] close(3 [pid 5967] <... open resumed>) = 5 [pid 5076] umount2("./147/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5969] <... close resumed>) = 0 [pid 5967] ftruncate(5, 0 [pid 5969] close(4 [pid 5967] <... ftruncate resumed>) = 0 [pid 5969] <... close resumed>) = 0 [pid 5968] <... symlink resumed>) = 0 [pid 5969] mkdir("./bus", 0777 [pid 5968] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5969] <... mkdir resumed>) = 0 [pid 5967] exit_group(0) = ? [ 164.567254][ T5969] loop2: detected capacity change from 0 to 1024 [pid 5969] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5967] +++ exited with 0 +++ [pid 5966] <... write resumed>) = 524288 [pid 5965] <... close resumed>) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5967, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5968] <... creat resumed>) = 4 [pid 5966] munmap(0x7f0356e00000, 138412032 [pid 5965] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5076] <... umount2 resumed>) = 0 [pid 5968] rename("./bus", "./file2" [pid 5966] <... munmap resumed>) = 0 [pid 5965] <... open resumed>) = 5 [pid 5965] ftruncate(5, 0) = 0 [pid 5968] <... rename resumed>) = -1 EEXIST (File exists) [ 164.621309][ T28] audit: type=1800 audit(1710613046.714:874): pid=5967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop0" ino=20 res=0 errno=0 [pid 5966] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] umount2("./144", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5969] <... mount resumed>) = 0 [pid 5968] memfd_create("syzkaller", 0 [pid 5966] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5965] exit_group(0 [pid 5076] umount2("./147/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5968] <... memfd_create resumed>) = 5 [pid 5966] close(5 [pid 5073] openat(AT_FDCWD, "./144", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./147/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./147/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./147/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5965] <... exit_group resumed>) = ? [pid 5076] <... openat resumed>) = 4 [pid 5969] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5968] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5966] <... close resumed>) = 0 [pid 5076] newfstatat(4, "", [pid 5073] <... openat resumed>) = 3 [pid 5968] <... mmap resumed>) = 0x7f0356e00000 [pid 5073] newfstatat(3, "", [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5965] +++ exited with 0 +++ [pid 5076] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] close(4) = 0 [pid 5968] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] rmdir("./147/bus" [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5965, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5077] umount2("./146", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... rmdir resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5969] <... openat resumed>) = 3 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./146", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5969] chdir("./bus" [pid 5073] umount2("./144/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./147/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./147/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./147/binderfs") = 0 [pid 5076] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3) = 0 [pid 5969] <... chdir resumed>) = 0 [pid 5968] <... write resumed>) = 524288 [pid 5966] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] <... openat resumed>) = 3 [pid 5076] rmdir("./147" [pid 5073] <... umount2 resumed>) = 0 [pid 5969] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5968] munmap(0x7f0356e00000, 138412032 [pid 5077] newfstatat(3, "", [pid 5076] <... rmdir resumed>) = 0 [pid 5073] umount2("./144/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5969] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5968] <... munmap resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] mkdir("./148", 0777 [ 164.667221][ T28] audit: type=1800 audit(1710613046.754:875): pid=5965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop4" ino=20 res=0 errno=0 [pid 5969] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5966] <... open resumed>) = 5 [pid 5077] getdents64(3, [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5969] <... symlink resumed>) = 0 [pid 5966] ftruncate(5, 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] <... mkdir resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./144/bus", [pid 5969] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5966] <... ftruncate resumed>) = 0 [pid 5077] umount2("./146/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5969] <... creat resumed>) = 4 [pid 5073] umount2("./144/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5969] rename("./bus", "./file2" [pid 5966] exit_group(0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5969] <... rename resumed>) = -1 EEXIST (File exists) [pid 5073] openat(AT_FDCWD, "./144/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5969] memfd_create("syzkaller", 0 [pid 5966] <... exit_group resumed>) = ? [pid 5073] <... openat resumed>) = 4 [pid 5969] <... memfd_create resumed>) = 5 [pid 5966] +++ exited with 0 +++ [pid 5073] newfstatat(4, "", [pid 5969] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5966, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5969] <... mmap resumed>) = 0x7f0356e00000 [pid 5073] getdents64(4, [pid 5969] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5968] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5078] umount2("./146", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] getdents64(4, [pid 5968] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... openat resumed>) = 3 [pid 5968] close(5 [pid 5078] openat(AT_FDCWD, "./146", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5968] <... close resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5077] <... umount2 resumed>) = 0 [pid 5073] close(4 [pid 5969] <... write resumed>) = 524288 [pid 5968] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] newfstatat(3, "", [pid 5077] umount2("./146/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5969] munmap(0x7f0356e00000, 138412032 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... close resumed>) = 0 [pid 5969] <... munmap resumed>) = 0 [pid 5968] <... open resumed>) = 5 [pid 5078] getdents64(3, [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] rmdir("./144/bus" [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] <... rmdir resumed>) = 0 [pid 5078] umount2("./146/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] newfstatat(AT_FDCWD, "./146/bus", [pid 5969] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./144/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5969] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5969] close(5 [pid 5077] umount2("./146/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./144/binderfs", [pid 5077] openat(AT_FDCWD, "./146/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] <... openat resumed>) = 4 [pid 5073] unlink("./144/binderfs" [pid 5077] newfstatat(4, "", [pid 5073] <... unlink resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, [pid 5077] getdents64(4, [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] close(3 [pid 5077] getdents64(4, [pid 5073] <... close resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [ 164.723645][ T28] audit: type=1800 audit(1710613046.824:876): pid=5966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop5" ino=20 res=0 errno=0 [pid 5073] rmdir("./144" [pid 5969] <... close resumed>) = 0 [pid 5077] close(4 [pid 5073] <... rmdir resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5077] rmdir("./146/bus") = 0 [pid 5073] mkdir("./145", 0777 [pid 5077] umount2("./146/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... mkdir resumed>) = 0 [pid 5969] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./146/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] unlink("./146/binderfs" [pid 5969] <... open resumed>) = 5 [pid 5968] ftruncate(5, 0 [pid 5078] <... umount2 resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5969] ftruncate(5, 0 [pid 5078] umount2("./146/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... unlink resumed>) = 0 [pid 5969] <... ftruncate resumed>) = 0 [pid 5968] <... ftruncate resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... openat resumed>) = 3 [pid 5078] newfstatat(AT_FDCWD, "./146/bus", [pid 5969] exit_group(0 [pid 5968] exit_group(0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] getdents64(3, [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5969] <... exit_group resumed>) = ? [pid 5078] umount2("./146/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5969] +++ exited with 0 +++ [pid 5968] <... exit_group resumed>) = ? [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] close(3) = 0 [pid 5077] rmdir("./146") = 0 [pid 5968] +++ exited with 0 +++ [pid 5078] openat(AT_FDCWD, "./146/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... ioctl resumed>) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5969, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5078] <... openat resumed>) = 4 [pid 5078] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] mkdir("./147", 0777) = 0 [pid 5078] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5078] close(4) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5968, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5075] umount2("./144", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] rmdir("./146/bus" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./144", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... rmdir resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./144", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] umount2("./146/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] close(3 [pid 5075] <... openat resumed>) = 3 [pid 5074] openat(AT_FDCWD, "./144", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... openat resumed>) = 3 [pid 5076] <... close resumed>) = 0 [pid 5075] newfstatat(3, "", [pid 5074] <... openat resumed>) = 3 [pid 5078] newfstatat(AT_FDCWD, "./146/binderfs", [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] newfstatat(3, "", [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] getdents64(3, [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] unlink("./146/binderfs" [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] getdents64(3, [pid 5073] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 5970 attached [pid 5078] <... unlink resumed>) = 0 [pid 5075] umount2("./144/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] getdents64(3, [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 5970 [pid 5074] umount2("./144/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3 [pid 5078] close(3 [pid 5073] <... close resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5970] set_robust_list(0x55556e32a660, 24 [pid 5078] rmdir("./146") = 0 [ 164.759496][ T28] audit: type=1800 audit(1710613046.864:877): pid=5968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 164.782674][ T28] audit: type=1800 audit(1710613046.894:878): pid=5969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop2" ino=20 res=0 errno=0 [pid 5078] mkdir("./147", 0777) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 5971 ./strace-static-x86_64: Process 5971 attached [pid 5970] <... set_robust_list resumed>) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5971] set_robust_list(0x55556e32a660, 24 [pid 5970] chdir("./148" [pid 5075] <... umount2 resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5971] <... set_robust_list resumed>) = 0 [pid 5970] <... chdir resumed>) = 0 [pid 5075] umount2("./144/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./144/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5970] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5970] <... prctl resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./144/bus", [pid 5970] setpgid(0, 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5970] <... setpgid resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./144/bus", [pid 5075] umount2("./144/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5970] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./144/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5971] chdir("./145" [pid 5970] <... openat resumed>) = 3 [pid 5078] <... openat resumed>) = 3 [pid 5077] <... ioctl resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 5074] umount2("./144/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5075] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(4, [pid 5074] openat(AT_FDCWD, "./144/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5970] write(3, "1000", 4 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5970] <... write resumed>) = 4 [pid 5075] getdents64(4, [pid 5074] <... openat resumed>) = 4 [pid 5970] close(3 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] newfstatat(4, "", [pid 5971] <... chdir resumed>) = 0 [pid 5970] <... close resumed>) = 0 [pid 5075] close(4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5971] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5970] symlink("/dev/binderfs", "./binderfs" [pid 5075] <... close resumed>) = 0 [pid 5074] getdents64(4, [pid 5971] <... prctl resumed>) = 0 [pid 5970] <... symlink resumed>) = 0 [pid 5075] rmdir("./144/bus" [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, [pid 5077] close(3) = 0 [pid 5971] setpgid(0, 0 [pid 5970] memfd_create("syzkaller", 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5971] <... setpgid resumed>) = 0 [pid 5075] umount2("./144/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] close(4 [pid 5971] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./144/bus") = 0 [pid 5074] umount2("./144/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./144/binderfs", [pid 5075] newfstatat(AT_FDCWD, "./144/binderfs", [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5971] <... openat resumed>) = 3 [pid 5970] <... memfd_create resumed>) = 3 [pid 5078] <... ioctl resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./144/binderfs" [pid 5970] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] unlink("./144/binderfs" [pid 5074] <... unlink resumed>) = 0 [pid 5971] write(3, "1000", 4 [pid 5075] <... unlink resumed>) = 0 [pid 5971] <... write resumed>) = 4 ./strace-static-x86_64: Process 5972 attached [pid 5971] close(3 [pid 5075] getdents64(3, [pid 5074] getdents64(3, [pid 5972] set_robust_list(0x55556e32a660, 24 [pid 5971] <... close resumed>) = 0 [pid 5972] <... set_robust_list resumed>) = 0 [pid 5971] symlink("/dev/binderfs", "./binderfs" [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5972] chdir("./147" [pid 5971] <... symlink resumed>) = 0 [pid 5075] close(3 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] <... close resumed>) = 0 [pid 5972] <... chdir resumed>) = 0 [pid 5971] memfd_create("syzkaller", 0 [pid 5970] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] close(3 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 5972 [pid 5074] close(3 [pid 5078] <... close resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5972] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5971] <... memfd_create resumed>) = 3 [pid 5075] rmdir("./144" [pid 5074] <... close resumed>) = 0 [pid 5972] <... prctl resumed>) = 0 [pid 5971] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] rmdir("./144" [pid 5972] setpgid(0, 0 [pid 5971] <... mmap resumed>) = 0x7f0356e00000 ./strace-static-x86_64: Process 5973 attached [pid 5972] <... setpgid resumed>) = 0 [pid 5971] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5970] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5973] set_robust_list(0x55556e32a660, 24 [pid 5972] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] mkdir("./145", 0777 [pid 5074] <... rmdir resumed>) = 0 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 5973 [pid 5972] <... openat resumed>) = 3 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] mkdir("./145", 0777 [pid 5973] <... set_robust_list resumed>) = 0 [pid 5973] chdir("./147" [pid 5972] write(3, "1000", 4 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] <... mkdir resumed>) = 0 [pid 5972] <... write resumed>) = 4 [pid 5075] <... openat resumed>) = 3 [pid 5973] <... chdir resumed>) = 0 [pid 5972] close(3 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5973] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5972] <... close resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] <... openat resumed>) = 3 [pid 5973] <... prctl resumed>) = 0 [pid 5972] symlink("/dev/binderfs", "./binderfs" [pid 5971] <... write resumed>) = 524288 [pid 5970] <... write resumed>) = 524288 [pid 5973] setpgid(0, 0 [pid 5972] <... symlink resumed>) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5973] <... setpgid resumed>) = 0 [pid 5972] memfd_create("syzkaller", 0 [pid 5973] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5972] <... memfd_create resumed>) = 3 [pid 5973] <... openat resumed>) = 3 [pid 5973] write(3, "1000", 4) = 4 [pid 5973] close(3) = 0 [pid 5973] symlink("/dev/binderfs", "./binderfs" [pid 5970] munmap(0x7f0356e00000, 138412032 [pid 5973] <... symlink resumed>) = 0 [pid 5972] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5973] memfd_create("syzkaller", 0 [pid 5972] <... mmap resumed>) = 0x7f0356e00000 [pid 5971] munmap(0x7f0356e00000, 138412032 [pid 5970] <... munmap resumed>) = 0 [pid 5973] <... memfd_create resumed>) = 3 [pid 5973] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5970] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5973] <... mmap resumed>) = 0x7f0356e00000 [pid 5970] <... openat resumed>) = 4 [pid 5972] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5971] <... munmap resumed>) = 0 [pid 5970] ioctl(4, LOOP_SET_FD, 3 [pid 5973] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5971] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5973] <... write resumed>) = 524288 [pid 5971] <... openat resumed>) = 4 [pid 5970] <... ioctl resumed>) = 0 [pid 5971] ioctl(4, LOOP_SET_FD, 3 [pid 5973] munmap(0x7f0356e00000, 138412032 [pid 5972] <... write resumed>) = 524288 [pid 5970] close(3 [pid 5973] <... munmap resumed>) = 0 [pid 5972] munmap(0x7f0356e00000, 138412032 [pid 5970] <... close resumed>) = 0 [pid 5970] close(4) = 0 [pid 5973] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5970] mkdir("./bus", 0777 [pid 5973] <... openat resumed>) = 4 [pid 5972] <... munmap resumed>) = 0 [pid 5970] <... mkdir resumed>) = 0 [pid 5973] ioctl(4, LOOP_SET_FD, 3 [pid 5972] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5075] <... ioctl resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5970] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5972] <... openat resumed>) = 4 [pid 5972] ioctl(4, LOOP_SET_FD, 3 [pid 5971] <... ioctl resumed>) = 0 [pid 5075] close(3 [pid 5074] close(3) = 0 [pid 5971] close(3 [pid 5075] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5973] <... ioctl resumed>) = 0 [pid 5973] close(3./strace-static-x86_64: Process 5975 attached ./strace-static-x86_64: Process 5974 attached ) = 0 [pid 5972] <... ioctl resumed>) = 0 [pid 5971] <... close resumed>) = 0 [pid 5970] <... mount resumed>) = 0 [pid 5975] set_robust_list(0x55556e32a660, 24 [pid 5973] close(4 [pid 5970] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5971] close(4 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 5974 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 5975 [pid 5975] <... set_robust_list resumed>) = 0 [pid 5973] <... close resumed>) = 0 [pid 5971] <... close resumed>) = 0 [pid 5975] chdir("./145" [pid 5974] set_robust_list(0x55556e32a660, 24 [pid 5973] mkdir("./bus", 0777 [pid 5972] close(3 [pid 5971] mkdir("./bus", 0777 [pid 5970] <... openat resumed>) = 3 [pid 5975] <... chdir resumed>) = 0 [pid 5974] <... set_robust_list resumed>) = 0 [pid 5973] <... mkdir resumed>) = 0 [pid 5970] chdir("./bus" [pid 5975] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5975] setpgid(0, 0 [pid 5971] <... mkdir resumed>) = 0 [pid 5970] <... chdir resumed>) = 0 [pid 5975] <... setpgid resumed>) = 0 [pid 5974] chdir("./145" [pid 5970] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5975] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5970] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5975] <... openat resumed>) = 3 [pid 5971] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5970] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5975] write(3, "1000", 4) = 4 [pid 5974] <... chdir resumed>) = 0 [pid 5973] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5972] <... close resumed>) = 0 [pid 5975] close(3 [pid 5974] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5972] close(4 [pid 5970] <... symlink resumed>) = 0 [pid 5975] <... close resumed>) = 0 [pid 5974] <... prctl resumed>) = 0 [pid 5972] <... close resumed>) = 0 [pid 5975] symlink("/dev/binderfs", "./binderfs" [pid 5974] setpgid(0, 0 [pid 5972] mkdir("./bus", 0777 [pid 5975] <... symlink resumed>) = 0 [pid 5974] <... setpgid resumed>) = 0 [pid 5972] <... mkdir resumed>) = 0 [pid 5970] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5975] memfd_create("syzkaller", 0 [pid 5974] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [ 164.972325][ T5970] loop3: detected capacity change from 0 to 1024 [ 164.986297][ T5971] loop0: detected capacity change from 0 to 1024 [ 164.996700][ T5973] loop5: detected capacity change from 0 to 1024 [ 165.006614][ T5972] loop4: detected capacity change from 0 to 1024 [pid 5972] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5975] <... memfd_create resumed>) = 3 [pid 5975] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5974] <... openat resumed>) = 3 [pid 5970] <... creat resumed>) = 4 [pid 5975] <... mmap resumed>) = 0x7f0356e00000 [pid 5974] write(3, "1000", 4) = 4 [pid 5974] close(3 [pid 5973] <... mount resumed>) = 0 [pid 5974] <... close resumed>) = 0 [pid 5973] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5970] rename("./bus", "./file2" [pid 5974] symlink("/dev/binderfs", "./binderfs" [pid 5973] <... openat resumed>) = 3 [pid 5974] <... symlink resumed>) = 0 [pid 5973] chdir("./bus" [pid 5971] <... mount resumed>) = 0 [pid 5973] <... chdir resumed>) = 0 [pid 5971] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5973] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5972] <... mount resumed>) = 0 [pid 5971] <... openat resumed>) = 3 [pid 5970] <... rename resumed>) = -1 EEXIST (File exists) [pid 5975] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5974] memfd_create("syzkaller", 0 [pid 5973] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5972] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5971] chdir("./bus" [pid 5975] <... write resumed>) = 524288 [pid 5974] <... memfd_create resumed>) = 3 [pid 5973] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5972] <... openat resumed>) = 3 [pid 5970] memfd_create("syzkaller", 0 [pid 5971] <... chdir resumed>) = 0 [pid 5971] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5970] <... memfd_create resumed>) = 5 [pid 5971] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5970] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5972] chdir("./bus" [pid 5973] <... symlink resumed>) = 0 [pid 5974] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5971] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5974] <... mmap resumed>) = 0x7f0356e00000 [pid 5972] <... chdir resumed>) = 0 [pid 5974] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5973] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5972] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5971] <... symlink resumed>) = 0 [pid 5970] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5972] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5971] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5975] munmap(0x7f0356e00000, 138412032 [pid 5972] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5975] <... munmap resumed>) = 0 [pid 5975] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5972] <... symlink resumed>) = 0 [pid 5975] <... openat resumed>) = 4 [pid 5971] <... creat resumed>) = 4 [pid 5973] <... creat resumed>) = 4 [pid 5971] rename("./bus", "./file2" [pid 5975] ioctl(4, LOOP_SET_FD, 3 [pid 5972] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5971] <... rename resumed>) = -1 EEXIST (File exists) [pid 5973] rename("./bus", "./file2" [pid 5970] <... write resumed>) = 524288 [pid 5971] memfd_create("syzkaller", 0 [pid 5973] <... rename resumed>) = -1 EEXIST (File exists) [pid 5972] <... creat resumed>) = 4 [pid 5971] <... memfd_create resumed>) = 5 [pid 5972] rename("./bus", "./file2" [pid 5971] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5974] <... write resumed>) = 524288 [pid 5973] memfd_create("syzkaller", 0 [pid 5971] <... mmap resumed>) = 0x7f0356e00000 [pid 5970] munmap(0x7f0356e00000, 138412032 [pid 5972] <... rename resumed>) = -1 EEXIST (File exists) [pid 5972] memfd_create("syzkaller", 0) = 5 [pid 5972] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5972] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5971] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5970] <... munmap resumed>) = 0 [pid 5973] <... memfd_create resumed>) = 5 [pid 5973] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5973] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5970] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5975] <... ioctl resumed>) = 0 [pid 5974] munmap(0x7f0356e00000, 138412032 [pid 5975] close(3 [pid 5974] <... munmap resumed>) = 0 [pid 5970] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5975] <... close resumed>) = 0 [pid 5970] close(5 [pid 5975] close(4 [pid 5972] <... write resumed>) = 524288 [pid 5970] <... close resumed>) = 0 [pid 5975] <... close resumed>) = 0 [pid 5974] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5975] mkdir("./bus", 0777 [pid 5973] <... write resumed>) = 524288 [pid 5971] <... write resumed>) = 524288 [pid 5975] <... mkdir resumed>) = 0 [ 165.104794][ T5975] loop2: detected capacity change from 0 to 1024 [pid 5970] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5974] <... openat resumed>) = 4 [pid 5974] ioctl(4, LOOP_SET_FD, 3 [pid 5971] munmap(0x7f0356e00000, 138412032 [pid 5970] <... open resumed>) = 5 [pid 5975] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5973] munmap(0x7f0356e00000, 138412032) = 0 [pid 5973] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5972] munmap(0x7f0356e00000, 138412032 [pid 5973] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5972] <... munmap resumed>) = 0 [pid 5973] close(5 [pid 5972] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5974] <... ioctl resumed>) = 0 [pid 5972] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5972] close(5 [pid 5974] close(3) = 0 [pid 5974] close(4) = 0 [pid 5974] mkdir("./bus", 0777) = 0 [pid 5973] <... close resumed>) = 0 [pid 5971] <... munmap resumed>) = 0 [pid 5970] ftruncate(5, 0 [pid 5974] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5971] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5970] <... ftruncate resumed>) = 0 [pid 5972] <... close resumed>) = 0 [pid 5973] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5972] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5970] exit_group(0 [pid 5973] <... open resumed>) = 5 [pid 5971] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5970] <... exit_group resumed>) = ? [ 165.156324][ T5974] loop1: detected capacity change from 0 to 1024 [ 165.163596][ T28] audit: type=1800 audit(1710613047.264:879): pid=5970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop3" ino=20 res=0 errno=0 [pid 5973] ftruncate(5, 0 [pid 5971] close(5 [pid 5970] +++ exited with 0 +++ [pid 5973] <... ftruncate resumed>) = 0 [pid 5973] exit_group(0) = ? [pid 5973] +++ exited with 0 +++ [pid 5971] <... close resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5970, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5971] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5973, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5972] <... open resumed>) = 5 [pid 5078] umount2("./147", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./148", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5972] ftruncate(5, 0 [pid 5078] openat(AT_FDCWD, "./147", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./148", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5972] <... ftruncate resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5076] <... openat resumed>) = 3 [pid 5972] exit_group(0 [pid 5078] newfstatat(3, "", [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 165.200539][ T28] audit: type=1800 audit(1710613047.304:880): pid=5973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop5" ino=20 res=0 errno=0 [pid 5975] <... mount resumed>) = 0 [pid 5974] <... mount resumed>) = 0 [pid 5972] <... exit_group resumed>) = ? [pid 5971] <... open resumed>) = 5 [pid 5078] getdents64(3, [pid 5076] getdents64(3, [pid 5975] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5974] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5975] <... openat resumed>) = 3 [pid 5974] chdir("./bus" [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] umount2("./148/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5975] chdir("./bus" [pid 5974] <... chdir resumed>) = 0 [pid 5974] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5975] <... chdir resumed>) = 0 [pid 5974] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5975] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5974] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] umount2("./147/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5975] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5975] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5972] +++ exited with 0 +++ [pid 5974] <... symlink resumed>) = 0 [pid 5971] ftruncate(5, 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5972, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5974] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5975] <... symlink resumed>) = 0 [pid 5974] <... creat resumed>) = 4 [pid 5971] <... ftruncate resumed>) = 0 [pid 5975] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5974] rename("./bus", "./file2" [pid 5971] exit_group(0) = ? [pid 5971] +++ exited with 0 +++ [ 165.243865][ T28] audit: type=1800 audit(1710613047.334:881): pid=5972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop4" ino=20 res=0 errno=0 [pid 5974] <... rename resumed>) = -1 EEXIST (File exists) [pid 5077] umount2("./147", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5971, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5975] <... creat resumed>) = 4 [pid 5974] memfd_create("syzkaller", 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5974] <... memfd_create resumed>) = 5 [pid 5077] openat(AT_FDCWD, "./147", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5974] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] <... openat resumed>) = 3 [pid 5073] umount2("./145", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5975] rename("./bus", "./file2" [pid 5077] newfstatat(3, "", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./145", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5077] getdents64(3, [pid 5073] newfstatat(3, "", [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] umount2("./147/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5974] <... mmap resumed>) = 0x7f0356e00000 [pid 5073] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5974] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] umount2("./145/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = 0 [pid 5975] <... rename resumed>) = -1 EEXIST (File exists) [pid 5974] <... write resumed>) = 524288 [pid 5078] <... umount2 resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5975] memfd_create("syzkaller", 0 [pid 5974] munmap(0x7f0356e00000, 138412032 [pid 5078] umount2("./147/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./145/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5975] <... memfd_create resumed>) = 5 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./145/bus", [pid 5974] <... munmap resumed>) = 0 [pid 5078] newfstatat(AT_FDCWD, "./147/bus", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 165.293662][ T28] audit: type=1800 audit(1710613047.344:882): pid=5971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop0" ino=20 res=0 errno=0 [pid 5975] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5974] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5076] umount2("./148/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./145/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5975] <... mmap resumed>) = 0x7f0356e00000 [pid 5974] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] umount2("./147/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./145/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", [pid 5975] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5974] close(5 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] umount2("./147/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] newfstatat(AT_FDCWD, "./148/bus", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] openat(AT_FDCWD, "./147/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] getdents64(4, [pid 5078] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(4, [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] umount2("./148/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5974] <... close resumed>) = 0 [pid 5078] getdents64(4, [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] getdents64(4, [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] newfstatat(AT_FDCWD, "./147/bus", [pid 5076] openat(AT_FDCWD, "./148/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] close(4 [pid 5078] close(4 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5073] <... close resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5077] umount2("./147/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] rmdir("./145/bus" [pid 5078] rmdir("./147/bus" [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(4, "", [pid 5078] <... rmdir resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./147/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... rmdir resumed>) = 0 [pid 5078] umount2("./147/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... openat resumed>) = 4 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(4, "", [pid 5073] umount2("./145/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] newfstatat(AT_FDCWD, "./147/binderfs", [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5975] <... write resumed>) = 524288 [pid 5974] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] getdents64(4, [pid 5076] getdents64(4, [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5975] munmap(0x7f0356e00000, 138412032 [pid 5078] unlink("./147/binderfs" [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] newfstatat(AT_FDCWD, "./145/binderfs", [pid 5076] getdents64(4, [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5975] <... munmap resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5077] getdents64(4, [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] unlink("./145/binderfs" [pid 5975] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] getdents64(3, [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] close(4 [pid 5073] <... unlink resumed>) = 0 [pid 5975] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5974] <... open resumed>) = 5 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] close(4 [pid 5076] <... close resumed>) = 0 [pid 5073] getdents64(3, [pid 5975] close(5 [pid 5974] ftruncate(5, 0 [pid 5078] close(3 [pid 5077] <... close resumed>) = 0 [pid 5076] rmdir("./148/bus" [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5974] <... ftruncate resumed>) = 0 [pid 5077] rmdir("./147/bus" [pid 5076] <... rmdir resumed>) = 0 [pid 5073] close(3 [pid 5078] <... close resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] umount2("./148/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... close resumed>) = 0 [pid 5974] exit_group(0 [pid 5078] rmdir("./147" [pid 5077] umount2("./147/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] rmdir("./145" [pid 5974] <... exit_group resumed>) = ? [pid 5078] <... rmdir resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./148/binderfs", [pid 5073] <... rmdir resumed>) = 0 [pid 5975] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] mkdir("./146", 0777 [pid 5975] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] newfstatat(AT_FDCWD, "./147/binderfs", [pid 5076] unlink("./148/binderfs" [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 5077] unlink("./147/binderfs" [pid 5078] mkdir("./148", 0777 [pid 5077] <... unlink resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5077] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5077] close(3) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5975] <... open resumed>) = 5 [pid 5077] rmdir("./147" [pid 5078] <... mkdir resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5077] mkdir("./148", 0777 [pid 5975] ftruncate(5, 0 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] <... mkdir resumed>) = 0 [pid 5076] getdents64(3, [pid 5975] <... ftruncate resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5974] +++ exited with 0 +++ [pid 5975] exit_group(0 [pid 5078] <... openat resumed>) = 3 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] close(3 [pid 5975] <... exit_group resumed>) = ? [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5076] <... close resumed>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5974, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5074] umount2("./145", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] rmdir("./148" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./145", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... openat resumed>) = 3 [pid 5975] +++ exited with 0 +++ [pid 5076] <... rmdir resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5076] mkdir("./149", 0777 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5975, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5074] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] <... mkdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5074] umount2("./145/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... openat resumed>) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] umount2("./145", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./145", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] umount2("./145/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] newfstatat(3, "", [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./145/bus", [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] umount2("./145/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./145/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5074] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] close(3 [pid 5074] getdents64(4, [pid 5073] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] close(4 [pid 5075] umount2("./145/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5976 attached [pid 5074] <... close resumed>) = 0 [pid 5976] set_robust_list(0x55556e32a660, 24) = 0 [pid 5976] chdir("./146" [pid 5077] <... ioctl resumed>) = 0 [pid 5078] <... ioctl resumed>) = 0 [pid 5976] <... chdir resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 5976 [pid 5976] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5078] close(3 [pid 5077] close(3 [pid 5976] setpgid(0, 0 [pid 5077] <... close resumed>) = 0 [pid 5976] <... setpgid resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5976] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] rmdir("./145/bus") = 0 [pid 5074] umount2("./145/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5977 attached ) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./145/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./145/binderfs" [pid 5977] set_robust_list(0x55556e32a660, 24 [pid 5976] <... openat resumed>) = 3 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 5977 [pid 5075] <... umount2 resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5074] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5976] write(3, "1000", 4 [pid 5074] close(3 [pid 5977] <... set_robust_list resumed>) = 0 [pid 5976] <... write resumed>) = 4 ./strace-static-x86_64: Process 5978 attached [pid 5977] chdir("./148" [pid 5976] close(3 [pid 5074] <... close resumed>) = 0 [pid 5978] set_robust_list(0x55556e32a660, 24 [pid 5976] <... close resumed>) = 0 [pid 5074] rmdir("./145" [pid 5978] <... set_robust_list resumed>) = 0 [pid 5977] <... chdir resumed>) = 0 [pid 5976] symlink("/dev/binderfs", "./binderfs" [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 5978 [pid 5074] <... rmdir resumed>) = 0 [pid 5978] chdir("./148") = 0 [pid 5977] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5976] <... symlink resumed>) = 0 [pid 5978] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5977] <... prctl resumed>) = 0 [pid 5976] memfd_create("syzkaller", 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5075] umount2("./145/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] mkdir("./146", 0777 [pid 5976] <... memfd_create resumed>) = 3 [pid 5978] <... prctl resumed>) = 0 [pid 5977] setpgid(0, 0 [pid 5976] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... mkdir resumed>) = 0 [pid 5978] setpgid(0, 0 [pid 5977] <... setpgid resumed>) = 0 [pid 5976] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] newfstatat(AT_FDCWD, "./145/bus", [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5978] <... setpgid resumed>) = 0 [pid 5977] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5976] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5977] <... openat resumed>) = 3 [pid 5976] <... write resumed>) = 524288 [pid 5977] write(3, "1000", 4) = 4 [pid 5976] munmap(0x7f0356e00000, 138412032 [pid 5977] close(3) = 0 [pid 5978] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5977] symlink("/dev/binderfs", "./binderfs" [pid 5075] umount2("./145/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] close(3 [pid 5978] <... openat resumed>) = 3 [pid 5075] openat(AT_FDCWD, "./145/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5978] write(3, "1000", 4 [pid 5076] <... close resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 5075] newfstatat(4, "", [pid 5976] <... munmap resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5978] <... write resumed>) = 4 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5977] <... symlink resumed>) = 0 [pid 5978] close(3 [pid 5075] getdents64(4, [pid 5978] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5978] symlink("/dev/binderfs", "./binderfs" [pid 5075] getdents64(4, [pid 5978] <... symlink resumed>) = 0 [pid 5976] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 5979 [pid 5978] memfd_create("syzkaller", 0 [pid 5977] memfd_create("syzkaller", 0 [pid 5976] <... openat resumed>) = 4 [pid 5075] close(4 [pid 5978] <... memfd_create resumed>) = 3 [pid 5075] <... close resumed>) = 0 ./strace-static-x86_64: Process 5979 attached [pid 5978] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] rmdir("./145/bus" [pid 5979] set_robust_list(0x55556e32a660, 24 [pid 5978] <... mmap resumed>) = 0x7f0356e00000 [pid 5977] <... memfd_create resumed>) = 3 [pid 5976] ioctl(4, LOOP_SET_FD, 3 [pid 5075] <... rmdir resumed>) = 0 [pid 5977] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5979] <... set_robust_list resumed>) = 0 [pid 5978] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] umount2("./145/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5979] chdir("./149" [pid 5977] <... mmap resumed>) = 0x7f0356e00000 [pid 5976] <... ioctl resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5979] <... chdir resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./145/binderfs", [pid 5979] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5979] <... prctl resumed>) = 0 [pid 5976] close(3 [pid 5075] unlink("./145/binderfs" [pid 5979] setpgid(0, 0 [pid 5978] <... write resumed>) = 524288 [pid 5977] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5976] <... close resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5979] <... setpgid resumed>) = 0 [pid 5075] getdents64(3, [pid 5979] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5976] close(4 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [ 165.567713][ T5976] loop0: detected capacity change from 0 to 1024 [pid 5979] <... openat resumed>) = 3 [pid 5977] <... write resumed>) = 524288 [pid 5976] <... close resumed>) = 0 [pid 5075] close(3 [pid 5978] munmap(0x7f0356e00000, 138412032) = 0 [pid 5978] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5978] ioctl(4, LOOP_SET_FD, 3 [pid 5977] munmap(0x7f0356e00000, 138412032 [pid 5074] <... ioctl resumed>) = 0 [pid 5074] close(3 [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./145") = 0 [pid 5074] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5976] mkdir("./bus", 0777 [pid 5977] <... munmap resumed>) = 0 [pid 5976] <... mkdir resumed>) = 0 [pid 5979] write(3, "1000", 4) = 4 [pid 5978] <... ioctl resumed>) = 0 [pid 5075] mkdir("./146", 0777 [pid 5979] close(3 [pid 5978] close(3 [pid 5976] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5075] <... mkdir resumed>) = 0 [pid 5979] <... close resumed>) = 0 [pid 5978] <... close resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5978] close(4 [pid 5977] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... openat resumed>) = 3 [pid 5979] symlink("/dev/binderfs", "./binderfs" [pid 5978] <... close resumed>) = 0 [pid 5977] <... openat resumed>) = 4 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5979] <... symlink resumed>) = 0 [pid 5978] mkdir("./bus", 0777 [pid 5977] ioctl(4, LOOP_SET_FD, 3 [pid 5978] <... mkdir resumed>) = 0 [pid 5979] memfd_create("syzkaller", 0 [pid 5978] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 5980 [pid 5979] <... memfd_create resumed>) = 3 [pid 5979] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5979] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288./strace-static-x86_64: Process 5980 attached [pid 5980] set_robust_list(0x55556e32a660, 24 [pid 5976] <... mount resumed>) = 0 [pid 5980] <... set_robust_list resumed>) = 0 [pid 5976] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5980] chdir("./146" [pid 5976] <... openat resumed>) = 3 [pid 5976] chdir("./bus" [pid 5980] <... chdir resumed>) = 0 [pid 5979] <... write resumed>) = 524288 [pid 5978] <... mount resumed>) = 0 [pid 5977] <... ioctl resumed>) = 0 [pid 5976] <... chdir resumed>) = 0 [pid 5980] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5977] close(3 [pid 5976] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5980] <... prctl resumed>) = 0 [pid 5978] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5976] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5980] setpgid(0, 0 [pid 5978] <... openat resumed>) = 3 [pid 5976] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5980] <... setpgid resumed>) = 0 [pid 5978] chdir("./bus" [pid 5977] <... close resumed>) = 0 [pid 5980] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5978] <... chdir resumed>) = 0 [pid 5980] <... openat resumed>) = 3 [pid 5978] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5977] close(4 [pid 5976] <... symlink resumed>) = 0 [pid 5980] write(3, "1000", 4 [pid 5978] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... ioctl resumed>) = 0 [pid 5978] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5976] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5980] <... write resumed>) = 4 [ 165.619013][ T5978] loop4: detected capacity change from 0 to 1024 [ 165.640082][ T5977] loop5: detected capacity change from 0 to 1024 [pid 5980] close(3 [pid 5979] munmap(0x7f0356e00000, 138412032 [pid 5978] <... symlink resumed>) = 0 [pid 5977] <... close resumed>) = 0 [pid 5979] <... munmap resumed>) = 0 [pid 5977] mkdir("./bus", 0777 [pid 5976] <... creat resumed>) = 4 [pid 5978] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5976] rename("./bus", "./file2" [pid 5980] <... close resumed>) = 0 [pid 5977] <... mkdir resumed>) = 0 [pid 5976] <... rename resumed>) = -1 EEXIST (File exists) [pid 5980] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5979] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5978] <... creat resumed>) = 4 [pid 5976] memfd_create("syzkaller", 0 [pid 5979] <... openat resumed>) = 4 [pid 5976] <... memfd_create resumed>) = 5 [pid 5979] ioctl(4, LOOP_SET_FD, 3 [pid 5976] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5980] memfd_create("syzkaller", 0 [pid 5979] <... ioctl resumed>) = 0 [pid 5978] rename("./bus", "./file2" [pid 5977] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5976] <... mmap resumed>) = 0x7f0356e00000 [pid 5980] <... memfd_create resumed>) = 3 [pid 5980] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] close(3) = 0 [pid 5980] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5980] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5977] <... mount resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 5981 [pid 5978] <... rename resumed>) = -1 EEXIST (File exists) [pid 5978] memfd_create("syzkaller", 0) = 5 [pid 5977] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5976] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288./strace-static-x86_64: Process 5981 attached [pid 5978] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5977] <... openat resumed>) = 3 [pid 5981] set_robust_list(0x55556e32a660, 24 [pid 5978] <... mmap resumed>) = 0x7f0356e00000 [pid 5981] <... set_robust_list resumed>) = 0 [pid 5977] chdir("./bus" [pid 5981] chdir("./146" [pid 5977] <... chdir resumed>) = 0 [pid 5976] <... write resumed>) = 524288 [pid 5977] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5981] <... chdir resumed>) = 0 [pid 5980] <... write resumed>) = 524288 [pid 5977] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5977] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5981] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5978] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5981] <... prctl resumed>) = 0 [pid 5980] munmap(0x7f0356e00000, 138412032 [pid 5977] <... symlink resumed>) = 0 [pid 5981] setpgid(0, 0 [pid 5979] close(3 [pid 5981] <... setpgid resumed>) = 0 [pid 5979] <... close resumed>) = 0 [ 165.699518][ T5979] loop3: detected capacity change from 0 to 1024 [pid 5981] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5980] <... munmap resumed>) = 0 [pid 5979] close(4 [pid 5977] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5981] <... openat resumed>) = 3 [pid 5979] <... close resumed>) = 0 [pid 5981] write(3, "1000", 4 [pid 5979] mkdir("./bus", 0777 [pid 5976] munmap(0x7f0356e00000, 138412032 [pid 5981] <... write resumed>) = 4 [pid 5980] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5979] <... mkdir resumed>) = 0 [pid 5976] <... munmap resumed>) = 0 [pid 5981] close(3 [pid 5980] <... openat resumed>) = 4 [pid 5979] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5978] <... write resumed>) = 524288 [pid 5976] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5981] <... close resumed>) = 0 [pid 5980] ioctl(4, LOOP_SET_FD, 3 [pid 5978] munmap(0x7f0356e00000, 138412032 [pid 5977] <... creat resumed>) = 4 [pid 5976] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5981] symlink("/dev/binderfs", "./binderfs" [pid 5978] <... munmap resumed>) = 0 [pid 5976] close(5 [pid 5981] <... symlink resumed>) = 0 [pid 5976] <... close resumed>) = 0 [pid 5981] memfd_create("syzkaller", 0 [pid 5978] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5981] <... memfd_create resumed>) = 3 [pid 5978] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5981] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5978] close(5 [pid 5977] rename("./bus", "./file2" [pid 5981] <... mmap resumed>) = 0x7f0356e00000 [pid 5978] <... close resumed>) = 0 [pid 5977] <... rename resumed>) = -1 EEXIST (File exists) [pid 5977] memfd_create("syzkaller", 0 [pid 5980] <... ioctl resumed>) = 0 [pid 5977] <... memfd_create resumed>) = 5 [pid 5976] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5980] close(3 [pid 5977] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5980] <... close resumed>) = 0 [pid 5980] close(4 [pid 5981] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5980] <... close resumed>) = 0 [pid 5979] <... mount resumed>) = 0 [pid 5978] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5977] <... mmap resumed>) = 0x7f0356e00000 [pid 5976] <... open resumed>) = 5 [pid 5980] mkdir("./bus", 0777 [pid 5981] <... write resumed>) = 524288 [pid 5980] <... mkdir resumed>) = 0 [pid 5979] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5977] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5976] ftruncate(5, 0) = 0 [pid 5976] exit_group(0 [pid 5978] <... open resumed>) = 5 [pid 5976] <... exit_group resumed>) = ? [pid 5980] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5979] <... openat resumed>) = 3 [pid 5978] ftruncate(5, 0 [pid 5976] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5976, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5979] chdir("./bus" [pid 5978] <... ftruncate resumed>) = 0 [pid 5979] <... chdir resumed>) = 0 [ 165.779323][ T5980] loop1: detected capacity change from 0 to 1024 [pid 5978] exit_group(0 [pid 5979] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5978] <... exit_group resumed>) = ? [pid 5073] umount2("./146", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./146", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5979] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5978] +++ exited with 0 +++ [pid 5073] <... openat resumed>) = 3 [pid 5979] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5978, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] umount2("./148", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./146/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./148", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5077] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5981] munmap(0x7f0356e00000, 138412032 [pid 5980] <... mount resumed>) = 0 [pid 5979] <... symlink resumed>) = 0 [pid 5077] getdents64(3, [pid 5073] <... umount2 resumed>) = 0 [pid 5979] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5981] <... munmap resumed>) = 0 [pid 5980] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5979] <... creat resumed>) = 4 [pid 5977] <... write resumed>) = 524288 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] umount2("./146/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5980] <... openat resumed>) = 3 [pid 5077] umount2("./148/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5979] rename("./bus", "./file2" [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5979] <... rename resumed>) = -1 EEXIST (File exists) [pid 5073] newfstatat(AT_FDCWD, "./146/bus", [pid 5981] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5980] chdir("./bus" [pid 5979] memfd_create("syzkaller", 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5980] <... chdir resumed>) = 0 [pid 5979] <... memfd_create resumed>) = 5 [pid 5977] munmap(0x7f0356e00000, 138412032 [pid 5077] <... umount2 resumed>) = 0 [pid 5073] umount2("./146/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5980] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5979] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5981] <... openat resumed>) = 4 [pid 5980] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5977] <... munmap resumed>) = 0 [pid 5980] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5981] ioctl(4, LOOP_SET_FD, 3 [pid 5073] openat(AT_FDCWD, "./146/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5979] <... mmap resumed>) = 0x7f0356e00000 [pid 5980] <... symlink resumed>) = 0 [pid 5977] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5980] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5977] close(5 [pid 5980] <... creat resumed>) = 4 [pid 5980] rename("./bus", "./file2" [pid 5981] <... ioctl resumed>) = 0 [pid 5979] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5977] <... close resumed>) = 0 [pid 5077] umount2("./148/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... openat resumed>) = 4 [pid 5981] close(3 [pid 5980] <... rename resumed>) = -1 EEXIST (File exists) [pid 5977] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(4, "", [pid 5981] <... close resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./148/bus", [pid 5981] close(4 [pid 5980] memfd_create("syzkaller", 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5981] <... close resumed>) = 0 [pid 5980] <... memfd_create resumed>) = 5 [pid 5979] <... write resumed>) = 524288 [pid 5977] <... open resumed>) = 5 [pid 5077] umount2("./148/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] getdents64(4, [pid 5981] mkdir("./bus", 0777 [pid 5980] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5979] munmap(0x7f0356e00000, 138412032 [pid 5977] ftruncate(5, 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5981] <... mkdir resumed>) = 0 [pid 5980] <... mmap resumed>) = 0x7f0356e00000 [pid 5979] <... munmap resumed>) = 0 [pid 5977] <... ftruncate resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./148/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] getdents64(4, [pid 5981] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5980] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5977] exit_group(0 [pid 5077] <... openat resumed>) = 4 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] newfstatat(4, "", [pid 5073] close(4 [pid 5979] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5977] <... exit_group resumed>) = ? [pid 5073] <... close resumed>) = 0 [pid 5979] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5977] +++ exited with 0 +++ [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5977, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5981] <... mount resumed>) = 0 [pid 5979] close(5 [pid 5077] getdents64(4, [pid 5073] rmdir("./146/bus" [pid 5981] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5979] <... close resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] <... rmdir resumed>) = 0 [pid 5078] umount2("./148", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5981] <... openat resumed>) = 3 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] close(4 [pid 5073] umount2("./146/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5981] chdir("./bus" [pid 5078] openat(AT_FDCWD, "./148", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] rmdir("./148/bus" [pid 5073] newfstatat(AT_FDCWD, "./146/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5981] <... chdir resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5077] <... rmdir resumed>) = 0 [ 165.880491][ T5981] loop2: detected capacity change from 0 to 1024 [pid 5073] unlink("./146/binderfs" [pid 5981] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5980] <... write resumed>) = 524288 [pid 5979] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] newfstatat(3, "", [pid 5077] umount2("./148/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... unlink resumed>) = 0 [pid 5981] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5980] munmap(0x7f0356e00000, 138412032 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] getdents64(3, [pid 5078] getdents64(3, [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] rmdir("./146" [pid 5981] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5980] <... munmap resumed>) = 0 [pid 5078] umount2("./148/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] newfstatat(AT_FDCWD, "./148/binderfs", [pid 5073] <... rmdir resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] mkdir("./147", 0777 [pid 5077] unlink("./148/binderfs" [pid 5981] <... symlink resumed>) = 0 [pid 5980] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5979] <... open resumed>) = 5 [pid 5077] <... unlink resumed>) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 5981] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5980] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5979] ftruncate(5, 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5980] close(5 [pid 5979] <... ftruncate resumed>) = 0 [pid 5077] getdents64(3, [pid 5073] <... openat resumed>) = 3 [pid 5981] <... creat resumed>) = 4 [pid 5980] <... close resumed>) = 0 [pid 5979] exit_group(0 [pid 5078] <... umount2 resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5981] rename("./bus", "./file2" [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5077] close(3) = 0 [pid 5981] <... rename resumed>) = -1 EEXIST (File exists) [pid 5077] rmdir("./148" [pid 5078] umount2("./148/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5979] <... exit_group resumed>) = ? [pid 5981] memfd_create("syzkaller", 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... rmdir resumed>) = 0 [pid 5077] mkdir("./149", 0777 [pid 5981] <... memfd_create resumed>) = 5 [pid 5980] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5979] +++ exited with 0 +++ [pid 5078] newfstatat(AT_FDCWD, "./148/bus", [pid 5981] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5979, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5981] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] umount2("./148/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5980] <... open resumed>) = 5 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] openat(AT_FDCWD, "./148/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] umount2("./149", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... openat resumed>) = 4 [pid 5078] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(4, [pid 5980] ftruncate(5, 0 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... openat resumed>) = 3 [pid 5078] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5078] close(4) = 0 [pid 5078] rmdir("./148/bus" [pid 5981] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... rmdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./149", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5980] <... ftruncate resumed>) = 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5078] umount2("./148/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5981] <... write resumed>) = 524288 [pid 5980] exit_group(0 [pid 5076] <... openat resumed>) = 3 [pid 5981] munmap(0x7f0356e00000, 138412032 [pid 5980] <... exit_group resumed>) = ? [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(3, "", [pid 5073] <... ioctl resumed>) = 0 [pid 5981] <... munmap resumed>) = 0 [pid 5981] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5981] close(5) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] close(3 [pid 5078] newfstatat(AT_FDCWD, "./148/binderfs", [pid 5981] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5980] +++ exited with 0 +++ [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] getdents64(3, [pid 5073] <... close resumed>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5980, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5078] unlink("./148/binderfs" [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5981] <... open resumed>) = 5 [pid 5078] <... unlink resumed>) = 0 [pid 5077] <... ioctl resumed>) = 0 [pid 5076] umount2("./149/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./146", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5981] ftruncate(5, 0 [pid 5078] getdents64(3, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 5982 ./strace-static-x86_64: Process 5982 attached [pid 5074] openat(AT_FDCWD, "./146", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5982] set_robust_list(0x55556e32a660, 24 [pid 5981] <... ftruncate resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5074] newfstatat(3, "", [pid 5982] <... set_robust_list resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5982] chdir("./147" [pid 5981] exit_group(0 [pid 5078] close(3 [pid 5077] close(3 [pid 5074] getdents64(3, [pid 5982] <... chdir resumed>) = 0 [pid 5981] <... exit_group resumed>) = ? [pid 5078] <... close resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5982] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5981] +++ exited with 0 +++ [pid 5078] rmdir("./148" [pid 5076] <... umount2 resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5982] <... prctl resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] umount2("./149/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5981, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5074] umount2("./146/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5982] setpgid(0, 0 [pid 5078] mkdir("./149", 0777 [pid 5982] <... setpgid resumed>) = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./149/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./149/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5076] openat(AT_FDCWD, "./149/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5982] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5078] <... openat resumed>) = 3 [pid 5076] <... openat resumed>) = 4 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 5983 [pid 5076] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] close(4) = 0 ./strace-static-x86_64: Process 5983 attached [pid 5982] <... openat resumed>) = 3 [pid 5076] rmdir("./149/bus" [pid 5075] umount2("./146", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./146/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "./146", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./146/bus", [pid 5983] set_robust_list(0x55556e32a660, 24 [pid 5982] write(3, "1000", 4 [pid 5075] <... openat resumed>) = 3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5983] <... set_robust_list resumed>) = 0 [pid 5982] <... write resumed>) = 4 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] newfstatat(3, "", [pid 5074] umount2("./146/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5983] chdir("./149" [pid 5982] close(3) = 0 [pid 5076] umount2("./149/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5983] <... chdir resumed>) = 0 [pid 5982] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5983] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5982] <... symlink resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./149/binderfs", [pid 5074] openat(AT_FDCWD, "./146/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5983] <... prctl resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5982] memfd_create("syzkaller", 0 [pid 5075] getdents64(3, [pid 5074] <... openat resumed>) = 4 [pid 5983] setpgid(0, 0 [pid 5076] unlink("./149/binderfs" [pid 5983] <... setpgid resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] newfstatat(4, "", [pid 5982] <... memfd_create resumed>) = 3 [pid 5982] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5983] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] getdents64(3, [pid 5075] umount2("./146/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5982] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... ioctl resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] getdents64(4, [pid 5983] <... openat resumed>) = 3 [pid 5983] write(3, "1000", 4 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5983] <... write resumed>) = 4 [pid 5983] close(3) = 0 [pid 5076] close(3 [pid 5074] getdents64(4, [pid 5983] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] rmdir("./149" [pid 5983] <... symlink resumed>) = 0 [pid 5074] close(4 [pid 5983] memfd_create("syzkaller", 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5983] <... memfd_create resumed>) = 3 [pid 5076] mkdir("./150", 0777 [pid 5074] rmdir("./146/bus" [pid 5983] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5078] close(3 [pid 5076] <... mkdir resumed>) = 0 [pid 5074] umount2("./146/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5983] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5982] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5074] newfstatat(AT_FDCWD, "./146/binderfs", [pid 5076] <... openat resumed>) = 3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 5984 attached [pid 5982] <... write resumed>) = 524288 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5074] unlink("./146/binderfs" [pid 5984] set_robust_list(0x55556e32a660, 24) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5984] chdir("./149" [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 5984 [pid 5984] <... chdir resumed>) = 0 [pid 5984] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5983] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... unlink resumed>) = 0 [pid 5075] umount2("./146/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] getdents64(3, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./146/bus", [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5984] <... prctl resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] close(3 [pid 5075] umount2("./146/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./146/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] rmdir("./146" [pid 5984] setpgid(0, 0 [pid 5075] <... openat resumed>) = 4 [pid 5984] <... setpgid resumed>) = 0 [pid 5075] newfstatat(4, "", [pid 5074] <... rmdir resumed>) = 0 [pid 5074] mkdir("./147", 0777 [pid 5984] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5984] <... openat resumed>) = 3 [pid 5984] write(3, "1000", 4) = 4 [pid 5984] close(3) = 0 [pid 5984] symlink("/dev/binderfs", "./binderfs" [pid 5075] getdents64(4, [pid 5984] <... symlink resumed>) = 0 [pid 5984] memfd_create("syzkaller", 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5984] <... memfd_create resumed>) = 3 [pid 5982] munmap(0x7f0356e00000, 138412032 [pid 5075] getdents64(4, [pid 5074] <... openat resumed>) = 3 [pid 5984] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5982] <... munmap resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] close(4 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5984] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] <... close resumed>) = 0 [pid 5984] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5982] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5982] ioctl(4, LOOP_SET_FD, 3 [pid 5983] <... write resumed>) = 524288 [pid 5075] rmdir("./146/bus" [pid 5984] <... write resumed>) = 524288 [pid 5075] <... rmdir resumed>) = 0 [pid 5983] munmap(0x7f0356e00000, 138412032 [pid 5075] umount2("./146/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5982] <... ioctl resumed>) = 0 [pid 5984] munmap(0x7f0356e00000, 138412032 [pid 5983] <... munmap resumed>) = 0 [pid 5982] close(3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5984] <... munmap resumed>) = 0 [pid 5983] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5982] <... close resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./146/binderfs", [pid 5983] <... openat resumed>) = 4 [pid 5982] close(4 [pid 5076] <... ioctl resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5983] ioctl(4, LOOP_SET_FD, 3 [pid 5982] <... close resumed>) = 0 [pid 5075] unlink("./146/binderfs") = 0 [pid 5984] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5982] mkdir("./bus", 0777 [pid 5075] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 5075] rmdir("./146") = 0 [pid 5075] mkdir("./147", 0777 [pid 5074] close(3 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 [ 166.147898][ T5982] loop0: detected capacity change from 0 to 1024 [ 166.183746][ T5983] loop4: detected capacity change from 0 to 1024 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5984] <... openat resumed>) = 4 [pid 5982] <... mkdir resumed>) = 0 [pid 5076] close(3 [pid 5984] ioctl(4, LOOP_SET_FD, 3 [pid 5982] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5076] <... close resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 5985 ./strace-static-x86_64: Process 5985 attached [pid 5985] set_robust_list(0x55556e32a660, 24) = 0 [pid 5985] chdir("./147" [pid 5984] <... ioctl resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5985] <... chdir resumed>) = 0 [pid 5985] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5983] <... ioctl resumed>) = 0 [pid 5985] <... prctl resumed>) = 0 [pid 5985] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 5986 attached [pid 5982] <... mount resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 5986 [pid 5986] set_robust_list(0x55556e32a660, 24 [pid 5985] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5983] close(3 [pid 5982] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5986] <... set_robust_list resumed>) = 0 [pid 5983] <... close resumed>) = 0 [pid 5982] <... openat resumed>) = 3 [pid 5986] chdir("./150" [pid 5983] close(4 [pid 5982] chdir("./bus" [pid 5986] <... chdir resumed>) = 0 [pid 5983] <... close resumed>) = 0 [pid 5982] <... chdir resumed>) = 0 [pid 5986] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5985] <... openat resumed>) = 3 [pid 5984] close(3 [pid 5983] mkdir("./bus", 0777 [pid 5982] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5986] <... prctl resumed>) = 0 [pid 5985] write(3, "1000", 4 [pid 5984] <... close resumed>) = 0 [pid 5983] <... mkdir resumed>) = 0 [pid 5986] setpgid(0, 0 [pid 5985] <... write resumed>) = 4 [pid 5984] close(4 [pid 5983] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5982] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5986] <... setpgid resumed>) = 0 [pid 5985] close(3 [pid 5984] <... close resumed>) = 0 [pid 5982] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5075] <... ioctl resumed>) = 0 [pid 5986] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5985] <... close resumed>) = 0 [pid 5984] mkdir("./bus", 0777 [pid 5983] <... mount resumed>) = 0 [pid 5986] <... openat resumed>) = 3 [pid 5985] symlink("/dev/binderfs", "./binderfs" [pid 5986] write(3, "1000", 4 [pid 5985] <... symlink resumed>) = 0 [pid 5984] <... mkdir resumed>) = 0 [pid 5986] <... write resumed>) = 4 [pid 5986] close(3) = 0 [ 166.199532][ T5984] loop5: detected capacity change from 0 to 1024 [pid 5983] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5985] memfd_create("syzkaller", 0 [pid 5983] <... openat resumed>) = 3 [pid 5986] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5985] <... memfd_create resumed>) = 3 [pid 5983] chdir("./bus" [pid 5985] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5983] <... chdir resumed>) = 0 [pid 5985] <... mmap resumed>) = 0x7f0356e00000 [pid 5984] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5983] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5986] memfd_create("syzkaller", 0 [pid 5983] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5982] <... symlink resumed>) = 0 [pid 5986] <... memfd_create resumed>) = 3 [pid 5983] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5986] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5982] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5983] <... symlink resumed>) = 0 [pid 5075] close(3 [pid 5983] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5985] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5982] <... creat resumed>) = 4 [pid 5075] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5982] rename("./bus", "./file2" [pid 5986] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5984] <... mount resumed>) = 0 [pid 5982] <... rename resumed>) = -1 EEXIST (File exists) [pid 5983] <... creat resumed>) = 4 ./strace-static-x86_64: Process 5987 attached [pid 5985] <... write resumed>) = 524288 [pid 5984] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5983] rename("./bus", "./file2" [pid 5982] memfd_create("syzkaller", 0 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 5987 [pid 5987] set_robust_list(0x55556e32a660, 24 [pid 5986] <... write resumed>) = 524288 [pid 5985] munmap(0x7f0356e00000, 138412032 [pid 5984] <... openat resumed>) = 3 [pid 5983] <... rename resumed>) = -1 EEXIST (File exists) [pid 5982] <... memfd_create resumed>) = 5 [pid 5987] <... set_robust_list resumed>) = 0 [pid 5985] <... munmap resumed>) = 0 [pid 5984] chdir("./bus" [pid 5983] memfd_create("syzkaller", 0 [pid 5982] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5987] chdir("./147" [pid 5984] <... chdir resumed>) = 0 [pid 5983] <... memfd_create resumed>) = 5 [pid 5982] <... mmap resumed>) = 0x7f0356e00000 [pid 5987] <... chdir resumed>) = 0 [pid 5986] munmap(0x7f0356e00000, 138412032 [pid 5985] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5984] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5983] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5987] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5985] <... openat resumed>) = 4 [pid 5984] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5983] <... mmap resumed>) = 0x7f0356e00000 [pid 5987] <... prctl resumed>) = 0 [pid 5986] <... munmap resumed>) = 0 [pid 5985] ioctl(4, LOOP_SET_FD, 3 [pid 5984] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5987] setpgid(0, 0) = 0 [pid 5987] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5986] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5982] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5987] <... openat resumed>) = 3 [pid 5986] <... openat resumed>) = 4 [pid 5986] ioctl(4, LOOP_SET_FD, 3 [pid 5987] write(3, "1000", 4 [pid 5983] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5987] <... write resumed>) = 4 [pid 5987] close(3) = 0 [pid 5987] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5987] memfd_create("syzkaller", 0 [pid 5984] <... symlink resumed>) = 0 [pid 5986] <... ioctl resumed>) = 0 [pid 5987] <... memfd_create resumed>) = 3 [pid 5986] close(3 [pid 5984] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5987] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5986] <... close resumed>) = 0 [pid 5983] <... write resumed>) = 524288 [pid 5982] <... write resumed>) = 524288 [pid 5986] close(4) = 0 [pid 5985] <... ioctl resumed>) = 0 [pid 5986] mkdir("./bus", 0777 [pid 5985] close(3) = 0 [pid 5982] munmap(0x7f0356e00000, 138412032 [pid 5985] close(4) = 0 [pid 5985] mkdir("./bus", 0777 [pid 5986] <... mkdir resumed>) = 0 [pid 5985] <... mkdir resumed>) = 0 [pid 5982] <... munmap resumed>) = 0 [pid 5987] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5985] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5982] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5986] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5982] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5985] <... mount resumed>) = 0 [pid 5984] <... creat resumed>) = 4 [pid 5983] munmap(0x7f0356e00000, 138412032 [pid 5982] close(5 [pid 5984] rename("./bus", "./file2" [pid 5983] <... munmap resumed>) = 0 [pid 5985] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [ 166.324734][ T5985] loop1: detected capacity change from 0 to 1024 [ 166.338776][ T5986] loop3: detected capacity change from 0 to 1024 [pid 5983] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5985] chdir("./bus" [pid 5983] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5985] <... chdir resumed>) = 0 [pid 5984] <... rename resumed>) = -1 EEXIST (File exists) [pid 5985] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5983] close(5 [pid 5987] <... write resumed>) = 524288 [pid 5985] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5984] memfd_create("syzkaller", 0 [pid 5982] <... close resumed>) = 0 [pid 5986] <... mount resumed>) = 0 [pid 5984] <... memfd_create resumed>) = 5 [pid 5986] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5984] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5985] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5986] <... openat resumed>) = 3 [pid 5984] <... mmap resumed>) = 0x7f0356e00000 [pid 5986] chdir("./bus" [pid 5982] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5986] <... chdir resumed>) = 0 [pid 5986] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5985] <... symlink resumed>) = 0 [pid 5982] <... open resumed>) = 5 [pid 5987] munmap(0x7f0356e00000, 138412032 [pid 5986] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5985] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5983] <... close resumed>) = 0 [pid 5986] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5982] ftruncate(5, 0 [pid 5987] <... munmap resumed>) = 0 [pid 5983] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5986] <... symlink resumed>) = 0 [pid 5984] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5982] <... ftruncate resumed>) = 0 [pid 5987] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5985] <... creat resumed>) = 4 [pid 5982] exit_group(0 [pid 5987] <... openat resumed>) = 4 [pid 5987] ioctl(4, LOOP_SET_FD, 3 [pid 5985] rename("./bus", "./file2" [pid 5983] <... open resumed>) = 5 [pid 5982] <... exit_group resumed>) = ? [pid 5986] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5982] +++ exited with 0 +++ [pid 5983] ftruncate(5, 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5982, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5073] umount2("./147", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./147", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5983] <... ftruncate resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5073] newfstatat(3, "", [pid 5983] exit_group(0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5983] <... exit_group resumed>) = ? [pid 5073] umount2("./147/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5985] <... rename resumed>) = -1 EEXIST (File exists) [pid 5985] memfd_create("syzkaller", 0) = 5 [pid 5985] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5983] +++ exited with 0 +++ [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5983, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5986] <... creat resumed>) = 4 [pid 5986] rename("./bus", "./file2" [pid 5077] umount2("./149", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5986] <... rename resumed>) = -1 EEXIST (File exists) [pid 5984] <... write resumed>) = 524288 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = 0 [pid 5986] memfd_create("syzkaller", 0 [pid 5984] munmap(0x7f0356e00000, 138412032 [pid 5077] openat(AT_FDCWD, "./149", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5987] <... ioctl resumed>) = 0 [pid 5986] <... memfd_create resumed>) = 5 [pid 5077] <... openat resumed>) = 3 [pid 5987] close(3 [pid 5986] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5984] <... munmap resumed>) = 0 [pid 5077] newfstatat(3, "", [pid 5987] <... close resumed>) = 0 [pid 5986] <... mmap resumed>) = 0x7f0356e00000 [pid 5985] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5987] close(4 [pid 5984] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] getdents64(3, [pid 5073] umount2("./147/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5987] <... close resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5986] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] umount2("./149/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5987] mkdir("./bus", 0777) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5984] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5984] close(5 [ 166.421660][ T5987] loop2: detected capacity change from 0 to 1024 [pid 5073] newfstatat(AT_FDCWD, "./147/bus", [pid 5986] <... write resumed>) = 524288 [pid 5984] <... close resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./147/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./147/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5987] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5073] <... openat resumed>) = 4 [pid 5985] <... write resumed>) = 524288 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, [pid 5985] munmap(0x7f0356e00000, 138412032) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5987] <... mount resumed>) = 0 [pid 5073] getdents64(4, [pid 5984] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5987] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5073] close(4 [pid 5987] chdir("./bus" [pid 5986] munmap(0x7f0356e00000, 138412032 [pid 5985] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] <... close resumed>) = 0 [pid 5987] <... chdir resumed>) = 0 [pid 5986] <... munmap resumed>) = 0 [pid 5985] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5987] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5073] rmdir("./147/bus" [pid 5987] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5985] close(5 [pid 5987] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5986] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5984] <... open resumed>) = 5 [pid 5073] <... rmdir resumed>) = 0 [pid 5986] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5984] ftruncate(5, 0 [pid 5986] close(5 [pid 5985] <... close resumed>) = 0 [pid 5984] <... ftruncate resumed>) = 0 [pid 5077] umount2("./149/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./147/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5987] <... symlink resumed>) = 0 [pid 5986] <... close resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5984] exit_group(0 [pid 5077] newfstatat(AT_FDCWD, "./149/bus", [pid 5073] newfstatat(AT_FDCWD, "./147/binderfs", [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5987] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5077] umount2("./149/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] unlink("./147/binderfs" [pid 5984] <... exit_group resumed>) = ? [pid 5077] openat(AT_FDCWD, "./149/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] <... unlink resumed>) = 0 [pid 5077] newfstatat(4, "", [pid 5985] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] getdents64(4, [pid 5073] getdents64(3, [pid 5986] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5987] <... creat resumed>) = 4 [pid 5985] <... open resumed>) = 5 [pid 5984] +++ exited with 0 +++ [pid 5077] getdents64(4, [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5987] rename("./bus", "./file2" [pid 5985] ftruncate(5, 0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] close(3 [pid 5987] <... rename resumed>) = -1 EEXIST (File exists) [pid 5986] <... open resumed>) = 5 [pid 5985] <... ftruncate resumed>) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5984, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5077] close(4 [pid 5987] memfd_create("syzkaller", 0 [pid 5986] ftruncate(5, 0 [pid 5985] exit_group(0 [pid 5078] restart_syscall(<... resuming interrupted clone ...> [pid 5073] <... close resumed>) = 0 [pid 5078] <... restart_syscall resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5073] rmdir("./147" [pid 5987] <... memfd_create resumed>) = 5 [pid 5986] <... ftruncate resumed>) = 0 [pid 5985] <... exit_group resumed>) = ? [pid 5077] rmdir("./149/bus" [pid 5987] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5986] exit_group(0 [pid 5077] <... rmdir resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5986] <... exit_group resumed>) = ? [pid 5078] umount2("./149", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] umount2("./149/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] mkdir("./148", 0777 [pid 5987] <... mmap resumed>) = 0x7f0356e00000 [pid 5986] +++ exited with 0 +++ [pid 5985] +++ exited with 0 +++ [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./149", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] newfstatat(AT_FDCWD, "./149/binderfs", [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5986, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5073] <... mkdir resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5987] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... openat resumed>) = 3 [pid 5077] unlink("./149/binderfs" [pid 5076] umount2("./150", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5985, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5073] <... openat resumed>) = 3 [pid 5078] newfstatat(3, "", [pid 5077] <... unlink resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] getdents64(3, [pid 5076] openat(AT_FDCWD, "./150", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... restart_syscall resumed>) = 0 [pid 5078] getdents64(3, [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] close(3 [pid 5076] newfstatat(3, "", [pid 5078] umount2("./149/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] umount2("./147", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] rmdir("./149" [pid 5076] getdents64(3, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./147", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] <... rmdir resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5076] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5987] <... write resumed>) = 524288 [pid 5077] mkdir("./150", 0777 [pid 5074] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, [pid 5987] munmap(0x7f0356e00000, 138412032 [pid 5078] <... umount2 resumed>) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5987] <... munmap resumed>) = 0 [pid 5078] umount2("./149/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./147/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5987] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... openat resumed>) = 3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5987] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] newfstatat(AT_FDCWD, "./149/bus", [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5987] close(5) = 0 [pid 5078] umount2("./149/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./150/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./150/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] getdents64(4, [pid 5078] openat(AT_FDCWD, "./149/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5078] <... openat resumed>) = 4 [pid 5076] getdents64(4, [pid 5078] newfstatat(4, "", [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] close(4 [pid 5078] getdents64(4, [pid 5076] <... close resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] rmdir("./150/bus" [pid 5078] getdents64(4, [pid 5076] <... rmdir resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] umount2("./150/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./147/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5987] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] close(4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... close resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./150/binderfs", [pid 5074] newfstatat(AT_FDCWD, "./147/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./147/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] rmdir("./149/bus" [pid 5076] unlink("./150/binderfs" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... unlink resumed>) = 0 [pid 5987] <... open resumed>) = 5 [pid 5076] getdents64(3, [pid 5074] openat(AT_FDCWD, "./147/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... ioctl resumed>) = 0 [pid 5987] ftruncate(5, 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] <... openat resumed>) = 4 [pid 5073] close(3 [pid 5987] <... ftruncate resumed>) = 0 [pid 5078] umount2("./149/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] close(3 [pid 5074] newfstatat(4, "", [pid 5073] <... close resumed>) = 0 [pid 5987] exit_group(0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... close resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5987] <... exit_group resumed>) = ? [pid 5078] newfstatat(AT_FDCWD, "./149/binderfs", [pid 5076] rmdir("./150" [pid 5074] getdents64(4, [pid 5076] <... rmdir resumed>) = 0 [pid 5076] mkdir("./151", 0777 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5078] unlink("./149/binderfs" [pid 5076] <... mkdir resumed>) = 0 [pid 5074] close(4) = 0 [pid 5074] rmdir("./147/bus" [pid 5078] <... unlink resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5074] <... rmdir resumed>) = 0 [pid 5987] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5987, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5075] umount2("./147", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./147/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./147", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... openat resumed>) = 3 [pid 5076] <... openat resumed>) = 3 [pid 5075] newfstatat(3, "", [pid 5074] newfstatat(AT_FDCWD, "./147/binderfs", [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] umount2("./147/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] unlink("./147/binderfs" [pid 5078] getdents64(3, [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5074] <... unlink resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 5988 [pid 5078] close(3./strace-static-x86_64: Process 5988 attached ) = 0 [pid 5074] getdents64(3, [pid 5078] rmdir("./149" [pid 5077] <... ioctl resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5077] close(3 [pid 5074] close(3 [pid 5988] set_robust_list(0x55556e32a660, 24 [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./147" [pid 5075] <... umount2 resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5988] <... set_robust_list resumed>) = 0 [pid 5078] mkdir("./150", 0777 [pid 5077] <... close resumed>) = 0 [pid 5988] chdir("./148" [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] umount2("./147/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] mkdir("./148", 0777 [pid 5988] <... chdir resumed>) = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... mkdir resumed>) = 0 [pid 5988] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] newfstatat(AT_FDCWD, "./147/bus", ./strace-static-x86_64: Process 5989 attached [pid 5988] <... prctl resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 5989 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5989] set_robust_list(0x55556e32a660, 24 [pid 5988] setpgid(0, 0 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5075] umount2("./147/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... openat resumed>) = 3 [pid 5988] <... setpgid resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5989] <... set_robust_list resumed>) = 0 [pid 5988] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] openat(AT_FDCWD, "./147/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5989] chdir("./150" [pid 5988] <... openat resumed>) = 3 [pid 5075] <... openat resumed>) = 4 [pid 5989] <... chdir resumed>) = 0 [pid 5988] write(3, "1000", 4 [pid 5075] newfstatat(4, "", [pid 5989] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5988] <... write resumed>) = 4 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5989] <... prctl resumed>) = 0 [pid 5988] close(3 [pid 5075] getdents64(4, [pid 5989] setpgid(0, 0 [pid 5988] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5989] <... setpgid resumed>) = 0 [pid 5988] symlink("/dev/binderfs", "./binderfs" [pid 5075] getdents64(4, [pid 5989] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] close(4) = 0 [pid 5075] rmdir("./147/bus" [pid 5989] <... openat resumed>) = 3 [pid 5075] <... rmdir resumed>) = 0 [pid 5075] umount2("./147/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5988] <... symlink resumed>) = 0 [pid 5989] write(3, "1000", 4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5988] memfd_create("syzkaller", 0 [pid 5989] <... write resumed>) = 4 [pid 5075] newfstatat(AT_FDCWD, "./147/binderfs", [pid 5989] close(3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5989] <... close resumed>) = 0 [pid 5075] unlink("./147/binderfs" [pid 5989] symlink("/dev/binderfs", "./binderfs" [pid 5988] <... memfd_create resumed>) = 3 [pid 5076] <... ioctl resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5989] <... symlink resumed>) = 0 [pid 5988] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5989] memfd_create("syzkaller", 0 [pid 5988] <... mmap resumed>) = 0x7f0356e00000 [pid 5989] <... memfd_create resumed>) = 3 [pid 5989] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] getdents64(3, [pid 5989] <... mmap resumed>) = 0x7f0356e00000 [pid 5988] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] close(3) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 5990 [pid 5989] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288./strace-static-x86_64: Process 5990 attached [pid 5990] set_robust_list(0x55556e32a660, 24 [pid 5988] <... write resumed>) = 524288 [pid 5075] close(3 [pid 5990] <... set_robust_list resumed>) = 0 [pid 5990] chdir("./151") = 0 [pid 5989] <... write resumed>) = 524288 [pid 5075] <... close resumed>) = 0 [pid 5990] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5990] setpgid(0, 0) = 0 [pid 5990] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5990] write(3, "1000", 4 [pid 5075] rmdir("./147" [pid 5990] <... write resumed>) = 4 [pid 5990] close(3) = 0 [pid 5990] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5990] memfd_create("syzkaller", 0 [pid 5078] <... ioctl resumed>) = 0 [pid 5075] mkdir("./148", 0777 [pid 5990] <... memfd_create resumed>) = 3 [pid 5988] munmap(0x7f0356e00000, 138412032 [pid 5078] close(3 [pid 5075] <... mkdir resumed>) = 0 [pid 5988] <... munmap resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5990] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5990] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] <... ioctl resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5990] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5989] munmap(0x7f0356e00000, 138412032 [pid 5988] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] close(3./strace-static-x86_64: Process 5991 attached [pid 5988] <... openat resumed>) = 4 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 5991 [pid 5074] <... close resumed>) = 0 [pid 5991] set_robust_list(0x55556e32a660, 24 [pid 5989] <... munmap resumed>) = 0 [pid 5991] <... set_robust_list resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5991] chdir("./150") = 0 [pid 5991] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5988] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5992 attached [pid 5991] setpgid(0, 0 [pid 5989] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 5992 [pid 5992] set_robust_list(0x55556e32a660, 24 [pid 5991] <... setpgid resumed>) = 0 [pid 5989] <... openat resumed>) = 4 [pid 5992] <... set_robust_list resumed>) = 0 [pid 5989] ioctl(4, LOOP_SET_FD, 3 [pid 5991] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5992] chdir("./148" [pid 5991] <... openat resumed>) = 3 [pid 5991] write(3, "1000", 4) = 4 [pid 5991] close(3) = 0 [pid 5991] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5991] memfd_create("syzkaller", 0 [pid 5992] <... chdir resumed>) = 0 [pid 5989] <... ioctl resumed>) = 0 [pid 5988] <... ioctl resumed>) = 0 [pid 5991] <... memfd_create resumed>) = 3 [pid 5991] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5992] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5991] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5990] <... write resumed>) = 524288 [pid 5989] close(3 [pid 5988] close(3 [pid 5992] <... prctl resumed>) = 0 [pid 5989] <... close resumed>) = 0 [pid 5988] <... close resumed>) = 0 [pid 5992] setpgid(0, 0 [pid 5989] close(4 [pid 5988] close(4 [pid 5992] <... setpgid resumed>) = 0 [pid 5989] <... close resumed>) = 0 [pid 5988] <... close resumed>) = 0 [pid 5992] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5990] munmap(0x7f0356e00000, 138412032 [pid 5989] mkdir("./bus", 0777 [pid 5988] mkdir("./bus", 0777 [pid 5992] <... openat resumed>) = 3 [pid 5991] <... write resumed>) = 524288 [pid 5989] <... mkdir resumed>) = 0 [pid 5988] <... mkdir resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5989] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5988] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5990] <... munmap resumed>) = 0 [pid 5991] munmap(0x7f0356e00000, 138412032 [pid 5992] write(3, "1000", 4 [pid 5990] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5992] <... write resumed>) = 4 [pid 5990] <... openat resumed>) = 4 [pid 5992] close(3 [pid 5991] <... munmap resumed>) = 0 [pid 5990] ioctl(4, LOOP_SET_FD, 3 [pid 5988] <... mount resumed>) = 0 [pid 5075] close(3 [pid 5992] <... close resumed>) = 0 [ 166.743324][ T5988] loop0: detected capacity change from 0 to 1024 [ 166.763817][ T5989] loop4: detected capacity change from 0 to 1024 [pid 5991] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5991] ioctl(4, LOOP_SET_FD, 3 [pid 5992] symlink("/dev/binderfs", "./binderfs" [pid 5990] <... ioctl resumed>) = 0 [pid 5989] <... mount resumed>) = 0 [pid 5988] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5075] <... close resumed>) = 0 [pid 5992] <... symlink resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5988] <... openat resumed>) = 3 [pid 5988] chdir("./bus" [pid 5989] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5992] memfd_create("syzkaller", 0 [pid 5989] <... openat resumed>) = 3 [pid 5988] <... chdir resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 5993 [pid 5992] <... memfd_create resumed>) = 3 [pid 5990] close(3 [pid 5989] chdir("./bus" [pid 5988] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5992] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5990] <... close resumed>) = 0 [pid 5989] <... chdir resumed>) = 0 [pid 5988] <... openat resumed>) = -1 EBUSY (Device or resource busy) ./strace-static-x86_64: Process 5993 attached [pid 5992] <... mmap resumed>) = 0x7f0356e00000 [pid 5990] close(4 [pid 5989] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5988] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5993] set_robust_list(0x55556e32a660, 24 [pid 5990] <... close resumed>) = 0 [pid 5989] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5993] <... set_robust_list resumed>) = 0 [pid 5993] chdir("./148" [pid 5990] mkdir("./bus", 0777 [pid 5989] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5993] <... chdir resumed>) = 0 [pid 5993] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5990] <... mkdir resumed>) = 0 [pid 5993] setpgid(0, 0 [pid 5990] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5993] <... setpgid resumed>) = 0 [pid 5993] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5993] write(3, "1000", 4) = 4 [pid 5993] close(3) = 0 [pid 5989] <... symlink resumed>) = 0 [pid 5993] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5991] <... ioctl resumed>) = 0 [pid 5993] memfd_create("syzkaller", 0 [pid 5991] close(3 [pid 5990] <... mount resumed>) = 0 [pid 5989] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5988] <... symlink resumed>) = 0 [pid 5993] <... memfd_create resumed>) = 3 [pid 5991] <... close resumed>) = 0 [pid 5990] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5988] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5993] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5992] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5991] close(4 [pid 5989] <... creat resumed>) = 4 [pid 5993] <... mmap resumed>) = 0x7f0356e00000 [pid 5991] <... close resumed>) = 0 [pid 5989] rename("./bus", "./file2" [pid 5993] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5991] mkdir("./bus", 0777 [pid 5990] <... openat resumed>) = 3 [pid 5989] <... rename resumed>) = -1 EEXIST (File exists) [pid 5991] <... mkdir resumed>) = 0 [pid 5989] memfd_create("syzkaller", 0) = 5 [pid 5989] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5991] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5989] <... mmap resumed>) = 0x7f0356e00000 [pid 5990] chdir("./bus") = 0 [pid 5988] <... creat resumed>) = 4 [ 166.813599][ T5990] loop3: detected capacity change from 0 to 1024 [ 166.817606][ T5991] loop5: detected capacity change from 0 to 1024 [pid 5990] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5988] rename("./bus", "./file2" [pid 5990] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5989] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5993] <... write resumed>) = 524288 [pid 5992] <... write resumed>) = 524288 [pid 5988] <... rename resumed>) = -1 EEXIST (File exists) [pid 5990] <... symlink resumed>) = 0 [pid 5988] memfd_create("syzkaller", 0) = 5 [pid 5990] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5988] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5992] munmap(0x7f0356e00000, 138412032 [pid 5993] munmap(0x7f0356e00000, 138412032 [pid 5991] <... mount resumed>) = 0 [pid 5990] <... creat resumed>) = 4 [pid 5989] <... write resumed>) = 524288 [pid 5988] <... mmap resumed>) = 0x7f0356e00000 [pid 5993] <... munmap resumed>) = 0 [pid 5992] <... munmap resumed>) = 0 [pid 5991] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5990] rename("./bus", "./file2" [pid 5993] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5992] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5991] <... openat resumed>) = 3 [pid 5990] <... rename resumed>) = -1 EEXIST (File exists) [pid 5989] munmap(0x7f0356e00000, 138412032 [pid 5988] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5993] <... openat resumed>) = 4 [pid 5992] <... openat resumed>) = 4 [pid 5991] chdir("./bus" [pid 5990] memfd_create("syzkaller", 0 [pid 5989] <... munmap resumed>) = 0 [pid 5991] <... chdir resumed>) = 0 [pid 5990] <... memfd_create resumed>) = 5 [pid 5991] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5990] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5993] ioctl(4, LOOP_SET_FD, 3 [pid 5992] ioctl(4, LOOP_SET_FD, 3 [pid 5991] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5990] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5991] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5989] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5989] close(5 [pid 5993] <... ioctl resumed>) = 0 [pid 5991] <... symlink resumed>) = 0 [pid 5988] <... write resumed>) = 524288 [pid 5993] close(3 [pid 5989] <... close resumed>) = 0 [pid 5993] <... close resumed>) = 0 [pid 5993] close(4 [pid 5991] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5993] <... close resumed>) = 0 [pid 5993] mkdir("./bus", 0777) = 0 [pid 5993] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5989] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5992] <... ioctl resumed>) = 0 [pid 5992] close(3) = 0 [pid 5993] <... mount resumed>) = 0 [pid 5992] close(4 [pid 5991] <... creat resumed>) = 4 [pid 5990] <... write resumed>) = 524288 [pid 5989] <... open resumed>) = 5 [pid 5993] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5992] <... close resumed>) = 0 [pid 5989] ftruncate(5, 0 [pid 5993] <... openat resumed>) = 3 [pid 5989] <... ftruncate resumed>) = 0 [pid 5988] munmap(0x7f0356e00000, 138412032 [ 166.919193][ T5992] loop1: detected capacity change from 0 to 1024 [ 166.926688][ T5993] loop2: detected capacity change from 0 to 1024 [pid 5992] mkdir("./bus", 0777 [pid 5989] exit_group(0 [pid 5988] <... munmap resumed>) = 0 [pid 5991] rename("./bus", "./file2" [pid 5993] chdir("./bus" [pid 5992] <... mkdir resumed>) = 0 [pid 5989] <... exit_group resumed>) = ? [pid 5993] <... chdir resumed>) = 0 [pid 5992] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5991] <... rename resumed>) = -1 EEXIST (File exists) [pid 5989] +++ exited with 0 +++ [pid 5988] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5993] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5991] memfd_create("syzkaller", 0 [pid 5990] munmap(0x7f0356e00000, 138412032 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5989, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5993] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5991] <... memfd_create resumed>) = 5 [pid 5991] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5990] <... munmap resumed>) = 0 [pid 5988] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5993] <... symlink resumed>) = 0 [pid 5991] <... mmap resumed>) = 0x7f0356e00000 [pid 5990] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5077] umount2("./150", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5993] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5988] close(5 [pid 5991] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5990] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5988] <... close resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5993] <... creat resumed>) = 4 [pid 5992] <... mount resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./150", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5993] rename("./bus", "./file2" [pid 5992] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5993] <... rename resumed>) = -1 EEXIST (File exists) [pid 5992] <... openat resumed>) = 3 [pid 5992] chdir("./bus" [pid 5993] memfd_create("syzkaller", 0 [pid 5992] <... chdir resumed>) = 0 [pid 5993] <... memfd_create resumed>) = 5 [pid 5992] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5992] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5993] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5990] close(5 [pid 5077] <... openat resumed>) = 3 [pid 5993] <... mmap resumed>) = 0x7f0356e00000 [pid 5992] <... symlink resumed>) = 0 [pid 5988] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5990] <... close resumed>) = 0 [pid 5077] newfstatat(3, "", [pid 5988] <... open resumed>) = 5 [pid 5993] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5992] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5988] ftruncate(5, 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5988] <... ftruncate resumed>) = 0 [pid 5077] getdents64(3, [pid 5988] exit_group(0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5988] <... exit_group resumed>) = ? [pid 5077] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5992] <... creat resumed>) = 4 [pid 5992] rename("./bus", "./file2" [pid 5990] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5992] <... rename resumed>) = -1 EEXIST (File exists) [pid 5988] +++ exited with 0 +++ [pid 5991] <... write resumed>) = 524288 [pid 5990] <... open resumed>) = 5 [pid 5992] memfd_create("syzkaller", 0 [pid 5991] munmap(0x7f0356e00000, 138412032 [pid 5990] ftruncate(5, 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5988, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5992] <... memfd_create resumed>) = 5 [pid 5992] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5991] <... munmap resumed>) = 0 [pid 5990] <... ftruncate resumed>) = 0 [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 5992] <... mmap resumed>) = 0x7f0356e00000 [pid 5990] exit_group(0 [pid 5073] <... restart_syscall resumed>) = 0 [pid 5992] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5991] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5990] <... exit_group resumed>) = ? [pid 5991] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... umount2 resumed>) = 0 [pid 5073] umount2("./148", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5991] close(5 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./148", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5993] <... write resumed>) = 524288 [pid 5990] +++ exited with 0 +++ [pid 5073] <... openat resumed>) = 3 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5990, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5073] newfstatat(3, "", [pid 5992] <... write resumed>) = 524288 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] umount2("./151", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] getdents64(3, [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./151", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] newfstatat(AT_FDCWD, "./150/bus", [pid 5076] <... openat resumed>) = 3 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] newfstatat(3, "", [pid 5077] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] getdents64(3, [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5991] <... close resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./150/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] umount2("./148/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5993] munmap(0x7f0356e00000, 138412032 [pid 5991] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] <... openat resumed>) = 4 [pid 5076] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5993] <... munmap resumed>) = 0 [pid 5077] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5993] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5077] close(4 [pid 5993] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... close resumed>) = 0 [pid 5993] close(5 [pid 5077] rmdir("./150/bus") = 0 [pid 5992] munmap(0x7f0356e00000, 138412032 [pid 5993] <... close resumed>) = 0 [pid 5992] <... munmap resumed>) = 0 [pid 5991] <... open resumed>) = 5 [pid 5077] umount2("./150/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5993] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./150/binderfs", [pid 5992] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5992] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5991] ftruncate(5, 0 [pid 5077] unlink("./150/binderfs" [pid 5076] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./148/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5992] close(5 [pid 5991] <... ftruncate resumed>) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 5991] exit_group(0 [pid 5077] getdents64(3, [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5993] <... open resumed>) = 5 [pid 5991] <... exit_group resumed>) = ? [pid 5076] newfstatat(AT_FDCWD, "./151/bus", [pid 5073] newfstatat(AT_FDCWD, "./148/bus", [pid 5992] <... close resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5993] ftruncate(5, 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./148/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5993] <... ftruncate resumed>) = 0 [pid 5077] close(3 [pid 5076] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5992] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5991] +++ exited with 0 +++ [pid 5077] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./148/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5993] exit_group(0 [pid 5077] rmdir("./150" [pid 5076] openat(AT_FDCWD, "./151/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... openat resumed>) = 4 [pid 5993] <... exit_group resumed>) = ? [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5991, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5076] <... openat resumed>) = 4 [pid 5073] newfstatat(4, "", [pid 5993] +++ exited with 0 +++ [pid 5992] <... open resumed>) = 5 [pid 5078] umount2("./150", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... rmdir resumed>) = 0 [pid 5076] newfstatat(4, "", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, [pid 5992] ftruncate(5, 0 [pid 5078] openat(AT_FDCWD, "./150", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5993, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5992] <... ftruncate resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5077] mkdir("./151", 0777 [pid 5076] getdents64(4, [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 5073] getdents64(4, [pid 5078] newfstatat(3, "", [pid 5992] exit_group(0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] <... restart_syscall resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, [pid 5073] close(4 [pid 5992] <... exit_group resumed>) = ? [pid 5078] getdents64(3, [pid 5077] <... mkdir resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] <... close resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] close(4 [pid 5078] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... close resumed>) = 0 [pid 5073] rmdir("./148/bus" [pid 5076] rmdir("./151/bus" [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] <... rmdir resumed>) = 0 [pid 5075] umount2("./148", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... rmdir resumed>) = 0 [pid 5073] umount2("./148/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... openat resumed>) = 3 [pid 5992] +++ exited with 0 +++ [pid 5078] <... umount2 resumed>) = 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5076] umount2("./151/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./148", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5992, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5073] newfstatat(AT_FDCWD, "./148/binderfs", [pid 5078] newfstatat(AT_FDCWD, "./150/bus", [pid 5076] newfstatat(AT_FDCWD, "./151/binderfs", [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5078] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] newfstatat(3, "", [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] unlink("./151/binderfs" [pid 5074] umount2("./148", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] unlink("./148/binderfs" [pid 5078] openat(AT_FDCWD, "./150/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... unlink resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... openat resumed>) = 4 [pid 5076] getdents64(3, [pid 5075] getdents64(3, [pid 5074] openat(AT_FDCWD, "./148", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... unlink resumed>) = 0 [pid 5078] newfstatat(4, "", [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] <... openat resumed>) = 3 [pid 5073] getdents64(3, [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] newfstatat(3, "", [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] umount2("./148/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3 [pid 5074] getdents64(3, [pid 5073] close(3 [pid 5078] getdents64(4, [pid 5076] <... close resumed>) = 0 [pid 5076] rmdir("./151" [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] <... rmdir resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5078] getdents64(4, [pid 5074] umount2("./148/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] rmdir("./148" [pid 5078] close(4 [pid 5076] mkdir("./152", 0777 [pid 5073] <... rmdir resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5073] mkdir("./149", 0777 [pid 5078] rmdir("./150/bus" [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] umount2("./148/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./148/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... mkdir resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./148/bus", [pid 5074] newfstatat(AT_FDCWD, "./148/bus", [pid 5078] <... rmdir resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] umount2("./150/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./148/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./148/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] newfstatat(AT_FDCWD, "./150/binderfs", [pid 5073] <... openat resumed>) = 3 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5078] unlink("./150/binderfs") = 0 [pid 5075] openat(AT_FDCWD, "./148/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] openat(AT_FDCWD, "./148/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... openat resumed>) = 4 [pid 5074] <... openat resumed>) = 4 [pid 5075] newfstatat(4, "", [pid 5078] getdents64(3, [pid 5077] <... ioctl resumed>) = 0 [pid 5074] newfstatat(4, "", [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] close(3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] close(3 [pid 5077] <... close resumed>) = 0 [pid 5075] getdents64(4, [pid 5074] getdents64(4, [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5078] <... close resumed>) = 0 [pid 5075] getdents64(4, [pid 5074] getdents64(4, [pid 5078] rmdir("./150") = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5994 attached [pid 5075] close(4 [pid 5074] close(4 [pid 5994] set_robust_list(0x55556e32a660, 24) = 0 [pid 5075] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5075] rmdir("./148/bus" [pid 5074] rmdir("./148/bus" [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5078] mkdir("./151", 0777 [pid 5075] umount2("./148/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./148/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... mkdir resumed>) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 5994 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./148/binderfs", [pid 5074] newfstatat(AT_FDCWD, "./148/binderfs", [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./148/binderfs" [pid 5074] unlink("./148/binderfs" [pid 5994] chdir("./151" [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... unlink resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5994] <... chdir resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5075] getdents64(3, [pid 5994] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5074] getdents64(3, [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5994] <... prctl resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5994] setpgid(0, 0 [pid 5075] close(3 [pid 5074] close(3 [pid 5994] <... setpgid resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 5994] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] <... ioctl resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5073] close(3 [pid 5075] rmdir("./148" [pid 5073] <... close resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] mkdir("./149", 0777 [pid 5074] rmdir("./148" [pid 5076] close(3 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] mkdir("./149", 0777 [pid 5994] <... openat resumed>) = 3 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] <... mkdir resumed>) = 0 [pid 5994] write(3, "1000", 4 [pid 5075] <... openat resumed>) = 3 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5994] <... write resumed>) = 4 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5994] close(3 [pid 5074] <... openat resumed>) = 3 [pid 5994] <... close resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 5996 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5994] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 5995 ./strace-static-x86_64: Process 5996 attached [pid 5996] set_robust_list(0x55556e32a660, 24 [pid 5994] memfd_create("syzkaller", 0./strace-static-x86_64: Process 5995 attached [pid 5996] <... set_robust_list resumed>) = 0 [pid 5994] <... memfd_create resumed>) = 3 [pid 5995] set_robust_list(0x55556e32a660, 24 [pid 5996] chdir("./152" [pid 5078] <... ioctl resumed>) = 0 [pid 5995] <... set_robust_list resumed>) = 0 [pid 5996] <... chdir resumed>) = 0 [pid 5995] chdir("./149" [pid 5996] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5995] <... chdir resumed>) = 0 [pid 5996] <... prctl resumed>) = 0 [pid 5995] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5996] setpgid(0, 0 [pid 5994] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5996] <... setpgid resumed>) = 0 [pid 5995] setpgid(0, 0 [pid 5994] <... mmap resumed>) = 0x7f0356e00000 [pid 5996] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5078] close(3 [pid 5995] <... setpgid resumed>) = 0 [pid 5996] <... openat resumed>) = 3 [pid 5078] <... close resumed>) = 0 [pid 5996] write(3, "1000", 4 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5996] <... write resumed>) = 4 ./strace-static-x86_64: Process 5997 attached [pid 5995] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5996] close(3 [pid 5997] set_robust_list(0x55556e32a660, 24 [pid 5995] <... openat resumed>) = 3 [pid 5996] <... close resumed>) = 0 [pid 5994] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 5997 [pid 5995] write(3, "1000", 4 [pid 5996] symlink("/dev/binderfs", "./binderfs" [pid 5997] <... set_robust_list resumed>) = 0 [pid 5997] chdir("./151") = 0 [pid 5995] <... write resumed>) = 4 [pid 5996] <... symlink resumed>) = 0 [pid 5997] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5995] close(3 [pid 5996] memfd_create("syzkaller", 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5996] <... memfd_create resumed>) = 3 [pid 5996] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5995] <... close resumed>) = 0 [pid 5997] <... prctl resumed>) = 0 [pid 5995] symlink("/dev/binderfs", "./binderfs" [pid 5996] <... mmap resumed>) = 0x7f0356e00000 [pid 5997] setpgid(0, 0 [pid 5995] <... symlink resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5997] <... setpgid resumed>) = 0 [pid 5997] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5995] memfd_create("syzkaller", 0 [pid 5997] <... openat resumed>) = 3 [pid 5997] write(3, "1000", 4 [pid 5075] close(3 [pid 5996] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5997] <... write resumed>) = 4 [pid 5995] <... memfd_create resumed>) = 3 [pid 5075] <... close resumed>) = 0 [pid 5997] close(3) = 0 [pid 5997] symlink("/dev/binderfs", "./binderfs" [pid 5995] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5997] <... symlink resumed>) = 0 [pid 5997] memfd_create("syzkaller", 0 [pid 5995] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] close(3 [pid 5997] <... memfd_create resumed>) = 3 [pid 5074] <... close resumed>) = 0 [pid 5997] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5998 attached [pid 5997] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5998] set_robust_list(0x55556e32a660, 24 [pid 5994] <... write resumed>) = 524288 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 5998 [pid 5995] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5994] munmap(0x7f0356e00000, 138412032 [pid 5998] <... set_robust_list resumed>) = 0 [pid 5998] chdir("./149" [pid 5994] <... munmap resumed>) = 0 [pid 5998] <... chdir resumed>) = 0 [pid 5998] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 5999 ./strace-static-x86_64: Process 5999 attached [pid 5998] <... prctl resumed>) = 0 [pid 5996] <... write resumed>) = 524288 [pid 5994] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5999] set_robust_list(0x55556e32a660, 24 [pid 5998] setpgid(0, 0 [pid 5997] <... write resumed>) = 524288 [pid 5995] <... write resumed>) = 524288 [pid 5999] <... set_robust_list resumed>) = 0 [pid 5998] <... setpgid resumed>) = 0 [pid 5994] <... openat resumed>) = 4 [pid 5998] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5999] chdir("./149" [pid 5998] <... openat resumed>) = 3 [pid 5994] ioctl(4, LOOP_SET_FD, 3 [pid 5999] <... chdir resumed>) = 0 [pid 5998] write(3, "1000", 4 [pid 5999] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5996] munmap(0x7f0356e00000, 138412032 [pid 5998] <... write resumed>) = 4 [pid 5998] close(3 [pid 5999] setpgid(0, 0 [pid 5998] <... close resumed>) = 0 [pid 5996] <... munmap resumed>) = 0 [pid 5999] <... setpgid resumed>) = 0 [pid 5998] symlink("/dev/binderfs", "./binderfs" [pid 5996] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5999] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5998] <... symlink resumed>) = 0 [pid 5997] munmap(0x7f0356e00000, 138412032 [pid 5996] <... openat resumed>) = 4 [pid 5999] <... openat resumed>) = 3 [pid 5998] memfd_create("syzkaller", 0 [pid 5997] <... munmap resumed>) = 0 [pid 5996] ioctl(4, LOOP_SET_FD, 3 [pid 5999] write(3, "1000", 4 [pid 5998] <... memfd_create resumed>) = 3 [pid 5997] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5995] munmap(0x7f0356e00000, 138412032 [pid 5998] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5997] <... openat resumed>) = 4 [pid 5998] <... mmap resumed>) = 0x7f0356e00000 [pid 5997] ioctl(4, LOOP_SET_FD, 3 [pid 5999] <... write resumed>) = 4 [pid 5995] <... munmap resumed>) = 0 [pid 5996] <... ioctl resumed>) = 0 [pid 5999] close(3 [pid 5995] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5999] <... close resumed>) = 0 [pid 5996] close(3 [pid 5999] symlink("/dev/binderfs", "./binderfs" [pid 5998] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5995] <... openat resumed>) = 4 [pid 5996] <... close resumed>) = 0 [pid 5999] <... symlink resumed>) = 0 [pid 5995] ioctl(4, LOOP_SET_FD, 3 [pid 5996] close(4 [pid 5994] <... ioctl resumed>) = 0 [pid 5996] <... close resumed>) = 0 [pid 5994] close(3 [pid 5996] mkdir("./bus", 0777 [pid 5999] memfd_create("syzkaller", 0 [pid 5996] <... mkdir resumed>) = 0 [pid 5994] <... close resumed>) = 0 [pid 5999] <... memfd_create resumed>) = 3 [pid 5994] close(4 [pid 5999] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5994] <... close resumed>) = 0 [pid 5999] <... mmap resumed>) = 0x7f0356e00000 [pid 5997] <... ioctl resumed>) = 0 [pid 5997] close(3) = 0 [pid 5998] <... write resumed>) = 524288 [pid 5997] close(4 [pid 5996] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5997] <... close resumed>) = 0 [pid 5997] mkdir("./bus", 0777 [pid 5999] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5997] <... mkdir resumed>) = 0 [pid 5997] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5998] munmap(0x7f0356e00000, 138412032 [pid 5994] mkdir("./bus", 0777 [pid 5998] <... munmap resumed>) = 0 [pid 5997] <... mount resumed>) = 0 [pid 5995] <... ioctl resumed>) = 0 [pid 5994] <... mkdir resumed>) = 0 [pid 5996] <... mount resumed>) = 0 [ 167.350659][ T5994] loop4: detected capacity change from 0 to 1024 [ 167.369053][ T5996] loop3: detected capacity change from 0 to 1024 [ 167.375381][ T5997] loop5: detected capacity change from 0 to 1024 [ 167.391036][ T5995] loop0: detected capacity change from 0 to 1024 [pid 5999] <... write resumed>) = 524288 [pid 5997] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5995] close(3 [pid 5996] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5994] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5998] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5997] <... openat resumed>) = 3 [pid 5995] <... close resumed>) = 0 [pid 5997] chdir("./bus" [pid 5995] close(4 [pid 5998] <... openat resumed>) = 4 [pid 5997] <... chdir resumed>) = 0 [pid 5995] <... close resumed>) = 0 [pid 5998] ioctl(4, LOOP_SET_FD, 3 [pid 5997] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5995] mkdir("./bus", 0777 [pid 5997] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5997] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5997] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5999] munmap(0x7f0356e00000, 138412032 [pid 5998] <... ioctl resumed>) = 0 [pid 5995] <... mkdir resumed>) = 0 [pid 5996] <... openat resumed>) = 3 [pid 5994] <... mount resumed>) = 0 [pid 5999] <... munmap resumed>) = 0 [pid 5998] close(3 [pid 5995] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5996] chdir("./bus" [pid 5994] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5998] <... close resumed>) = 0 [pid 5996] <... chdir resumed>) = 0 [pid 5994] <... openat resumed>) = 3 [pid 5999] <... openat resumed>) = 4 [pid 5998] close(4 [pid 5997] <... creat resumed>) = 4 [pid 5996] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5994] chdir("./bus" [pid 5999] ioctl(4, LOOP_SET_FD, 3 [pid 5998] <... close resumed>) = 0 [pid 5996] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5994] <... chdir resumed>) = 0 [pid 5998] mkdir("./bus", 0777 [pid 5996] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5994] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5997] rename("./bus", "./file2" [pid 5994] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5998] <... mkdir resumed>) = 0 [pid 5996] <... symlink resumed>) = 0 [pid 5994] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5998] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5997] <... rename resumed>) = -1 EEXIST (File exists) [pid 5997] memfd_create("syzkaller", 0 [pid 5996] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5997] <... memfd_create resumed>) = 5 [pid 5997] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5997] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5999] <... ioctl resumed>) = 0 [pid 5999] close(3 [pid 5998] <... mount resumed>) = 0 [pid 5995] <... mount resumed>) = 0 [pid 5999] <... close resumed>) = 0 [pid 5998] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5995] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5996] <... creat resumed>) = 4 [pid 5994] <... symlink resumed>) = 0 [pid 5999] close(4 [pid 5998] <... openat resumed>) = 3 [pid 5995] <... openat resumed>) = 3 [pid 5996] rename("./bus", "./file2" [pid 5994] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5999] <... close resumed>) = 0 [pid 5998] chdir("./bus" [pid 5995] chdir("./bus" [pid 5998] <... chdir resumed>) = 0 [pid 5998] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5999] mkdir("./bus", 0777 [pid 5998] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5995] <... chdir resumed>) = 0 [pid 5996] <... rename resumed>) = -1 EEXIST (File exists) [pid 5999] <... mkdir resumed>) = 0 [pid 5998] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5995] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5996] memfd_create("syzkaller", 0 [pid 5999] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5998] <... symlink resumed>) = 0 [pid 5998] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5996] <... memfd_create resumed>) = 5 [pid 5994] <... creat resumed>) = 4 [pid 5995] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5995] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5996] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5994] rename("./bus", "./file2" [pid 5997] <... write resumed>) = 524288 [pid 5996] <... mmap resumed>) = 0x7f0356e00000 [pid 5998] <... creat resumed>) = 4 [pid 5998] rename("./bus", "./file2" [pid 5997] munmap(0x7f0356e00000, 138412032 [pid 5995] <... symlink resumed>) = 0 [pid 5994] <... rename resumed>) = -1 EEXIST (File exists) [pid 5998] <... rename resumed>) = -1 EEXIST (File exists) [pid 5997] <... munmap resumed>) = 0 [pid 5994] memfd_create("syzkaller", 0 [pid 5998] memfd_create("syzkaller", 0 [pid 5995] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5998] <... memfd_create resumed>) = 5 [ 167.426001][ T5998] loop2: detected capacity change from 0 to 1024 [ 167.450525][ T5999] loop1: detected capacity change from 0 to 1024 [pid 5997] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5994] <... memfd_create resumed>) = 5 [pid 5998] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5997] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5994] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5998] <... mmap resumed>) = 0x7f0356e00000 [pid 5996] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5994] <... mmap resumed>) = 0x7f0356e00000 [pid 5998] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5997] close(5) = 0 [pid 5999] <... mount resumed>) = 0 [pid 5999] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5994] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5995] <... creat resumed>) = 4 [pid 5999] chdir("./bus" [pid 5995] rename("./bus", "./file2" [pid 5999] <... chdir resumed>) = 0 [pid 5999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5995] <... rename resumed>) = -1 EEXIST (File exists) [pid 5999] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5995] memfd_create("syzkaller", 0 [pid 5999] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5997] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5995] <... memfd_create resumed>) = 5 [pid 5996] <... write resumed>) = 524288 [pid 5995] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5996] munmap(0x7f0356e00000, 138412032 [pid 5997] <... open resumed>) = 5 [pid 5995] <... mmap resumed>) = 0x7f0356e00000 [pid 5999] <... symlink resumed>) = 0 [pid 5998] <... write resumed>) = 524288 [pid 5997] ftruncate(5, 0) = 0 [pid 5996] <... munmap resumed>) = 0 [pid 5999] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5997] exit_group(0 [pid 5998] munmap(0x7f0356e00000, 138412032 [pid 5994] <... write resumed>) = 524288 [pid 5997] <... exit_group resumed>) = ? [pid 5998] <... munmap resumed>) = 0 [pid 5996] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5994] munmap(0x7f0356e00000, 138412032 [pid 5995] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5996] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5994] <... munmap resumed>) = 0 [pid 5998] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5999] <... creat resumed>) = 4 [pid 5998] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5996] close(5 [pid 5994] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5999] rename("./bus", "./file2" [pid 5998] close(5 [pid 5997] +++ exited with 0 +++ [pid 5996] <... close resumed>) = 0 [pid 5994] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5997, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5078] umount2("./151", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./151", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5994] close(5 [pid 5999] <... rename resumed>) = -1 EEXIST (File exists) [pid 5998] <... close resumed>) = 0 [pid 5998] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5994] <... close resumed>) = 0 [pid 5078] newfstatat(3, "", [pid 5999] memfd_create("syzkaller", 0) = 5 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5999] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] getdents64(3, [pid 5999] <... mmap resumed>) = 0x7f0356e00000 [pid 5998] <... open resumed>) = 5 [pid 5996] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5998] ftruncate(5, 0 [pid 5078] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5998] <... ftruncate resumed>) = 0 [pid 5998] exit_group(0 [pid 5995] <... write resumed>) = 524288 [pid 5998] <... exit_group resumed>) = ? [pid 5994] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5999] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5995] munmap(0x7f0356e00000, 138412032 [pid 5996] <... open resumed>) = 5 [pid 5998] +++ exited with 0 +++ [pid 5995] <... munmap resumed>) = 0 [pid 5995] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5996] ftruncate(5, 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5998, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5999] <... write resumed>) = 524288 [pid 5995] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5996] <... ftruncate resumed>) = 0 [pid 5994] <... open resumed>) = 5 [pid 5078] <... umount2 resumed>) = 0 [pid 5999] munmap(0x7f0356e00000, 138412032 [pid 5995] close(5 [pid 5994] ftruncate(5, 0 [pid 5075] umount2("./149", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./149", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5995] <... close resumed>) = 0 [pid 5078] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... openat resumed>) = 3 [pid 5996] exit_group(0 [pid 5994] <... ftruncate resumed>) = 0 [pid 5075] newfstatat(3, "", [pid 5996] <... exit_group resumed>) = ? [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5999] <... munmap resumed>) = 0 [pid 5075] getdents64(3, [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] newfstatat(AT_FDCWD, "./151/bus", [pid 5075] umount2("./149/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5994] exit_group(0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5994] <... exit_group resumed>) = ? [pid 5999] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5996] +++ exited with 0 +++ [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5999] close(5 [pid 5994] +++ exited with 0 +++ [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5996, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] <... umount2 resumed>) = 0 [pid 5999] <... close resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./151/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5994, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5077] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5078] <... openat resumed>) = 4 [pid 5076] umount2("./152", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5995] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./152", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] umount2("./151", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... openat resumed>) = 3 [pid 5078] newfstatat(4, "", [pid 5999] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(3, "", [pid 5075] umount2("./149/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5995] <... open resumed>) = 5 [pid 5078] getdents64(4, [pid 5995] ftruncate(5, 0 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5995] <... ftruncate resumed>) = 0 [pid 5078] getdents64(4, [pid 5075] newfstatat(AT_FDCWD, "./149/bus", [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] openat(AT_FDCWD, "./151", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5999] <... open resumed>) = 5 [pid 5995] exit_group(0 [pid 5078] close(4 [pid 5077] <... openat resumed>) = 3 [pid 5076] getdents64(3, [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5995] <... exit_group resumed>) = ? [pid 5078] <... close resumed>) = 0 [pid 5075] umount2("./149/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] newfstatat(3, "", [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] rmdir("./151/bus" [pid 5999] ftruncate(5, 0 [pid 5076] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5077] getdents64(3, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5999] <... ftruncate resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] openat(AT_FDCWD, "./149/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... openat resumed>) = 4 [pid 5995] +++ exited with 0 +++ [pid 5075] newfstatat(4, "", [pid 5078] umount2("./151/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5995, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5999] exit_group(0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(4, [pid 5078] newfstatat(AT_FDCWD, "./151/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] umount2("./149", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5999] <... exit_group resumed>) = ? [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] unlink("./151/binderfs" [pid 5075] getdents64(4, [pid 5073] openat(AT_FDCWD, "./149", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5078] <... unlink resumed>) = 0 [pid 5075] close(4 [pid 5073] newfstatat(3, "", [pid 5075] <... close resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] rmdir("./149/bus" [pid 5073] getdents64(3, [pid 5078] getdents64(3, [pid 5076] <... umount2 resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] umount2("./149/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./149/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] close(3 [pid 5075] newfstatat(AT_FDCWD, "./149/binderfs", [pid 5078] <... close resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5999] +++ exited with 0 +++ [pid 5078] rmdir("./151" [pid 5075] unlink("./149/binderfs" [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5999, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5078] <... rmdir resumed>) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5076] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... unlink resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] mkdir("./152", 0777 [pid 5076] newfstatat(AT_FDCWD, "./152/bus", [pid 5075] getdents64(3, [pid 5078] <... mkdir resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] close(3 [pid 5078] <... openat resumed>) = 3 [pid 5075] <... close resumed>) = 0 [pid 5073] umount2("./149/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./149", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5076] openat(AT_FDCWD, "./152/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] rmdir("./149" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... openat resumed>) = 4 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./149", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] newfstatat(AT_FDCWD, "./149/bus", [pid 5077] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] newfstatat(4, "", [pid 5075] mkdir("./150", 0777 [pid 5074] <... openat resumed>) = 3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] newfstatat(3, "", [pid 5073] umount2("./149/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] newfstatat(AT_FDCWD, "./151/bus", [pid 5076] getdents64(4, [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] <... openat resumed>) = 3 [pid 5074] getdents64(3, [pid 5073] openat(AT_FDCWD, "./149/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5073] <... openat resumed>) = 4 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] getdents64(4, [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] newfstatat(4, "", [pid 5077] openat(AT_FDCWD, "./151/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] umount2("./149/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] <... openat resumed>) = 4 [pid 5076] close(4 [pid 5073] getdents64(4, [pid 5076] <... close resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] newfstatat(4, "", [pid 5076] rmdir("./152/bus" [pid 5073] getdents64(4, [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] close(4 [pid 5078] <... ioctl resumed>) = 0 [pid 5077] getdents64(4, [pid 5076] <... rmdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] getdents64(4, [pid 5073] <... close resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] close(4 [pid 5073] rmdir("./149/bus" [pid 5077] <... close resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5077] rmdir("./151/bus" [pid 5074] umount2("./149/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./149/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] close(3 [pid 5074] umount2("./149/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] <... close resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./149/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] umount2("./149/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] umount2("./152/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... openat resumed>) = 4 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6000 attached [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6000] set_robust_list(0x55556e32a660, 24 [pid 5076] newfstatat(AT_FDCWD, "./152/binderfs", [pid 6000] <... set_robust_list resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] newfstatat(4, "", [pid 5073] newfstatat(AT_FDCWD, "./149/binderfs", [pid 6000] chdir("./152" [pid 5076] unlink("./152/binderfs" [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6000] <... chdir resumed>) = 0 [pid 6000] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] unlink("./149/binderfs" [pid 6000] <... prctl resumed>) = 0 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6000 [pid 5074] getdents64(4, [pid 5073] <... unlink resumed>) = 0 [pid 6000] setpgid(0, 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, [pid 5073] getdents64(3, [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] close(4 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./149/bus" [pid 5073] close(3) = 0 [pid 6000] <... setpgid resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 6000] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5073] rmdir("./149" [pid 6000] <... openat resumed>) = 3 [pid 5075] close(3 [pid 6000] write(3, "1000", 4 [pid 5075] <... close resumed>) = 0 [pid 6000] <... write resumed>) = 4 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6001 attached [pid 6000] close(3 [pid 6001] set_robust_list(0x55556e32a660, 24 [pid 6000] <... close resumed>) = 0 [pid 6001] <... set_robust_list resumed>) = 0 [pid 6000] symlink("/dev/binderfs", "./binderfs" [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6001 [pid 6001] chdir("./150") = 0 [pid 6001] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6001] setpgid(0, 0) = 0 [pid 6001] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6001] write(3, "1000", 4) = 4 [pid 6001] close(3) = 0 [pid 6001] symlink("/dev/binderfs", "./binderfs" [pid 6000] <... symlink resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 6001] <... symlink resumed>) = 0 [pid 6000] memfd_create("syzkaller", 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] getdents64(3, [pid 5074] <... rmdir resumed>) = 0 [pid 5073] mkdir("./150", 0777 [pid 6000] <... memfd_create resumed>) = 3 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3 [pid 5074] umount2("./149/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... mkdir resumed>) = 0 [pid 5076] rmdir("./152" [pid 5074] newfstatat(AT_FDCWD, "./149/binderfs", [pid 6001] memfd_create("syzkaller", 0 [pid 6000] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] umount2("./151/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] <... rmdir resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] mkdir("./153", 0777 [pid 5074] unlink("./149/binderfs" [pid 6001] <... memfd_create resumed>) = 3 [pid 6000] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... mkdir resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 6001] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] newfstatat(AT_FDCWD, "./151/binderfs", [pid 5074] <... unlink resumed>) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] getdents64(3, [pid 6001] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] unlink("./151/binderfs" [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6001] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6000] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... unlink resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5074] close(3 [pid 5076] <... openat resumed>) = 3 [pid 5074] <... close resumed>) = 0 [pid 5077] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] close(3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5074] rmdir("./149") = 0 [pid 5074] mkdir("./150", 0777 [pid 6001] <... write resumed>) = 524288 [pid 6000] <... write resumed>) = 524288 [pid 5077] <... close resumed>) = 0 [pid 6000] munmap(0x7f0356e00000, 138412032 [pid 5077] rmdir("./151" [pid 6001] munmap(0x7f0356e00000, 138412032 [pid 5077] <... rmdir resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5077] mkdir("./152", 0777 [pid 6001] <... munmap resumed>) = 0 [pid 6000] <... munmap resumed>) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6000] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6000] <... openat resumed>) = 4 [pid 5077] <... openat resumed>) = 3 [pid 6000] ioctl(4, LOOP_SET_FD, 3 [pid 6001] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5074] <... openat resumed>) = 3 [pid 6001] <... openat resumed>) = 4 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6001] ioctl(4, LOOP_SET_FD, 3 [pid 6000] <... ioctl resumed>) = 0 [pid 6000] close(3) = 0 [pid 6000] close(4) = 0 [pid 6000] mkdir("./bus", 0777 [pid 6001] <... ioctl resumed>) = 0 [pid 6000] <... mkdir resumed>) = 0 [pid 6001] close(3 [pid 5073] <... ioctl resumed>) = 0 [pid 6000] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6001] <... close resumed>) = 0 [pid 6001] close(4) = 0 [pid 6001] mkdir("./bus", 0777) = 0 [pid 6001] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6000] <... mount resumed>) = 0 [pid 6000] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5073] close(3 [pid 6000] chdir("./bus") = 0 [pid 5073] <... close resumed>) = 0 [pid 6000] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6000] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6000] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6002 ./strace-static-x86_64: Process 6002 attached [pid 6001] <... mount resumed>) = 0 [pid 6000] <... creat resumed>) = 4 [pid 5076] <... ioctl resumed>) = 0 [ 167.865882][ T6000] loop5: detected capacity change from 0 to 1024 [ 167.869109][ T6001] loop2: detected capacity change from 0 to 1024 [pid 6001] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6002] set_robust_list(0x55556e32a660, 24) = 0 [pid 6000] rename("./bus", "./file2" [pid 6002] chdir("./150" [pid 6001] chdir("./bus" [pid 6002] <... chdir resumed>) = 0 [pid 6002] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6002] setpgid(0, 0) = 0 [pid 6002] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6002] write(3, "1000", 4 [pid 6001] <... chdir resumed>) = 0 [pid 5076] close(3 [pid 6001] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6000] <... rename resumed>) = -1 EEXIST (File exists) [pid 5076] <... close resumed>) = 0 [pid 6002] <... write resumed>) = 4 [pid 6001] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6002] close(3) = 0 [pid 6002] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6002] memfd_create("syzkaller", 0 [pid 6001] <... symlink resumed>) = 0 [pid 6000] memfd_create("syzkaller", 0./strace-static-x86_64: Process 6003 attached [pid 6002] <... memfd_create resumed>) = 3 [pid 6000] <... memfd_create resumed>) = 5 [pid 6003] set_robust_list(0x55556e32a660, 24 [pid 6002] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6000] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... ioctl resumed>) = 0 [pid 6003] <... set_robust_list resumed>) = 0 [pid 6002] <... mmap resumed>) = 0x7f0356e00000 [pid 6000] <... mmap resumed>) = 0x7f0356e00000 [pid 6003] chdir("./153" [pid 6001] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6000] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... ioctl resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6003 [pid 5074] close(3 [pid 6003] <... chdir resumed>) = 0 [pid 6003] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6002] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... close resumed>) = 0 [pid 5077] close(3 [pid 6003] <... prctl resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6003] setpgid(0, 0) = 0 [pid 6003] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6004 attached [pid 6001] <... creat resumed>) = 4 [pid 6004] set_robust_list(0x55556e32a660, 24 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6004 [pid 6001] rename("./bus", "./file2" [pid 6003] write(3, "1000", 4./strace-static-x86_64: Process 6005 attached ) = 4 [pid 6005] set_robust_list(0x55556e32a660, 24 [pid 6003] close(3 [pid 6005] <... set_robust_list resumed>) = 0 [pid 6003] <... close resumed>) = 0 [pid 6005] chdir("./152" [pid 6003] symlink("/dev/binderfs", "./binderfs" [pid 6005] <... chdir resumed>) = 0 [pid 6003] <... symlink resumed>) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6005 [pid 6005] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6004] <... set_robust_list resumed>) = 0 [pid 6003] memfd_create("syzkaller", 0 [pid 6005] setpgid(0, 0) = 0 [pid 6005] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6004] chdir("./150" [pid 6005] <... openat resumed>) = 3 [pid 6004] <... chdir resumed>) = 0 [pid 6003] <... memfd_create resumed>) = 3 [pid 6002] <... write resumed>) = 524288 [pid 6001] <... rename resumed>) = -1 EEXIST (File exists) [pid 6005] write(3, "1000", 4 [pid 6003] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6001] memfd_create("syzkaller", 0 [pid 6000] <... write resumed>) = 524288 [pid 6005] <... write resumed>) = 4 [pid 6003] <... mmap resumed>) = 0x7f0356e00000 [pid 6005] close(3 [pid 6004] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6003] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6002] munmap(0x7f0356e00000, 138412032 [pid 6001] <... memfd_create resumed>) = 5 [pid 6005] <... close resumed>) = 0 [pid 6004] <... prctl resumed>) = 0 [pid 6002] <... munmap resumed>) = 0 [pid 6001] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6000] munmap(0x7f0356e00000, 138412032 [pid 6005] symlink("/dev/binderfs", "./binderfs" [pid 6004] setpgid(0, 0 [pid 6002] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6001] <... mmap resumed>) = 0x7f0356e00000 [pid 6000] <... munmap resumed>) = 0 [pid 6005] <... symlink resumed>) = 0 [pid 6004] <... setpgid resumed>) = 0 [pid 6002] <... openat resumed>) = 4 [pid 6005] memfd_create("syzkaller", 0 [pid 6004] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6002] ioctl(4, LOOP_SET_FD, 3 [pid 6000] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6005] <... memfd_create resumed>) = 3 [pid 6004] <... openat resumed>) = 3 [pid 6002] <... ioctl resumed>) = 0 [pid 6001] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6000] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6005] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6005] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6004] write(3, "1000", 4 [pid 6001] <... write resumed>) = 524288 [pid 6000] close(5 [pid 6004] <... write resumed>) = 4 [pid 6004] close(3 [pid 6000] <... close resumed>) = 0 [pid 6004] <... close resumed>) = 0 [pid 6004] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6001] munmap(0x7f0356e00000, 138412032 [pid 6005] <... write resumed>) = 524288 [pid 6004] memfd_create("syzkaller", 0 [pid 6003] <... write resumed>) = 524288 [pid 6002] close(3 [pid 6000] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6004] <... memfd_create resumed>) = 3 [pid 6003] munmap(0x7f0356e00000, 138412032 [pid 6005] munmap(0x7f0356e00000, 138412032 [pid 6004] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6003] <... munmap resumed>) = 0 [pid 6002] <... close resumed>) = 0 [pid 6001] <... munmap resumed>) = 0 [pid 6004] <... mmap resumed>) = 0x7f0356e00000 [pid 6002] close(4 [pid 6003] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6005] <... munmap resumed>) = 0 [pid 6004] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6002] <... close resumed>) = 0 [pid 6001] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6000] <... open resumed>) = 5 [ 168.008750][ T6002] loop0: detected capacity change from 0 to 1024 [pid 6005] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6003] <... openat resumed>) = 4 [pid 6002] mkdir("./bus", 0777 [pid 6001] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6001] close(5 [pid 6005] <... openat resumed>) = 4 [pid 6003] ioctl(4, LOOP_SET_FD, 3 [pid 6002] <... mkdir resumed>) = 0 [pid 6000] ftruncate(5, 0 [pid 6002] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6000] <... ftruncate resumed>) = 0 [pid 6005] ioctl(4, LOOP_SET_FD, 3 [pid 6000] exit_group(0 [pid 6004] <... write resumed>) = 524288 [pid 6002] <... mount resumed>) = 0 [pid 6000] <... exit_group resumed>) = ? [pid 6002] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6000] +++ exited with 0 +++ [pid 6002] <... openat resumed>) = 3 [pid 6004] munmap(0x7f0356e00000, 138412032 [pid 6002] chdir("./bus" [pid 6004] <... munmap resumed>) = 0 [pid 6002] <... chdir resumed>) = 0 [pid 6001] <... close resumed>) = 0 [pid 6004] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6002] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6000, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6004] <... openat resumed>) = 4 [pid 6002] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] restart_syscall(<... resuming interrupted clone ...> [pid 6004] ioctl(4, LOOP_SET_FD, 3 [pid 6002] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] <... restart_syscall resumed>) = 0 [pid 6001] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] umount2("./152", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./152", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5078] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6003] <... ioctl resumed>) = 0 [pid 5078] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6003] close(3) = 0 [pid 6005] <... ioctl resumed>) = 0 [pid 6003] close(4 [pid 6005] close(3 [pid 6003] <... close resumed>) = 0 [pid 6003] mkdir("./bus", 0777 [pid 6005] <... close resumed>) = 0 [pid 6005] close(4 [pid 6001] <... open resumed>) = 5 [pid 6005] <... close resumed>) = 0 [pid 6003] <... mkdir resumed>) = 0 [pid 6005] mkdir("./bus", 0777 [pid 6003] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6001] ftruncate(5, 0 [pid 6005] <... mkdir resumed>) = 0 [pid 6001] <... ftruncate resumed>) = 0 [pid 6005] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6002] <... symlink resumed>) = 0 [pid 6001] exit_group(0) = ? [pid 6002] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6001] +++ exited with 0 +++ [pid 5078] <... umount2 resumed>) = 0 [pid 6004] <... ioctl resumed>) = 0 [pid 6002] <... creat resumed>) = 4 [pid 5078] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6005] <... mount resumed>) = 0 [pid 6004] close(3 [pid 6002] rename("./bus", "./file2" [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6001, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6005] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6004] <... close resumed>) = 0 [pid 6003] <... mount resumed>) = 0 [pid 6002] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] newfstatat(AT_FDCWD, "./152/bus", [pid 5075] umount2("./150", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6005] <... openat resumed>) = 3 [pid 6004] close(4 [pid 6003] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6002] memfd_create("syzkaller", 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6005] chdir("./bus" [pid 6004] <... close resumed>) = 0 [pid 6003] <... openat resumed>) = 3 [pid 6002] <... memfd_create resumed>) = 5 [pid 5078] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "./150", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6005] <... chdir resumed>) = 0 [pid 6004] mkdir("./bus", 0777 [pid 6003] chdir("./bus" [pid 6002] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... openat resumed>) = 3 [pid 6005] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6003] <... chdir resumed>) = 0 [pid 6002] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] newfstatat(3, "", [pid 6005] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6004] <... mkdir resumed>) = 0 [pid 6003] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5078] openat(AT_FDCWD, "./152/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6005] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6003] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] getdents64(3, [pid 6004] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5078] <... openat resumed>) = 4 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6003] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] newfstatat(4, "", [pid 5075] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6005] <... symlink resumed>) = 0 [pid 6003] <... symlink resumed>) = 0 [pid 6002] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] getdents64(4, [pid 6005] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [ 168.073222][ T6003] loop3: detected capacity change from 0 to 1024 [ 168.081571][ T6005] loop4: detected capacity change from 0 to 1024 [ 168.098688][ T6004] loop1: detected capacity change from 0 to 1024 [pid 6003] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, [pid 6005] <... creat resumed>) = 4 [pid 6003] <... creat resumed>) = 4 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5078] close(4 [pid 6005] rename("./bus", "./file2" [pid 6004] <... mount resumed>) = 0 [pid 6003] rename("./bus", "./file2" [pid 5078] <... close resumed>) = 0 [pid 6005] <... rename resumed>) = -1 EEXIST (File exists) [pid 6004] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6003] <... rename resumed>) = -1 EEXIST (File exists) [pid 6002] <... write resumed>) = 524288 [pid 5078] rmdir("./152/bus" [pid 5075] <... umount2 resumed>) = 0 [pid 6005] memfd_create("syzkaller", 0) = 5 [pid 6003] memfd_create("syzkaller", 0 [pid 6005] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6004] <... openat resumed>) = 3 [pid 5078] <... rmdir resumed>) = 0 [pid 5075] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6005] <... mmap resumed>) = 0x7f0356e00000 [pid 6004] chdir("./bus" [pid 6003] <... memfd_create resumed>) = 5 [pid 6002] munmap(0x7f0356e00000, 138412032 [pid 5078] umount2("./152/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./150/bus", [pid 6005] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6004] <... chdir resumed>) = 0 [pid 6002] <... munmap resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6004] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5078] newfstatat(AT_FDCWD, "./152/binderfs", [pid 6004] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6003] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6004] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6003] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6002] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5075] openat(AT_FDCWD, "./150/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6002] close(5 [pid 5078] unlink("./152/binderfs" [pid 5075] <... openat resumed>) = 4 [pid 5075] newfstatat(4, "", [pid 5078] <... unlink resumed>) = 0 [pid 6004] <... symlink resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(3, [pid 5075] getdents64(4, [pid 6003] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] close(4 [pid 6004] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./150/bus" [pid 5078] close(3 [pid 5075] <... rmdir resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 6004] <... creat resumed>) = 4 [pid 5078] rmdir("./152" [pid 5075] umount2("./150/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./150/binderfs", [pid 5078] <... rmdir resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./150/binderfs" [pid 6005] <... write resumed>) = 524288 [pid 6004] rename("./bus", "./file2" [pid 6002] <... close resumed>) = 0 [pid 5078] mkdir("./153", 0777 [pid 5075] <... unlink resumed>) = 0 [pid 5075] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 6002] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5075] close(3) = 0 [pid 5075] rmdir("./150" [pid 6004] <... rename resumed>) = -1 EEXIST (File exists) [pid 5075] <... rmdir resumed>) = 0 [pid 6005] munmap(0x7f0356e00000, 138412032 [pid 5075] mkdir("./151", 0777 [pid 6005] <... munmap resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 6004] memfd_create("syzkaller", 0 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 6004] <... memfd_create resumed>) = 5 [pid 6005] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6004] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6005] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6004] <... mmap resumed>) = 0x7f0356e00000 [pid 6003] <... write resumed>) = 524288 [pid 6002] <... open resumed>) = 5 [pid 5075] <... openat resumed>) = 3 [pid 6005] close(5 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6003] munmap(0x7f0356e00000, 138412032 [pid 6002] ftruncate(5, 0 [pid 6003] <... munmap resumed>) = 0 [pid 6002] <... ftruncate resumed>) = 0 [pid 6005] <... close resumed>) = 0 [pid 6002] exit_group(0 [pid 6003] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6003] close(5 [pid 6004] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6003] <... close resumed>) = 0 [pid 6002] <... exit_group resumed>) = ? [pid 6002] +++ exited with 0 +++ [pid 6005] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6002, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5073] umount2("./150", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./150", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6005] <... open resumed>) = 5 [pid 6004] <... write resumed>) = 524288 [pid 6003] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5075] <... ioctl resumed>) = 0 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6005] ftruncate(5, 0) = 0 [pid 6005] exit_group(0) = ? [pid 6005] +++ exited with 0 +++ [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6005, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6004] munmap(0x7f0356e00000, 138412032 [pid 5078] <... ioctl resumed>) = 0 [pid 6003] <... open resumed>) = 5 [pid 6004] <... munmap resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5077] umount2("./152", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] close(3 [pid 6003] ftruncate(5, 0 [pid 5075] close(3 [pid 6004] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6003] <... ftruncate resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... close resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] openat(AT_FDCWD, "./152", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6003] exit_group(0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6006 attached [pid 5077] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6007 attached [pid 6006] set_robust_list(0x55556e32a660, 24 [pid 6004] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6003] <... exit_group resumed>) = ? [pid 5077] newfstatat(3, "", [pid 5073] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6007] set_robust_list(0x55556e32a660, 24 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6007] <... set_robust_list resumed>) = 0 [pid 6006] <... set_robust_list resumed>) = 0 [pid 5077] getdents64(3, [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6007 [pid 5073] newfstatat(AT_FDCWD, "./150/bus", [pid 6007] chdir("./151" [pid 6006] chdir("./153" [pid 6004] close(5 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6006 [pid 5077] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6007] <... chdir resumed>) = 0 [pid 6003] +++ exited with 0 +++ [pid 5073] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6007] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6007] <... prctl resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6003, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5073] openat(AT_FDCWD, "./150/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6007] setpgid(0, 0 [pid 6006] <... chdir resumed>) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 6004] <... close resumed>) = 0 [pid 5073] <... openat resumed>) = 4 [pid 6007] <... setpgid resumed>) = 0 [pid 6007] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6007] <... openat resumed>) = 3 [pid 5073] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6007] write(3, "1000", 4 [pid 5073] close(4 [pid 6007] <... write resumed>) = 4 [pid 6006] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6004] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5076] <... restart_syscall resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 6007] close(3 [pid 5077] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] rmdir("./150/bus" [pid 6007] <... close resumed>) = 0 [pid 6006] <... prctl resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... rmdir resumed>) = 0 [pid 6007] symlink("/dev/binderfs", "./binderfs" [pid 6006] setpgid(0, 0 [pid 5077] newfstatat(AT_FDCWD, "./152/bus", [pid 6007] <... symlink resumed>) = 0 [pid 6006] <... setpgid resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./153", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6007] memfd_create("syzkaller", 0 [pid 6006] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5077] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./150/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6007] <... memfd_create resumed>) = 3 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./153", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6007] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6006] <... openat resumed>) = 3 [pid 5077] openat(AT_FDCWD, "./152/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... openat resumed>) = 3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6004] <... open resumed>) = 5 [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6004] ftruncate(5, 0 [pid 5076] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6004] <... ftruncate resumed>) = 0 [pid 5076] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6007] <... mmap resumed>) = 0x7f0356e00000 [pid 6004] exit_group(0 [pid 5077] <... openat resumed>) = 4 [pid 5073] newfstatat(AT_FDCWD, "./150/binderfs", [pid 6006] write(3, "1000", 4 [pid 6004] <... exit_group resumed>) = ? [pid 6006] <... write resumed>) = 4 [pid 5077] newfstatat(4, "", [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6006] close(3) = 0 [pid 6006] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] unlink("./150/binderfs" [pid 6006] memfd_create("syzkaller", 0 [pid 5073] <... unlink resumed>) = 0 [pid 6007] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6004] +++ exited with 0 +++ [pid 5077] getdents64(4, [pid 5076] <... umount2 resumed>) = 0 [pid 6006] <... memfd_create resumed>) = 3 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(3, [pid 6006] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6004, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 6006] <... mmap resumed>) = 0x7f0356e00000 [pid 5074] <... restart_syscall resumed>) = 0 [pid 6006] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] umount2("./150", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] getdents64(4, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./150", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... openat resumed>) = 3 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] close(3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(3, "", [pid 5076] newfstatat(AT_FDCWD, "./153/bus", [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] close(4 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... close resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5074] getdents64(3, [pid 5077] rmdir("./152/bus" [pid 5076] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] rmdir("./150" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6007] <... write resumed>) = 524288 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./153/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... rmdir resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 6007] munmap(0x7f0356e00000, 138412032 [pid 5077] umount2("./152/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] newfstatat(4, "", [pid 5074] <... umount2 resumed>) = 0 [pid 5073] mkdir("./151", 0777 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] close(4 [pid 5073] <... openat resumed>) = 3 [pid 5076] <... close resumed>) = 0 [pid 6007] <... munmap resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./152/binderfs", [pid 5076] rmdir("./153/bus" [pid 6006] <... write resumed>) = 524288 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6007] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5077] unlink("./152/binderfs" [pid 5074] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./153/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... unlink resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6007] <... openat resumed>) = 4 [pid 6006] munmap(0x7f0356e00000, 138412032 [pid 5076] newfstatat(AT_FDCWD, "./153/binderfs", [pid 5074] newfstatat(AT_FDCWD, "./150/bus", [pid 5077] getdents64(3, [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./153/binderfs" [pid 6007] ioctl(4, LOOP_SET_FD, 3 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6006] <... munmap resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6007] <... ioctl resumed>) = 0 [pid 6006] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] close(3 [pid 5076] <... unlink resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./150/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6007] close(3 [pid 6006] <... openat resumed>) = 4 [pid 5077] <... close resumed>) = 0 [pid 5076] getdents64(3, [pid 5074] <... openat resumed>) = 4 [pid 6007] <... close resumed>) = 0 [pid 5074] newfstatat(4, "", [pid 6007] close(4 [pid 6006] ioctl(4, LOOP_SET_FD, 3 [pid 5077] rmdir("./152" [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6007] <... close resumed>) = 0 [pid 5076] close(3 [pid 5077] <... rmdir resumed>) = 0 [pid 6007] mkdir("./bus", 0777 [pid 6006] <... ioctl resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5074] getdents64(4, [pid 5076] rmdir("./153") = 0 [pid 5076] mkdir("./154", 0777 [pid 6007] <... mkdir resumed>) = 0 [pid 6006] close(3 [pid 5077] mkdir("./153", 0777 [pid 5076] <... mkdir resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6007] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6006] <... close resumed>) = 0 [pid 5074] getdents64(4, [pid 6006] close(4 [pid 5077] <... mkdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6006] <... close resumed>) = 0 [pid 5074] close(4 [pid 6006] mkdir("./bus", 0777 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] <... openat resumed>) = 3 [pid 5074] <... close resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5074] rmdir("./150/bus" [pid 6006] <... mkdir resumed>) = 0 [pid 6006] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5074] <... rmdir resumed>) = 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5074] umount2("./150/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./150/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./150/binderfs") = 0 [pid 5074] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 5074] rmdir("./150") = 0 [pid 5073] <... ioctl resumed>) = 0 [ 168.388681][ T6007] loop2: detected capacity change from 0 to 1024 [ 168.402403][ T6006] loop5: detected capacity change from 0 to 1024 [pid 5074] mkdir("./151", 0777) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6006] <... mount resumed>) = 0 [pid 6007] <... mount resumed>) = 0 [pid 6006] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6007] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6006] <... openat resumed>) = 3 [pid 5073] close(3 [pid 6006] chdir("./bus") = 0 [pid 6007] <... openat resumed>) = 3 [pid 6006] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] <... close resumed>) = 0 [pid 6006] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6008 attached [pid 6007] chdir("./bus" [pid 6006] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5077] <... ioctl resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5077] close(3) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6009 attached [pid 6008] set_robust_list(0x55556e32a660, 24 [pid 6007] <... chdir resumed>) = 0 [pid 6006] <... symlink resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6008 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6009 [pid 5076] close(3 [pid 6008] <... set_robust_list resumed>) = 0 [pid 6007] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6006] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5076] <... close resumed>) = 0 [pid 6008] chdir("./151" [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6008] <... chdir resumed>) = 0 [pid 6007] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6006] <... creat resumed>) = 4 [pid 6009] set_robust_list(0x55556e32a660, 24 [pid 6008] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6007] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6006] rename("./bus", "./file2" [pid 6008] <... prctl resumed>) = 0 [pid 6009] <... set_robust_list resumed>) = 0 [pid 6009] chdir("./153" [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6010 [pid 6008] setpgid(0, 0 [pid 6009] <... chdir resumed>) = 0 [pid 6007] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 6010 attached [pid 6009] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6008] <... setpgid resumed>) = 0 [pid 6007] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6006] <... rename resumed>) = -1 EEXIST (File exists) [pid 6010] set_robust_list(0x55556e32a660, 24) = 0 [pid 6010] chdir("./154" [pid 6009] <... prctl resumed>) = 0 [pid 6008] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6006] memfd_create("syzkaller", 0 [pid 5074] close(3 [pid 6009] setpgid(0, 0 [pid 6006] <... memfd_create resumed>) = 5 [pid 6009] <... setpgid resumed>) = 0 [pid 6008] <... openat resumed>) = 3 [pid 6006] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6010] <... chdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 6009] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6010] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6009] <... openat resumed>) = 3 [pid 6008] write(3, "1000", 4 [pid 6007] <... creat resumed>) = 4 [pid 6006] <... mmap resumed>) = 0x7f0356e00000 [pid 6009] write(3, "1000", 4 [pid 6010] <... prctl resumed>) = 0 [pid 6009] <... write resumed>) = 4 [pid 6009] close(3) = 0 [pid 6009] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6009] memfd_create("syzkaller", 0 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6011 [pid 6009] <... memfd_create resumed>) = 3 [pid 6006] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6010] setpgid(0, 0 [pid 6009] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6008] <... write resumed>) = 4 [pid 6007] rename("./bus", "./file2"./strace-static-x86_64: Process 6011 attached [pid 6010] <... setpgid resumed>) = 0 [pid 6009] <... mmap resumed>) = 0x7f0356e00000 [pid 6008] close(3 [pid 6007] <... rename resumed>) = -1 EEXIST (File exists) [pid 6011] set_robust_list(0x55556e32a660, 24 [pid 6010] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6009] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6008] <... close resumed>) = 0 [pid 6007] memfd_create("syzkaller", 0 [pid 6011] <... set_robust_list resumed>) = 0 [pid 6010] <... openat resumed>) = 3 [pid 6010] write(3, "1000", 4 [pid 6008] symlink("/dev/binderfs", "./binderfs" [pid 6007] <... memfd_create resumed>) = 5 [pid 6011] chdir("./151" [pid 6010] <... write resumed>) = 4 [pid 6008] <... symlink resumed>) = 0 [pid 6007] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6011] <... chdir resumed>) = 0 [pid 6010] close(3 [pid 6011] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6010] <... close resumed>) = 0 [pid 6008] memfd_create("syzkaller", 0 [pid 6007] <... mmap resumed>) = 0x7f0356e00000 [pid 6011] <... prctl resumed>) = 0 [pid 6010] symlink("/dev/binderfs", "./binderfs" [pid 6008] <... memfd_create resumed>) = 3 [pid 6011] setpgid(0, 0 [pid 6007] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6006] <... write resumed>) = 524288 [pid 6011] <... setpgid resumed>) = 0 [pid 6011] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6010] <... symlink resumed>) = 0 [pid 6010] memfd_create("syzkaller", 0 [pid 6008] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6006] munmap(0x7f0356e00000, 138412032 [pid 6011] <... openat resumed>) = 3 [pid 6011] write(3, "1000", 4) = 4 [pid 6006] <... munmap resumed>) = 0 [pid 6011] close(3 [pid 6010] <... memfd_create resumed>) = 3 [pid 6008] <... mmap resumed>) = 0x7f0356e00000 [pid 6011] <... close resumed>) = 0 [pid 6010] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6011] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6010] <... mmap resumed>) = 0x7f0356e00000 [pid 6011] memfd_create("syzkaller", 0) = 3 [pid 6009] <... write resumed>) = 524288 [pid 6011] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6011] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6009] munmap(0x7f0356e00000, 138412032 [pid 6006] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6006] close(5 [pid 6009] <... munmap resumed>) = 0 [pid 6006] <... close resumed>) = 0 [pid 6009] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6009] ioctl(4, LOOP_SET_FD, 3 [pid 6010] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6008] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6006] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6011] <... write resumed>) = 524288 [pid 6009] <... ioctl resumed>) = 0 [pid 6007] <... write resumed>) = 524288 [pid 6011] munmap(0x7f0356e00000, 138412032 [pid 6010] <... write resumed>) = 524288 [pid 6009] close(3 [pid 6008] <... write resumed>) = 524288 [pid 6006] <... open resumed>) = 5 [pid 6009] <... close resumed>) = 0 [pid 6009] close(4 [pid 6006] ftruncate(5, 0) = 0 [pid 6006] exit_group(0 [pid 6009] <... close resumed>) = 0 [pid 6011] <... munmap resumed>) = 0 [pid 6009] mkdir("./bus", 0777 [pid 6008] munmap(0x7f0356e00000, 138412032 [pid 6006] <... exit_group resumed>) = ? [pid 6009] <... mkdir resumed>) = 0 [pid 6008] <... munmap resumed>) = 0 [pid 6006] +++ exited with 0 +++ [pid 6011] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6009] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6008] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6007] munmap(0x7f0356e00000, 138412032 [pid 6011] <... openat resumed>) = 4 [pid 6010] munmap(0x7f0356e00000, 138412032 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6006, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6011] ioctl(4, LOOP_SET_FD, 3 [pid 6010] <... munmap resumed>) = 0 [pid 6008] <... openat resumed>) = 4 [pid 6007] <... munmap resumed>) = 0 [pid 5078] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 6010] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 168.607666][ T6009] loop4: detected capacity change from 0 to 1024 [ 168.645248][ T6011] loop1: detected capacity change from 0 to 1024 [ 168.647881][ T6010] loop3: detected capacity change from 0 to 1024 [pid 6010] ioctl(4, LOOP_SET_FD, 3 [pid 6011] <... ioctl resumed>) = 0 [pid 6008] ioctl(4, LOOP_SET_FD, 3 [pid 6007] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6011] close(3 [pid 6007] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] umount2("./153", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6010] <... ioctl resumed>) = 0 [pid 6011] <... close resumed>) = 0 [pid 6009] <... mount resumed>) = 0 [pid 6008] <... ioctl resumed>) = 0 [pid 6007] close(5 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6011] close(4 [pid 6009] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6008] close(3 [pid 6011] <... close resumed>) = 0 [pid 6010] close(3 [pid 6009] <... openat resumed>) = 3 [pid 5078] openat(AT_FDCWD, "./153", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6011] mkdir("./bus", 0777) = 0 [pid 6010] <... close resumed>) = 0 [pid 6009] chdir("./bus" [pid 6011] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6010] close(4 [pid 6011] <... mount resumed>) = 0 [pid 6010] <... close resumed>) = 0 [pid 6009] <... chdir resumed>) = 0 [pid 6007] <... close resumed>) = 0 [pid 6011] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6010] mkdir("./bus", 0777 [pid 6009] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6008] <... close resumed>) = 0 [pid 6007] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] <... openat resumed>) = 3 [pid 6011] <... openat resumed>) = 3 [pid 6010] <... mkdir resumed>) = 0 [pid 6009] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6008] close(4 [pid 5078] newfstatat(3, "", [pid 6011] chdir("./bus") = 0 [pid 6009] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6008] <... close resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6011] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6010] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6008] mkdir("./bus", 0777 [pid 6007] <... open resumed>) = 5 [pid 6011] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6009] <... symlink resumed>) = 0 [pid 6008] <... mkdir resumed>) = 0 [pid 6007] ftruncate(5, 0 [pid 5078] getdents64(3, [pid 6011] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6009] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6007] <... ftruncate resumed>) = 0 [pid 6007] exit_group(0 [pid 5078] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6011] <... symlink resumed>) = 0 [pid 6008] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6007] <... exit_group resumed>) = ? [pid 6011] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 4 [pid 6009] <... creat resumed>) = 4 [pid 6011] rename("./bus", "./file2" [pid 6009] rename("./bus", "./file2" [pid 5078] <... umount2 resumed>) = 0 [ 168.660344][ T6008] loop0: detected capacity change from 0 to 1024 [pid 6009] <... rename resumed>) = -1 EEXIST (File exists) [pid 6009] memfd_create("syzkaller", 0 [pid 6008] <... mount resumed>) = 0 [pid 6007] +++ exited with 0 +++ [pid 6009] <... memfd_create resumed>) = 5 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6007, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6008] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5075] umount2("./151", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6008] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6008] chdir("./bus" [pid 5075] openat(AT_FDCWD, "./151", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6011] <... rename resumed>) = -1 EEXIST (File exists) [pid 6010] <... mount resumed>) = 0 [pid 6009] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6008] <... chdir resumed>) = 0 [pid 5078] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... openat resumed>) = 3 [pid 6011] memfd_create("syzkaller", 0 [pid 6010] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6009] <... mmap resumed>) = 0x7f0356e00000 [pid 6008] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(3, "", [pid 6011] <... memfd_create resumed>) = 5 [pid 6010] <... openat resumed>) = 3 [pid 6008] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6011] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6010] chdir("./bus" [pid 6009] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6008] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] newfstatat(AT_FDCWD, "./153/bus", [pid 5075] getdents64(3, [pid 6011] <... mmap resumed>) = 0x7f0356e00000 [pid 6010] <... chdir resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6010] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5078] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6010] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6008] <... symlink resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6010] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] openat(AT_FDCWD, "./153/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6008] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] <... openat resumed>) = 4 [pid 5078] newfstatat(4, "", [pid 6010] <... symlink resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6011] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] getdents64(4, [pid 6010] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6009] <... write resumed>) = 524288 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] <... umount2 resumed>) = 0 [pid 6011] <... write resumed>) = 524288 [pid 6009] munmap(0x7f0356e00000, 138412032 [pid 6008] <... creat resumed>) = 4 [pid 5078] getdents64(4, [pid 5075] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6009] <... munmap resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] close(4 [pid 5075] newfstatat(AT_FDCWD, "./151/bus", [pid 5078] <... close resumed>) = 0 [pid 6008] rename("./bus", "./file2" [pid 5078] rmdir("./153/bus" [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 6010] <... creat resumed>) = 4 [pid 5078] umount2("./153/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6010] rename("./bus", "./file2" [pid 6009] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6010] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] newfstatat(AT_FDCWD, "./153/binderfs", [pid 5075] openat(AT_FDCWD, "./151/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6010] memfd_create("syzkaller", 0 [pid 6009] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6008] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... openat resumed>) = 4 [pid 6008] memfd_create("syzkaller", 0) = 5 [pid 6008] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6011] munmap(0x7f0356e00000, 138412032) = 0 [pid 6011] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6010] <... memfd_create resumed>) = 5 [pid 5078] unlink("./153/binderfs" [pid 5075] newfstatat(4, "", [pid 6011] close(5 [pid 6010] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6009] close(5 [pid 6008] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... unlink resumed>) = 0 [pid 6011] <... close resumed>) = 0 [pid 6010] <... mmap resumed>) = 0x7f0356e00000 [pid 6009] <... close resumed>) = 0 [pid 5078] getdents64(3, [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6010] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] close(3 [pid 5075] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5078] <... close resumed>) = 0 [pid 5075] getdents64(4, [pid 5078] rmdir("./153" [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6011] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6010] <... write resumed>) = 524288 [pid 6009] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6008] <... write resumed>) = 524288 [pid 5078] <... rmdir resumed>) = 0 [pid 5075] close(4 [pid 5078] mkdir("./154", 0777 [pid 5075] <... close resumed>) = 0 [pid 6010] munmap(0x7f0356e00000, 138412032 [pid 6008] munmap(0x7f0356e00000, 138412032 [pid 5075] rmdir("./151/bus" [pid 6010] <... munmap resumed>) = 0 [pid 6008] <... munmap resumed>) = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 6011] <... open resumed>) = 5 [pid 5075] <... rmdir resumed>) = 0 [pid 6011] ftruncate(5, 0 [pid 6010] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6009] <... open resumed>) = 5 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6010] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6008] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5078] <... openat resumed>) = 3 [pid 5075] umount2("./151/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6011] <... ftruncate resumed>) = 0 [pid 6009] ftruncate(5, 0 [pid 6008] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] ioctl(3, LOOP_CLR_FD [pid 6010] close(5 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./151/binderfs", [pid 6009] <... ftruncate resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./151/binderfs") = 0 [pid 5075] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6011] exit_group(0 [pid 6010] <... close resumed>) = 0 [pid 6009] exit_group(0 [pid 6008] close(5 [pid 6011] <... exit_group resumed>) = ? [pid 6009] <... exit_group resumed>) = ? [pid 5075] close(3 [pid 6011] +++ exited with 0 +++ [pid 6010] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6008] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 6008] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5075] rmdir("./151" [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6011, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6009] +++ exited with 0 +++ [pid 5075] <... rmdir resumed>) = 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6009, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6010] <... open resumed>) = 5 [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 6010] ftruncate(5, 0 [pid 5077] <... restart_syscall resumed>) = 0 [pid 5075] mkdir("./152", 0777 [pid 5074] umount2("./151", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6010] <... ftruncate resumed>) = 0 [pid 6008] <... open resumed>) = 5 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6010] exit_group(0 [pid 6008] ftruncate(5, 0 [pid 6010] <... exit_group resumed>) = ? [pid 5077] umount2("./153", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6008] <... ftruncate resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... mkdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./151", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6008] exit_group(0 [pid 5077] openat(AT_FDCWD, "./153", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] <... openat resumed>) = 3 [pid 6008] <... exit_group resumed>) = ? [pid 5077] <... openat resumed>) = 3 [pid 5077] newfstatat(3, "", [pid 5074] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5074] getdents64(3, [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6010] +++ exited with 0 +++ [pid 5077] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6008] +++ exited with 0 +++ [pid 5078] <... ioctl resumed>) = 0 [pid 5077] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6010, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5074] <... umount2 resumed>) = 0 [pid 5078] close(3 [pid 5077] <... umount2 resumed>) = 0 [pid 5076] umount2("./154", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./154", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6008, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5078] <... close resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 5076] newfstatat(3, "", [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] newfstatat(AT_FDCWD, "./151/bus", [pid 5073] <... restart_syscall resumed>) = 0 [pid 5076] getdents64(3, [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6012 [pid 5077] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 ./strace-static-x86_64: Process 6012 attached [pid 5077] newfstatat(AT_FDCWD, "./153/bus", [pid 5076] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./151", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6012] set_robust_list(0x55556e32a660, 24 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6012] <... set_robust_list resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6012] chdir("./154" [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./151", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6012] <... chdir resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./153/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] openat(AT_FDCWD, "./151/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6012] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5073] <... openat resumed>) = 3 [pid 5077] <... openat resumed>) = 4 [pid 5073] newfstatat(3, "", [pid 5077] newfstatat(4, "", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6012] <... prctl resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... openat resumed>) = 4 [pid 6012] setpgid(0, 0 [pid 5073] getdents64(3, [pid 5074] newfstatat(4, "", [pid 6012] <... setpgid resumed>) = 0 [pid 5077] getdents64(4, [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6012] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] getdents64(4, [pid 5074] getdents64(4, [pid 6012] <... openat resumed>) = 3 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] close(4 [pid 6012] write(3, "1000", 4 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] <... umount2 resumed>) = 0 [pid 6012] <... write resumed>) = 4 [pid 5077] <... close resumed>) = 0 [pid 5074] getdents64(4, [pid 5077] rmdir("./153/bus") = 0 [pid 5077] umount2("./153/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./153/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] unlink("./153/binderfs" [pid 5076] <... umount2 resumed>) = 0 [pid 6012] close(3 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6012] <... close resumed>) = 0 [pid 5076] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... ioctl resumed>) = 0 [pid 5074] close(4 [pid 6012] symlink("/dev/binderfs", "./binderfs" [pid 5074] <... close resumed>) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 5073] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6012] <... symlink resumed>) = 0 [pid 5074] rmdir("./151/bus" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6012] memfd_create("syzkaller", 0 [pid 5077] getdents64(3, [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] newfstatat(AT_FDCWD, "./154/bus", [pid 5074] <... rmdir resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./151/bus", [pid 6012] <... memfd_create resumed>) = 3 [pid 5077] close(3 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./151/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] <... close resumed>) = 0 [pid 5076] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6012] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6012] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] rmdir("./153" [pid 5074] newfstatat(AT_FDCWD, "./151/binderfs", [pid 5077] <... rmdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./151/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] mkdir("./154", 0777 [pid 5073] close(4 [pid 6012] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... mkdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./154/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] close(3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./151/bus" [pid 5076] <... openat resumed>) = 4 [pid 5074] unlink("./151/binderfs" [pid 5073] <... rmdir resumed>) = 0 [pid 5076] newfstatat(4, "", [pid 5075] <... close resumed>) = 0 [pid 5073] umount2("./151/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... unlink resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... openat resumed>) = 3 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, [pid 5076] getdents64(4, [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] newfstatat(AT_FDCWD, "./151/binderfs", [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./151/binderfs" [pid 5074] close(3 [pid 5076] getdents64(4, [pid 5073] <... unlink resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] <... close resumed>) = 0 [pid 5073] getdents64(3, [pid 5076] close(4 [pid 5074] rmdir("./151" [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] <... close resumed>) = 0 [pid 5073] close(3./strace-static-x86_64: Process 6013 attached [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6013 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 6013] set_robust_list(0x55556e32a660, 24 [pid 5076] rmdir("./154/bus" [pid 5074] mkdir("./152", 0777 [pid 5073] rmdir("./151" [pid 6013] <... set_robust_list resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 6013] chdir("./152" [pid 5076] umount2("./154/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... mkdir resumed>) = 0 [pid 5073] mkdir("./152", 0777 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6013] <... chdir resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./154/binderfs", [pid 6013] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 6013] setpgid(0, 0 [pid 5074] <... openat resumed>) = 3 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6013] <... setpgid resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6013] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] unlink("./154/binderfs" [pid 5073] <... openat resumed>) = 3 [pid 5076] <... unlink resumed>) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6013] <... openat resumed>) = 3 [pid 6012] <... write resumed>) = 524288 [pid 5076] getdents64(3, [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3 [pid 6013] write(3, "1000", 4) = 4 [pid 6013] close(3 [pid 6012] munmap(0x7f0356e00000, 138412032 [pid 6013] <... close resumed>) = 0 [pid 6013] symlink("/dev/binderfs", "./binderfs" [pid 6012] <... munmap resumed>) = 0 [pid 6013] <... symlink resumed>) = 0 [pid 6013] memfd_create("syzkaller", 0 [pid 6012] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5076] <... close resumed>) = 0 [pid 6012] ioctl(4, LOOP_SET_FD, 3 [pid 6013] <... memfd_create resumed>) = 3 [pid 5077] <... ioctl resumed>) = 0 [pid 5076] rmdir("./154" [pid 6013] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5076] <... rmdir resumed>) = 0 [pid 6012] <... ioctl resumed>) = 0 [pid 6013] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] mkdir("./155", 0777 [pid 5073] <... ioctl resumed>) = 0 [pid 6012] close(3) = 0 [pid 6012] close(4) = 0 [pid 6012] mkdir("./bus", 0777 [pid 5077] close(3 [pid 5076] <... mkdir resumed>) = 0 [pid 6012] <... mkdir resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6012] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5073] close(3 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... openat resumed>) = 3 [pid 5074] <... ioctl resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6014 attached [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6014 [pid 6014] set_robust_list(0x55556e32a660, 24 [pid 6012] <... mount resumed>) = 0 [pid 6012] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6015 [pid 6014] <... set_robust_list resumed>) = 0 [pid 6013] <... write resumed>) = 524288 [pid 6012] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6015 attached [pid 6014] chdir("./154" [pid 6015] set_robust_list(0x55556e32a660, 24) = 0 [pid 6012] chdir("./bus" [pid 6015] chdir("./152" [pid 6012] <... chdir resumed>) = 0 [pid 6014] <... chdir resumed>) = 0 [pid 6014] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6012] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6014] <... prctl resumed>) = 0 [pid 6012] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6015] <... chdir resumed>) = 0 [pid 6012] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6015] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6014] setpgid(0, 0 [pid 6012] <... symlink resumed>) = 0 [pid 5074] close(3 [pid 6015] <... prctl resumed>) = 0 [pid 6014] <... setpgid resumed>) = 0 [pid 6013] munmap(0x7f0356e00000, 138412032 [ 168.987229][ T6012] loop5: detected capacity change from 0 to 1024 [pid 6015] setpgid(0, 0 [pid 5074] <... close resumed>) = 0 [pid 6015] <... setpgid resumed>) = 0 [pid 6014] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6013] <... munmap resumed>) = 0 [pid 6012] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6015] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6012] <... creat resumed>) = 4 [pid 6015] write(3, "1000", 4 [pid 6012] rename("./bus", "./file2" [pid 6015] <... write resumed>) = 4 [pid 6012] <... rename resumed>) = -1 EEXIST (File exists) [pid 6015] close(3) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6016 [pid 6015] symlink("/dev/binderfs", "./binderfs" [pid 6012] memfd_create("syzkaller", 0./strace-static-x86_64: Process 6016 attached [pid 6015] <... symlink resumed>) = 0 [pid 6012] <... memfd_create resumed>) = 5 [pid 6016] set_robust_list(0x55556e32a660, 24 [pid 6012] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6016] <... set_robust_list resumed>) = 0 [pid 6015] memfd_create("syzkaller", 0 [pid 6014] <... openat resumed>) = 3 [pid 6013] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6012] <... mmap resumed>) = 0x7f0356e00000 [pid 6016] chdir("./152" [pid 6014] write(3, "1000", 4 [pid 6013] <... openat resumed>) = 4 [pid 6015] <... memfd_create resumed>) = 3 [pid 6014] <... write resumed>) = 4 [pid 6013] ioctl(4, LOOP_SET_FD, 3 [pid 6016] <... chdir resumed>) = 0 [pid 6014] close(3 [pid 6016] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6014] <... close resumed>) = 0 [pid 6016] <... prctl resumed>) = 0 [pid 6016] setpgid(0, 0) = 0 [pid 6015] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6016] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6015] <... mmap resumed>) = 0x7f0356e00000 [pid 6014] symlink("/dev/binderfs", "./binderfs" [pid 6016] <... openat resumed>) = 3 [pid 6014] <... symlink resumed>) = 0 [pid 6012] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6016] write(3, "1000", 4) = 4 [pid 6016] close(3) = 0 [pid 6015] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6016] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6016] memfd_create("syzkaller", 0 [pid 6014] memfd_create("syzkaller", 0) = 3 [pid 6012] <... write resumed>) = 524288 [pid 5076] <... ioctl resumed>) = 0 [pid 6014] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] close(3 [pid 6016] <... memfd_create resumed>) = 3 [pid 6014] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] <... close resumed>) = 0 [pid 6013] <... ioctl resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6016] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 ./strace-static-x86_64: Process 6017 attached [pid 6016] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6014] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6017 [pid 6017] set_robust_list(0x55556e32a660, 24) = 0 [pid 6013] close(3) = 0 [pid 6017] chdir("./155" [pid 6013] close(4 [pid 6015] <... write resumed>) = 524288 [pid 6012] munmap(0x7f0356e00000, 138412032 [pid 6017] <... chdir resumed>) = 0 [pid 6013] <... close resumed>) = 0 [pid 6017] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6013] mkdir("./bus", 0777 [pid 6012] <... munmap resumed>) = 0 [pid 6017] <... prctl resumed>) = 0 [pid 6017] setpgid(0, 0 [pid 6012] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6017] <... setpgid resumed>) = 0 [pid 6012] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 169.073955][ T6013] loop2: detected capacity change from 0 to 1024 [pid 6017] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6015] munmap(0x7f0356e00000, 138412032 [pid 6014] <... write resumed>) = 524288 [pid 6013] <... mkdir resumed>) = 0 [pid 6012] close(5 [pid 6017] <... openat resumed>) = 3 [pid 6015] <... munmap resumed>) = 0 [pid 6013] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6012] <... close resumed>) = 0 [pid 6017] write(3, "1000", 4 [pid 6014] munmap(0x7f0356e00000, 138412032 [pid 6017] <... write resumed>) = 4 [pid 6014] <... munmap resumed>) = 0 [pid 6017] close(3) = 0 [pid 6015] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6017] symlink("/dev/binderfs", "./binderfs" [pid 6015] <... openat resumed>) = 4 [pid 6014] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6015] ioctl(4, LOOP_SET_FD, 3 [pid 6017] <... symlink resumed>) = 0 [pid 6014] <... openat resumed>) = 4 [pid 6014] ioctl(4, LOOP_SET_FD, 3 [pid 6017] memfd_create("syzkaller", 0 [pid 6016] <... write resumed>) = 524288 [pid 6016] munmap(0x7f0356e00000, 138412032 [pid 6012] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6016] <... munmap resumed>) = 0 [pid 6016] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6017] <... memfd_create resumed>) = 3 [pid 6016] <... openat resumed>) = 4 [pid 6016] ioctl(4, LOOP_SET_FD, 3 [pid 6013] <... mount resumed>) = 0 [pid 6017] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6016] <... ioctl resumed>) = 0 [pid 6014] <... ioctl resumed>) = 0 [pid 6013] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6017] <... mmap resumed>) = 0x7f0356e00000 [pid 6015] <... ioctl resumed>) = 0 [pid 6014] close(3 [pid 6013] <... openat resumed>) = 3 [pid 6015] close(3 [pid 6014] <... close resumed>) = 0 [pid 6013] chdir("./bus" [pid 6015] <... close resumed>) = 0 [pid 6014] close(4 [pid 6013] <... chdir resumed>) = 0 [pid 6012] <... open resumed>) = 5 [pid 6015] close(4 [pid 6014] <... close resumed>) = 0 [pid 6013] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6015] <... close resumed>) = 0 [pid 6012] ftruncate(5, 0 [pid 6015] mkdir("./bus", 0777 [pid 6014] mkdir("./bus", 0777 [pid 6013] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6012] <... ftruncate resumed>) = 0 [pid 6017] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6015] <... mkdir resumed>) = 0 [pid 6012] exit_group(0 [pid 6015] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6014] <... mkdir resumed>) = 0 [pid 6013] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6012] <... exit_group resumed>) = ? [pid 6013] <... symlink resumed>) = 0 [pid 6012] +++ exited with 0 +++ [pid 6014] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6016] close(3 [pid 6013] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6012, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6016] <... close resumed>) = 0 [pid 6016] close(4 [pid 6015] <... mount resumed>) = 0 [pid 6016] <... close resumed>) = 0 [pid 6015] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6016] mkdir("./bus", 0777 [pid 6015] <... openat resumed>) = 3 [pid 6015] chdir("./bus" [pid 6013] <... creat resumed>) = 4 [pid 6015] <... chdir resumed>) = 0 [pid 6013] rename("./bus", "./file2" [pid 5078] umount2("./154", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6016] <... mkdir resumed>) = 0 [pid 6015] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6016] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6015] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6013] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] openat(AT_FDCWD, "./154", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6015] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6013] memfd_create("syzkaller", 0 [pid 5078] <... openat resumed>) = 3 [pid 6017] <... write resumed>) = 524288 [pid 6013] <... memfd_create resumed>) = 5 [pid 5078] newfstatat(3, "", [ 169.152210][ T6015] loop0: detected capacity change from 0 to 1024 [ 169.160167][ T6014] loop4: detected capacity change from 0 to 1024 [ 169.178206][ T6016] loop1: detected capacity change from 0 to 1024 [pid 6017] munmap(0x7f0356e00000, 138412032 [pid 6013] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6015] <... symlink resumed>) = 0 [pid 6016] <... mount resumed>) = 0 [pid 6015] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6014] <... mount resumed>) = 0 [pid 6013] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] getdents64(3, [pid 6016] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6017] <... munmap resumed>) = 0 [pid 6016] <... openat resumed>) = 3 [pid 6014] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6017] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6016] chdir("./bus" [pid 6015] <... creat resumed>) = 4 [pid 6014] <... openat resumed>) = 3 [pid 6013] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6017] <... openat resumed>) = 4 [pid 6016] <... chdir resumed>) = 0 [pid 6015] rename("./bus", "./file2" [pid 6014] chdir("./bus" [pid 6017] ioctl(4, LOOP_SET_FD, 3 [pid 6016] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6015] <... rename resumed>) = -1 EEXIST (File exists) [pid 6014] <... chdir resumed>) = 0 [pid 6016] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6016] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6015] memfd_create("syzkaller", 0 [pid 6014] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6016] <... symlink resumed>) = 0 [pid 6014] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6015] <... memfd_create resumed>) = 5 [pid 6016] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6015] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6015] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6014] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6013] <... write resumed>) = 524288 [pid 5078] <... umount2 resumed>) = 0 [pid 6017] <... ioctl resumed>) = 0 [pid 6016] <... creat resumed>) = 4 [pid 6014] <... symlink resumed>) = 0 [pid 5078] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6017] close(3 [pid 6016] rename("./bus", "./file2" [pid 6014] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6017] <... close resumed>) = 0 [pid 6017] close(4 [pid 6016] <... rename resumed>) = -1 EEXIST (File exists) [pid 6014] <... creat resumed>) = 4 [pid 6013] munmap(0x7f0356e00000, 138412032 [pid 5078] newfstatat(AT_FDCWD, "./154/bus", [pid 6017] <... close resumed>) = 0 [pid 6016] memfd_create("syzkaller", 0 [pid 6015] <... write resumed>) = 524288 [pid 6014] rename("./bus", "./file2" [pid 6013] <... munmap resumed>) = 0 [ 169.254845][ T6017] loop3: detected capacity change from 0 to 1024 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6017] mkdir("./bus", 0777 [pid 6016] <... memfd_create resumed>) = 5 [pid 6014] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6016] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6017] <... mkdir resumed>) = 0 [pid 6016] <... mmap resumed>) = 0x7f0356e00000 [pid 6014] memfd_create("syzkaller", 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6017] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6016] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6014] <... memfd_create resumed>) = 5 [pid 6013] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] openat(AT_FDCWD, "./154/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6013] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... openat resumed>) = 4 [pid 6013] close(5 [pid 5078] newfstatat(4, "", [pid 6014] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6015] munmap(0x7f0356e00000, 138412032 [pid 6014] <... mmap resumed>) = 0x7f0356e00000 [pid 6013] <... close resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6015] <... munmap resumed>) = 0 [pid 6015] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5078] getdents64(4, [pid 6015] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6016] <... write resumed>) = 524288 [pid 6015] close(5 [pid 6014] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6017] <... mount resumed>) = 0 [pid 6013] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] getdents64(4, [pid 6015] <... close resumed>) = 0 [pid 6015] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6017] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6015] <... open resumed>) = 5 [pid 6017] <... openat resumed>) = 3 [pid 6016] munmap(0x7f0356e00000, 138412032 [pid 5078] close(4 [pid 6015] ftruncate(5, 0 [pid 5078] <... close resumed>) = 0 [pid 6017] chdir("./bus" [pid 6016] <... munmap resumed>) = 0 [pid 6015] <... ftruncate resumed>) = 0 [pid 6013] <... open resumed>) = 5 [pid 6017] <... chdir resumed>) = 0 [pid 5078] rmdir("./154/bus" [pid 6013] ftruncate(5, 0 [pid 6016] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6015] exit_group(0 [pid 5078] <... rmdir resumed>) = 0 [pid 6017] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6016] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6015] <... exit_group resumed>) = ? [pid 6013] <... ftruncate resumed>) = 0 [pid 6017] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6016] close(5 [pid 6015] +++ exited with 0 +++ [pid 5078] umount2("./154/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6013] exit_group(0 [pid 6017] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6014] <... write resumed>) = 524288 [pid 6013] <... exit_group resumed>) = ? [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6015, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5073] umount2("./152", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6016] <... close resumed>) = 0 [pid 6017] <... symlink resumed>) = 0 [pid 6014] munmap(0x7f0356e00000, 138412032 [pid 6013] +++ exited with 0 +++ [pid 5078] newfstatat(AT_FDCWD, "./154/binderfs", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6017] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6016] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6014] <... munmap resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6013, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5073] openat(AT_FDCWD, "./152", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] unlink("./154/binderfs" [pid 5073] <... openat resumed>) = 3 [pid 6017] <... creat resumed>) = 4 [pid 6014] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] <... unlink resumed>) = 0 [pid 5073] newfstatat(3, "", [pid 6017] rename("./bus", "./file2" [pid 5075] umount2("./152", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6017] <... rename resumed>) = -1 EEXIST (File exists) [pid 6016] <... open resumed>) = 5 [pid 6014] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] getdents64(3, [pid 5075] openat(AT_FDCWD, "./152", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... umount2 resumed>) = 0 [pid 6017] memfd_create("syzkaller", 0 [pid 5075] <... openat resumed>) = 3 [pid 6017] <... memfd_create resumed>) = 5 [pid 6016] ftruncate(5, 0 [pid 6014] close(5 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] newfstatat(3, "", [pid 5073] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6017] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6016] <... ftruncate resumed>) = 0 [pid 5078] close(3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6017] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] getdents64(3, [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6016] exit_group(0 [pid 6014] <... close resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6016] <... exit_group resumed>) = ? [pid 5075] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] rmdir("./154" [pid 5073] newfstatat(AT_FDCWD, "./152/bus", [pid 5078] <... rmdir resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6016] +++ exited with 0 +++ [pid 6014] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5073] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6016, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6017] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... restart_syscall resumed>) = 0 [pid 5078] mkdir("./155", 0777 [pid 5073] openat(AT_FDCWD, "./152/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] umount2("./152", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... mkdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... openat resumed>) = 4 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... umount2 resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./152", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] newfstatat(4, "", [pid 5078] <... openat resumed>) = 3 [pid 5074] <... openat resumed>) = 3 [pid 6014] <... open resumed>) = 5 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5074] newfstatat(3, "", [pid 6014] ftruncate(5, 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6014] <... ftruncate resumed>) = 0 [pid 6017] <... write resumed>) = 524288 [pid 6014] exit_group(0 [pid 5075] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6014] <... exit_group resumed>) = ? [pid 5074] <... umount2 resumed>) = 0 [pid 5073] getdents64(4, [pid 6017] munmap(0x7f0356e00000, 138412032 [pid 5074] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6017] <... munmap resumed>) = 0 [pid 5073] getdents64(4, [pid 6014] +++ exited with 0 +++ [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6014, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 5074] newfstatat(AT_FDCWD, "./152/bus", [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] <... restart_syscall resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] close(4 [pid 6017] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] newfstatat(AT_FDCWD, "./152/bus", [pid 5074] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... close resumed>) = 0 [pid 6017] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] rmdir("./152/bus" [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./152/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] <... rmdir resumed>) = 0 [pid 5075] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, [pid 5077] umount2("./154", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] openat(AT_FDCWD, "./152/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6017] close(5 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./152/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] close(4) = 0 [pid 5075] rmdir("./152/bus") = 0 [pid 5075] umount2("./152/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6017] <... close resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./154", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... openat resumed>) = 4 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6017] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5074] newfstatat(4, "", [pid 5073] newfstatat(AT_FDCWD, "./152/binderfs", [pid 5077] <... openat resumed>) = 3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] getdents64(4, [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] getdents64(3, [pid 5075] newfstatat(AT_FDCWD, "./152/binderfs", [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] unlink("./152/binderfs" [pid 5075] unlink("./152/binderfs" [pid 5074] getdents64(4, [pid 5077] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 6017] <... open resumed>) = 5 [pid 5075] <... unlink resumed>) = 0 [pid 5075] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] close(4 [pid 5075] close(3) = 0 [pid 5075] rmdir("./152" [pid 6017] ftruncate(5, 0 [pid 5078] <... ioctl resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5073] getdents64(3, [pid 5075] mkdir("./153", 0777 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] rmdir("./152/bus" [pid 5073] close(3 [pid 6017] <... ftruncate resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5078] close(3 [pid 5073] rmdir("./152" [pid 5074] umount2("./152/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... close resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6018 ./strace-static-x86_64: Process 6018 attached [pid 6017] exit_group(0 [pid 5077] <... umount2 resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... rmdir resumed>) = 0 [pid 6018] set_robust_list(0x55556e32a660, 24 [pid 6017] <... exit_group resumed>) = ? [pid 5074] newfstatat(AT_FDCWD, "./152/binderfs", [pid 6018] <... set_robust_list resumed>) = 0 [pid 6017] +++ exited with 0 +++ [pid 5077] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] mkdir("./153", 0777 [pid 6018] chdir("./155" [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6017, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5074] unlink("./152/binderfs" [pid 5073] <... mkdir resumed>) = 0 [pid 6018] <... chdir resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./154/bus", [pid 5074] <... unlink resumed>) = 0 [pid 6018] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6018] <... prctl resumed>) = 0 [pid 6018] setpgid(0, 0 [pid 5077] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] getdents64(3, [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6018] <... setpgid resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5077] openat(AT_FDCWD, "./154/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] close(3 [pid 6018] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5077] <... openat resumed>) = 4 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5077] newfstatat(4, "", [pid 5076] umount2("./155", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./155", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] rmdir("./152" [pid 6018] <... openat resumed>) = 3 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5074] <... rmdir resumed>) = 0 [pid 6018] write(3, "1000", 4) = 4 [pid 5077] getdents64(4, [pid 5076] newfstatat(3, "", [pid 5074] mkdir("./153", 0777 [pid 6018] close(3 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6018] <... close resumed>) = 0 [pid 6018] symlink("/dev/binderfs", "./binderfs" [pid 5077] getdents64(4, [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 6018] <... symlink resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] getdents64(3, [pid 5077] close(4 [pid 5075] close(3 [pid 6018] memfd_create("syzkaller", 0 [pid 5077] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] <... close resumed>) = 0 [pid 5077] rmdir("./154/bus" [pid 5076] umount2("./155/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6018] <... memfd_create resumed>) = 3 [pid 5077] <... rmdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6018] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... openat resumed>) = 3 [pid 5077] umount2("./154/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6018] <... mmap resumed>) = 0x7f0356e00000 [pid 6018] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... ioctl resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./154/binderfs", [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6019 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] unlink("./154/binderfs"./strace-static-x86_64: Process 6019 attached ) = 0 [pid 5077] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] close(3) = 0 [pid 5077] rmdir("./154") = 0 [pid 5077] mkdir("./155", 0777) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6019] set_robust_list(0x55556e32a660, 24) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5076] <... umount2 resumed>) = 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6020 attached [pid 6020] set_robust_list(0x55556e32a660, 24) = 0 [pid 6020] chdir("./153" [pid 6018] <... write resumed>) = 524288 [pid 5076] umount2("./155/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6020 [pid 6020] <... chdir resumed>) = 0 [pid 6019] chdir("./153" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6020] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] newfstatat(AT_FDCWD, "./155/bus", [pid 6020] <... prctl resumed>) = 0 [pid 6020] setpgid(0, 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6020] <... setpgid resumed>) = 0 [pid 6019] <... chdir resumed>) = 0 [pid 5076] umount2("./155/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6019] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6020] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6019] <... prctl resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6019] setpgid(0, 0 [pid 5076] openat(AT_FDCWD, "./155/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6020] <... openat resumed>) = 3 [pid 6019] <... setpgid resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5076] newfstatat(4, "", [pid 6020] write(3, "1000", 4 [pid 6019] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6020] <... write resumed>) = 4 [pid 5076] getdents64(4, [pid 6018] munmap(0x7f0356e00000, 138412032 [pid 6020] close(3 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6020] <... close resumed>) = 0 [pid 6020] symlink("/dev/binderfs", "./binderfs" [pid 5076] getdents64(4, [pid 6020] <... symlink resumed>) = 0 [pid 6019] <... openat resumed>) = 3 [pid 6018] <... munmap resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] close(4) = 0 [pid 6020] memfd_create("syzkaller", 0 [pid 6019] write(3, "1000", 4 [pid 6018] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5076] rmdir("./155/bus" [pid 5074] <... ioctl resumed>) = 0 [pid 6019] <... write resumed>) = 4 [pid 6018] <... openat resumed>) = 4 [pid 6020] <... memfd_create resumed>) = 3 [pid 6019] close(3 [pid 5077] <... ioctl resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] close(3 [pid 6020] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5076] umount2("./155/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6020] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6019] <... close resumed>) = 0 [pid 6018] ioctl(4, LOOP_SET_FD, 3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... close resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./155/binderfs", [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./155/binderfs") = 0 [pid 6019] symlink("/dev/binderfs", "./binderfs" [pid 5076] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3) = 0 [pid 5076] rmdir("./155") = 0 [pid 5076] mkdir("./156", 0777./strace-static-x86_64: Process 6021 attached [pid 6019] <... symlink resumed>) = 0 [pid 6018] <... ioctl resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6019] memfd_create("syzkaller", 0 [pid 5076] <... openat resumed>) = 3 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6021 [pid 6018] close(3 [pid 6021] set_robust_list(0x55556e32a660, 24 [pid 6018] <... close resumed>) = 0 [pid 6019] <... memfd_create resumed>) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6019] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6018] close(4 [pid 6021] <... set_robust_list resumed>) = 0 [pid 6018] <... close resumed>) = 0 [pid 5077] close(3 [pid 6021] chdir("./153" [pid 5077] <... close resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6020] <... write resumed>) = 524288 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6022 ./strace-static-x86_64: Process 6022 attached [pid 6022] set_robust_list(0x55556e32a660, 24 [pid 6020] munmap(0x7f0356e00000, 138412032 [pid 6022] <... set_robust_list resumed>) = 0 [pid 6021] <... chdir resumed>) = 0 [pid 6019] <... mmap resumed>) = 0x7f0356e00000 [pid 6018] mkdir("./bus", 0777 [pid 6022] chdir("./155" [pid 6021] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6020] <... munmap resumed>) = 0 [pid 6022] <... chdir resumed>) = 0 [pid 6022] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6021] <... prctl resumed>) = 0 [pid 6018] <... mkdir resumed>) = 0 [pid 6022] <... prctl resumed>) = 0 [pid 6021] setpgid(0, 0 [pid 6020] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6018] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6022] setpgid(0, 0 [pid 6021] <... setpgid resumed>) = 0 [pid 6020] <... openat resumed>) = 4 [pid 6022] <... setpgid resumed>) = 0 [ 169.600439][ T6018] loop5: detected capacity change from 0 to 1024 [pid 6020] ioctl(4, LOOP_SET_FD, 3 [pid 6022] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6021] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6020] <... ioctl resumed>) = 0 [pid 6019] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6018] <... mount resumed>) = 0 [pid 6018] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6022] <... openat resumed>) = 3 [pid 6021] <... openat resumed>) = 3 [pid 6018] <... openat resumed>) = 3 [pid 6022] write(3, "1000", 4 [pid 6021] write(3, "1000", 4 [pid 6018] chdir("./bus" [pid 6022] <... write resumed>) = 4 [pid 6021] <... write resumed>) = 4 [pid 6018] <... chdir resumed>) = 0 [pid 6021] close(3 [pid 6018] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6022] close(3 [pid 6021] <... close resumed>) = 0 [pid 6022] <... close resumed>) = 0 [pid 6022] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6021] symlink("/dev/binderfs", "./binderfs" [pid 6018] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6022] memfd_create("syzkaller", 0 [pid 6021] <... symlink resumed>) = 0 [pid 6018] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6022] <... memfd_create resumed>) = 3 [pid 5076] <... ioctl resumed>) = 0 [pid 6022] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6018] <... symlink resumed>) = 0 [pid 6021] memfd_create("syzkaller", 0) = 3 [pid 6021] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6022] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6021] <... mmap resumed>) = 0x7f0356e00000 [pid 6018] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6020] close(3 [pid 5076] close(3 [pid 6021] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6019] <... write resumed>) = 524288 [pid 6020] <... close resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 6020] close(4) = 0 [pid 6019] munmap(0x7f0356e00000, 138412032 [pid 6018] <... creat resumed>) = 4 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6020] mkdir("./bus", 0777 [pid 6019] <... munmap resumed>) = 0 [pid 6022] <... write resumed>) = 524288 [pid 6020] <... mkdir resumed>) = 0 [pid 6018] rename("./bus", "./file2" [ 169.647414][ T6020] loop0: detected capacity change from 0 to 1024 [pid 6020] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6019] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6023 [pid 6018] <... rename resumed>) = -1 EEXIST (File exists) [pid 6019] <... openat resumed>) = 4 [pid 6018] memfd_create("syzkaller", 0./strace-static-x86_64: Process 6023 attached ) = 5 [pid 6023] set_robust_list(0x55556e32a660, 24 [pid 6022] munmap(0x7f0356e00000, 138412032 [pid 6019] ioctl(4, LOOP_SET_FD, 3 [pid 6018] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6023] <... set_robust_list resumed>) = 0 [pid 6022] <... munmap resumed>) = 0 [pid 6018] <... mmap resumed>) = 0x7f0356e00000 [pid 6023] chdir("./156" [pid 6022] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6020] <... mount resumed>) = 0 [pid 6018] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6023] <... chdir resumed>) = 0 [pid 6022] <... openat resumed>) = 4 [pid 6020] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6023] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6022] ioctl(4, LOOP_SET_FD, 3 [pid 6020] <... openat resumed>) = 3 [pid 6023] <... prctl resumed>) = 0 [pid 6021] <... write resumed>) = 524288 [pid 6019] <... ioctl resumed>) = 0 [pid 6018] <... write resumed>) = 524288 [pid 6023] setpgid(0, 0 [pid 6021] munmap(0x7f0356e00000, 138412032 [pid 6019] close(3 [pid 6023] <... setpgid resumed>) = 0 [pid 6019] <... close resumed>) = 0 [pid 6023] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6021] <... munmap resumed>) = 0 [pid 6019] close(4 [pid 6023] <... openat resumed>) = 3 [pid 6021] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6020] chdir("./bus" [pid 6019] <... close resumed>) = 0 [pid 6023] write(3, "1000", 4 [pid 6020] <... chdir resumed>) = 0 [pid 6019] mkdir("./bus", 0777 [pid 6023] <... write resumed>) = 4 [pid 6023] close(3) = 0 [pid 6023] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6021] <... openat resumed>) = 4 [pid 6020] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6019] <... mkdir resumed>) = 0 [pid 6021] ioctl(4, LOOP_SET_FD, 3 [pid 6020] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6019] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6018] munmap(0x7f0356e00000, 138412032 [pid 6023] memfd_create("syzkaller", 0 [pid 6020] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6023] <... memfd_create resumed>) = 3 [pid 6023] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6020] <... symlink resumed>) = 0 [pid 6018] <... munmap resumed>) = 0 [pid 6022] <... ioctl resumed>) = 0 [pid 6020] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6022] close(3 [pid 6018] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6022] <... close resumed>) = 0 [pid 6018] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6023] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6022] close(4 [pid 6020] <... creat resumed>) = 4 [pid 6019] <... mount resumed>) = 0 [pid 6022] <... close resumed>) = 0 [pid 6019] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6018] close(5 [pid 6022] mkdir("./bus", 0777 [pid 6020] rename("./bus", "./file2" [pid 6019] <... openat resumed>) = 3 [pid 6022] <... mkdir resumed>) = 0 [pid 6021] <... ioctl resumed>) = 0 [pid 6020] <... rename resumed>) = -1 EEXIST (File exists) [pid 6018] <... close resumed>) = 0 [pid 6019] chdir("./bus" [pid 6022] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6020] memfd_create("syzkaller", 0 [pid 6019] <... chdir resumed>) = 0 [pid 6020] <... memfd_create resumed>) = 5 [pid 6019] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6021] close(3 [pid 6020] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6019] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6018] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6021] <... close resumed>) = 0 [pid 6020] <... mmap resumed>) = 0x7f0356e00000 [pid 6019] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6021] close(4) = 0 [ 169.717516][ T6019] loop2: detected capacity change from 0 to 1024 [ 169.736083][ T6022] loop4: detected capacity change from 0 to 1024 [ 169.753344][ T6021] loop1: detected capacity change from 0 to 1024 [pid 6023] <... write resumed>) = 524288 [pid 6019] <... symlink resumed>) = 0 [pid 6021] mkdir("./bus", 0777 [pid 6019] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6021] <... mkdir resumed>) = 0 [pid 6018] <... open resumed>) = 5 [pid 6020] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6023] munmap(0x7f0356e00000, 138412032) = 0 [pid 6023] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6023] ioctl(4, LOOP_SET_FD, 3 [pid 6021] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6018] ftruncate(5, 0 [pid 6021] <... mount resumed>) = 0 [pid 6020] <... write resumed>) = 524288 [pid 6019] <... creat resumed>) = 4 [pid 6018] <... ftruncate resumed>) = 0 [pid 6021] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6019] rename("./bus", "./file2" [pid 6018] exit_group(0 [pid 6021] chdir("./bus") = 0 [pid 6018] <... exit_group resumed>) = ? [pid 6021] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6018] +++ exited with 0 +++ [pid 6019] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6018, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6021] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6019] memfd_create("syzkaller", 0 [pid 6020] munmap(0x7f0356e00000, 138412032 [pid 6021] <... symlink resumed>) = 0 [pid 6020] <... munmap resumed>) = 0 [pid 6019] <... memfd_create resumed>) = 5 [pid 6019] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6022] <... mount resumed>) = 0 [pid 6019] <... mmap resumed>) = 0x7f0356e00000 [pid 6021] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6022] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6022] chdir("./bus") = 0 [pid 6022] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6022] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5078] umount2("./155", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6022] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6021] <... creat resumed>) = 4 [pid 6020] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6021] rename("./bus", "./file2" [pid 6020] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6019] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6020] close(5 [pid 6021] <... rename resumed>) = -1 EEXIST (File exists) [pid 6020] <... close resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./155", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6022] <... creat resumed>) = 4 [pid 5078] newfstatat(3, "", [pid 6021] memfd_create("syzkaller", 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(3, [pid 6021] <... memfd_create resumed>) = 5 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6023] <... ioctl resumed>) = 0 [ 169.801352][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 169.801373][ T28] audit: type=1800 audit(1710613051.904:927): pid=6018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 169.812625][ T6023] loop3: detected capacity change from 0 to 1024 [pid 6023] close(3 [pid 5078] umount2("./155/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6023] <... close resumed>) = 0 [pid 6023] close(4) = 0 [pid 6023] mkdir("./bus", 0777 [pid 6022] rename("./bus", "./file2" [pid 6021] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6023] <... mkdir resumed>) = 0 [pid 6021] <... mmap resumed>) = 0x7f0356e00000 [pid 6023] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6022] <... rename resumed>) = -1 EEXIST (File exists) [pid 6020] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6019] <... write resumed>) = 524288 [pid 6022] memfd_create("syzkaller", 0 [pid 5078] <... umount2 resumed>) = 0 [pid 6019] munmap(0x7f0356e00000, 138412032) = 0 [pid 5078] umount2("./155/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6022] <... memfd_create resumed>) = 5 [pid 5078] newfstatat(AT_FDCWD, "./155/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6019] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] umount2("./155/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./155/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6022] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6020] <... open resumed>) = 5 [pid 6019] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... openat resumed>) = 4 [pid 6022] <... mmap resumed>) = 0x7f0356e00000 [pid 6020] ftruncate(5, 0 [pid 6019] close(5 [pid 6022] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6021] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6020] <... ftruncate resumed>) = 0 [pid 6019] <... close resumed>) = 0 [pid 5078] newfstatat(4, "", [pid 6020] exit_group(0) = ? [pid 6020] +++ exited with 0 +++ [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(4, [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6020, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5073] umount2("./153", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6019] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5073] openat(AT_FDCWD, "./153", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] <... openat resumed>) = 3 [pid 6021] <... write resumed>) = 524288 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [ 169.909924][ T28] audit: type=1800 audit(1710613052.004:928): pid=6020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop0" ino=20 res=0 errno=0 [pid 5073] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6021] munmap(0x7f0356e00000, 138412032 [pid 6023] <... mount resumed>) = 0 [pid 6022] <... write resumed>) = 524288 [pid 6019] <... open resumed>) = 5 [pid 5078] getdents64(4, [pid 5073] <... umount2 resumed>) = 0 [pid 6023] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6023] <... openat resumed>) = 3 [pid 5078] close(4) = 0 [pid 6023] chdir("./bus" [pid 5078] rmdir("./155/bus" [pid 6023] <... chdir resumed>) = 0 [pid 6023] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6022] munmap(0x7f0356e00000, 138412032 [pid 6021] <... munmap resumed>) = 0 [pid 6019] ftruncate(5, 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5073] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6023] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6022] <... munmap resumed>) = 0 [pid 6023] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6019] <... ftruncate resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6022] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] newfstatat(AT_FDCWD, "./153/bus", [pid 6022] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6019] exit_group(0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6022] close(5 [pid 5078] umount2("./155/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./153/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6023] <... symlink resumed>) = 0 [pid 6021] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6019] <... exit_group resumed>) = ? [pid 6021] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... openat resumed>) = 4 [ 169.950870][ T28] audit: type=1800 audit(1710613052.044:929): pid=6019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop2" ino=20 res=0 errno=0 [pid 6023] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6022] <... close resumed>) = 0 [pid 6021] close(5 [pid 6019] +++ exited with 0 +++ [pid 5078] newfstatat(AT_FDCWD, "./155/binderfs", [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6019, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] umount2("./153", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./153", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5075] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6022] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] unlink("./155/binderfs" [pid 5073] newfstatat(4, "", [pid 5078] <... unlink resumed>) = 0 [pid 5078] getdents64(3, [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] getdents64(4, [pid 5078] close(3 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6023] <... creat resumed>) = 4 [pid 5078] <... close resumed>) = 0 [pid 6022] <... open resumed>) = 5 [pid 5078] rmdir("./155" [pid 5073] getdents64(4, [pid 6023] rename("./bus", "./file2" [pid 5078] <... rmdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 6023] <... rename resumed>) = -1 EEXIST (File exists) [pid 6022] ftruncate(5, 0 [pid 6021] <... close resumed>) = 0 [pid 5075] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6023] memfd_create("syzkaller", 0) = 5 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6023] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6022] <... ftruncate resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./153/bus", [pid 6023] <... mmap resumed>) = 0x7f0356e00000 [pid 6022] exit_group(0 [pid 6021] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6023] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] mkdir("./156", 0777 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] close(4 [pid 5075] openat(AT_FDCWD, "./153/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... mkdir resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 5073] <... close resumed>) = 0 [pid 5075] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6022] <... exit_group resumed>) = ? [pid 5073] rmdir("./153/bus" [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] getdents64(4, [pid 6023] <... write resumed>) = 524288 [pid 6022] +++ exited with 0 +++ [pid 6021] <... open resumed>) = 5 [pid 5078] <... openat resumed>) = 3 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] <... rmdir resumed>) = 0 [pid 5075] getdents64(4, [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6022, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] umount2("./155", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] close(4 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... close resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./155", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5075] rmdir("./153/bus" [pid 5077] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5077] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] umount2("./155/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./153/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./153/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./153/binderfs") = 0 [pid 5075] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 5075] rmdir("./153" [pid 6023] munmap(0x7f0356e00000, 138412032) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5075] mkdir("./154", 0777 [pid 6023] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] <... mkdir resumed>) = 0 [ 170.023149][ T28] audit: type=1800 audit(1710613052.124:930): pid=6022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop4" ino=20 res=0 errno=0 [pid 6023] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6023] close(5 [pid 5075] <... openat resumed>) = 3 [pid 6023] <... close resumed>) = 0 [pid 6021] ftruncate(5, 0 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5073] umount2("./153/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6021] <... ftruncate resumed>) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5077] umount2("./155/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6021] exit_group(0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./153/binderfs", [pid 6023] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6021] <... exit_group resumed>) = ? [pid 5077] newfstatat(AT_FDCWD, "./155/bus", [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] umount2("./155/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./155/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6023] <... open resumed>) = 5 [pid 6021] +++ exited with 0 +++ [pid 5073] unlink("./153/binderfs" [pid 5077] <... openat resumed>) = 4 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6021, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5077] newfstatat(4, "", [pid 5074] umount2("./153", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./153", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5077] getdents64(4, [pid 5074] newfstatat(3, "", [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] getdents64(4, [pid 5074] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] close(4) = 0 [pid 6023] ftruncate(5, 0 [pid 5073] <... unlink resumed>) = 0 [pid 6023] <... ftruncate resumed>) = 0 [pid 5077] rmdir("./155/bus" [pid 5073] getdents64(3, [pid 6023] exit_group(0 [pid 5077] <... rmdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 6023] <... exit_group resumed>) = ? [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] umount2("./155/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6023] +++ exited with 0 +++ [pid 5074] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] close(3 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6023, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5077] newfstatat(AT_FDCWD, "./155/binderfs", [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... close resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] rmdir("./153" [pid 5074] newfstatat(AT_FDCWD, "./153/bus", [pid 5077] unlink("./155/binderfs" [pid 5076] umount2("./156", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... unlink resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... rmdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./156", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] getdents64(3, [pid 5075] <... ioctl resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] mkdir("./154", 0777 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5075] close(3 [pid 5074] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... mkdir resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] openat(AT_FDCWD, "./153/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6024 attached [pid 5078] <... ioctl resumed>) = 0 [pid 5077] close(3 [pid 5076] newfstatat(3, "", [pid 5074] <... openat resumed>) = 4 [ 170.054219][ T28] audit: type=1800 audit(1710613052.154:931): pid=6021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 170.088219][ T28] audit: type=1800 audit(1710613052.194:932): pid=6023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop3" ino=20 res=0 errno=0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6024] set_robust_list(0x55556e32a660, 24 [pid 5077] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6024 [pid 5074] newfstatat(4, "", [pid 6024] <... set_robust_list resumed>) = 0 [pid 5078] close(3 [pid 5077] rmdir("./155" [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6024] chdir("./154" [pid 5078] <... close resumed>) = 0 [pid 5074] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] getdents64(4, [pid 5077] <... rmdir resumed>) = 0 [pid 5076] getdents64(3, [pid 5077] mkdir("./156", 0777 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] <... mkdir resumed>) = 0 [pid 5076] umount2("./156/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6024] <... chdir resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6024] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] close(4./strace-static-x86_64: Process 6025 attached [pid 5077] <... openat resumed>) = 3 [pid 6025] set_robust_list(0x55556e32a660, 24 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 6024] <... prctl resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6025 [pid 6025] <... set_robust_list resumed>) = 0 [pid 6024] setpgid(0, 0 [pid 5074] rmdir("./153/bus" [pid 6025] chdir("./156" [pid 5074] <... rmdir resumed>) = 0 [pid 6025] <... chdir resumed>) = 0 [pid 6024] <... setpgid resumed>) = 0 [pid 5074] umount2("./153/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6025] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] <... umount2 resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6025] <... prctl resumed>) = 0 [pid 6025] setpgid(0, 0 [pid 6024] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] newfstatat(AT_FDCWD, "./153/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6025] <... setpgid resumed>) = 0 [pid 5074] unlink("./153/binderfs" [pid 6025] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] <... unlink resumed>) = 0 [pid 6025] <... openat resumed>) = 3 [pid 6025] write(3, "1000", 4 [pid 5074] getdents64(3, [pid 6025] <... write resumed>) = 4 [pid 5076] umount2("./156/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] close(3) = 0 [pid 6025] close(3 [pid 5074] rmdir("./153" [pid 6024] <... openat resumed>) = 3 [pid 6025] <... close resumed>) = 0 [pid 6025] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6024] write(3, "1000", 4 [pid 5076] newfstatat(AT_FDCWD, "./156/bus", [pid 5074] <... rmdir resumed>) = 0 [pid 6024] <... write resumed>) = 4 [pid 6024] close(3 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6024] <... close resumed>) = 0 [pid 6024] symlink("/dev/binderfs", "./binderfs" [pid 5076] umount2("./156/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6025] memfd_create("syzkaller", 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6024] <... symlink resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./156/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6025] <... memfd_create resumed>) = 3 [pid 5074] mkdir("./154", 0777 [pid 5076] <... openat resumed>) = 4 [pid 6025] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6025] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6024] memfd_create("syzkaller", 0 [pid 5076] newfstatat(4, "", [pid 5074] <... mkdir resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 6024] <... memfd_create resumed>) = 3 [pid 6024] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5077] <... ioctl resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6024] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] getdents64(4, [pid 5074] <... openat resumed>) = 3 [pid 5073] close(3 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] <... close resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6026 attached [pid 6025] <... write resumed>) = 524288 [pid 5076] getdents64(4, [pid 6026] set_robust_list(0x55556e32a660, 24 [pid 6025] munmap(0x7f0356e00000, 138412032 [pid 6024] <... write resumed>) = 524288 [pid 5077] close(3 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6026 [pid 6026] <... set_robust_list resumed>) = 0 [pid 6025] <... munmap resumed>) = 0 [pid 6024] munmap(0x7f0356e00000, 138412032 [pid 5077] <... close resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6026] chdir("./154"./strace-static-x86_64: Process 6027 attached [pid 6025] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6027] set_robust_list(0x55556e32a660, 24 [pid 6026] <... chdir resumed>) = 0 [pid 6025] <... openat resumed>) = 4 [pid 6024] <... munmap resumed>) = 0 [pid 5076] close(4 [pid 6027] <... set_robust_list resumed>) = 0 [pid 6026] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6025] ioctl(4, LOOP_SET_FD, 3 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6027 [pid 5076] <... close resumed>) = 0 [pid 6027] chdir("./156" [pid 6026] <... prctl resumed>) = 0 [pid 6024] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] rmdir("./156/bus" [pid 6026] setpgid(0, 0 [pid 6027] <... chdir resumed>) = 0 [pid 6026] <... setpgid resumed>) = 0 [pid 6025] <... ioctl resumed>) = 0 [pid 6024] <... openat resumed>) = 4 [pid 5076] <... rmdir resumed>) = 0 [pid 6027] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6026] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6025] close(3 [pid 6024] ioctl(4, LOOP_SET_FD, 3 [pid 5076] umount2("./156/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6027] <... prctl resumed>) = 0 [pid 6026] <... openat resumed>) = 3 [pid 6026] write(3, "1000", 4) = 4 [pid 6027] setpgid(0, 0 [pid 6025] <... close resumed>) = 0 [pid 6024] <... ioctl resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... ioctl resumed>) = 0 [pid 6027] <... setpgid resumed>) = 0 [pid 6026] close(3 [pid 6025] close(4 [pid 6024] close(3 [pid 5076] newfstatat(AT_FDCWD, "./156/binderfs", [pid 6026] <... close resumed>) = 0 [pid 5074] close(3) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6027] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6026] symlink("/dev/binderfs", "./binderfs" [pid 6025] <... close resumed>) = 0 [pid 6024] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6028 ./strace-static-x86_64: Process 6028 attached [pid 6028] set_robust_list(0x55556e32a660, 24 [pid 6027] <... openat resumed>) = 3 [pid 6026] <... symlink resumed>) = 0 [pid 6025] mkdir("./bus", 0777 [pid 6024] close(4 [pid 5076] unlink("./156/binderfs" [pid 6028] <... set_robust_list resumed>) = 0 [pid 6028] chdir("./154") = 0 [pid 6028] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6025] <... mkdir resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 6028] <... prctl resumed>) = 0 [pid 6028] setpgid(0, 0) = 0 [ 170.247676][ T6025] loop5: detected capacity change from 0 to 1024 [ 170.263514][ T6024] loop2: detected capacity change from 0 to 1024 [pid 6028] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6024] <... close resumed>) = 0 [pid 6028] <... openat resumed>) = 3 [pid 6027] write(3, "1000", 4 [pid 6024] mkdir("./bus", 0777 [pid 5076] getdents64(3, [pid 6028] write(3, "1000", 4) = 4 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6028] close(3 [pid 6026] memfd_create("syzkaller", 0 [pid 6028] <... close resumed>) = 0 [pid 6028] symlink("/dev/binderfs", "./binderfs" [pid 6027] <... write resumed>) = 4 [pid 5076] close(3 [pid 6027] close(3 [pid 6028] <... symlink resumed>) = 0 [pid 6027] <... close resumed>) = 0 [pid 6026] <... memfd_create resumed>) = 3 [pid 6025] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5076] <... close resumed>) = 0 [pid 6024] <... mkdir resumed>) = 0 [pid 6028] memfd_create("syzkaller", 0 [pid 5076] rmdir("./156" [pid 6026] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6028] <... memfd_create resumed>) = 3 [pid 6026] <... mmap resumed>) = 0x7f0356e00000 [pid 6028] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5076] <... rmdir resumed>) = 0 [pid 6024] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6027] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6027] memfd_create("syzkaller", 0 [pid 5076] mkdir("./157", 0777) = 0 [pid 6028] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6027] <... memfd_create resumed>) = 3 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6027] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6026] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... openat resumed>) = 3 [pid 6027] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6027] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6025] <... mount resumed>) = 0 [pid 6024] <... mount resumed>) = 0 [pid 6025] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6024] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6025] <... openat resumed>) = 3 [pid 6026] <... write resumed>) = 524288 [pid 6025] chdir("./bus" [pid 6024] <... openat resumed>) = 3 [pid 6025] <... chdir resumed>) = 0 [pid 6024] chdir("./bus") = 0 [pid 6024] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6028] <... write resumed>) = 524288 [pid 6027] <... write resumed>) = 524288 [pid 6026] munmap(0x7f0356e00000, 138412032 [pid 6025] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6024] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6028] munmap(0x7f0356e00000, 138412032 [pid 6027] munmap(0x7f0356e00000, 138412032 [pid 6026] <... munmap resumed>) = 0 [pid 6024] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5076] <... ioctl resumed>) = 0 [pid 6028] <... munmap resumed>) = 0 [pid 6025] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6028] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6025] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5076] close(3 [pid 6028] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6027] <... munmap resumed>) = 0 [pid 6026] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6024] <... symlink resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6026] <... openat resumed>) = 4 [pid 6027] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6026] ioctl(4, LOOP_SET_FD, 3 [pid 6024] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6029 attached [pid 6027] <... openat resumed>) = 4 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6029 [pid 6025] <... symlink resumed>) = 0 [pid 6025] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6029] set_robust_list(0x55556e32a660, 24 [pid 6027] ioctl(4, LOOP_SET_FD, 3 [pid 6025] <... creat resumed>) = 4 [pid 6029] <... set_robust_list resumed>) = 0 [pid 6025] rename("./bus", "./file2" [pid 6029] chdir("./157" [pid 6025] <... rename resumed>) = -1 EEXIST (File exists) [pid 6025] memfd_create("syzkaller", 0 [pid 6028] close(3 [pid 6025] <... memfd_create resumed>) = 5 [pid 6029] <... chdir resumed>) = 0 [pid 6028] <... close resumed>) = 0 [pid 6025] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6024] <... creat resumed>) = 4 [pid 6029] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6026] <... ioctl resumed>) = 0 [pid 6029] <... prctl resumed>) = 0 [pid 6026] close(3 [pid 6024] rename("./bus", "./file2" [pid 6025] <... mmap resumed>) = 0x7f0356e00000 [pid 6026] <... close resumed>) = 0 [pid 6026] close(4) = 0 [pid 6029] setpgid(0, 0) = 0 [pid 6028] close(4 [pid 6027] <... ioctl resumed>) = 0 [pid 6026] mkdir("./bus", 0777 [pid 6025] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6024] <... rename resumed>) = -1 EEXIST (File exists) [pid 6027] close(3) = 0 [pid 6027] close(4) = 0 [pid 6027] mkdir("./bus", 0777 [pid 6028] <... close resumed>) = 0 [pid 6028] mkdir("./bus", 0777 [pid 6027] <... mkdir resumed>) = 0 [pid 6029] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6028] <... mkdir resumed>) = 0 [pid 6027] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6026] <... mkdir resumed>) = 0 [pid 6024] memfd_create("syzkaller", 0 [pid 6029] <... openat resumed>) = 3 [pid 6028] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6026] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6029] write(3, "1000", 4 [pid 6027] <... mount resumed>) = 0 [pid 6024] <... memfd_create resumed>) = 5 [pid 6029] <... write resumed>) = 4 [pid 6027] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6024] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6027] <... openat resumed>) = 3 [pid 6025] <... write resumed>) = 524288 [pid 6024] <... mmap resumed>) = 0x7f0356e00000 [ 170.368232][ T6028] loop1: detected capacity change from 0 to 1024 [ 170.382095][ T6026] loop0: detected capacity change from 0 to 1024 [ 170.394410][ T6027] loop4: detected capacity change from 0 to 1024 [pid 6025] munmap(0x7f0356e00000, 138412032 [pid 6027] chdir("./bus" [pid 6025] <... munmap resumed>) = 0 [pid 6027] <... chdir resumed>) = 0 [pid 6027] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6029] close(3) = 0 [pid 6027] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6024] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6028] <... mount resumed>) = 0 [pid 6025] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6028] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6025] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6028] <... openat resumed>) = 3 [pid 6025] close(5 [pid 6028] chdir("./bus") = 0 [pid 6028] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6028] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6027] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6029] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6027] <... symlink resumed>) = 0 [pid 6026] <... mount resumed>) = 0 [pid 6025] <... close resumed>) = 0 [pid 6028] <... symlink resumed>) = 0 [pid 6026] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6024] <... write resumed>) = 524288 [pid 6029] memfd_create("syzkaller", 0 [pid 6027] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6026] <... openat resumed>) = 3 [pid 6024] munmap(0x7f0356e00000, 138412032 [pid 6028] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6029] <... memfd_create resumed>) = 3 [pid 6028] <... creat resumed>) = 4 [pid 6027] <... creat resumed>) = 4 [pid 6026] chdir("./bus" [pid 6024] <... munmap resumed>) = 0 [pid 6029] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6027] rename("./bus", "./file2" [pid 6026] <... chdir resumed>) = 0 [pid 6024] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6029] <... mmap resumed>) = 0x7f0356e00000 [pid 6028] rename("./bus", "./file2" [pid 6026] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6024] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6027] <... rename resumed>) = -1 EEXIST (File exists) [pid 6025] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6028] <... rename resumed>) = -1 EEXIST (File exists) [pid 6027] memfd_create("syzkaller", 0 [pid 6026] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6024] close(5 [pid 6028] memfd_create("syzkaller", 0 [pid 6027] <... memfd_create resumed>) = 5 [pid 6026] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6024] <... close resumed>) = 0 [pid 6029] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6028] <... memfd_create resumed>) = 5 [pid 6027] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6028] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6027] <... mmap resumed>) = 0x7f0356e00000 [pid 6026] <... symlink resumed>) = 0 [pid 6028] <... mmap resumed>) = 0x7f0356e00000 [pid 6027] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6026] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6025] <... open resumed>) = 5 [pid 6025] ftruncate(5, 0) = 0 [pid 6028] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6025] exit_group(0 [pid 6024] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6029] <... write resumed>) = 524288 [pid 6028] <... write resumed>) = 524288 [pid 6025] <... exit_group resumed>) = ? [pid 6029] munmap(0x7f0356e00000, 138412032 [pid 6025] +++ exited with 0 +++ [pid 6029] <... munmap resumed>) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6025, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [ 170.515493][ T28] audit: type=1800 audit(1710613052.614:933): pid=6025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop5" ino=20 res=0 errno=0 [pid 6029] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6027] <... write resumed>) = 524288 [pid 6026] <... creat resumed>) = 4 [pid 6024] <... open resumed>) = 5 [pid 5078] umount2("./156", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./156", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5078] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(3, [pid 6029] <... openat resumed>) = 4 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6026] rename("./bus", "./file2" [pid 6029] ioctl(4, LOOP_SET_FD, 3 [pid 6027] munmap(0x7f0356e00000, 138412032 [pid 6024] ftruncate(5, 0) = 0 [pid 5078] umount2("./156/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6029] <... ioctl resumed>) = 0 [pid 6028] munmap(0x7f0356e00000, 138412032 [pid 6027] <... munmap resumed>) = 0 [pid 6026] <... rename resumed>) = -1 EEXIST (File exists) [pid 6024] exit_group(0 [pid 6027] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6026] memfd_create("syzkaller", 0 [pid 6024] <... exit_group resumed>) = ? [pid 6029] close(3 [pid 6028] <... munmap resumed>) = 0 [pid 6027] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6026] <... memfd_create resumed>) = 5 [pid 6024] +++ exited with 0 +++ [pid 6029] <... close resumed>) = 0 [pid 6027] close(5 [pid 6026] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... umount2 resumed>) = 0 [pid 5078] umount2("./156/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6028] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6024, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 6028] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6026] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] newfstatat(AT_FDCWD, "./156/bus", [pid 5075] <... restart_syscall resumed>) = 0 [pid 6028] close(5 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6028] <... close resumed>) = 0 [pid 5078] umount2("./156/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./154", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] openat(AT_FDCWD, "./156/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6029] close(4 [pid 6028] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6027] <... close resumed>) = 0 [pid 6026] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... openat resumed>) = 4 [ 170.551825][ T28] audit: type=1800 audit(1710613052.654:934): pid=6024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 170.577186][ T6029] loop3: detected capacity change from 0 to 1024 [pid 5075] openat(AT_FDCWD, "./154", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6029] <... close resumed>) = 0 [pid 6027] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] newfstatat(4, "", [pid 5075] <... openat resumed>) = 3 [pid 6029] mkdir("./bus", 0777 [pid 6028] <... open resumed>) = 5 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6029] <... mkdir resumed>) = 0 [pid 5078] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5078] close(4) = 0 [pid 5078] rmdir("./156/bus" [pid 6028] ftruncate(5, 0 [pid 5078] <... rmdir resumed>) = 0 [pid 6029] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6028] <... ftruncate resumed>) = 0 [pid 6028] exit_group(0 [pid 5078] umount2("./156/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6028] <... exit_group resumed>) = ? [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] newfstatat(AT_FDCWD, "./156/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, [pid 6028] +++ exited with 0 +++ [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6028, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5074] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5074] umount2("./154", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6026] <... write resumed>) = 524288 [pid 6026] munmap(0x7f0356e00000, 138412032 [pid 5074] openat(AT_FDCWD, "./154", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5078] unlink("./156/binderfs" [pid 5074] newfstatat(3, "", [pid 6026] <... munmap resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6026] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5078] getdents64(3, [pid 6026] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] getdents64(3, [pid 5078] close(3 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] <... close resumed>) = 0 [pid 5074] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6026] close(5 [pid 6027] <... open resumed>) = 5 [ 170.623935][ T28] audit: type=1800 audit(1710613052.724:935): pid=6028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop1" ino=20 res=0 errno=0 [pid 6027] ftruncate(5, 0 [pid 5078] rmdir("./156" [pid 6029] <... mount resumed>) = 0 [pid 6027] <... ftruncate resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 6029] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6027] exit_group(0 [pid 6029] <... openat resumed>) = 3 [pid 6027] <... exit_group resumed>) = ? [pid 6026] <... close resumed>) = 0 [pid 5078] mkdir("./157", 0777 [pid 5075] <... umount2 resumed>) = 0 [pid 5075] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./154/bus", [pid 6026] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] <... mkdir resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./154/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5078] <... openat resumed>) = 3 [pid 5075] newfstatat(4, "", [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6026] <... open resumed>) = 5 [pid 5075] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] close(4) = 0 [pid 5075] rmdir("./154/bus" [pid 6026] ftruncate(5, 0 [pid 5075] <... rmdir resumed>) = 0 [pid 6026] <... ftruncate resumed>) = 0 [pid 5075] umount2("./154/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./154/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./154/binderfs") = 0 [pid 6027] +++ exited with 0 +++ [pid 6026] exit_group(0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6027, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5077] umount2("./156", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6026] <... exit_group resumed>) = ? [pid 6029] chdir("./bus" [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./156", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5077] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] getdents64(3, [pid 5077] umount2("./156/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6029] <... chdir resumed>) = 0 [pid 6026] +++ exited with 0 +++ [pid 5075] close(3 [pid 6029] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./154" [pid 6029] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6026, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6029] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5075] <... rmdir resumed>) = 0 [pid 5075] mkdir("./155", 0777 [pid 6029] <... symlink resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 6029] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5073] umount2("./154", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... openat resumed>) = 3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5073] openat(AT_FDCWD, "./154", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6029] <... creat resumed>) = 4 [pid 6029] rename("./bus", "./file2" [pid 5074] <... umount2 resumed>) = 0 [pid 6029] <... rename resumed>) = -1 EEXIST (File exists) [pid 5077] <... umount2 resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 6029] memfd_create("syzkaller", 0 [pid 5077] umount2("./156/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6029] <... memfd_create resumed>) = 5 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6029] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] newfstatat(AT_FDCWD, "./156/bus", [pid 5074] newfstatat(AT_FDCWD, "./154/bus", [pid 6029] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] umount2("./156/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./156/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... openat resumed>) = 4 [ 170.665695][ T28] audit: type=1800 audit(1710613052.764:936): pid=6027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop4" ino=20 res=0 errno=0 [pid 5077] newfstatat(4, "", [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] openat(AT_FDCWD, "./154/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] getdents64(4, [pid 5073] newfstatat(AT_FDCWD, "./154/bus", [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] <... openat resumed>) = 4 [pid 5077] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] newfstatat(4, "", [pid 5077] close(4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] <... close resumed>) = 0 [pid 5074] getdents64(4, [pid 6029] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... ioctl resumed>) = 0 [pid 5077] rmdir("./156/bus" [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] close(3) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6030 attached [pid 6029] <... write resumed>) = 524288 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6030 [pid 5075] <... ioctl resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6030] set_robust_list(0x55556e32a660, 24 [pid 5075] close(3 [pid 6030] <... set_robust_list resumed>) = 0 [pid 5077] umount2("./156/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] getdents64(4, [pid 5075] <... close resumed>) = 0 [pid 6030] chdir("./157" [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6030] <... chdir resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./154/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6030] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6029] munmap(0x7f0356e00000, 138412032 [pid 5077] newfstatat(AT_FDCWD, "./156/binderfs", [pid 5074] close(4 [pid 5073] newfstatat(4, "", [pid 6030] <... prctl resumed>) = 0 [pid 6029] <... munmap resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6031 [pid 5074] <... close resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 6031 attached [pid 6030] setpgid(0, 0 [pid 5077] unlink("./156/binderfs" [pid 5074] rmdir("./154/bus" [pid 6030] <... setpgid resumed>) = 0 [pid 5073] getdents64(4, [pid 6029] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5077] <... unlink resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 6030] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6031] set_robust_list(0x55556e32a660, 24 [pid 6029] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] umount2("./154/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6031] <... set_robust_list resumed>) = 0 [pid 6030] <... openat resumed>) = 3 [pid 6029] close(5 [pid 5077] getdents64(3, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] getdents64(4, [pid 6031] chdir("./155" [pid 6030] write(3, "1000", 4 [pid 6029] <... close resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] newfstatat(AT_FDCWD, "./154/binderfs", [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6031] <... chdir resumed>) = 0 [pid 6030] <... write resumed>) = 4 [pid 6031] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6030] close(3 [pid 5077] close(3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] close(4 [pid 6031] <... prctl resumed>) = 0 [pid 6030] <... close resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5074] unlink("./154/binderfs" [pid 5073] <... close resumed>) = 0 [pid 6031] setpgid(0, 0 [pid 6030] symlink("/dev/binderfs", "./binderfs" [pid 5073] rmdir("./154/bus" [pid 6030] <... symlink resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 6031] <... setpgid resumed>) = 0 [pid 6030] memfd_create("syzkaller", 0 [pid 5077] rmdir("./156" [pid 5074] getdents64(3, [pid 5073] <... rmdir resumed>) = 0 [pid 6031] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5077] <... rmdir resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] umount2("./154/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6030] <... memfd_create resumed>) = 3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] close(3 [pid 5073] newfstatat(AT_FDCWD, "./154/binderfs", [pid 6031] <... openat resumed>) = 3 [pid 6029] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6030] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... close resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] mkdir("./157", 0777 [pid 5073] unlink("./154/binderfs") = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 5073] getdents64(3, [pid 6031] write(3, "1000", 4 [pid 6030] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6031] <... write resumed>) = 4 [pid 5074] rmdir("./154" [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5073] close(3) = 0 [pid 6031] close(3 [pid 5074] <... rmdir resumed>) = 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 6031] <... close resumed>) = 0 [pid 5074] mkdir("./155", 0777 [pid 6029] <... open resumed>) = 5 [pid 5074] <... mkdir resumed>) = 0 [pid 5073] rmdir("./154" [pid 6029] ftruncate(5, 0 [pid 5073] <... rmdir resumed>) = 0 [pid 6031] symlink("/dev/binderfs", "./binderfs" [pid 5073] mkdir("./155", 0777 [pid 6031] <... symlink resumed>) = 0 [pid 6029] <... ftruncate resumed>) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 6031] memfd_create("syzkaller", 0 [pid 6029] exit_group(0 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6031] <... memfd_create resumed>) = 3 [pid 6029] <... exit_group resumed>) = ? [pid 6031] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6030] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... openat resumed>) = 3 [pid 5073] <... openat resumed>) = 3 [pid 6031] <... mmap resumed>) = 0x7f0356e00000 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6029] +++ exited with 0 +++ [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6029, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5076] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5076] umount2("./157", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./157", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6031] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] umount2("./157/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6030] <... write resumed>) = 524288 [pid 6030] munmap(0x7f0356e00000, 138412032 [pid 5076] <... umount2 resumed>) = 0 [pid 5076] umount2("./157/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./157/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6030] <... munmap resumed>) = 0 [pid 5076] umount2("./157/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6030] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./157/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] newfstatat(4, "", [pid 6031] <... write resumed>) = 524288 [pid 6030] <... openat resumed>) = 4 [pid 5077] <... ioctl resumed>) = 0 [pid 6030] ioctl(4, LOOP_SET_FD, 3 [pid 5077] close(3 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] <... close resumed>) = 0 [pid 5076] getdents64(4, [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] close(4) = 0 [pid 5076] rmdir("./157/bus") = 0 ./strace-static-x86_64: Process 6032 attached [pid 6031] munmap(0x7f0356e00000, 138412032 [pid 6030] <... ioctl resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 6030] close(3 [pid 5076] umount2("./157/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6032] set_robust_list(0x55556e32a660, 24 [pid 6031] <... munmap resumed>) = 0 [pid 6030] <... close resumed>) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6032 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] close(3 [pid 6031] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6032] <... set_robust_list resumed>) = 0 [pid 6031] <... openat resumed>) = 4 [pid 6030] close(4 [pid 6032] chdir("./157" [pid 6031] ioctl(4, LOOP_SET_FD, 3 [pid 6030] <... close resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./157/binderfs", [pid 5074] <... close resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 6032] <... chdir resumed>) = 0 [pid 6030] mkdir("./bus", 0777 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6032] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6030] <... mkdir resumed>) = 0 [pid 5076] unlink("./157/binderfs" [pid 6032] <... prctl resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 6032] setpgid(0, 0 [pid 5076] getdents64(3, [pid 6032] <... setpgid resumed>) = 0 [pid 6030] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6032] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] close(3) = 0 [pid 5076] rmdir("./157") = 0 [pid 6032] <... openat resumed>) = 3 [pid 5076] mkdir("./158", 0777 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... mkdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 6032] write(3, "1000", 4 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6032] <... write resumed>) = 4 [pid 6032] close(3) = 0 [pid 6032] symlink("/dev/binderfs", "./binderfs" [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6033 ./strace-static-x86_64: Process 6033 attached [pid 6033] set_robust_list(0x55556e32a660, 24 [pid 6032] <... symlink resumed>) = 0 [pid 6031] <... ioctl resumed>) = 0 [pid 5073] close(3 [pid 6033] <... set_robust_list resumed>) = 0 [pid 6031] close(3 [pid 5073] <... close resumed>) = 0 [pid 6033] chdir("./155" [pid 6031] <... close resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6031] close(4 [pid 6032] memfd_create("syzkaller", 0) = 3 [pid 6031] <... close resumed>) = 0 [pid 6033] <... chdir resumed>) = 0 [pid 6031] mkdir("./bus", 0777 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6034 [pid 6033] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6032] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6031] <... mkdir resumed>) = 0 [pid 6030] <... mount resumed>) = 0 [pid 6033] setpgid(0, 0 [pid 6032] <... mmap resumed>) = 0x7f0356e00000 [pid 6031] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6030] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6033] <... setpgid resumed>) = 0 [pid 6032] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6030] <... openat resumed>) = 3 [pid 6031] <... mount resumed>) = 0 ./strace-static-x86_64: Process 6034 attached [pid 6031] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6030] chdir("./bus" [pid 6034] set_robust_list(0x55556e32a660, 24 [pid 6033] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6031] <... openat resumed>) = 3 [pid 6030] <... chdir resumed>) = 0 [pid 6034] <... set_robust_list resumed>) = 0 [pid 6030] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6034] chdir("./155" [pid 6033] <... openat resumed>) = 3 [pid 6031] chdir("./bus" [pid 6030] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6034] <... chdir resumed>) = 0 [pid 6033] write(3, "1000", 4 [pid 6031] <... chdir resumed>) = 0 [pid 6030] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6034] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6033] <... write resumed>) = 4 [pid 6031] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6034] <... prctl resumed>) = 0 [pid 6033] close(3 [pid 6031] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6030] <... symlink resumed>) = 0 [ 170.846055][ T6030] loop5: detected capacity change from 0 to 1024 [ 170.874442][ T6031] loop2: detected capacity change from 0 to 1024 [pid 6034] setpgid(0, 0 [pid 6033] <... close resumed>) = 0 [pid 6031] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6034] <... setpgid resumed>) = 0 [pid 6033] symlink("/dev/binderfs", "./binderfs" [pid 6030] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6034] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6033] <... symlink resumed>) = 0 [pid 6031] <... symlink resumed>) = 0 [pid 6034] <... openat resumed>) = 3 [pid 6033] memfd_create("syzkaller", 0 [pid 6031] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6034] write(3, "1000", 4) = 4 [pid 6034] close(3) = 0 [pid 6030] <... creat resumed>) = 4 [pid 6034] symlink("/dev/binderfs", "./binderfs" [pid 6030] rename("./bus", "./file2" [pid 6034] <... symlink resumed>) = 0 [pid 6033] <... memfd_create resumed>) = 3 [pid 6031] <... creat resumed>) = 4 [pid 6030] <... rename resumed>) = -1 EEXIST (File exists) [pid 6033] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6030] memfd_create("syzkaller", 0 [pid 6034] memfd_create("syzkaller", 0 [pid 6033] <... mmap resumed>) = 0x7f0356e00000 [pid 6031] rename("./bus", "./file2" [pid 6030] <... memfd_create resumed>) = 5 [pid 6034] <... memfd_create resumed>) = 3 [pid 6032] <... write resumed>) = 524288 [pid 6030] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... ioctl resumed>) = 0 [pid 6034] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6030] <... mmap resumed>) = 0x7f0356e00000 [pid 6034] <... mmap resumed>) = 0x7f0356e00000 [pid 6030] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6034] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6032] munmap(0x7f0356e00000, 138412032 [pid 5076] close(3) = 0 [pid 6032] <... munmap resumed>) = 0 [pid 6033] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6035 attached [pid 6033] <... write resumed>) = 524288 [pid 6032] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6031] <... rename resumed>) = -1 EEXIST (File exists) [pid 6030] <... write resumed>) = 524288 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6035 [pid 6035] set_robust_list(0x55556e32a660, 24 [pid 6032] <... openat resumed>) = 4 [pid 6035] <... set_robust_list resumed>) = 0 [pid 6034] <... write resumed>) = 524288 [pid 6032] ioctl(4, LOOP_SET_FD, 3 [pid 6031] memfd_create("syzkaller", 0 [pid 6035] chdir("./158" [pid 6031] <... memfd_create resumed>) = 5 [pid 6033] munmap(0x7f0356e00000, 138412032 [pid 6031] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6035] <... chdir resumed>) = 0 [pid 6034] munmap(0x7f0356e00000, 138412032 [pid 6031] <... mmap resumed>) = 0x7f0356e00000 [pid 6035] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6034] <... munmap resumed>) = 0 [pid 6035] <... prctl resumed>) = 0 [pid 6035] setpgid(0, 0 [pid 6033] <... munmap resumed>) = 0 [pid 6035] <... setpgid resumed>) = 0 [pid 6035] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6031] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6034] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6035] write(3, "1000", 4 [pid 6034] <... openat resumed>) = 4 [pid 6033] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6030] munmap(0x7f0356e00000, 138412032 [pid 6035] <... write resumed>) = 4 [pid 6034] ioctl(4, LOOP_SET_FD, 3 [pid 6033] <... openat resumed>) = 4 [pid 6030] <... munmap resumed>) = 0 [pid 6035] close(3 [pid 6033] ioctl(4, LOOP_SET_FD, 3 [pid 6035] <... close resumed>) = 0 [pid 6031] <... write resumed>) = 524288 [pid 6030] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6035] symlink("/dev/binderfs", "./binderfs" [pid 6030] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6035] <... symlink resumed>) = 0 [pid 6030] close(5) = 0 [pid 6035] memfd_create("syzkaller", 0 [pid 6032] <... ioctl resumed>) = 0 [pid 6033] <... ioctl resumed>) = 0 [pid 6032] close(3 [pid 6035] <... memfd_create resumed>) = 3 [pid 6032] <... close resumed>) = 0 [pid 6035] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6032] close(4 [pid 6035] <... mmap resumed>) = 0x7f0356e00000 [pid 6032] <... close resumed>) = 0 [pid 6035] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6032] mkdir("./bus", 0777) = 0 [pid 6031] munmap(0x7f0356e00000, 138412032 [pid 6032] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6031] <... munmap resumed>) = 0 [pid 6030] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6034] <... ioctl resumed>) = 0 [pid 6030] <... open resumed>) = 5 [pid 6034] close(3 [pid 6033] close(3 [pid 6031] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6030] ftruncate(5, 0 [pid 6034] <... close resumed>) = 0 [pid 6033] <... close resumed>) = 0 [pid 6031] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6030] <... ftruncate resumed>) = 0 [pid 6033] close(4 [pid 6031] close(5 [pid 6030] exit_group(0 [pid 6033] <... close resumed>) = 0 [pid 6034] close(4) = 0 [pid 6034] mkdir("./bus", 0777 [pid 6030] <... exit_group resumed>) = ? [pid 6033] mkdir("./bus", 0777 [pid 6032] <... mount resumed>) = 0 [pid 6032] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6033] <... mkdir resumed>) = 0 [pid 6033] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6034] <... mkdir resumed>) = 0 [pid 6030] +++ exited with 0 +++ [pid 6034] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6032] <... openat resumed>) = 3 [pid 6031] <... close resumed>) = 0 [pid 6032] chdir("./bus" [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6030, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6034] <... mount resumed>) = 0 [ 170.974305][ T6032] loop4: detected capacity change from 0 to 1024 [ 170.992260][ T6034] loop0: detected capacity change from 0 to 1024 [ 170.999788][ T6033] loop1: detected capacity change from 0 to 1024 [pid 6032] <... chdir resumed>) = 0 [pid 6031] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] umount2("./157", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6034] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6032] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6035] <... write resumed>) = 524288 [pid 6034] <... openat resumed>) = 3 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6034] chdir("./bus" [pid 5078] openat(AT_FDCWD, "./157", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5078] newfstatat(3, "", [pid 6034] <... chdir resumed>) = 0 [pid 6032] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6035] munmap(0x7f0356e00000, 138412032 [pid 6034] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6032] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] getdents64(3, [pid 6035] <... munmap resumed>) = 0 [pid 6034] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6033] <... mount resumed>) = 0 [pid 6031] <... open resumed>) = 5 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6035] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6034] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6033] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6032] <... symlink resumed>) = 0 [pid 6031] ftruncate(5, 0 [pid 5078] umount2("./157/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6035] <... openat resumed>) = 4 [pid 6034] <... symlink resumed>) = 0 [pid 6033] <... openat resumed>) = 3 [pid 6032] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6035] ioctl(4, LOOP_SET_FD, 3 [pid 6033] chdir("./bus" [pid 6031] <... ftruncate resumed>) = 0 [pid 6033] <... chdir resumed>) = 0 [pid 6031] exit_group(0 [pid 6034] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6033] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6031] <... exit_group resumed>) = ? [pid 6033] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6031] +++ exited with 0 +++ [pid 6033] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6031, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6034] <... creat resumed>) = 4 [pid 6032] <... creat resumed>) = 4 [pid 6034] rename("./bus", "./file2" [pid 5075] umount2("./155", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./155", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6033] <... symlink resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 6034] <... rename resumed>) = -1 EEXIST (File exists) [pid 6033] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6032] rename("./bus", "./file2" [pid 5075] newfstatat(3, "", [pid 6032] <... rename resumed>) = -1 EEXIST (File exists) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6032] memfd_create("syzkaller", 0) = 5 [pid 6032] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6034] memfd_create("syzkaller", 0 [pid 6032] <... mmap resumed>) = 0x7f0356e00000 [pid 6034] <... memfd_create resumed>) = 5 [pid 6034] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] getdents64(3, [pid 6035] <... ioctl resumed>) = 0 [pid 6034] <... mmap resumed>) = 0x7f0356e00000 [pid 6035] close(3 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6035] <... close resumed>) = 0 [pid 6033] <... creat resumed>) = 4 [pid 5078] <... umount2 resumed>) = 0 [pid 5075] umount2("./155/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6035] close(4 [pid 5078] umount2("./157/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6035] <... close resumed>) = 0 [pid 6033] rename("./bus", "./file2" [pid 6032] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6035] mkdir("./bus", 0777) = 0 [ 171.076314][ T6035] loop3: detected capacity change from 0 to 1024 [pid 6034] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6033] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] newfstatat(AT_FDCWD, "./157/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] umount2("./157/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6035] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6034] <... write resumed>) = 524288 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6032] <... write resumed>) = 524288 [pid 5078] openat(AT_FDCWD, "./157/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6033] memfd_create("syzkaller", 0) = 5 [pid 5078] <... openat resumed>) = 4 [pid 5078] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6033] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6033] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, [pid 6035] <... mount resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6035] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] close(4 [pid 6035] <... openat resumed>) = 3 [pid 5078] <... close resumed>) = 0 [pid 6035] chdir("./bus" [pid 5078] rmdir("./157/bus" [pid 6035] <... chdir resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 6035] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5078] umount2("./157/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6035] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6034] munmap(0x7f0356e00000, 138412032 [pid 6032] munmap(0x7f0356e00000, 138412032 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6035] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6034] <... munmap resumed>) = 0 [pid 6032] <... munmap resumed>) = 0 [pid 5078] newfstatat(AT_FDCWD, "./157/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] unlink("./157/binderfs" [pid 6034] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5078] <... unlink resumed>) = 0 [pid 6035] <... symlink resumed>) = 0 [pid 6034] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6032] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6035] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6032] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6032] close(5 [pid 6035] <... creat resumed>) = 4 [pid 6034] close(5 [pid 6033] <... write resumed>) = 524288 [pid 6032] <... close resumed>) = 0 [pid 5078] getdents64(3, [pid 5075] <... umount2 resumed>) = 0 [pid 6035] rename("./bus", "./file2" [pid 6034] <... close resumed>) = 0 [pid 6033] munmap(0x7f0356e00000, 138412032 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5078] close(3 [pid 6033] <... munmap resumed>) = 0 [pid 5075] umount2("./155/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6035] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] <... close resumed>) = 0 [pid 6035] memfd_create("syzkaller", 0 [pid 5078] rmdir("./157" [pid 6035] <... memfd_create resumed>) = 5 [pid 5078] <... rmdir resumed>) = 0 [pid 6035] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] mkdir("./158", 0777 [pid 6035] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... mkdir resumed>) = 0 [pid 6035] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6033] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6033] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6032] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] newfstatat(AT_FDCWD, "./155/bus", [pid 6033] close(5 [pid 6034] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6033] <... close resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] ioctl(3, LOOP_CLR_FD) = 0 [pid 5075] umount2("./155/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] close(3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6034] <... open resumed>) = 5 [pid 6032] <... open resumed>) = 5 [pid 5078] <... close resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./155/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6034] ftruncate(5, 0 [pid 6032] ftruncate(5, 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6035] <... write resumed>) = 524288 [pid 6032] <... ftruncate resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 6034] <... ftruncate resumed>) = 0 [pid 6033] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5075] newfstatat(4, "", [pid 6034] exit_group(0 [pid 6032] exit_group(0 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6036 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6034] <... exit_group resumed>) = ? [pid 5075] getdents64(4, ./strace-static-x86_64: Process 6036 attached [pid 6034] +++ exited with 0 +++ [pid 6032] <... exit_group resumed>) = ? [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6036] set_robust_list(0x55556e32a660, 24 [pid 5075] getdents64(4, [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6034, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6036] <... set_robust_list resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6036] chdir("./158" [pid 6033] <... open resumed>) = 5 [pid 6032] +++ exited with 0 +++ [pid 5075] close(4 [pid 6036] <... chdir resumed>) = 0 [pid 6033] ftruncate(5, 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6032, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5073] umount2("./155", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6036] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6036] <... prctl resumed>) = 0 [pid 6033] <... ftruncate resumed>) = 0 [pid 5075] rmdir("./155/bus" [pid 5073] openat(AT_FDCWD, "./155", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6036] setpgid(0, 0 [pid 5077] umount2("./157", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6035] munmap(0x7f0356e00000, 138412032 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... openat resumed>) = 3 [pid 6036] <... setpgid resumed>) = 0 [pid 6035] <... munmap resumed>) = 0 [pid 6033] exit_group(0 [pid 5077] openat(AT_FDCWD, "./157", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... rmdir resumed>) = 0 [pid 5073] newfstatat(3, "", [pid 6036] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6033] <... exit_group resumed>) = ? [pid 5077] <... openat resumed>) = 3 [pid 6036] <... openat resumed>) = 3 [pid 6035] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5077] newfstatat(3, "", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6036] write(3, "1000", 4 [pid 6035] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6033] +++ exited with 0 +++ [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] umount2("./155/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6036] <... write resumed>) = 4 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6033, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5073] getdents64(3, [pid 6035] close(5 [pid 5077] getdents64(3, [pid 6036] close(3 [pid 6035] <... close resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6036] <... close resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./155/binderfs", [pid 5073] umount2("./155/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6036] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5077] umount2("./157/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6036] memfd_create("syzkaller", 0) = 3 [pid 5077] <... umount2 resumed>) = 0 [pid 6036] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./155", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = 0 [pid 6035] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./155/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6036] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] unlink("./155/binderfs" [pid 5074] openat(AT_FDCWD, "./155", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... unlink resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5073] newfstatat(AT_FDCWD, "./155/bus", [pid 5074] newfstatat(3, "", [pid 5077] umount2("./157/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] umount2("./155/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] getdents64(3, [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./157/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] openat(AT_FDCWD, "./155/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] umount2("./155/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6035] <... open resumed>) = 5 [pid 5077] umount2("./157/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] getdents64(3, [pid 5073] <... openat resumed>) = 4 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./157/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] newfstatat(4, "", [pid 5077] <... openat resumed>) = 4 [pid 5077] newfstatat(4, "", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] close(3 [pid 6035] ftruncate(5, 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, [pid 6035] <... ftruncate resumed>) = 0 [pid 5077] getdents64(4, [pid 5075] <... close resumed>) = 0 [pid 6036] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6035] exit_group(0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] close(4) = 0 [pid 5077] rmdir("./157/bus") = 0 [pid 6035] <... exit_group resumed>) = ? [pid 5077] umount2("./157/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6036] <... write resumed>) = 524288 [pid 6035] +++ exited with 0 +++ [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] rmdir("./155" [pid 5073] getdents64(4, [pid 5077] newfstatat(AT_FDCWD, "./157/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] unlink("./157/binderfs") = 0 [pid 5077] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] close(3) = 0 [pid 5077] rmdir("./157" [pid 5074] <... umount2 resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6035, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] close(4 [pid 5077] <... rmdir resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5077] mkdir("./158", 0777 [pid 5075] <... rmdir resumed>) = 0 [pid 5076] umount2("./158", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] rmdir("./155/bus" [pid 5077] <... mkdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] mkdir("./156", 0777 [pid 5073] <... rmdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./158", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] umount2("./155/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./155/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6036] munmap(0x7f0356e00000, 138412032 [pid 5077] <... openat resumed>) = 3 [pid 5076] <... openat resumed>) = 3 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(3, "", [pid 5074] newfstatat(AT_FDCWD, "./155/bus", [pid 5073] newfstatat(AT_FDCWD, "./155/binderfs", [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] getdents64(3, [pid 5074] umount2("./155/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] unlink("./155/binderfs" [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6036] <... munmap resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... unlink resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5074] openat(AT_FDCWD, "./155/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] getdents64(3, [pid 6036] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] <... openat resumed>) = 4 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6036] <... openat resumed>) = 4 [pid 5074] newfstatat(4, "", [pid 5073] close(3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... close resumed>) = 0 [pid 6036] ioctl(4, LOOP_SET_FD, 3 [pid 5074] getdents64(4, [pid 5073] rmdir("./155" [pid 5076] umount2("./158/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6036] <... ioctl resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6036] close(3 [pid 5074] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6036] <... close resumed>) = 0 [pid 6036] close(4 [pid 5074] close(4) = 0 [pid 6036] <... close resumed>) = 0 [pid 6036] mkdir("./bus", 0777 [pid 5074] rmdir("./155/bus" [pid 6036] <... mkdir resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 6036] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5076] <... umount2 resumed>) = 0 [pid 5074] umount2("./155/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./155/binderfs", [pid 6036] <... mount resumed>) = 0 [pid 5077] <... ioctl resumed>) = 0 [pid 5076] umount2("./158/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 6036] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] unlink("./155/binderfs" [pid 5073] mkdir("./156", 0777 [pid 6036] <... openat resumed>) = 3 [pid 5076] newfstatat(AT_FDCWD, "./158/bus", [pid 5074] <... unlink resumed>) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 6036] chdir("./bus" [pid 5074] getdents64(3, [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] close(3) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6036] <... chdir resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5074] close(3 [pid 6036] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5076] umount2("./158/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6037 ./strace-static-x86_64: Process 6037 attached [pid 6037] set_robust_list(0x55556e32a660, 24) = 0 [pid 6037] chdir("./158" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... openat resumed>) = 3 [pid 6036] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6036] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5074] <... close resumed>) = 0 [pid 6037] <... chdir resumed>) = 0 [pid 6037] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] rmdir("./155" [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5076] openat(AT_FDCWD, "./158/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6037] <... prctl resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5074] <... rmdir resumed>) = 0 [pid 6037] setpgid(0, 0 [pid 6036] <... symlink resumed>) = 0 [pid 5076] newfstatat(4, "", [pid 5075] close(3 [pid 5074] mkdir("./156", 0777 [pid 6037] <... setpgid resumed>) = 0 [pid 6036] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... close resumed>) = 0 [pid 6037] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] <... mkdir resumed>) = 0 [pid 6037] <... openat resumed>) = 3 [pid 5076] getdents64(4, [ 171.339405][ T6036] loop5: detected capacity change from 0 to 1024 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6037] write(3, "1000", 4 [pid 6036] <... creat resumed>) = 4 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 6038 attached [pid 6038] set_robust_list(0x55556e32a660, 24) = 0 [pid 6038] chdir("./156") = 0 [pid 6038] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6038] setpgid(0, 0 [pid 6037] <... write resumed>) = 4 [pid 6038] <... setpgid resumed>) = 0 [pid 6037] close(3 [pid 6038] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6037] <... close resumed>) = 0 [pid 6037] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6037] memfd_create("syzkaller", 0 [pid 6038] <... openat resumed>) = 3 [pid 6037] <... memfd_create resumed>) = 3 [pid 6037] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6037] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6036] rename("./bus", "./file2" [pid 5076] getdents64(4, [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6038 [pid 5074] <... openat resumed>) = 3 [pid 6038] write(3, "1000", 4 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6038] <... write resumed>) = 4 [pid 6036] <... rename resumed>) = -1 EEXIST (File exists) [pid 6038] close(3 [pid 5076] close(4 [pid 6038] <... close resumed>) = 0 [pid 6036] memfd_create("syzkaller", 0 [pid 6038] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... close resumed>) = 0 [pid 6038] <... symlink resumed>) = 0 [pid 6038] memfd_create("syzkaller", 0) = 3 [pid 6036] <... memfd_create resumed>) = 5 [pid 5076] rmdir("./158/bus" [pid 5073] <... ioctl resumed>) = 0 [pid 6036] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6038] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5076] <... rmdir resumed>) = 0 [pid 6036] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] umount2("./158/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6038] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6036] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6037] <... write resumed>) = 524288 [pid 5076] newfstatat(AT_FDCWD, "./158/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./158/binderfs") = 0 [pid 5076] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3 [pid 6037] munmap(0x7f0356e00000, 138412032 [pid 6038] <... write resumed>) = 524288 [pid 6037] <... munmap resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 6037] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5076] close(3 [pid 6037] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6038] munmap(0x7f0356e00000, 138412032) = 0 [pid 6038] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6038] ioctl(4, LOOP_SET_FD, 3 [pid 5076] <... close resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6039 attached [pid 6036] <... write resumed>) = 524288 [pid 5076] rmdir("./158" [pid 5074] close(3 [pid 6039] set_robust_list(0x55556e32a660, 24 [pid 6036] munmap(0x7f0356e00000, 138412032 [pid 6039] <... set_robust_list resumed>) = 0 [pid 6036] <... munmap resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6039 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6039] chdir("./156" [pid 6037] close(3) = 0 [pid 6039] <... chdir resumed>) = 0 [pid 6037] close(4 [pid 6036] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6037] <... close resumed>) = 0 [pid 6036] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6039] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6036] close(5 [pid 6038] <... ioctl resumed>) = 0 [pid 6037] mkdir("./bus", 0777 [pid 6038] close(3 [pid 6037] <... mkdir resumed>) = 0 [pid 6038] <... close resumed>) = 0 [pid 6037] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, ""./strace-static-x86_64: Process 6040 attached [pid 6039] <... prctl resumed>) = 0 [pid 6038] close(4 [pid 6036] <... close resumed>) = 0 [pid 5076] mkdir("./159", 0777 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6040 [pid 6040] set_robust_list(0x55556e32a660, 24 [pid 6039] setpgid(0, 0 [pid 6040] <... set_robust_list resumed>) = 0 [pid 6039] <... setpgid resumed>) = 0 [pid 6039] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6038] <... close resumed>) = 0 [pid 6039] <... openat resumed>) = 3 [ 171.466735][ T6037] loop4: detected capacity change from 0 to 1024 [ 171.480430][ T6038] loop2: detected capacity change from 0 to 1024 [pid 6038] mkdir("./bus", 0777 [pid 6039] write(3, "1000", 4 [pid 6038] <... mkdir resumed>) = 0 [pid 6038] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6040] chdir("./156" [pid 6039] <... write resumed>) = 4 [pid 6036] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5076] <... mkdir resumed>) = 0 [pid 6040] <... chdir resumed>) = 0 [pid 6039] close(3 [pid 6040] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6039] <... close resumed>) = 0 [pid 6037] <... mount resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6040] <... prctl resumed>) = 0 [pid 6039] symlink("/dev/binderfs", "./binderfs" [pid 6037] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6036] <... open resumed>) = 5 [pid 6040] setpgid(0, 0 [pid 6039] <... symlink resumed>) = 0 [pid 6038] <... mount resumed>) = 0 [pid 6037] <... openat resumed>) = 3 [pid 6036] ftruncate(5, 0 [pid 5076] <... openat resumed>) = 3 [pid 6039] memfd_create("syzkaller", 0 [pid 6038] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6037] chdir("./bus" [pid 6040] <... setpgid resumed>) = 0 [pid 6039] <... memfd_create resumed>) = 3 [pid 6038] <... openat resumed>) = 3 [pid 6037] <... chdir resumed>) = 0 [pid 6036] <... ftruncate resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6039] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6038] chdir("./bus" [pid 6037] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6036] exit_group(0 [pid 6040] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6039] <... mmap resumed>) = 0x7f0356e00000 [pid 6038] <... chdir resumed>) = 0 [pid 6037] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6036] <... exit_group resumed>) = ? [pid 6040] <... openat resumed>) = 3 [pid 6039] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6038] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6037] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6036] +++ exited with 0 +++ [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6036, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6038] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6040] write(3, "1000", 4) = 4 [pid 6040] close(3) = 0 [pid 6040] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6038] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6040] memfd_create("syzkaller", 0 [pid 5078] umount2("./158", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6040] <... memfd_create resumed>) = 3 [pid 6039] <... write resumed>) = 524288 [pid 6038] <... symlink resumed>) = 0 [pid 6037] <... symlink resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6040] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] openat(AT_FDCWD, "./158", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6040] <... mmap resumed>) = 0x7f0356e00000 [pid 6037] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] <... openat resumed>) = 3 [pid 6040] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] newfstatat(3, "", [pid 6039] munmap(0x7f0356e00000, 138412032 [pid 6040] <... write resumed>) = 524288 [pid 6038] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6037] <... creat resumed>) = 4 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5078] getdents64(3, [pid 5076] close(3) = 0 [pid 6037] rename("./bus", "./file2" [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] umount2("./158/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6038] <... creat resumed>) = 4 [pid 6040] munmap(0x7f0356e00000, 138412032 [pid 6039] <... munmap resumed>) = 0 [pid 6038] rename("./bus", "./file2" [pid 6037] <... rename resumed>) = -1 EEXIST (File exists) [pid 6040] <... munmap resumed>) = 0 [pid 6037] memfd_create("syzkaller", 0 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6041 [pid 6038] <... rename resumed>) = -1 EEXIST (File exists) [pid 6037] <... memfd_create resumed>) = 5 [pid 6037] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6040] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6039] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6037] <... mmap resumed>) = 0x7f0356e00000 [pid 6040] <... openat resumed>) = 4 [pid 6039] <... openat resumed>) = 4 ./strace-static-x86_64: Process 6041 attached [pid 6040] ioctl(4, LOOP_SET_FD, 3 [pid 6039] ioctl(4, LOOP_SET_FD, 3 [pid 6038] memfd_create("syzkaller", 0 [pid 6037] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... umount2 resumed>) = 0 [pid 6041] set_robust_list(0x55556e32a660, 24 [pid 6038] <... memfd_create resumed>) = 5 [pid 6041] <... set_robust_list resumed>) = 0 [pid 6041] chdir("./159" [pid 6038] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6041] <... chdir resumed>) = 0 [pid 6040] <... ioctl resumed>) = 0 [pid 6039] <... ioctl resumed>) = 0 [pid 6038] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] umount2("./158/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6037] <... write resumed>) = 524288 [pid 5078] newfstatat(AT_FDCWD, "./158/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] umount2("./158/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./158/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6041] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6040] close(3 [pid 5078] <... openat resumed>) = 4 [pid 5078] newfstatat(4, "", [pid 6041] <... prctl resumed>) = 0 [pid 6040] <... close resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6040] close(4 [pid 5078] getdents64(4, [pid 6041] setpgid(0, 0 [pid 6040] <... close resumed>) = 0 [pid 6038] <... write resumed>) = 524288 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5078] close(4) = 0 [pid 5078] rmdir("./158/bus" [pid 6041] <... setpgid resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 6040] mkdir("./bus", 0777 [pid 6039] close(3 [pid 6037] munmap(0x7f0356e00000, 138412032 [pid 5078] umount2("./158/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6040] <... mkdir resumed>) = 0 [pid 6039] <... close resumed>) = 0 [pid 6037] <... munmap resumed>) = 0 [pid 6040] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6039] close(4) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6041] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6039] mkdir("./bus", 0777 [pid 6037] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] newfstatat(AT_FDCWD, "./158/binderfs", [pid 6039] <... mkdir resumed>) = 0 [pid 6037] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6041] <... openat resumed>) = 3 [pid 6037] close(5 [ 171.619230][ T6040] loop1: detected capacity change from 0 to 1024 [ 171.628943][ T6039] loop0: detected capacity change from 0 to 1024 [pid 5078] unlink("./158/binderfs" [pid 6041] write(3, "1000", 4 [pid 6039] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6037] <... close resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 6041] <... write resumed>) = 4 [pid 6038] munmap(0x7f0356e00000, 138412032 [pid 6041] close(3) = 0 [pid 6041] symlink("/dev/binderfs", "./binderfs" [pid 6038] <... munmap resumed>) = 0 [pid 6038] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6041] <... symlink resumed>) = 0 [pid 6038] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6038] close(5 [pid 5078] getdents64(3, [pid 6038] <... close resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6041] memfd_create("syzkaller", 0 [pid 6040] <... mount resumed>) = 0 [pid 5078] close(3 [pid 6040] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] <... close resumed>) = 0 [pid 6040] <... openat resumed>) = 3 [pid 5078] rmdir("./158" [pid 6041] <... memfd_create resumed>) = 3 [pid 6040] chdir("./bus" [pid 5078] <... rmdir resumed>) = 0 [pid 6041] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6040] <... chdir resumed>) = 0 [pid 6039] <... mount resumed>) = 0 [pid 6037] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] mkdir("./159", 0777 [pid 6041] <... mmap resumed>) = 0x7f0356e00000 [pid 6040] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6039] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] <... mkdir resumed>) = 0 [pid 6040] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6039] <... openat resumed>) = 3 [pid 6038] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6040] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6039] chdir("./bus" [pid 6038] <... open resumed>) = 5 [pid 5078] <... openat resumed>) = 3 [pid 6041] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6040] <... symlink resumed>) = 0 [pid 6039] <... chdir resumed>) = 0 [pid 6038] ftruncate(5, 0 [pid 6037] <... open resumed>) = 5 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 6040] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6039] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6038] <... ftruncate resumed>) = 0 [pid 6037] ftruncate(5, 0 [pid 6040] <... creat resumed>) = 4 [pid 6040] rename("./bus", "./file2") = -1 EEXIST (File exists) [pid 6040] memfd_create("syzkaller", 0 [pid 6038] exit_group(0 [pid 6037] <... ftruncate resumed>) = 0 [pid 6040] <... memfd_create resumed>) = 5 [pid 6039] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6038] <... exit_group resumed>) = ? [pid 6037] exit_group(0 [pid 6040] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6039] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6037] <... exit_group resumed>) = ? [pid 6040] <... mmap resumed>) = 0x7f0356e00000 [pid 6037] +++ exited with 0 +++ [pid 6038] +++ exited with 0 +++ [pid 6041] <... write resumed>) = 524288 [pid 6040] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6037, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6038, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 6041] munmap(0x7f0356e00000, 138412032 [pid 6039] <... symlink resumed>) = 0 [pid 5078] <... ioctl resumed>) = 0 [pid 5075] umount2("./156", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6039] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5077] umount2("./158", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./158", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6041] <... munmap resumed>) = 0 [pid 6040] <... write resumed>) = 524288 [pid 5078] close(3 [pid 5077] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6041] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5077] newfstatat(3, "", [pid 6041] <... openat resumed>) = 4 [pid 6039] <... creat resumed>) = 4 [pid 5078] <... close resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] openat(AT_FDCWD, "./156", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6041] ioctl(4, LOOP_SET_FD, 3 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] getdents64(3, [pid 5075] <... openat resumed>) = 3 [pid 6039] rename("./bus", "./file2") = -1 EEXIST (File exists) [pid 6039] memfd_create("syzkaller", 0) = 5 [pid 6039] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6041] <... ioctl resumed>) = 0 [pid 6039] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] newfstatat(3, "", ./strace-static-x86_64: Process 6042 attached [pid 6041] close(3 [pid 6040] munmap(0x7f0356e00000, 138412032 [pid 5077] umount2("./158/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6042] set_robust_list(0x55556e32a660, 24 [pid 6041] <... close resumed>) = 0 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6042 [pid 6042] <... set_robust_list resumed>) = 0 [pid 5075] getdents64(3, [pid 6042] chdir("./159" [pid 6041] close(4 [pid 6040] <... munmap resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] umount2("./156/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6041] <... close resumed>) = 0 [pid 6041] mkdir("./bus", 0777 [pid 6042] <... chdir resumed>) = 0 [pid 6040] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6042] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6041] <... mkdir resumed>) = 0 [pid 6040] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6042] <... prctl resumed>) = 0 [pid 6041] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6040] close(5 [pid 6042] setpgid(0, 0) = 0 [pid 6042] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6039] <... write resumed>) = 524288 [pid 6042] <... openat resumed>) = 3 [pid 6042] write(3, "1000", 4) = 4 [pid 6042] close(3) = 0 [pid 6042] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6040] <... close resumed>) = 0 [pid 6039] munmap(0x7f0356e00000, 138412032 [pid 5077] <... umount2 resumed>) = 0 [ 171.767580][ T6041] loop3: detected capacity change from 0 to 1024 [pid 6040] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6042] memfd_create("syzkaller", 0 [pid 6039] <... munmap resumed>) = 0 [pid 6041] <... mount resumed>) = 0 [pid 5077] umount2("./158/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = 0 [pid 6042] <... memfd_create resumed>) = 3 [pid 6041] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6042] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6039] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6042] <... mmap resumed>) = 0x7f0356e00000 [pid 6041] <... openat resumed>) = 3 [pid 6040] <... open resumed>) = 5 [pid 6039] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] newfstatat(AT_FDCWD, "./158/bus", [pid 6041] chdir("./bus") = 0 [pid 6042] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6041] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6040] ftruncate(5, 0 [pid 6039] close(5 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6041] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6040] <... ftruncate resumed>) = 0 [pid 6039] <... close resumed>) = 0 [pid 5077] umount2("./158/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./156/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6041] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./156/bus", [pid 6040] exit_group(0 [pid 6041] <... symlink resumed>) = 0 [pid 6040] <... exit_group resumed>) = ? [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6041] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6040] +++ exited with 0 +++ [pid 5077] openat(AT_FDCWD, "./158/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] umount2("./156/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... openat resumed>) = 4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(4, "", [pid 5075] openat(AT_FDCWD, "./156/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6040, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6042] <... write resumed>) = 524288 [pid 6041] <... creat resumed>) = 4 [pid 6039] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5075] <... openat resumed>) = 4 [pid 5077] getdents64(4, [pid 5074] umount2("./156", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6042] munmap(0x7f0356e00000, 138412032 [pid 6041] rename("./bus", "./file2" [pid 5075] newfstatat(4, "", [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6042] <... munmap resumed>) = 0 [pid 6041] <... rename resumed>) = -1 EEXIST (File exists) [pid 6039] <... open resumed>) = 5 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] openat(AT_FDCWD, "./156", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6042] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6041] memfd_create("syzkaller", 0 [pid 6039] ftruncate(5, 0 [pid 5077] getdents64(4, [pid 5074] <... openat resumed>) = 3 [pid 6042] <... openat resumed>) = 4 [pid 6041] <... memfd_create resumed>) = 5 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] getdents64(4, [pid 5074] newfstatat(3, "", [pid 6039] <... ftruncate resumed>) = 0 [pid 6041] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6039] exit_group(0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6042] ioctl(4, LOOP_SET_FD, 3 [pid 6041] <... mmap resumed>) = 0x7f0356e00000 [pid 6039] <... exit_group resumed>) = ? [pid 5077] close(4 [pid 5074] getdents64(3, [pid 6041] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] close(4) = 0 [pid 5075] rmdir("./156/bus") = 0 [pid 6042] <... ioctl resumed>) = 0 [pid 6041] <... write resumed>) = 524288 [pid 6039] +++ exited with 0 +++ [pid 5077] <... close resumed>) = 0 [pid 5075] umount2("./156/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6042] close(3 [pid 6041] munmap(0x7f0356e00000, 138412032 [pid 5077] rmdir("./158/bus" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./156/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6042] <... close resumed>) = 0 [pid 6041] <... munmap resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./156/binderfs", [pid 6042] close(4 [pid 5077] umount2("./158/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6039, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6042] <... close resumed>) = 0 [pid 6041] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./156", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6042] mkdir("./bus", 0777 [pid 6041] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] newfstatat(AT_FDCWD, "./158/binderfs", [pid 5075] unlink("./156/binderfs" [pid 5074] <... umount2 resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6042] <... mkdir resumed>) = 0 [pid 6041] close(5 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] openat(AT_FDCWD, "./156", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6042] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5077] unlink("./158/binderfs" [pid 5075] <... unlink resumed>) = 0 [pid 5074] umount2("./156/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... openat resumed>) = 3 [pid 5077] <... unlink resumed>) = 0 [pid 5075] getdents64(3, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(3, "", [pid 5077] getdents64(3, [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] newfstatat(AT_FDCWD, "./156/bus", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] close(3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] getdents64(3, [pid 5077] close(3 [pid 5075] <... close resumed>) = 0 [pid 5074] umount2("./156/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] <... close resumed>) = 0 [pid 5075] rmdir("./156" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./156/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6042] <... mount resumed>) = 0 [pid 5077] rmdir("./158" [pid 6042] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6041] <... close resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./156/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6042] <... openat resumed>) = 3 [pid 5074] <... openat resumed>) = 4 [pid 6042] chdir("./bus" [pid 6041] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] mkdir("./159", 0777 [pid 5075] mkdir("./157", 0777 [pid 5074] newfstatat(4, "", [pid 5073] <... umount2 resumed>) = 0 [pid 6042] <... chdir resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6042] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] <... mkdir resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] getdents64(4, [pid 6042] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] umount2("./156/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6042] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5077] <... openat resumed>) = 3 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] getdents64(4, [pid 6041] <... open resumed>) = 5 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6042] <... symlink resumed>) = 0 [pid 6041] ftruncate(5, 0 [pid 5075] <... openat resumed>) = 3 [pid 5074] close(4 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6042] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6041] <... ftruncate resumed>) = 0 [ 171.881592][ T6042] loop5: detected capacity change from 0 to 1024 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./156/bus" [pid 6041] exit_group(0 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./156/bus", [pid 5074] umount2("./156/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6041] <... exit_group resumed>) = ? [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6042] <... creat resumed>) = 4 [pid 6041] +++ exited with 0 +++ [pid 5074] newfstatat(AT_FDCWD, "./156/binderfs", [pid 6042] rename("./bus", "./file2" [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6041, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./156/binderfs" [pid 5073] umount2("./156/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6042] <... rename resumed>) = -1 EEXIST (File exists) [pid 5076] umount2("./159", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... unlink resumed>) = 0 [pid 6042] memfd_create("syzkaller", 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6042] <... memfd_create resumed>) = 5 [pid 5076] openat(AT_FDCWD, "./159", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] getdents64(3, [pid 5073] openat(AT_FDCWD, "./156/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6042] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... openat resumed>) = 3 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6042] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] newfstatat(3, "", [pid 5074] close(3 [pid 5073] <... openat resumed>) = 4 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... close resumed>) = 0 [pid 5076] getdents64(3, [pid 5074] rmdir("./156" [pid 5073] newfstatat(4, "", [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, [pid 5074] mkdir("./157", 0777 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6042] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] umount2("./159/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] close(4 [pid 5077] <... ioctl resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./156/bus" [pid 5075] <... ioctl resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5073] umount2("./156/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./156/binderfs", [pid 5075] close(3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... close resumed>) = 0 [pid 6042] <... write resumed>) = 524288 [pid 5077] close(3 [pid 5076] umount2("./159/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] unlink("./156/binderfs" [pid 5077] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] newfstatat(AT_FDCWD, "./159/bus", [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6043 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./159/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6043 attached ) = -1 EINVAL (Invalid argument) [pid 5073] <... unlink resumed>) = 0 [pid 6043] set_robust_list(0x55556e32a660, 24 [pid 6042] munmap(0x7f0356e00000, 138412032 [pid 5076] openat(AT_FDCWD, "./159/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] getdents64(3, [pid 6043] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 6044 attached [pid 6043] chdir("./159" [pid 5076] <... openat resumed>) = 4 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6044] set_robust_list(0x55556e32a660, 24 [pid 5076] newfstatat(4, "", [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6044 [pid 5073] close(3 [pid 6044] <... set_robust_list resumed>) = 0 [pid 6043] <... chdir resumed>) = 0 [pid 6042] <... munmap resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6044] chdir("./157" [pid 6043] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] getdents64(4, [pid 5073] <... close resumed>) = 0 [pid 6042] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6044] <... chdir resumed>) = 0 [pid 6043] <... prctl resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] rmdir("./156" [pid 6044] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6043] setpgid(0, 0 [pid 6042] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] getdents64(4, [pid 6044] <... prctl resumed>) = 0 [pid 6043] <... setpgid resumed>) = 0 [pid 6044] setpgid(0, 0 [pid 6043] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6042] close(5 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 6044] <... setpgid resumed>) = 0 [pid 6043] <... openat resumed>) = 3 [pid 5076] close(4 [pid 5073] mkdir("./157", 0777 [pid 6044] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6043] write(3, "1000", 4 [pid 5076] <... close resumed>) = 0 [pid 6044] <... openat resumed>) = 3 [pid 5073] <... mkdir resumed>) = 0 [pid 5076] rmdir("./159/bus" [pid 6044] write(3, "1000", 4 [pid 6043] <... write resumed>) = 4 [pid 6044] <... write resumed>) = 4 [pid 6043] close(3 [pid 5076] <... rmdir resumed>) = 0 [pid 6044] close(3 [pid 6043] <... close resumed>) = 0 [pid 5076] umount2("./159/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6044] <... close resumed>) = 0 [pid 6043] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... ioctl resumed>) = 0 [pid 6044] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6043] <... symlink resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./159/binderfs", [pid 6044] memfd_create("syzkaller", 0 [pid 6043] memfd_create("syzkaller", 0 [pid 6044] <... memfd_create resumed>) = 3 [pid 6043] <... memfd_create resumed>) = 3 [pid 6044] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6043] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6044] <... mmap resumed>) = 0x7f0356e00000 [pid 6043] <... mmap resumed>) = 0x7f0356e00000 [pid 6044] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6043] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6042] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] close(3 [pid 5073] <... openat resumed>) = 3 [pid 6042] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5076] unlink("./159/binderfs" [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5074] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6042] <... open resumed>) = 5 [pid 5076] <... unlink resumed>) = 0 [pid 5076] getdents64(3, [pid 6042] ftruncate(5, 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3./strace-static-x86_64: Process 6045 attached [pid 6042] <... ftruncate resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 6044] <... write resumed>) = 524288 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6045 [pid 5076] rmdir("./159" [pid 6045] set_robust_list(0x55556e32a660, 24 [pid 6042] exit_group(0 [pid 6045] <... set_robust_list resumed>) = 0 [pid 6042] <... exit_group resumed>) = ? [pid 5076] <... rmdir resumed>) = 0 [pid 6045] chdir("./157" [pid 5076] mkdir("./160", 0777 [pid 6042] +++ exited with 0 +++ [pid 6045] <... chdir resumed>) = 0 [pid 6044] munmap(0x7f0356e00000, 138412032 [pid 5076] <... mkdir resumed>) = 0 [pid 6045] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6043] <... write resumed>) = 524288 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6042, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6045] <... prctl resumed>) = 0 [pid 6044] <... munmap resumed>) = 0 [pid 6043] munmap(0x7f0356e00000, 138412032 [pid 5076] <... openat resumed>) = 3 [pid 6045] setpgid(0, 0 [pid 6044] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6043] <... munmap resumed>) = 0 [pid 6043] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] umount2("./159", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6045] <... setpgid resumed>) = 0 [pid 6043] <... openat resumed>) = 4 [pid 5078] openat(AT_FDCWD, "./159", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6043] ioctl(4, LOOP_SET_FD, 3 [pid 5078] <... openat resumed>) = 3 [pid 6044] <... openat resumed>) = 4 [pid 5078] newfstatat(3, "", [pid 6045] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6044] ioctl(4, LOOP_SET_FD, 3 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] umount2("./159/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6045] <... openat resumed>) = 3 [pid 5073] <... ioctl resumed>) = 0 [pid 6043] <... ioctl resumed>) = 0 [pid 5073] close(3) = 0 [pid 6045] write(3, "1000", 4) = 4 [pid 6045] close(3) = 0 [pid 6045] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6044] <... ioctl resumed>) = 0 [pid 6043] close(3 [pid 5078] <... umount2 resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6045] memfd_create("syzkaller", 0 [pid 6044] close(3 [pid 6043] <... close resumed>) = 0 [pid 5078] umount2("./159/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6045] <... memfd_create resumed>) = 3 ./strace-static-x86_64: Process 6046 attached [pid 6044] <... close resumed>) = 0 [pid 6043] close(4 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6044] close(4 [pid 6043] <... close resumed>) = 0 [pid 5078] newfstatat(AT_FDCWD, "./159/bus", [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6046 [pid 6046] set_robust_list(0x55556e32a660, 24 [pid 6045] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6046] <... set_robust_list resumed>) = 0 [pid 6045] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6046] chdir("./157" [pid 6045] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6044] <... close resumed>) = 0 [pid 6043] mkdir("./bus", 0777 [pid 5078] umount2("./159/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6046] <... chdir resumed>) = 0 [pid 6046] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 172.090701][ T6043] loop4: detected capacity change from 0 to 1024 [ 172.094321][ T6044] loop2: detected capacity change from 0 to 1024 [pid 6046] setpgid(0, 0 [pid 5076] <... ioctl resumed>) = 0 [pid 6044] mkdir("./bus", 0777 [pid 6043] <... mkdir resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6045] <... write resumed>) = 524288 [pid 6046] <... setpgid resumed>) = 0 [pid 6045] munmap(0x7f0356e00000, 138412032 [pid 6044] <... mkdir resumed>) = 0 [pid 6043] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5078] openat(AT_FDCWD, "./159/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] close(3 [pid 6046] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5078] <... openat resumed>) = 4 [pid 5076] <... close resumed>) = 0 [pid 6046] <... openat resumed>) = 3 [pid 5078] newfstatat(4, "", [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6046] write(3, "1000", 4 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6046] <... write resumed>) = 4 [pid 6044] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5078] getdents64(4, ./strace-static-x86_64: Process 6047 attached [pid 6046] close(3 [pid 6045] <... munmap resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6047 [pid 6047] set_robust_list(0x55556e32a660, 24 [pid 6046] <... close resumed>) = 0 [pid 6044] <... mount resumed>) = 0 [pid 6043] <... mount resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6047] <... set_robust_list resumed>) = 0 [pid 6046] symlink("/dev/binderfs", "./binderfs" [pid 6045] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6044] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6043] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] getdents64(4, [pid 6047] chdir("./160" [pid 6046] <... symlink resumed>) = 0 [pid 6045] <... openat resumed>) = 4 [pid 6044] <... openat resumed>) = 3 [pid 6043] <... openat resumed>) = 3 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6047] <... chdir resumed>) = 0 [pid 6046] memfd_create("syzkaller", 0 [pid 6045] ioctl(4, LOOP_SET_FD, 3 [pid 6044] chdir("./bus" [pid 6043] chdir("./bus" [pid 5078] close(4 [pid 6047] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6046] <... memfd_create resumed>) = 3 [pid 6044] <... chdir resumed>) = 0 [pid 6043] <... chdir resumed>) = 0 [pid 6046] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6044] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6043] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6047] <... prctl resumed>) = 0 [pid 6046] <... mmap resumed>) = 0x7f0356e00000 [pid 6044] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6043] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... close resumed>) = 0 [pid 6047] setpgid(0, 0 [pid 6046] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6044] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6043] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] rmdir("./159/bus" [pid 6047] <... setpgid resumed>) = 0 [pid 6047] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5078] <... rmdir resumed>) = 0 [pid 6047] <... openat resumed>) = 3 [pid 6047] write(3, "1000", 4 [pid 6044] <... symlink resumed>) = 0 [pid 6043] <... symlink resumed>) = 0 [pid 5078] umount2("./159/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6047] <... write resumed>) = 4 [pid 6044] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6043] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6047] close(3) = 0 [pid 5078] newfstatat(AT_FDCWD, "./159/binderfs", [pid 6047] symlink("/dev/binderfs", "./binderfs" [pid 6044] <... creat resumed>) = 4 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6043] <... creat resumed>) = 4 [pid 6045] <... ioctl resumed>) = 0 [pid 6047] <... symlink resumed>) = 0 [pid 5078] unlink("./159/binderfs" [pid 6047] memfd_create("syzkaller", 0 [pid 6046] <... write resumed>) = 524288 [pid 6045] close(3 [pid 6044] rename("./bus", "./file2" [pid 6043] rename("./bus", "./file2" [pid 5078] <... unlink resumed>) = 0 [pid 6047] <... memfd_create resumed>) = 3 [pid 6046] munmap(0x7f0356e00000, 138412032 [pid 6045] <... close resumed>) = 0 [pid 6044] <... rename resumed>) = -1 EEXIST (File exists) [ 172.205688][ T6045] loop1: detected capacity change from 0 to 1024 [pid 5078] getdents64(3, [pid 6047] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6046] <... munmap resumed>) = 0 [pid 6045] close(4 [pid 6044] memfd_create("syzkaller", 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6043] <... rename resumed>) = -1 EEXIST (File exists) [pid 6047] <... mmap resumed>) = 0x7f0356e00000 [pid 6045] <... close resumed>) = 0 [pid 6043] memfd_create("syzkaller", 0 [pid 5078] close(3 [pid 6046] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6045] mkdir("./bus", 0777 [pid 6043] <... memfd_create resumed>) = 5 [pid 6047] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6044] <... memfd_create resumed>) = 5 [pid 5078] <... close resumed>) = 0 [pid 6047] <... write resumed>) = 524288 [pid 6046] <... openat resumed>) = 4 [pid 6045] <... mkdir resumed>) = 0 [pid 6044] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6043] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] rmdir("./159" [pid 6044] <... mmap resumed>) = 0x7f0356e00000 [pid 6043] <... mmap resumed>) = 0x7f0356e00000 [pid 6046] ioctl(4, LOOP_SET_FD, 3 [pid 6045] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5078] <... rmdir resumed>) = 0 [pid 6043] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6044] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] mkdir("./160", 0777 [pid 6047] munmap(0x7f0356e00000, 138412032 [pid 6046] <... ioctl resumed>) = 0 [pid 6045] <... mount resumed>) = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 6045] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6046] close(3 [pid 6045] chdir("./bus" [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6046] <... close resumed>) = 0 [pid 6045] <... chdir resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 6047] <... munmap resumed>) = 0 [pid 6046] close(4 [pid 6045] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6044] <... write resumed>) = 524288 [pid 6043] <... write resumed>) = 524288 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 6047] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6045] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6046] <... close resumed>) = 0 [pid 6045] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6043] munmap(0x7f0356e00000, 138412032 [pid 6046] mkdir("./bus", 0777 [pid 6047] <... openat resumed>) = 4 [pid 6046] <... mkdir resumed>) = 0 [pid 6045] <... symlink resumed>) = 0 [pid 6044] munmap(0x7f0356e00000, 138412032 [pid 6043] <... munmap resumed>) = 0 [pid 6047] ioctl(4, LOOP_SET_FD, 3 [pid 6046] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6045] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6043] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6043] close(5 [pid 6044] <... munmap resumed>) = 0 [pid 6044] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6044] close(5 [pid 6047] <... ioctl resumed>) = 0 [pid 6043] <... close resumed>) = 0 [pid 6047] close(3 [pid 6043] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6047] <... close resumed>) = 0 [pid 6047] close(4 [pid 6045] <... creat resumed>) = 4 [pid 6047] <... close resumed>) = 0 [pid 6045] rename("./bus", "./file2" [pid 6047] mkdir("./bus", 0777 [pid 6044] <... close resumed>) = 0 [pid 6047] <... mkdir resumed>) = 0 [pid 6047] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6046] <... mount resumed>) = 0 [pid 6045] <... rename resumed>) = -1 EEXIST (File exists) [pid 6045] memfd_create("syzkaller", 0 [pid 6046] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6045] <... memfd_create resumed>) = 5 [pid 6046] <... openat resumed>) = 3 [pid 6045] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6044] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6046] chdir("./bus" [pid 6045] <... mmap resumed>) = 0x7f0356e00000 [pid 6046] <... chdir resumed>) = 0 [pid 6045] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6043] <... open resumed>) = 5 [pid 5078] <... ioctl resumed>) = 0 [pid 6046] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6044] <... open resumed>) = 5 [pid 6043] ftruncate(5, 0 [pid 6046] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6046] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6043] <... ftruncate resumed>) = 0 [pid 6044] ftruncate(5, 0 [pid 6043] exit_group(0) = ? [ 172.291358][ T6046] loop0: detected capacity change from 0 to 1024 [ 172.328053][ T6047] loop3: detected capacity change from 0 to 1024 [pid 6047] <... mount resumed>) = 0 [pid 6046] <... symlink resumed>) = 0 [pid 6044] <... ftruncate resumed>) = 0 [pid 6047] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6046] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6044] exit_group(0 [pid 6047] <... openat resumed>) = 3 [pid 6043] +++ exited with 0 +++ [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6043, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6047] chdir("./bus") = 0 [pid 6046] <... creat resumed>) = 4 [pid 6044] <... exit_group resumed>) = ? [pid 5078] close(3 [pid 6047] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6046] rename("./bus", "./file2" [pid 6044] +++ exited with 0 +++ [pid 5078] <... close resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] umount2("./159", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./159", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6044, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=2 /* 0.02 s */} --- [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6048 [pid 5077] <... openat resumed>) = 3 [pid 5077] newfstatat(3, "", [pid 6047] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] getdents64(3, ./strace-static-x86_64: Process 6048 attached [pid 6047] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6046] <... rename resumed>) = -1 EEXIST (File exists) [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] umount2("./157", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6045] <... write resumed>) = 524288 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6048] set_robust_list(0x55556e32a660, 24 [pid 6047] <... symlink resumed>) = 0 [pid 6046] memfd_create("syzkaller", 0 [pid 6045] munmap(0x7f0356e00000, 138412032 [pid 5077] umount2("./159/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "./157", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6046] <... memfd_create resumed>) = 5 [pid 5075] <... openat resumed>) = 3 [pid 6046] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] newfstatat(3, "", [pid 6046] <... mmap resumed>) = 0x7f0356e00000 [pid 6048] <... set_robust_list resumed>) = 0 [pid 6045] <... munmap resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6048] chdir("./160" [pid 6045] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5075] getdents64(3, [pid 6045] close(5) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6048] <... chdir resumed>) = 0 [pid 6048] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6048] setpgid(0, 0) = 0 [pid 6045] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6048] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6047] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6046] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] umount2("./157/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6048] <... openat resumed>) = 3 [pid 6048] write(3, "1000", 4) = 4 [pid 6048] close(3) = 0 [pid 6048] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6048] memfd_create("syzkaller", 0) = 3 [pid 6045] <... open resumed>) = 5 [pid 6048] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5077] umount2("./159/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6048] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6045] ftruncate(5, 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6045] <... ftruncate resumed>) = 0 [pid 6045] exit_group(0) = ? [pid 6047] <... creat resumed>) = 4 [pid 6046] <... write resumed>) = 524288 [pid 6045] +++ exited with 0 +++ [pid 5077] newfstatat(AT_FDCWD, "./159/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6045, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6047] rename("./bus", "./file2" [pid 5077] umount2("./159/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./157/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./157", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./157/bus", [pid 5074] openat(AT_FDCWD, "./157", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5075] umount2("./157/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] newfstatat(3, "", [pid 6047] <... rename resumed>) = -1 EEXIST (File exists) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6048] <... write resumed>) = 524288 [pid 6047] memfd_create("syzkaller", 0 [pid 5077] openat(AT_FDCWD, "./159/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] openat(AT_FDCWD, "./157/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] getdents64(3, [pid 6047] <... memfd_create resumed>) = 5 [pid 5077] <... openat resumed>) = 4 [pid 5075] <... openat resumed>) = 4 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6047] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6046] munmap(0x7f0356e00000, 138412032 [pid 5077] newfstatat(4, "", [pid 5075] newfstatat(4, "", [pid 5074] umount2("./157/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6047] <... mmap resumed>) = 0x7f0356e00000 [pid 6046] <... munmap resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, [pid 5077] getdents64(4, [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, [pid 5077] getdents64(4, [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6048] munmap(0x7f0356e00000, 138412032 [pid 6046] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] close(4 [pid 6047] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... umount2 resumed>) = 0 [pid 6048] <... munmap resumed>) = 0 [pid 6046] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] close(4 [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./157/bus" [pid 6046] close(5 [pid 5077] <... close resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5075] umount2("./157/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./157/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./157/binderfs") = 0 [pid 5075] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 5075] rmdir("./157" [pid 6046] <... close resumed>) = 0 [pid 5077] rmdir("./159/bus" [pid 6048] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... rmdir resumed>) = 0 [pid 6048] <... openat resumed>) = 4 [pid 5074] umount2("./157/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6048] ioctl(4, LOOP_SET_FD, 3 [pid 5077] <... rmdir resumed>) = 0 [pid 6048] <... ioctl resumed>) = 0 [pid 6047] <... write resumed>) = 524288 [pid 6046] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] umount2("./159/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] mkdir("./158", 0777 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./157/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./157/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./157/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, [pid 6048] close(3 [pid 5077] newfstatat(AT_FDCWD, "./159/binderfs", [pid 5075] <... mkdir resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6048] <... close resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6048] close(4 [pid 5074] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] close(4) = 0 [pid 5074] rmdir("./157/bus" [pid 6048] <... close resumed>) = 0 [pid 6047] munmap(0x7f0356e00000, 138412032 [pid 5077] unlink("./159/binderfs" [pid 5074] <... rmdir resumed>) = 0 [pid 5074] umount2("./157/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6048] mkdir("./bus", 0777 [pid 6047] <... munmap resumed>) = 0 [pid 6046] <... open resumed>) = 5 [pid 5077] <... unlink resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6048] <... mkdir resumed>) = 0 [pid 6047] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6046] ftruncate(5, 0 [pid 5077] getdents64(3, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6047] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6046] <... ftruncate resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] <... openat resumed>) = 3 [pid 6047] close(5 [pid 6046] exit_group(0 [pid 5074] newfstatat(AT_FDCWD, "./157/binderfs", [pid 6048] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6047] <... close resumed>) = 0 [pid 6046] <... exit_group resumed>) = ? [pid 5077] close(3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6047] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5074] unlink("./157/binderfs" [pid 6048] <... mount resumed>) = 0 [pid 6047] <... open resumed>) = 5 [pid 6046] +++ exited with 0 +++ [pid 5077] <... close resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 6048] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5077] rmdir("./159" [pid 5074] getdents64(3, [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6046, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6048] <... openat resumed>) = 3 [ 172.497321][ T6048] loop5: detected capacity change from 0 to 1024 [pid 6047] ftruncate(5, 0 [pid 6048] chdir("./bus" [pid 5077] <... rmdir resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6048] <... chdir resumed>) = 0 [pid 6048] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6048] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6047] <... ftruncate resumed>) = 0 [pid 5077] mkdir("./160", 0777 [pid 5074] close(3 [pid 6047] exit_group(0 [pid 5074] <... close resumed>) = 0 [pid 5073] umount2("./157", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] <... mkdir resumed>) = 0 [pid 6047] <... exit_group resumed>) = ? [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] rmdir("./157" [pid 5073] openat(AT_FDCWD, "./157", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6048] <... symlink resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5073] newfstatat(3, "", [pid 6048] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] mkdir("./158", 0777 [pid 5073] getdents64(3, [pid 6047] +++ exited with 0 +++ [pid 5075] <... ioctl resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6047, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5074] <... openat resumed>) = 3 [pid 5073] umount2("./157/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6048] <... creat resumed>) = 4 [pid 5076] umount2("./160", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] close(3 [pid 6048] rename("./bus", "./file2" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./160", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... close resumed>) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5076] <... openat resumed>) = 3 [pid 5076] newfstatat(3, "", [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6048] <... rename resumed>) = -1 EEXIST (File exists) [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, [pid 6048] memfd_create("syzkaller", 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6048] <... memfd_create resumed>) = 5 [pid 5076] umount2("./160/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6049 attached [pid 6048] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6049] set_robust_list(0x55556e32a660, 24 [pid 5073] <... umount2 resumed>) = 0 [pid 6049] <... set_robust_list resumed>) = 0 [pid 6049] chdir("./158") = 0 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6049 [pid 5073] umount2("./157/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6049] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6049] setpgid(0, 0 [pid 5073] newfstatat(AT_FDCWD, "./157/bus", [pid 6049] <... setpgid resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6049] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5073] umount2("./157/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./157/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6049] <... openat resumed>) = 3 [pid 5073] <... openat resumed>) = 4 [pid 6049] write(3, "1000", 4) = 4 [pid 5073] newfstatat(4, "", [pid 6049] close(3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6049] <... close resumed>) = 0 [pid 6048] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] getdents64(4, [pid 6049] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... umount2 resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 6049] <... symlink resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, [pid 6049] memfd_create("syzkaller", 0 [pid 5076] umount2("./160/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6049] <... memfd_create resumed>) = 3 [pid 5076] newfstatat(AT_FDCWD, "./160/bus", [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6049] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6049] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] umount2("./160/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] close(4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./160/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6049] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] close(3 [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./157/bus" [pid 5076] getdents64(4, [pid 5074] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] <... ioctl resumed>) = 0 [pid 5076] close(4 [pid 5073] <... rmdir resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 6048] <... write resumed>) = 524288 [pid 5077] close(3 [pid 5076] rmdir("./160/bus" [pid 5073] umount2("./157/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6048] munmap(0x7f0356e00000, 138412032 [pid 5077] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] newfstatat(AT_FDCWD, "./157/binderfs", ./strace-static-x86_64: Process 6050 attached [pid 5076] <... rmdir resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./157/binderfs" [pid 6050] set_robust_list(0x55556e32a660, 24 [pid 6048] <... munmap resumed>) = 0 [pid 5076] umount2("./160/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6050 [pid 5073] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 6051 attached [pid 6051] set_robust_list(0x55556e32a660, 24 [pid 6050] <... set_robust_list resumed>) = 0 [pid 6048] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6051 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3 [pid 6051] <... set_robust_list resumed>) = 0 [pid 6049] <... write resumed>) = 524288 [pid 6048] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./157" [pid 5076] newfstatat(AT_FDCWD, "./160/binderfs", [pid 6050] chdir("./158" [pid 5073] <... rmdir resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6051] chdir("./160" [pid 6050] <... chdir resumed>) = 0 [pid 6048] close(5 [pid 5076] unlink("./160/binderfs" [pid 6050] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] <... unlink resumed>) = 0 [pid 6050] <... prctl resumed>) = 0 [pid 5076] getdents64(3, [pid 6050] setpgid(0, 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3) = 0 [pid 5073] mkdir("./158", 0777 [pid 6050] <... setpgid resumed>) = 0 [pid 5076] rmdir("./160" [pid 6051] <... chdir resumed>) = 0 [pid 6050] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] <... rmdir resumed>) = 0 [pid 6051] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6051] setpgid(0, 0 [pid 6049] munmap(0x7f0356e00000, 138412032 [pid 5076] mkdir("./161", 0777 [pid 6051] <... setpgid resumed>) = 0 [pid 6049] <... munmap resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 6050] <... openat resumed>) = 3 [pid 6050] write(3, "1000", 4) = 4 [pid 6049] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6051] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6050] close(3 [pid 6049] <... openat resumed>) = 4 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6050] <... close resumed>) = 0 [pid 6049] ioctl(4, LOOP_SET_FD, 3 [pid 5076] <... openat resumed>) = 3 [pid 6051] <... openat resumed>) = 3 [pid 6050] symlink("/dev/binderfs", "./binderfs" [pid 6048] <... close resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 6051] write(3, "1000", 4 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6051] <... write resumed>) = 4 [pid 6051] close(3) = 0 [pid 6051] symlink("/dev/binderfs", "./binderfs" [pid 6050] <... symlink resumed>) = 0 [pid 6048] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6050] memfd_create("syzkaller", 0) = 3 [pid 6050] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6050] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6049] <... ioctl resumed>) = 0 [pid 6051] <... symlink resumed>) = 0 [pid 6049] close(3) = 0 [pid 6049] close(4) = 0 [pid 6049] mkdir("./bus", 0777) = 0 [pid 6049] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6051] memfd_create("syzkaller", 0) = 3 [pid 6051] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6048] <... open resumed>) = 5 [pid 6048] ftruncate(5, 0) = 0 [pid 6051] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6050] <... write resumed>) = 524288 [pid 6049] <... mount resumed>) = 0 [pid 6049] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6048] exit_group(0 [pid 6049] <... openat resumed>) = 3 [pid 6049] chdir("./bus" [pid 6050] munmap(0x7f0356e00000, 138412032 [pid 6049] <... chdir resumed>) = 0 [pid 6049] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6048] <... exit_group resumed>) = ? [pid 6049] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... ioctl resumed>) = 0 [ 172.675330][ T6049] loop2: detected capacity change from 0 to 1024 [pid 6050] <... munmap resumed>) = 0 [pid 6049] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6048] +++ exited with 0 +++ [pid 5073] <... ioctl resumed>) = 0 [pid 6049] <... symlink resumed>) = 0 [pid 5073] close(3 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6048, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5073] <... close resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6050] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6049] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6052 attached [pid 6050] <... openat resumed>) = 4 [pid 6050] ioctl(4, LOOP_SET_FD, 3 [pid 6052] set_robust_list(0x55556e32a660, 24 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6052 [pid 6051] <... write resumed>) = 524288 [pid 5078] umount2("./160", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6052] <... set_robust_list resumed>) = 0 [pid 6051] munmap(0x7f0356e00000, 138412032 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] close(3 [pid 6051] <... munmap resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./160", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... close resumed>) = 0 [pid 6052] chdir("./158" [pid 5078] <... openat resumed>) = 3 [pid 6052] <... chdir resumed>) = 0 [pid 6051] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6050] <... ioctl resumed>) = 0 [pid 6049] <... creat resumed>) = 4 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6053 attached [pid 6052] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6051] <... openat resumed>) = 4 [pid 6050] close(3 [pid 6049] rename("./bus", "./file2" [pid 5078] newfstatat(3, "", [pid 6053] set_robust_list(0x55556e32a660, 24 [pid 6052] <... prctl resumed>) = 0 [pid 6051] ioctl(4, LOOP_SET_FD, 3 [pid 6050] <... close resumed>) = 0 [pid 6049] <... rename resumed>) = -1 EEXIST (File exists) [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6053 [pid 6053] <... set_robust_list resumed>) = 0 [pid 6052] setpgid(0, 0 [pid 6050] close(4 [pid 6049] memfd_create("syzkaller", 0 [pid 6053] chdir("./161" [pid 6052] <... setpgid resumed>) = 0 [pid 6050] <... close resumed>) = 0 [pid 6049] <... memfd_create resumed>) = 5 [pid 6053] <... chdir resumed>) = 0 [pid 6050] mkdir("./bus", 0777 [pid 6049] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6053] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6050] <... mkdir resumed>) = 0 [pid 6049] <... mmap resumed>) = 0x7f0356e00000 [pid 6053] <... prctl resumed>) = 0 [pid 6052] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6051] <... ioctl resumed>) = 0 [pid 6050] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6052] <... openat resumed>) = 3 [pid 6051] close(3 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(3, [pid 6053] setpgid(0, 0 [pid 6052] write(3, "1000", 4 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6051] <... close resumed>) = 0 [pid 6053] <... setpgid resumed>) = 0 [pid 6053] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6052] <... write resumed>) = 4 [pid 6051] close(4 [pid 5078] umount2("./160/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6053] <... openat resumed>) = 3 [pid 6051] <... close resumed>) = 0 [pid 6050] <... mount resumed>) = 0 [pid 6052] close(3 [pid 6053] write(3, "1000", 4 [pid 6052] <... close resumed>) = 0 [pid 6050] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6049] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6051] mkdir("./bus", 0777 [pid 5078] <... umount2 resumed>) = 0 [pid 6053] <... write resumed>) = 4 [pid 6052] symlink("/dev/binderfs", "./binderfs" [pid 6050] <... openat resumed>) = 3 [pid 6053] close(3 [pid 6050] chdir("./bus" [pid 6053] <... close resumed>) = 0 [pid 6051] <... mkdir resumed>) = 0 [pid 6050] <... chdir resumed>) = 0 [pid 6053] symlink("/dev/binderfs", "./binderfs" [pid 6052] <... symlink resumed>) = 0 [pid 6050] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6053] <... symlink resumed>) = 0 [pid 6050] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] umount2("./160/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6052] memfd_create("syzkaller", 0 [pid 6051] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6050] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6049] <... write resumed>) = 524288 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6053] memfd_create("syzkaller", 0 [pid 6052] <... memfd_create resumed>) = 3 [pid 6052] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [ 172.742992][ T6050] loop1: detected capacity change from 0 to 1024 [ 172.777537][ T6051] loop4: detected capacity change from 0 to 1024 [pid 6050] <... symlink resumed>) = 0 [pid 6050] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] newfstatat(AT_FDCWD, "./160/bus", [pid 6053] <... memfd_create resumed>) = 3 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6050] <... creat resumed>) = 4 [pid 5078] umount2("./160/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./160/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5078] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6053] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] getdents64(4, [pid 6053] <... mmap resumed>) = 0x7f0356e00000 [pid 6050] rename("./bus", "./file2" [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6053] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6052] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6050] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] getdents64(4, [pid 6050] memfd_create("syzkaller", 0 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6050] <... memfd_create resumed>) = 5 [pid 5078] close(4 [pid 6050] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5078] <... close resumed>) = 0 [pid 6050] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] rmdir("./160/bus" [pid 6049] munmap(0x7f0356e00000, 138412032 [pid 5078] <... rmdir resumed>) = 0 [pid 6049] <... munmap resumed>) = 0 [pid 5078] umount2("./160/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6049] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6051] <... mount resumed>) = 0 [pid 6049] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6051] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6049] close(5 [pid 5078] newfstatat(AT_FDCWD, "./160/binderfs", [pid 6052] <... write resumed>) = 524288 [pid 6051] chdir("./bus" [pid 6049] <... close resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6051] <... chdir resumed>) = 0 [pid 5078] unlink("./160/binderfs" [pid 6051] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6053] <... write resumed>) = 524288 [pid 6051] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... unlink resumed>) = 0 [pid 5078] getdents64(3, [pid 6052] munmap(0x7f0356e00000, 138412032 [pid 6051] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6050] <... write resumed>) = 524288 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5078] close(3 [pid 6049] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] <... close resumed>) = 0 [pid 6052] <... munmap resumed>) = 0 [pid 5078] rmdir("./160" [pid 6052] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6051] <... symlink resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 6053] munmap(0x7f0356e00000, 138412032 [pid 6052] <... openat resumed>) = 4 [pid 6051] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6049] <... open resumed>) = 5 [pid 6053] <... munmap resumed>) = 0 [pid 6052] ioctl(4, LOOP_SET_FD, 3 [pid 6049] ftruncate(5, 0 [pid 5078] mkdir("./161", 0777 [pid 6053] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6050] munmap(0x7f0356e00000, 138412032 [pid 6049] <... ftruncate resumed>) = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 6053] <... openat resumed>) = 4 [pid 6053] ioctl(4, LOOP_SET_FD, 3 [pid 6050] <... munmap resumed>) = 0 [pid 6049] exit_group(0 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6049] <... exit_group resumed>) = ? [pid 5078] <... openat resumed>) = 3 [pid 6050] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6050] close(5 [pid 6051] <... creat resumed>) = 4 [pid 6050] <... close resumed>) = 0 [pid 6051] rename("./bus", "./file2" [pid 5078] ioctl(3, LOOP_CLR_FD [pid 6049] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6049, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5075] umount2("./158", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./158", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5075] newfstatat(3, "", [pid 6050] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6052] <... ioctl resumed>) = 0 [pid 6051] <... rename resumed>) = -1 EEXIST (File exists) [pid 5075] getdents64(3, [pid 6051] memfd_create("syzkaller", 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6051] <... memfd_create resumed>) = 5 [pid 6052] close(3) = 0 [pid 6051] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6050] <... open resumed>) = 5 [pid 6052] close(4 [pid 5075] umount2("./158/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6052] <... close resumed>) = 0 [pid 6052] mkdir("./bus", 0777 [pid 6051] <... mmap resumed>) = 0x7f0356e00000 [pid 6050] ftruncate(5, 0 [pid 6053] <... ioctl resumed>) = 0 [pid 6050] <... ftruncate resumed>) = 0 [pid 6053] close(3 [pid 6052] <... mkdir resumed>) = 0 [pid 6050] exit_group(0 [pid 6053] <... close resumed>) = 0 [ 172.873756][ T6052] loop0: detected capacity change from 0 to 1024 [ 172.882388][ T6053] loop3: detected capacity change from 0 to 1024 [pid 6053] close(4 [pid 6052] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6051] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6050] <... exit_group resumed>) = ? [pid 5075] <... umount2 resumed>) = 0 [pid 5078] <... ioctl resumed>) = 0 [pid 5078] close(3) = 0 [pid 6053] <... close resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] umount2("./158/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6053] mkdir("./bus", 0777 [pid 6052] <... mount resumed>) = 0 [pid 6051] <... write resumed>) = 524288 [pid 6050] +++ exited with 0 +++ [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6053] <... mkdir resumed>) = 0 [pid 6052] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5075] newfstatat(AT_FDCWD, "./158/bus", [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6050, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5074] umount2("./158", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6052] <... openat resumed>) = 3 [pid 5075] umount2("./158/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6053] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6052] chdir("./bus" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./158", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] openat(AT_FDCWD, "./158/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6052] <... chdir resumed>) = 0 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6054 [pid 5075] <... openat resumed>) = 4 [pid 5074] <... openat resumed>) = 3 [pid 6052] openat(AT_FDCWD, "/dev/loop0", O_RDWR./strace-static-x86_64: Process 6054 attached [pid 5074] newfstatat(3, "", [pid 6054] set_robust_list(0x55556e32a660, 24 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6054] <... set_robust_list resumed>) = 0 [pid 5074] umount2("./158/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6054] chdir("./161") = 0 [pid 6052] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6054] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6054] setpgid(0, 0 [pid 6052] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5075] newfstatat(4, "", [pid 6054] <... setpgid resumed>) = 0 [pid 6054] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, [pid 6054] <... openat resumed>) = 3 [pid 6051] munmap(0x7f0356e00000, 138412032) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] close(4) = 0 [pid 6053] <... mount resumed>) = 0 [pid 6054] write(3, "1000", 4) = 4 [pid 6053] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6052] <... symlink resumed>) = 0 [pid 5075] rmdir("./158/bus" [pid 6054] close(3 [pid 6053] <... openat resumed>) = 3 [pid 6054] <... close resumed>) = 0 [pid 6053] chdir("./bus" [pid 6054] symlink("/dev/binderfs", "./binderfs" [pid 6053] <... chdir resumed>) = 0 [pid 6054] <... symlink resumed>) = 0 [pid 6053] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6052] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6051] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5075] <... rmdir resumed>) = 0 [pid 6054] memfd_create("syzkaller", 0 [pid 5074] umount2("./158/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6054] <... memfd_create resumed>) = 3 [pid 6053] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6051] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] umount2("./158/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6051] close(5 [pid 5074] newfstatat(AT_FDCWD, "./158/bus", [pid 6052] <... creat resumed>) = 4 [pid 6051] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] newfstatat(AT_FDCWD, "./158/binderfs", [pid 6052] rename("./bus", "./file2" [pid 5074] umount2("./158/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6054] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6053] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6051] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6054] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] unlink("./158/binderfs" [pid 6054] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6052] <... rename resumed>) = -1 EEXIST (File exists) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6053] <... symlink resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 6053] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6052] memfd_create("syzkaller", 0 [pid 5075] getdents64(3, [pid 5074] openat(AT_FDCWD, "./158/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6052] <... memfd_create resumed>) = 5 [pid 6051] <... open resumed>) = 5 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] <... openat resumed>) = 4 [pid 6052] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] close(3 [pid 5074] newfstatat(4, "", [pid 6053] <... creat resumed>) = 4 [pid 6052] <... mmap resumed>) = 0x7f0356e00000 [pid 6051] ftruncate(5, 0 [pid 5075] <... close resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, [pid 6054] <... write resumed>) = 524288 [pid 6053] rename("./bus", "./file2" [pid 6052] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6051] <... ftruncate resumed>) = 0 [pid 5075] rmdir("./158" [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6052] <... write resumed>) = 524288 [pid 6051] exit_group(0 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] getdents64(4, [pid 6054] munmap(0x7f0356e00000, 138412032) = 0 [pid 6051] <... exit_group resumed>) = ? [pid 6054] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6053] <... rename resumed>) = -1 EEXIST (File exists) [pid 6052] munmap(0x7f0356e00000, 138412032 [pid 6051] +++ exited with 0 +++ [pid 5075] mkdir("./159", 0777 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6054] <... openat resumed>) = 4 [pid 6053] memfd_create("syzkaller", 0 [pid 5074] close(4 [pid 6054] ioctl(4, LOOP_SET_FD, 3 [pid 6053] <... memfd_create resumed>) = 5 [pid 6053] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6052] <... munmap resumed>) = 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6051, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] <... mkdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] rmdir("./158/bus" [pid 5077] <... restart_syscall resumed>) = 0 [pid 6053] <... mmap resumed>) = 0x7f0356e00000 [pid 6053] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... openat resumed>) = 3 [pid 5074] <... rmdir resumed>) = 0 [pid 6052] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5077] umount2("./160", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] umount2("./158/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./160", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./158/binderfs", [pid 5077] <... openat resumed>) = 3 [pid 5077] newfstatat(3, "", [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6052] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6054] <... ioctl resumed>) = 0 [pid 6054] close(3 [pid 6053] <... write resumed>) = 524288 [pid 6052] close(5 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] unlink("./158/binderfs" [pid 6054] <... close resumed>) = 0 [pid 6053] munmap(0x7f0356e00000, 138412032 [pid 6054] close(4 [pid 6053] <... munmap resumed>) = 0 [pid 5077] getdents64(3, [pid 5074] <... unlink resumed>) = 0 [pid 6054] <... close resumed>) = 0 [pid 6053] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6052] <... close resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] getdents64(3, [pid 6054] mkdir("./bus", 0777 [pid 6053] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] umount2("./160/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6054] <... mkdir resumed>) = 0 [pid 6053] close(5 [pid 5074] close(3) = 0 [pid 5074] rmdir("./158") = 0 [pid 6054] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6053] <... close resumed>) = 0 [pid 6052] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] <... umount2 resumed>) = 0 [pid 5074] mkdir("./159", 0777) = 0 [pid 5077] umount2("./160/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./160/bus", [pid 6054] <... mount resumed>) = 0 [pid 6053] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 173.044723][ T6054] loop5: detected capacity change from 0 to 1024 [pid 5075] <... ioctl resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6054] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6053] <... open resumed>) = 5 [pid 6052] <... open resumed>) = 5 [pid 5077] umount2("./160/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6054] <... openat resumed>) = 3 [pid 6053] ftruncate(5, 0 [pid 6052] ftruncate(5, 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] close(3 [pid 5074] <... openat resumed>) = 3 [pid 6054] chdir("./bus" [pid 6053] <... ftruncate resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./160/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6054] <... chdir resumed>) = 0 [pid 6053] exit_group(0 [pid 6052] <... ftruncate resumed>) = 0 [pid 5077] <... openat resumed>) = 4 [pid 5075] <... close resumed>) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6054] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6053] <... exit_group resumed>) = ? [pid 5077] newfstatat(4, "", [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6054] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6052] exit_group(0 [pid 6054] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6054] <... symlink resumed>) = 0 [pid 6052] <... exit_group resumed>) = ? [pid 5077] getdents64(4, ./strace-static-x86_64: Process 6055 attached [pid 6054] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6053] +++ exited with 0 +++ [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6055] set_robust_list(0x55556e32a660, 24 [pid 6052] +++ exited with 0 +++ [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6055 [pid 6055] <... set_robust_list resumed>) = 0 [pid 5077] getdents64(4, [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6053, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6052, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6055] chdir("./159" [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5077] close(4 [pid 5076] <... restart_syscall resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5077] rmdir("./160/bus" [pid 5076] umount2("./161", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... rmdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./158", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] umount2("./160/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] openat(AT_FDCWD, "./161", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6055] <... chdir resumed>) = 0 [pid 6054] <... creat resumed>) = 4 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... openat resumed>) = 3 [pid 5073] openat(AT_FDCWD, "./158", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6055] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6054] rename("./bus", "./file2" [pid 5077] newfstatat(AT_FDCWD, "./160/binderfs", [pid 5076] newfstatat(3, "", [pid 5073] <... openat resumed>) = 3 [pid 6055] <... prctl resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] newfstatat(3, "", [pid 6055] setpgid(0, 0 [pid 5077] unlink("./160/binderfs" [pid 5076] getdents64(3, [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6055] <... setpgid resumed>) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] getdents64(3, [pid 6055] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] getdents64(3, [pid 5076] umount2("./161/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./158/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6055] <... openat resumed>) = 3 [pid 6054] <... rename resumed>) = -1 EEXIST (File exists) [pid 5077] close(3 [pid 5076] <... umount2 resumed>) = 0 [pid 6055] write(3, "1000", 4 [pid 5073] <... umount2 resumed>) = 0 [pid 6054] memfd_create("syzkaller", 0 [pid 5077] <... close resumed>) = 0 [pid 5076] umount2("./161/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6055] <... write resumed>) = 4 [pid 6054] <... memfd_create resumed>) = 5 [pid 5077] rmdir("./160" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./158/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6055] close(3 [pid 6054] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] newfstatat(AT_FDCWD, "./161/bus", [pid 6055] <... close resumed>) = 0 [pid 6054] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6055] symlink("/dev/binderfs", "./binderfs" [pid 5073] newfstatat(AT_FDCWD, "./158/bus", [pid 5076] umount2("./161/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6055] <... symlink resumed>) = 0 [pid 5077] mkdir("./161", 0777 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] openat(AT_FDCWD, "./161/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6055] memfd_create("syzkaller", 0 [pid 5077] <... mkdir resumed>) = 0 [pid 6054] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... openat resumed>) = 4 [pid 5073] umount2("./158/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6055] <... memfd_create resumed>) = 3 [pid 5076] newfstatat(4, "", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./158/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] newfstatat(4, "", [pid 5077] <... openat resumed>) = 3 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6055] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] getdents64(4, [pid 6055] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5073] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6054] <... write resumed>) = 524288 [pid 5074] <... ioctl resumed>) = 0 [pid 5073] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./158/bus") = 0 [pid 6055] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6054] munmap(0x7f0356e00000, 138412032 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] close(3) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] umount2("./158/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] getdents64(4, [pid 5073] newfstatat(AT_FDCWD, "./158/binderfs", [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6054] <... munmap resumed>) = 0 [pid 5076] close(4 [pid 5073] unlink("./158/binderfs" [pid 5076] <... close resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5076] rmdir("./161/bus" [pid 5073] getdents64(3, [pid 6054] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5076] <... rmdir resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6054] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] umount2("./161/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] close(3./strace-static-x86_64: Process 6056 attached [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6056 [pid 6056] set_robust_list(0x55556e32a660, 24 [pid 6054] close(5 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... close resumed>) = 0 [pid 6056] <... set_robust_list resumed>) = 0 [pid 6055] <... write resumed>) = 524288 [pid 5076] newfstatat(AT_FDCWD, "./161/binderfs", [pid 5073] rmdir("./158" [pid 6056] chdir("./159" [pid 5073] <... rmdir resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./161/binderfs" [pid 6056] <... chdir resumed>) = 0 [pid 6055] munmap(0x7f0356e00000, 138412032 [pid 5076] <... unlink resumed>) = 0 [pid 5076] getdents64(3, [pid 5073] mkdir("./159", 0777 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 6056] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6055] <... munmap resumed>) = 0 [pid 6054] <... close resumed>) = 0 [pid 5077] <... ioctl resumed>) = 0 [pid 5076] close(3 [pid 6056] <... prctl resumed>) = 0 [pid 6055] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6054] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5076] <... close resumed>) = 0 [pid 6056] setpgid(0, 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6056] <... setpgid resumed>) = 0 [pid 6055] <... openat resumed>) = 4 [pid 5073] <... openat resumed>) = 3 [pid 5076] rmdir("./161" [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6056] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6055] ioctl(4, LOOP_SET_FD, 3 [pid 5077] close(3 [pid 5076] <... rmdir resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5076] mkdir("./162", 0777 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... mkdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 6057 attached [pid 6056] <... openat resumed>) = 3 [pid 6055] <... ioctl resumed>) = 0 [pid 6054] <... open resumed>) = 5 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6057 [pid 5076] <... openat resumed>) = 3 [pid 6057] set_robust_list(0x55556e32a660, 24 [pid 6056] write(3, "1000", 4 [pid 6055] close(3 [pid 6054] ftruncate(5, 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6057] <... set_robust_list resumed>) = 0 [pid 6056] <... write resumed>) = 4 [pid 6055] <... close resumed>) = 0 [pid 6056] close(3 [pid 6055] close(4 [pid 6057] chdir("./161" [pid 6056] <... close resumed>) = 0 [pid 6055] <... close resumed>) = 0 [pid 6056] symlink("/dev/binderfs", "./binderfs" [pid 6055] mkdir("./bus", 0777 [pid 6054] <... ftruncate resumed>) = 0 [pid 6054] exit_group(0 [pid 6057] <... chdir resumed>) = 0 [pid 6056] <... symlink resumed>) = 0 [pid 6054] <... exit_group resumed>) = ? [pid 6057] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6054] +++ exited with 0 +++ [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6054, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6055] <... mkdir resumed>) = 0 [pid 5078] restart_syscall(<... resuming interrupted clone ...> [pid 6057] <... prctl resumed>) = 0 [pid 6057] setpgid(0, 0 [pid 6056] memfd_create("syzkaller", 0 [pid 6055] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5078] <... restart_syscall resumed>) = 0 [pid 6057] <... setpgid resumed>) = 0 [pid 6056] <... memfd_create resumed>) = 3 [pid 6057] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6056] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5078] umount2("./161", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6057] <... openat resumed>) = 3 [pid 5078] openat(AT_FDCWD, "./161", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5078] newfstatat(3, "", [pid 6057] write(3, "1000", 4 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6057] <... write resumed>) = 4 [pid 6056] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] getdents64(3, [pid 6057] close(3 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6057] <... close resumed>) = 0 [pid 6057] symlink("/dev/binderfs", "./binderfs" [pid 5078] umount2("./161/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6057] <... symlink resumed>) = 0 [pid 6055] <... mount resumed>) = 0 [pid 6055] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6057] memfd_create("syzkaller", 0 [pid 6055] <... openat resumed>) = 3 [pid 6057] <... memfd_create resumed>) = 3 [pid 6055] chdir("./bus") = 0 [pid 6055] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6057] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6055] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6057] <... mmap resumed>) = 0x7f0356e00000 [pid 6055] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6056] <... write resumed>) = 524288 [pid 6055] <... symlink resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 6055] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5073] <... ioctl resumed>) = 0 [ 173.239638][ T6055] loop2: detected capacity change from 0 to 1024 [pid 5078] <... umount2 resumed>) = 0 [pid 5073] close(3 [pid 6057] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... close resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6056] munmap(0x7f0356e00000, 138412032 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6058 [pid 6056] <... munmap resumed>) = 0 ./strace-static-x86_64: Process 6058 attached [pid 6055] <... creat resumed>) = 4 [pid 6055] rename("./bus", "./file2" [pid 5076] close(3 [pid 6058] set_robust_list(0x55556e32a660, 24 [pid 6056] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] <... close resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6058] <... set_robust_list resumed>) = 0 [pid 6056] <... openat resumed>) = 4 [pid 5078] umount2("./161/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6058] chdir("./159" [pid 6056] ioctl(4, LOOP_SET_FD, 3 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] newfstatat(AT_FDCWD, "./161/bus", ./strace-static-x86_64: Process 6059 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6059 [pid 6059] set_robust_list(0x55556e32a660, 24 [pid 5078] umount2("./161/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6059] <... set_robust_list resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6059] chdir("./162" [pid 5078] openat(AT_FDCWD, "./161/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6059] <... chdir resumed>) = 0 [pid 5078] <... openat resumed>) = 4 [pid 6059] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5078] newfstatat(4, "", [pid 6059] <... prctl resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6059] setpgid(0, 0 [pid 5078] getdents64(4, [pid 6059] <... setpgid resumed>) = 0 [pid 6058] <... chdir resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6059] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6055] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] getdents64(4, [pid 6059] <... openat resumed>) = 3 [pid 6058] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6055] memfd_create("syzkaller", 0 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6059] write(3, "1000", 4 [pid 6058] <... prctl resumed>) = 0 [pid 6057] <... write resumed>) = 524288 [pid 6055] <... memfd_create resumed>) = 5 [pid 5078] close(4 [pid 6059] <... write resumed>) = 4 [pid 6058] setpgid(0, 0 [pid 6057] munmap(0x7f0356e00000, 138412032 [pid 6055] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... close resumed>) = 0 [pid 6059] close(3 [pid 6058] <... setpgid resumed>) = 0 [pid 6057] <... munmap resumed>) = 0 [pid 6055] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] rmdir("./161/bus" [pid 6059] <... close resumed>) = 0 [pid 6058] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5078] <... rmdir resumed>) = 0 [pid 6059] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6057] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6055] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] umount2("./161/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6059] memfd_create("syzkaller", 0 [pid 6058] <... openat resumed>) = 3 [pid 6057] <... openat resumed>) = 4 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6058] write(3, "1000", 4 [pid 6057] ioctl(4, LOOP_SET_FD, 3 [pid 6056] <... ioctl resumed>) = 0 [pid 5078] newfstatat(AT_FDCWD, "./161/binderfs", [pid 6059] <... memfd_create resumed>) = 3 [pid 6058] <... write resumed>) = 4 [pid 6059] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6059] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6058] close(3 [pid 6055] <... write resumed>) = 524288 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6058] <... close resumed>) = 0 [pid 6056] close(3 [pid 5078] unlink("./161/binderfs") = 0 [pid 6058] symlink("/dev/binderfs", "./binderfs" [pid 6056] <... close resumed>) = 0 [pid 5078] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6058] <... symlink resumed>) = 0 [pid 6056] close(4 [pid 5078] close(3) = 0 [pid 6056] <... close resumed>) = 0 [pid 5078] rmdir("./161" [pid 6058] memfd_create("syzkaller", 0 [pid 6056] mkdir("./bus", 0777 [pid 5078] <... rmdir resumed>) = 0 [pid 5078] mkdir("./162", 0777 [pid 6056] <... mkdir resumed>) = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 6058] <... memfd_create resumed>) = 3 [pid 6056] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6057] <... ioctl resumed>) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 6057] close(3 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 6058] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6057] <... close resumed>) = 0 [pid 6058] <... mmap resumed>) = 0x7f0356e00000 [pid 6057] close(4 [pid 6055] munmap(0x7f0356e00000, 138412032 [pid 6057] <... close resumed>) = 0 [pid 6057] mkdir("./bus", 0777 [pid 6055] <... munmap resumed>) = 0 [pid 6059] <... write resumed>) = 524288 [pid 6058] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6055] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6057] <... mkdir resumed>) = 0 [pid 6056] <... mount resumed>) = 0 [pid 6056] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6055] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6057] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6056] <... openat resumed>) = 3 [pid 6055] close(5 [pid 6057] <... mount resumed>) = 0 [pid 6057] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6056] chdir("./bus" [pid 6059] munmap(0x7f0356e00000, 138412032 [pid 6057] <... openat resumed>) = 3 [pid 6056] <... chdir resumed>) = 0 [pid 6059] <... munmap resumed>) = 0 [pid 6057] chdir("./bus" [pid 6056] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6055] <... close resumed>) = 0 [pid 6056] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6057] <... chdir resumed>) = 0 [pid 6056] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6057] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [ 173.320438][ T6056] loop1: detected capacity change from 0 to 1024 [ 173.342762][ T6057] loop4: detected capacity change from 0 to 1024 [pid 6059] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6057] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6059] <... openat resumed>) = 4 [pid 6059] ioctl(4, LOOP_SET_FD, 3 [pid 6058] <... write resumed>) = 524288 [pid 6056] <... symlink resumed>) = 0 [pid 6055] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6057] <... symlink resumed>) = 0 [pid 6057] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6056] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6058] munmap(0x7f0356e00000, 138412032 [pid 6057] <... creat resumed>) = 4 [pid 6056] <... creat resumed>) = 4 [pid 6057] rename("./bus", "./file2" [pid 6056] rename("./bus", "./file2" [pid 6055] <... open resumed>) = 5 [pid 6058] <... munmap resumed>) = 0 [pid 6059] <... ioctl resumed>) = 0 [pid 6058] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6057] <... rename resumed>) = -1 EEXIST (File exists) [pid 6056] <... rename resumed>) = -1 EEXIST (File exists) [pid 6055] ftruncate(5, 0 [pid 6057] memfd_create("syzkaller", 0) = 5 [pid 6059] close(3 [pid 6058] <... openat resumed>) = 4 [pid 6057] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6056] memfd_create("syzkaller", 0 [pid 6055] <... ftruncate resumed>) = 0 [pid 5078] <... ioctl resumed>) = 0 [pid 6059] <... close resumed>) = 0 [pid 6058] ioctl(4, LOOP_SET_FD, 3 [pid 6057] <... mmap resumed>) = 0x7f0356e00000 [pid 6056] <... memfd_create resumed>) = 5 [pid 6055] exit_group(0 [pid 6059] close(4 [pid 6058] <... ioctl resumed>) = 0 [pid 6057] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6056] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6055] <... exit_group resumed>) = ? [pid 6059] <... close resumed>) = 0 [pid 6058] close(3 [pid 5078] close(3 [pid 6056] <... mmap resumed>) = 0x7f0356e00000 [pid 6058] <... close resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6056] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6058] close(4 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6060 ./strace-static-x86_64: Process 6060 attached [pid 6059] mkdir("./bus", 0777 [pid 6058] <... close resumed>) = 0 [pid 6055] +++ exited with 0 +++ [pid 6059] <... mkdir resumed>) = 0 [pid 6058] mkdir("./bus", 0777 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6055, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 6060] set_robust_list(0x55556e32a660, 24) = 0 [pid 6058] <... mkdir resumed>) = 0 [pid 6057] <... write resumed>) = 524288 [pid 6060] chdir("./162" [pid 5075] umount2("./159", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./159", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6060] <... chdir resumed>) = 0 [pid 6059] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6058] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6060] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5075] newfstatat(3, "", [pid 6060] setpgid(0, 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, [pid 6060] <... setpgid resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6060] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] umount2("./159/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6060] <... openat resumed>) = 3 [pid 6060] write(3, "1000", 4) = 4 [ 173.404194][ T6059] loop3: detected capacity change from 0 to 1024 [ 173.437275][ T6058] loop0: detected capacity change from 0 to 1024 [pid 6060] close(3) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5075] umount2("./159/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6056] <... write resumed>) = 524288 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./159/bus", [pid 6060] symlink("/dev/binderfs", "./binderfs" [pid 6057] munmap(0x7f0356e00000, 138412032 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6060] <... symlink resumed>) = 0 [pid 6058] <... mount resumed>) = 0 [pid 6057] <... munmap resumed>) = 0 [pid 6056] munmap(0x7f0356e00000, 138412032 [pid 5075] umount2("./159/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6058] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./159/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6058] <... openat resumed>) = 3 [pid 5075] <... openat resumed>) = 4 [pid 6060] memfd_create("syzkaller", 0 [pid 6058] chdir("./bus" [pid 6056] <... munmap resumed>) = 0 [pid 5075] newfstatat(4, "", [pid 6060] <... memfd_create resumed>) = 3 [pid 6059] <... mount resumed>) = 0 [pid 6058] <... chdir resumed>) = 0 [pid 6057] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6056] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6060] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6059] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6058] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6056] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6059] <... openat resumed>) = 3 [pid 6058] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6057] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6056] close(5 [pid 5075] getdents64(4, [pid 6060] <... mmap resumed>) = 0x7f0356e00000 [pid 6059] chdir("./bus" [pid 6058] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6057] close(5 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6059] <... chdir resumed>) = 0 [pid 6058] <... symlink resumed>) = 0 [pid 6057] <... close resumed>) = 0 [pid 6056] <... close resumed>) = 0 [pid 5075] getdents64(4, [pid 6059] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6058] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] close(4) = 0 [pid 5075] rmdir("./159/bus" [pid 6060] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6059] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... rmdir resumed>) = 0 [pid 5075] umount2("./159/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./159/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./159/binderfs" [pid 6059] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5075] <... unlink resumed>) = 0 [pid 5075] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 5075] rmdir("./159" [pid 6059] <... symlink resumed>) = 0 [pid 6058] <... creat resumed>) = 4 [pid 6056] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5075] <... rmdir resumed>) = 0 [pid 6058] rename("./bus", "./file2" [pid 6057] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6060] <... write resumed>) = 524288 [pid 5075] mkdir("./160", 0777 [pid 6059] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6058] <... rename resumed>) = -1 EEXIST (File exists) [pid 5075] <... mkdir resumed>) = 0 [pid 6058] memfd_create("syzkaller", 0 [pid 6056] <... open resumed>) = 5 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6058] <... memfd_create resumed>) = 5 [pid 5075] <... openat resumed>) = 3 [pid 6056] ftruncate(5, 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6058] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6056] <... ftruncate resumed>) = 0 [pid 6060] munmap(0x7f0356e00000, 138412032 [pid 6059] <... creat resumed>) = 4 [pid 6057] <... open resumed>) = 5 [pid 6057] ftruncate(5, 0) = 0 [pid 6057] exit_group(0 [pid 6059] rename("./bus", "./file2" [pid 6056] exit_group(0 [pid 6057] <... exit_group resumed>) = ? [pid 6060] <... munmap resumed>) = 0 [pid 6059] <... rename resumed>) = -1 EEXIST (File exists) [pid 6058] <... mmap resumed>) = 0x7f0356e00000 [pid 6056] <... exit_group resumed>) = ? [pid 6059] memfd_create("syzkaller", 0) = 5 [pid 6056] +++ exited with 0 +++ [pid 6059] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6057] +++ exited with 0 +++ [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6057, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5077] umount2("./161", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./161", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6060] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6059] <... mmap resumed>) = 0x7f0356e00000 [pid 6058] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... openat resumed>) = 3 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6056, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6060] <... openat resumed>) = 4 [pid 6059] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] newfstatat(3, "", [pid 5075] <... ioctl resumed>) = 0 [pid 6060] ioctl(4, LOOP_SET_FD, 3 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] umount2("./161/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] close(3) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] umount2("./159", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6061 attached [pid 6061] set_robust_list(0x55556e32a660, 24 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6061 [pid 5074] openat(AT_FDCWD, "./159", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6061] <... set_robust_list resumed>) = 0 [pid 6061] chdir("./160") = 0 [pid 6061] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6061] setpgid(0, 0) = 0 [pid 6061] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5074] <... openat resumed>) = 3 [pid 6061] write(3, "1000", 4 [pid 6059] <... write resumed>) = 524288 [pid 5077] <... umount2 resumed>) = 0 [pid 5074] newfstatat(3, "", [pid 6058] <... write resumed>) = 524288 [pid 6061] <... write resumed>) = 4 [pid 6061] close(3) = 0 [pid 6060] <... ioctl resumed>) = 0 [pid 6058] munmap(0x7f0356e00000, 138412032 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6061] symlink("/dev/binderfs", "./binderfs" [pid 6060] close(3 [pid 6059] munmap(0x7f0356e00000, 138412032 [pid 6058] <... munmap resumed>) = 0 [pid 5077] umount2("./161/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] getdents64(3, [pid 6061] <... symlink resumed>) = 0 [pid 6060] <... close resumed>) = 0 [pid 6059] <... munmap resumed>) = 0 [pid 6058] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6061] memfd_create("syzkaller", 0 [pid 6060] close(4 [pid 6059] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6058] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6061] <... memfd_create resumed>) = 3 [pid 6060] <... close resumed>) = 0 [pid 6059] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6058] close(5 [pid 5077] newfstatat(AT_FDCWD, "./161/bus", [pid 5074] umount2("./159/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6061] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6060] mkdir("./bus", 0777 [pid 6059] close(5 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6061] <... mmap resumed>) = 0x7f0356e00000 [ 173.593044][ T6060] loop5: detected capacity change from 0 to 1024 [pid 5077] umount2("./161/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6061] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6060] <... mkdir resumed>) = 0 [pid 6059] <... close resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6060] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5077] openat(AT_FDCWD, "./161/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5077] newfstatat(4, "", [pid 6058] <... close resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] close(4 [pid 6059] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6058] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] <... close resumed>) = 0 [pid 5077] rmdir("./161/bus") = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5077] umount2("./161/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./161/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6058] <... open resumed>) = 5 [pid 5077] unlink("./161/binderfs") = 0 [pid 5077] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] close(3) = 0 [pid 5077] rmdir("./161") = 0 [pid 5077] mkdir("./162", 0777 [pid 6059] <... open resumed>) = 5 [pid 6058] ftruncate(5, 0 [pid 5077] <... mkdir resumed>) = 0 [pid 5074] umount2("./159/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6061] <... write resumed>) = 524288 [pid 6058] <... ftruncate resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./159/bus", [pid 6061] munmap(0x7f0356e00000, 138412032 [pid 6058] exit_group(0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6061] <... munmap resumed>) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 6061] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6061] ioctl(4, LOOP_SET_FD, 3 [pid 6059] ftruncate(5, 0 [pid 6058] <... exit_group resumed>) = ? [pid 5074] umount2("./159/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6060] <... mount resumed>) = 0 [pid 6058] +++ exited with 0 +++ [pid 5074] openat(AT_FDCWD, "./159/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6060] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5074] <... openat resumed>) = 4 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6058, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6060] <... openat resumed>) = 3 [pid 5074] newfstatat(4, "", [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 6060] chdir("./bus" [pid 6059] <... ftruncate resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6060] <... chdir resumed>) = 0 [pid 6059] exit_group(0 [pid 5074] getdents64(4, [pid 5073] <... restart_syscall resumed>) = 0 [pid 6060] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6059] <... exit_group resumed>) = ? [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6060] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] umount2("./159", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./159", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6061] <... ioctl resumed>) = 0 [pid 6060] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6059] +++ exited with 0 +++ [pid 5074] getdents64(4, [pid 5073] <... openat resumed>) = 3 [pid 6061] close(3 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6061] <... close resumed>) = 0 [pid 6060] <... symlink resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6059, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5074] close(4 [pid 5073] newfstatat(3, "", [pid 6061] close(4 [pid 6060] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5074] <... close resumed>) = 0 [pid 6061] <... close resumed>) = 0 [pid 5074] rmdir("./159/bus" [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... restart_syscall resumed>) = 0 [pid 6061] mkdir("./bus", 0777 [pid 6060] <... creat resumed>) = 4 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] getdents64(3, [pid 6060] rename("./bus", "./file2" [pid 5074] umount2("./159/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] newfstatat(AT_FDCWD, "./159/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6061] <... mkdir resumed>) = 0 [pid 5076] umount2("./162", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] unlink("./159/binderfs" [pid 5073] umount2("./159/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6061] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5074] <... unlink resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 5074] rmdir("./159") = 0 [pid 5076] openat(AT_FDCWD, "./162", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6060] <... rename resumed>) = -1 EEXIST (File exists) [pid 5074] mkdir("./160", 0777 [pid 6060] memfd_create("syzkaller", 0 [pid 5077] <... ioctl resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5074] <... mkdir resumed>) = 0 [pid 5076] newfstatat(3, "", [pid 6060] <... memfd_create resumed>) = 5 [pid 5077] close(3 [pid 6060] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] <... umount2 resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5076] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6061] <... mount resumed>) = 0 [ 173.695812][ T6061] loop2: detected capacity change from 0 to 1024 [pid 5076] umount2("./162/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6061] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6060] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] <... close resumed>) = 0 [pid 5073] umount2("./159/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6061] <... openat resumed>) = 3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6061] chdir("./bus" [pid 5073] newfstatat(AT_FDCWD, "./159/bus", ./strace-static-x86_64: Process 6062 attached [pid 6061] <... chdir resumed>) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6062 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5073] umount2("./159/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6061] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6062] set_robust_list(0x55556e32a660, 24 [pid 6061] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5073] openat(AT_FDCWD, "./159/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", [pid 6060] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6062] <... set_robust_list resumed>) = 0 [pid 6061] <... symlink resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 6061] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5073] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./159/bus") = 0 [pid 5073] umount2("./159/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./159/binderfs", [pid 6062] chdir("./162" [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./159/binderfs" [pid 5076] umount2("./162/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6062] <... chdir resumed>) = 0 [pid 6061] <... creat resumed>) = 4 [pid 5073] <... unlink resumed>) = 0 [pid 6062] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6061] rename("./bus", "./file2" [pid 6062] <... prctl resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] getdents64(3, [pid 6062] setpgid(0, 0 [pid 5076] newfstatat(AT_FDCWD, "./162/bus", [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] rmdir("./159" [pid 6062] <... setpgid resumed>) = 0 [pid 6061] <... rename resumed>) = -1 EEXIST (File exists) [pid 5076] umount2("./162/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6062] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6061] memfd_create("syzkaller", 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... rmdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./162/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6062] <... openat resumed>) = 3 [pid 6061] <... memfd_create resumed>) = 5 [pid 6060] <... write resumed>) = 524288 [pid 5076] <... openat resumed>) = 4 [pid 5074] <... ioctl resumed>) = 0 [pid 5073] mkdir("./160", 0777 [pid 6062] write(3, "1000", 4 [pid 6061] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6060] munmap(0x7f0356e00000, 138412032 [pid 5076] newfstatat(4, "", [pid 5074] close(3 [pid 5073] <... mkdir resumed>) = 0 [pid 6062] <... write resumed>) = 4 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, [pid 5074] <... close resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... openat resumed>) = 3 [pid 6060] <... munmap resumed>) = 0 [pid 6062] close(3 [pid 6061] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 6063 attached [pid 6062] <... close resumed>) = 0 [pid 6060] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5076] getdents64(4, [pid 6063] set_robust_list(0x55556e32a660, 24 [pid 6062] symlink("/dev/binderfs", "./binderfs" [pid 6061] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6060] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6063] <... set_robust_list resumed>) = 0 [pid 6062] <... symlink resumed>) = 0 [pid 5076] close(4 [pid 6060] close(5 [pid 6063] chdir("./160") = 0 [pid 6063] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6063] setpgid(0, 0) = 0 [pid 6063] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5076] <... close resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6063 [pid 5076] rmdir("./162/bus" [pid 6062] memfd_create("syzkaller", 0 [pid 6060] <... close resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 6062] <... memfd_create resumed>) = 3 [pid 6060] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5076] umount2("./162/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6063] write(3, "1000", 4 [pid 6062] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6063] <... write resumed>) = 4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6063] close(3 [pid 6062] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] newfstatat(AT_FDCWD, "./162/binderfs", [pid 6063] <... close resumed>) = 0 [pid 6063] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6063] memfd_create("syzkaller", 0) = 3 [pid 6063] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6061] <... write resumed>) = 524288 [pid 6063] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6063] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6062] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6061] munmap(0x7f0356e00000, 138412032 [pid 6060] <... open resumed>) = 5 [pid 5076] unlink("./162/binderfs" [pid 5073] <... ioctl resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 6060] ftruncate(5, 0 [pid 5076] getdents64(3, [pid 6062] <... write resumed>) = 524288 [pid 6061] <... munmap resumed>) = 0 [pid 6060] <... ftruncate resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3 [pid 6061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6060] exit_group(0 [pid 5076] close(3 [pid 6061] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6060] <... exit_group resumed>) = ? [pid 5076] <... close resumed>) = 0 [pid 5076] rmdir("./162") = 0 [pid 5076] mkdir("./163", 0777 [pid 6062] munmap(0x7f0356e00000, 138412032 [pid 5076] <... mkdir resumed>) = 0 [pid 6062] <... munmap resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6061] close(5 [pid 5076] <... openat resumed>) = 3 [pid 6061] <... close resumed>) = 0 [pid 6062] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5073] <... close resumed>) = 0 [pid 6063] <... write resumed>) = 524288 [pid 6062] <... openat resumed>) = 4 [pid 6063] munmap(0x7f0356e00000, 138412032 [pid 6062] ioctl(4, LOOP_SET_FD, 3 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6063] <... munmap resumed>) = 0 [pid 6062] <... ioctl resumed>) = 0 [pid 6061] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6060] +++ exited with 0 +++ [pid 6062] close(3 [pid 6063] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6062] <... close resumed>) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6060, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- ./strace-static-x86_64: Process 6064 attached [pid 6063] <... openat resumed>) = 4 [pid 6062] close(4 [pid 5078] restart_syscall(<... resuming interrupted clone ...> [pid 6064] set_robust_list(0x55556e32a660, 24 [pid 6063] ioctl(4, LOOP_SET_FD, 3 [pid 6062] <... close resumed>) = 0 [pid 5078] <... restart_syscall resumed>) = 0 [pid 5078] umount2("./162", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./162", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6061] <... open resumed>) = 5 [pid 5078] <... openat resumed>) = 3 [pid 5078] newfstatat(3, "", [pid 6061] ftruncate(5, 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6061] <... ftruncate resumed>) = 0 [pid 5078] getdents64(3, [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6064 [pid 6061] exit_group(0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] umount2("./162/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6062] mkdir("./bus", 0777 [pid 6061] <... exit_group resumed>) = ? [pid 6064] <... set_robust_list resumed>) = 0 [pid 6062] <... mkdir resumed>) = 0 [pid 6061] +++ exited with 0 +++ [pid 6064] chdir("./160" [pid 6062] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6061, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6064] <... chdir resumed>) = 0 [pid 6064] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6063] <... ioctl resumed>) = 0 [pid 6064] setpgid(0, 0 [pid 6063] close(3 [pid 6064] <... setpgid resumed>) = 0 [pid 6063] <... close resumed>) = 0 [pid 5075] umount2("./160", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6064] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6063] close(4 [pid 6062] <... mount resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6063] <... close resumed>) = 0 [pid 6062] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6063] mkdir("./bus", 0777 [pid 6062] <... openat resumed>) = 3 [pid 5075] openat(AT_FDCWD, "./160", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6062] chdir("./bus" [pid 6063] <... mkdir resumed>) = 0 [pid 6062] <... chdir resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 6064] <... openat resumed>) = 3 [pid 6062] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] <... umount2 resumed>) = 0 [pid 6062] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] umount2("./162/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] newfstatat(3, "", [pid 6062] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] newfstatat(AT_FDCWD, "./162/bus", [pid 5075] getdents64(3, [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6064] write(3, "1000", 4 [pid 6063] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5078] umount2("./162/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./160/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6064] <... write resumed>) = 4 [ 173.898332][ T6062] loop4: detected capacity change from 0 to 1024 [ 173.915426][ T6063] loop1: detected capacity change from 0 to 1024 [pid 6062] <... symlink resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6064] close(3 [pid 6062] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] openat(AT_FDCWD, "./162/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] close(3 [pid 5075] <... umount2 resumed>) = 0 [pid 5078] <... openat resumed>) = 4 [pid 5076] <... close resumed>) = 0 [pid 5078] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(4, [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6064] <... close resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5078] close(4) = 0 [pid 5078] rmdir("./162/bus") = 0 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6065 ./strace-static-x86_64: Process 6065 attached [pid 6064] symlink("/dev/binderfs", "./binderfs" [pid 6062] <... creat resumed>) = 4 [pid 5078] umount2("./162/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./160/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6064] <... symlink resumed>) = 0 [pid 6063] <... mount resumed>) = 0 [pid 6062] rename("./bus", "./file2" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6065] set_robust_list(0x55556e32a660, 24 [pid 6064] memfd_create("syzkaller", 0 [pid 6063] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6065] <... set_robust_list resumed>) = 0 [pid 6064] <... memfd_create resumed>) = 3 [pid 6063] <... openat resumed>) = 3 [pid 6062] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] newfstatat(AT_FDCWD, "./162/binderfs", [pid 5075] newfstatat(AT_FDCWD, "./160/bus", [pid 6063] chdir("./bus") = 0 [pid 6063] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6063] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6062] memfd_create("syzkaller", 0 [pid 6064] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6062] <... memfd_create resumed>) = 5 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./160/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6064] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6062] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6065] chdir("./163" [pid 6062] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] openat(AT_FDCWD, "./160/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6065] <... chdir resumed>) = 0 [pid 6065] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5078] unlink("./162/binderfs" [pid 6065] <... prctl resumed>) = 0 [pid 6065] setpgid(0, 0 [pid 6063] <... symlink resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 6065] <... setpgid resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 6065] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6063] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6065] <... openat resumed>) = 3 [pid 5078] getdents64(3, [pid 5075] newfstatat(4, "", [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6065] write(3, "1000", 4 [pid 5078] close(3 [pid 6065] <... write resumed>) = 4 [pid 5078] <... close resumed>) = 0 [pid 5075] getdents64(4, [pid 6065] close(3 [pid 5078] rmdir("./162") = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6065] <... close resumed>) = 0 [pid 5075] getdents64(4, [pid 6065] symlink("/dev/binderfs", "./binderfs" [pid 6064] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6063] <... creat resumed>) = 4 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6065] <... symlink resumed>) = 0 [pid 6063] rename("./bus", "./file2" [pid 5078] mkdir("./163", 0777 [pid 6065] memfd_create("syzkaller", 0 [pid 5075] close(4 [pid 6065] <... memfd_create resumed>) = 3 [pid 5078] <... mkdir resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 6065] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6063] <... rename resumed>) = -1 EEXIST (File exists) [pid 5075] rmdir("./160/bus" [pid 6065] <... mmap resumed>) = 0x7f0356e00000 [pid 6063] memfd_create("syzkaller", 0 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6065] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6063] <... memfd_create resumed>) = 5 [pid 6062] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... openat resumed>) = 3 [pid 5075] <... rmdir resumed>) = 0 [pid 6063] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6065] <... write resumed>) = 524288 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5075] umount2("./160/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6065] munmap(0x7f0356e00000, 138412032 [pid 6063] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6062] <... write resumed>) = 524288 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6065] <... munmap resumed>) = 0 [pid 6064] <... write resumed>) = 524288 [pid 6064] munmap(0x7f0356e00000, 138412032 [pid 6065] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] newfstatat(AT_FDCWD, "./160/binderfs", [pid 6065] <... openat resumed>) = 4 [pid 6064] <... munmap resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./160/binderfs" [pid 6065] ioctl(4, LOOP_SET_FD, 3 [pid 6062] munmap(0x7f0356e00000, 138412032 [pid 5075] <... unlink resumed>) = 0 [pid 5075] getdents64(3, [pid 6064] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6064] <... openat resumed>) = 4 [pid 5075] close(3) = 0 [pid 5075] rmdir("./160" [pid 6064] ioctl(4, LOOP_SET_FD, 3 [pid 6065] <... ioctl resumed>) = 0 [pid 6063] <... write resumed>) = 524288 [pid 6062] <... munmap resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 6065] close(3 [pid 6063] munmap(0x7f0356e00000, 138412032 [pid 6062] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5075] mkdir("./161", 0777 [pid 6065] <... close resumed>) = 0 [pid 6063] <... munmap resumed>) = 0 [pid 6062] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... mkdir resumed>) = 0 [pid 6065] close(4 [pid 6064] <... ioctl resumed>) = 0 [pid 6065] <... close resumed>) = 0 [pid 6064] close(3 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 6065] mkdir("./bus", 0777 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6065] <... mkdir resumed>) = 0 [pid 6064] <... close resumed>) = 0 [pid 6062] close(5 [pid 6064] close(4 [pid 6063] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6064] <... close resumed>) = 0 [pid 6064] mkdir("./bus", 0777 [pid 6063] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6062] <... close resumed>) = 0 [pid 6065] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6063] close(5 [pid 6064] <... mkdir resumed>) = 0 [pid 6065] <... mount resumed>) = 0 [pid 6064] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6065] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6065] chdir("./bus") = 0 [pid 6065] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6065] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6065] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6062] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6063] <... close resumed>) = 0 [pid 6065] <... creat resumed>) = 4 [pid 6062] <... open resumed>) = 5 [pid 6064] <... mount resumed>) = 0 [pid 6063] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] <... ioctl resumed>) = 0 [pid 6065] rename("./bus", "./file2" [pid 6064] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6062] ftruncate(5, 0 [pid 5078] close(3 [pid 6064] <... openat resumed>) = 3 [pid 5078] <... close resumed>) = 0 [pid 6064] chdir("./bus") = 0 [ 174.058126][ T6065] loop3: detected capacity change from 0 to 1024 [ 174.067646][ T6064] loop0: detected capacity change from 0 to 1024 [pid 6062] <... ftruncate resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6065] <... rename resumed>) = -1 EEXIST (File exists) [pid 6065] memfd_create("syzkaller", 0 [pid 6064] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6065] <... memfd_create resumed>) = 5 [pid 6064] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"./strace-static-x86_64: Process 6066 attached [pid 6065] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6062] exit_group(0 [pid 6066] set_robust_list(0x55556e32a660, 24 [pid 6065] <... mmap resumed>) = 0x7f0356e00000 [pid 6063] <... open resumed>) = 5 [pid 6062] <... exit_group resumed>) = ? [pid 6066] <... set_robust_list resumed>) = 0 [pid 6066] chdir("./163" [pid 6065] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6064] <... symlink resumed>) = 0 [pid 6063] ftruncate(5, 0 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6066 [pid 6064] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6063] <... ftruncate resumed>) = 0 [pid 6066] <... chdir resumed>) = 0 [pid 6063] exit_group(0 [pid 6062] +++ exited with 0 +++ [pid 6063] <... exit_group resumed>) = ? [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6062, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6063] +++ exited with 0 +++ [pid 5077] umount2("./162", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6064] <... creat resumed>) = 4 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6063, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5077] openat(AT_FDCWD, "./162", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6066] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6064] rename("./bus", "./file2" [pid 5077] <... openat resumed>) = 3 [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 6066] <... prctl resumed>) = 0 [pid 6064] <... rename resumed>) = -1 EEXIST (File exists) [pid 5077] newfstatat(3, "", [pid 5074] <... restart_syscall resumed>) = 0 [pid 6066] setpgid(0, 0) = 0 [pid 6064] memfd_create("syzkaller", 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6064] <... memfd_create resumed>) = 5 [pid 5077] getdents64(3, [pid 6064] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6066] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6064] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] umount2("./162/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./160", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6066] <... openat resumed>) = 3 [pid 6066] write(3, "1000", 4 [pid 6064] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... ioctl resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6066] <... write resumed>) = 4 [pid 5075] close(3 [pid 5074] openat(AT_FDCWD, "./160", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6066] close(3 [pid 5075] <... close resumed>) = 0 [pid 6066] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6067 attached [pid 6066] symlink("/dev/binderfs", "./binderfs" [pid 5074] newfstatat(3, "", [pid 6067] set_robust_list(0x55556e32a660, 24 [pid 6066] <... symlink resumed>) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6067 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6067] <... set_robust_list resumed>) = 0 [pid 6067] chdir("./161" [pid 6066] memfd_create("syzkaller", 0 [pid 6064] <... write resumed>) = 524288 [pid 5074] getdents64(3, [pid 6065] <... write resumed>) = 524288 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6065] munmap(0x7f0356e00000, 138412032 [pid 5074] umount2("./160/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6067] <... chdir resumed>) = 0 [pid 6067] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6065] <... munmap resumed>) = 0 [pid 6067] <... prctl resumed>) = 0 [pid 5077] umount2("./162/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6065] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6067] setpgid(0, 0 [pid 6065] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] newfstatat(AT_FDCWD, "./162/bus", [pid 6067] <... setpgid resumed>) = 0 [pid 6066] <... memfd_create resumed>) = 3 [pid 6065] close(5 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6066] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6067] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6066] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] umount2("./162/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./162/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6067] <... openat resumed>) = 3 [pid 5077] <... openat resumed>) = 4 [pid 6067] write(3, "1000", 4 [pid 6066] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6065] <... close resumed>) = 0 [pid 5077] newfstatat(4, "", [pid 6067] <... write resumed>) = 4 [pid 6064] munmap(0x7f0356e00000, 138412032 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6067] close(3 [pid 6064] <... munmap resumed>) = 0 [pid 5077] getdents64(4, [pid 6067] <... close resumed>) = 0 [pid 6067] symlink("/dev/binderfs", "./binderfs" [pid 6064] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] <... umount2 resumed>) = 0 [pid 6065] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6064] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] getdents64(4, [pid 6067] <... symlink resumed>) = 0 [pid 6064] close(5 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6067] memfd_create("syzkaller", 0 [pid 5077] close(4 [pid 5074] umount2("./160/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6067] <... memfd_create resumed>) = 3 [pid 5077] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] rmdir("./162/bus" [pid 5074] newfstatat(AT_FDCWD, "./160/bus", [pid 6067] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6067] <... mmap resumed>) = 0x7f0356e00000 [pid 6065] <... open resumed>) = 5 [pid 6064] <... close resumed>) = 0 [pid 5077] umount2("./162/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./160/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6065] ftruncate(5, 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6065] <... ftruncate resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./160/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6065] exit_group(0 [pid 5077] newfstatat(AT_FDCWD, "./162/binderfs", [pid 5074] <... openat resumed>) = 4 [pid 6065] <... exit_group resumed>) = ? [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] newfstatat(4, "", [pid 6065] +++ exited with 0 +++ [pid 5077] unlink("./162/binderfs" [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6064] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] <... unlink resumed>) = 0 [pid 5074] getdents64(4, [pid 5077] getdents64(3, [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6065, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] <... restart_syscall resumed>) = 0 [pid 5074] getdents64(4, [pid 5077] close(3 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] <... close resumed>) = 0 [pid 5074] close(4 [pid 5077] rmdir("./162" [pid 5074] <... close resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5074] rmdir("./160/bus" [pid 6066] <... write resumed>) = 524288 [pid 5076] umount2("./163", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... rmdir resumed>) = 0 [pid 5077] mkdir("./163", 0777 [pid 6067] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6066] munmap(0x7f0356e00000, 138412032 [pid 6064] <... open resumed>) = 5 [pid 5077] <... mkdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./160/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] openat(AT_FDCWD, "./163", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6064] ftruncate(5, 0 [pid 5076] <... openat resumed>) = 3 [pid 6064] <... ftruncate resumed>) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6066] <... munmap resumed>) = 0 [pid 6064] exit_group(0 [pid 5077] <... openat resumed>) = 3 [pid 5074] newfstatat(AT_FDCWD, "./160/binderfs", [pid 6064] <... exit_group resumed>) = ? [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6066] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6064] +++ exited with 0 +++ [pid 5076] newfstatat(3, "", [pid 5074] unlink("./160/binderfs" [pid 6066] <... openat resumed>) = 4 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6064, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5074] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3 [pid 6067] <... write resumed>) = 524288 [pid 6066] ioctl(4, LOOP_SET_FD, 3 [pid 5076] getdents64(3, [pid 5074] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] rmdir("./160" [pid 5073] umount2("./160", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... rmdir resumed>) = 0 [pid 5074] mkdir("./161", 0777 [pid 6067] munmap(0x7f0356e00000, 138412032 [pid 6066] <... ioctl resumed>) = 0 [pid 5076] umount2("./163/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6067] <... munmap resumed>) = 0 [pid 6066] close(3 [pid 5074] <... mkdir resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./160", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", [pid 6067] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6066] <... close resumed>) = 0 [pid 6067] <... openat resumed>) = 4 [pid 6066] close(4 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6067] ioctl(4, LOOP_SET_FD, 3 [pid 6066] <... close resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5073] getdents64(3, [pid 5077] <... ioctl resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] umount2("./160/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] close(3 [pid 6067] <... ioctl resumed>) = 0 [pid 6066] mkdir("./bus", 0777 [pid 5076] <... umount2 resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 6066] <... mkdir resumed>) = 0 [pid 5073] umount2("./160/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6066] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6067] close(3 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6067] <... close resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./160/bus", ./strace-static-x86_64: Process 6068 attached [pid 6067] close(4 [pid 5076] umount2("./163/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6068] set_robust_list(0x55556e32a660, 24 [pid 6067] <... close resumed>) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6068 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./160/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6067] mkdir("./bus", 0777 [pid 5076] newfstatat(AT_FDCWD, "./163/bus", [pid 6068] <... set_robust_list resumed>) = 0 [pid 6067] <... mkdir resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6068] chdir("./163" [pid 6067] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6066] <... mount resumed>) = 0 [pid 5076] umount2("./163/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./163/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 174.269966][ T6066] loop5: detected capacity change from 0 to 1024 [ 174.287404][ T6067] loop2: detected capacity change from 0 to 1024 [pid 6068] <... chdir resumed>) = 0 [pid 6066] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5073] openat(AT_FDCWD, "./160/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6068] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5073] <... openat resumed>) = 4 [pid 6068] setpgid(0, 0 [pid 6066] <... openat resumed>) = 3 [pid 5073] newfstatat(4, "", [pid 6068] <... setpgid resumed>) = 0 [pid 5076] getdents64(4, [pid 6068] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6068] <... openat resumed>) = 3 [pid 6066] chdir("./bus" [pid 6068] write(3, "1000", 4 [pid 5073] getdents64(4, [pid 6068] <... write resumed>) = 4 [pid 6066] <... chdir resumed>) = 0 [pid 6068] close(3 [pid 6066] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5076] close(4 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6068] <... close resumed>) = 0 [pid 6066] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... close resumed>) = 0 [pid 5073] getdents64(4, [pid 6068] symlink("/dev/binderfs", "./binderfs" [pid 6066] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5076] rmdir("./163/bus" [pid 6068] <... symlink resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5076] umount2("./163/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] close(4 [pid 6068] memfd_create("syzkaller", 0 [pid 5076] newfstatat(AT_FDCWD, "./163/binderfs", [pid 6068] <... memfd_create resumed>) = 3 [pid 6066] <... symlink resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... close resumed>) = 0 [pid 5076] unlink("./163/binderfs" [pid 5073] rmdir("./160/bus" [pid 6068] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6066] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5076] <... unlink resumed>) = 0 [pid 5076] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 6068] <... mmap resumed>) = 0x7f0356e00000 [pid 6067] <... mount resumed>) = 0 [pid 5076] close(3 [pid 5074] <... ioctl resumed>) = 0 [pid 6067] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5076] <... close resumed>) = 0 [pid 6067] <... openat resumed>) = 3 [pid 6067] chdir("./bus" [pid 5076] rmdir("./163" [pid 6067] <... chdir resumed>) = 0 [pid 6067] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] <... rmdir resumed>) = 0 [pid 6067] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6067] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5076] mkdir("./164", 0777 [pid 6068] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6066] <... creat resumed>) = 4 [pid 5073] umount2("./160/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6067] <... symlink resumed>) = 0 [pid 6066] rename("./bus", "./file2" [pid 5076] <... mkdir resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6067] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5073] newfstatat(AT_FDCWD, "./160/binderfs", [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5074] close(3) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6067] <... creat resumed>) = 4 [pid 6066] <... rename resumed>) = -1 EEXIST (File exists) [pid 5073] unlink("./160/binderfs" [pid 6066] memfd_create("syzkaller", 0 [pid 6067] rename("./bus", "./file2" [pid 6066] <... memfd_create resumed>) = 5 [pid 5073] <... unlink resumed>) = 0 [pid 6066] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6067] <... rename resumed>) = -1 EEXIST (File exists) [pid 6066] <... mmap resumed>) = 0x7f0356e00000 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6069 [pid 5073] getdents64(3, [pid 6067] memfd_create("syzkaller", 0) = 5 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3./strace-static-x86_64: Process 6069 attached [pid 6069] set_robust_list(0x55556e32a660, 24 [pid 6067] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... close resumed>) = 0 [pid 6069] <... set_robust_list resumed>) = 0 [pid 5073] rmdir("./160" [pid 6069] chdir("./161" [pid 6067] <... mmap resumed>) = 0x7f0356e00000 [pid 6069] <... chdir resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 6069] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6069] setpgid(0, 0) = 0 [pid 6069] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5073] mkdir("./161", 0777 [pid 6069] <... openat resumed>) = 3 [pid 6068] <... write resumed>) = 524288 [pid 5076] <... ioctl resumed>) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 6069] write(3, "1000", 4 [pid 6066] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6069] <... write resumed>) = 4 [pid 6069] close(3) = 0 [pid 6067] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6069] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6069] memfd_create("syzkaller", 0) = 3 [pid 6069] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5076] close(3) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6069] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6068] munmap(0x7f0356e00000, 138412032./strace-static-x86_64: Process 6070 attached [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6070 [pid 6070] set_robust_list(0x55556e32a660, 24) = 0 [pid 6068] <... munmap resumed>) = 0 [pid 6070] chdir("./164" [pid 6067] <... write resumed>) = 524288 [pid 6068] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] <... openat resumed>) = 3 [pid 6070] <... chdir resumed>) = 0 [pid 6070] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6070] setpgid(0, 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6068] <... openat resumed>) = 4 [pid 6070] <... setpgid resumed>) = 0 [pid 6066] <... write resumed>) = 524288 [pid 6070] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6068] ioctl(4, LOOP_SET_FD, 3 [pid 6066] munmap(0x7f0356e00000, 138412032 [pid 6070] <... openat resumed>) = 3 [pid 6068] <... ioctl resumed>) = 0 [pid 6069] <... write resumed>) = 524288 [pid 6067] munmap(0x7f0356e00000, 138412032 [pid 6066] <... munmap resumed>) = 0 [pid 6070] write(3, "1000", 4) = 4 [pid 6070] close(3) = 0 [pid 6070] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6070] memfd_create("syzkaller", 0 [pid 6067] <... munmap resumed>) = 0 [pid 6066] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6067] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6066] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6069] munmap(0x7f0356e00000, 138412032 [pid 6067] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6066] close(5 [pid 6067] close(5 [pid 6070] <... memfd_create resumed>) = 3 [pid 6069] <... munmap resumed>) = 0 [pid 6070] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6069] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6070] <... mmap resumed>) = 0x7f0356e00000 [pid 6069] <... openat resumed>) = 4 [pid 6070] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6069] ioctl(4, LOOP_SET_FD, 3 [pid 6067] <... close resumed>) = 0 [pid 6069] <... ioctl resumed>) = 0 [pid 6068] close(3 [pid 6066] <... close resumed>) = 0 [pid 6068] <... close resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 6068] close(4 [pid 6067] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6066] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6068] <... close resumed>) = 0 [pid 6068] mkdir("./bus", 0777 [pid 5073] close(3) = 0 [pid 6070] <... write resumed>) = 524288 [pid 6068] <... mkdir resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6067] <... open resumed>) = 5 [pid 6069] close(3) = 0 [pid 6066] <... open resumed>) = 5 ./strace-static-x86_64: Process 6071 attached [pid 6068] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6067] ftruncate(5, 0 [pid 6071] set_robust_list(0x55556e32a660, 24 [pid 6067] <... ftruncate resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6071 [pid 6071] <... set_robust_list resumed>) = 0 [pid 6067] exit_group(0 [pid 6066] ftruncate(5, 0 [pid 6069] close(4 [pid 6071] chdir("./161" [pid 6069] <... close resumed>) = 0 [pid 6067] <... exit_group resumed>) = ? [pid 6066] <... ftruncate resumed>) = 0 [pid 6071] <... chdir resumed>) = 0 [pid 6069] mkdir("./bus", 0777) = 0 [ 174.446842][ T6068] loop4: detected capacity change from 0 to 1024 [ 174.478563][ T6069] loop1: detected capacity change from 0 to 1024 [pid 6071] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6069] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6067] +++ exited with 0 +++ [pid 6066] exit_group(0 [pid 6071] <... prctl resumed>) = 0 [pid 6070] munmap(0x7f0356e00000, 138412032 [pid 6069] <... mount resumed>) = 0 [pid 6068] <... mount resumed>) = 0 [pid 6066] <... exit_group resumed>) = ? [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6067, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6071] setpgid(0, 0 [pid 6070] <... munmap resumed>) = 0 [pid 6069] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6068] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6071] <... setpgid resumed>) = 0 [pid 6070] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6069] <... openat resumed>) = 3 [pid 6068] <... openat resumed>) = 3 [pid 6071] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6066] +++ exited with 0 +++ [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6066, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6069] chdir("./bus" [pid 6071] <... openat resumed>) = 3 [pid 6069] <... chdir resumed>) = 0 [pid 6069] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5078] umount2("./163", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./161", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6069] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6071] write(3, "1000", 4 [pid 6068] chdir("./bus" [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./161", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6071] <... write resumed>) = 4 [pid 6068] <... chdir resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./163", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6071] close(3 [pid 6068] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] <... openat resumed>) = 3 [pid 5075] <... openat resumed>) = 3 [pid 6071] <... close resumed>) = 0 [pid 6070] <... openat resumed>) = 4 [pid 6068] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] newfstatat(3, "", [pid 6071] symlink("/dev/binderfs", "./binderfs" [pid 6070] ioctl(4, LOOP_SET_FD, 3 [pid 6069] <... symlink resumed>) = 0 [pid 6068] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] newfstatat(3, "", [pid 6071] <... symlink resumed>) = 0 [pid 6068] <... symlink resumed>) = 0 [pid 5078] getdents64(3, [pid 6071] memfd_create("syzkaller", 0 [pid 6069] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6068] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] umount2("./163/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6068] <... creat resumed>) = 4 [pid 5075] umount2("./161/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6069] <... creat resumed>) = 4 [pid 6069] rename("./bus", "./file2") = -1 EEXIST (File exists) [pid 6068] rename("./bus", "./file2" [pid 6069] memfd_create("syzkaller", 0) = 5 [pid 6069] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6069] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6068] <... rename resumed>) = -1 EEXIST (File exists) [pid 6068] memfd_create("syzkaller", 0 [pid 6071] <... memfd_create resumed>) = 3 [pid 6068] <... memfd_create resumed>) = 5 [pid 5078] <... umount2 resumed>) = 0 [pid 6068] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6071] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6070] <... ioctl resumed>) = 0 [pid 6070] close(3 [pid 5078] umount2("./163/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6071] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6070] <... close resumed>) = 0 [pid 6069] <... write resumed>) = 524288 [pid 6068] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = 0 [pid 6070] close(4 [pid 5078] newfstatat(AT_FDCWD, "./163/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] umount2("./163/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./163/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6070] <... close resumed>) = 0 [pid 5078] <... openat resumed>) = 4 [pid 6070] mkdir("./bus", 0777 [pid 6068] <... write resumed>) = 524288 [ 174.562835][ T6070] loop3: detected capacity change from 0 to 1024 [pid 5078] newfstatat(4, "", [pid 6071] <... write resumed>) = 524288 [pid 6070] <... mkdir resumed>) = 0 [pid 6069] munmap(0x7f0356e00000, 138412032 [pid 5075] umount2("./161/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6068] munmap(0x7f0356e00000, 138412032 [pid 6070] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./161/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6068] <... munmap resumed>) = 0 [pid 6069] <... munmap resumed>) = 0 [pid 5075] umount2("./161/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6071] munmap(0x7f0356e00000, 138412032 [pid 6068] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] openat(AT_FDCWD, "./161/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6071] <... munmap resumed>) = 0 [pid 6070] <... mount resumed>) = 0 [pid 6069] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6068] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] getdents64(4, [pid 5075] <... openat resumed>) = 4 [pid 6071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6070] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6069] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6068] close(5 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] newfstatat(4, "", [pid 6071] <... openat resumed>) = 4 [pid 6070] <... openat resumed>) = 3 [pid 6069] close(5 [pid 5078] getdents64(4, [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6071] ioctl(4, LOOP_SET_FD, 3 [pid 6070] chdir("./bus" [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6070] <... chdir resumed>) = 0 [pid 5075] getdents64(4, [pid 6071] <... ioctl resumed>) = 0 [pid 6070] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6068] <... close resumed>) = 0 [pid 5078] close(4 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6068] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] <... close resumed>) = 0 [pid 5078] rmdir("./163/bus" [pid 5075] getdents64(4, [pid 6070] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... rmdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6070] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6069] <... close resumed>) = 0 [pid 5078] umount2("./163/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] close(4 [pid 6068] <... open resumed>) = 5 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./161/bus" [pid 6070] <... symlink resumed>) = 0 [pid 6068] ftruncate(5, 0 [pid 5078] newfstatat(AT_FDCWD, "./163/binderfs", [pid 5075] <... rmdir resumed>) = 0 [pid 6070] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6069] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6068] <... ftruncate resumed>) = 0 [pid 5078] unlink("./163/binderfs" [pid 5075] umount2("./161/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6068] exit_group(0 [pid 5078] <... unlink resumed>) = 0 [pid 6068] <... exit_group resumed>) = ? [pid 5078] getdents64(3, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] newfstatat(AT_FDCWD, "./161/binderfs", [pid 5078] close(3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./161/binderfs" [pid 6070] <... creat resumed>) = 4 [pid 6069] <... open resumed>) = 5 [pid 5078] <... close resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5078] rmdir("./163" [pid 5075] getdents64(3, [pid 6071] close(3 [pid 6070] rename("./bus", "./file2" [pid 6069] ftruncate(5, 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6071] <... close resumed>) = 0 [pid 6069] <... ftruncate resumed>) = 0 [pid 6068] +++ exited with 0 +++ [pid 5075] close(3 [pid 5078] <... rmdir resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 6071] close(4 [pid 6069] exit_group(0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6068, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] rmdir("./161" [pid 6070] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] mkdir("./164", 0777 [pid 6071] <... close resumed>) = 0 [pid 6069] <... exit_group resumed>) = ? [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 5075] <... rmdir resumed>) = 0 [pid 6071] mkdir("./bus", 0777 [pid 6070] memfd_create("syzkaller", 0 [pid 5078] <... mkdir resumed>) = 0 [pid 5077] <... restart_syscall resumed>) = 0 [pid 6070] <... memfd_create resumed>) = 5 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6071] <... mkdir resumed>) = 0 [pid 5075] mkdir("./162", 0777 [pid 6070] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... openat resumed>) = 3 [pid 5077] umount2("./163", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... mkdir resumed>) = 0 [pid 6071] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6070] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6069] +++ exited with 0 +++ [pid 5077] openat(AT_FDCWD, "./163", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6069, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] <... openat resumed>) = 3 [pid 5077] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5077] getdents64(3, [pid 5074] umount2("./161", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] umount2("./163/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] openat(AT_FDCWD, "./161", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, [pid 6071] <... mount resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6071] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6070] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6071] <... openat resumed>) = 3 [pid 5074] umount2("./161/bus", MNT_DETACH|UMOUNT_NOFOLLOW [ 174.636748][ T6071] loop0: detected capacity change from 0 to 1024 [pid 6071] chdir("./bus") = 0 [pid 6071] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6071] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5077] <... umount2 resumed>) = 0 [pid 5077] umount2("./163/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6071] <... symlink resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./163/bus", [pid 5074] <... umount2 resumed>) = 0 [pid 6071] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] <... ioctl resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 6070] <... write resumed>) = 524288 [pid 5074] umount2("./161/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6070] munmap(0x7f0356e00000, 138412032) = 0 [pid 5077] umount2("./163/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./163/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] newfstatat(AT_FDCWD, "./161/bus", [pid 6070] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6071] <... creat resumed>) = 4 [pid 6070] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] umount2("./161/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6071] rename("./bus", "./file2" [pid 6070] close(5 [pid 5078] close(3 [pid 5077] <... openat resumed>) = 4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6071] <... rename resumed>) = -1 EEXIST (File exists) [pid 5074] openat(AT_FDCWD, "./161/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6071] memfd_create("syzkaller", 0) = 5 [pid 5077] newfstatat(4, "", [pid 5074] <... openat resumed>) = 4 [pid 6071] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... close resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] close(3 [pid 5074] newfstatat(4, "", [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... close resumed>) = 0 [pid 6070] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6071] <... mmap resumed>) = 0x7f0356e00000 [pid 6071] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6073 ./strace-static-x86_64: Process 6073 attached [pid 6070] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] getdents64(4, [pid 5074] getdents64(4, ./strace-static-x86_64: Process 6072 attached [pid 6073] set_robust_list(0x55556e32a660, 24 [pid 6072] set_robust_list(0x55556e32a660, 24 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6072] <... set_robust_list resumed>) = 0 [pid 5077] getdents64(4, [pid 5074] getdents64(4, [pid 6073] <... set_robust_list resumed>) = 0 [pid 6072] chdir("./164" [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6072 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6073] chdir("./162" [pid 6072] <... chdir resumed>) = 0 [pid 6070] <... open resumed>) = 5 [pid 5077] close(4 [pid 5074] close(4 [pid 6073] <... chdir resumed>) = 0 [pid 6072] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5077] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 6073] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6072] <... prctl resumed>) = 0 [pid 5077] rmdir("./163/bus" [pid 5074] rmdir("./161/bus" [pid 6073] <... prctl resumed>) = 0 [pid 6070] ftruncate(5, 0 [pid 6073] setpgid(0, 0 [pid 6070] <... ftruncate resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 6073] <... setpgid resumed>) = 0 [pid 6070] exit_group(0 [pid 5077] umount2("./163/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6073] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6072] setpgid(0, 0 [pid 6070] <... exit_group resumed>) = ? [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... rmdir resumed>) = 0 [pid 6072] <... setpgid resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./163/binderfs", [pid 6070] +++ exited with 0 +++ [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./161/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6073] <... openat resumed>) = 3 [pid 6072] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5077] unlink("./163/binderfs" [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6070, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6073] write(3, "1000", 4) = 4 [pid 5077] <... unlink resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./161/binderfs", [pid 6073] close(3 [pid 5076] umount2("./164", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6073] <... close resumed>) = 0 [pid 5077] getdents64(3, [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6073] symlink("/dev/binderfs", "./binderfs" [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] openat(AT_FDCWD, "./164", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] unlink("./161/binderfs" [pid 6073] <... symlink resumed>) = 0 [pid 6071] <... write resumed>) = 524288 [pid 5077] close(3 [pid 5076] <... openat resumed>) = 3 [pid 5074] <... unlink resumed>) = 0 [pid 6073] memfd_create("syzkaller", 0 [pid 6072] <... openat resumed>) = 3 [pid 6071] munmap(0x7f0356e00000, 138412032 [pid 5077] <... close resumed>) = 0 [pid 5076] newfstatat(3, "", [pid 5074] getdents64(3, [pid 6073] <... memfd_create resumed>) = 3 [pid 5077] rmdir("./163" [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6073] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] getdents64(3, [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6073] <... mmap resumed>) = 0x7f0356e00000 [pid 6071] <... munmap resumed>) = 0 [pid 5077] mkdir("./164", 0777 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] close(3 [pid 6072] write(3, "1000", 4 [pid 6071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5077] <... mkdir resumed>) = 0 [pid 5076] umount2("./164/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6072] <... write resumed>) = 4 [pid 6071] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] <... close resumed>) = 0 [pid 6072] close(3 [pid 6071] close(5 [pid 5077] <... openat resumed>) = 3 [pid 5074] rmdir("./161" [pid 6072] <... close resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 6072] symlink("/dev/binderfs", "./binderfs" [pid 6073] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6072] <... symlink resumed>) = 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5074] mkdir("./162", 0777 [pid 6072] memfd_create("syzkaller", 0 [pid 5074] <... mkdir resumed>) = 0 [pid 6072] <... memfd_create resumed>) = 3 [pid 6072] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 6072] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6071] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6071] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6073] <... write resumed>) = 524288 [pid 5076] umount2("./164/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./164/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./164/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6073] munmap(0x7f0356e00000, 138412032 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6073] <... munmap resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./164/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, [pid 6073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6073] <... openat resumed>) = 4 [pid 5076] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] close(4 [pid 6073] ioctl(4, LOOP_SET_FD, 3 [pid 5076] <... close resumed>) = 0 [pid 6072] <... write resumed>) = 524288 [pid 6071] <... open resumed>) = 5 [pid 5076] rmdir("./164/bus" [pid 6072] munmap(0x7f0356e00000, 138412032 [pid 6071] ftruncate(5, 0) = 0 [pid 6073] <... ioctl resumed>) = 0 [pid 6072] <... munmap resumed>) = 0 [pid 6071] exit_group(0 [pid 5076] <... rmdir resumed>) = 0 [pid 6073] close(3 [pid 6071] <... exit_group resumed>) = ? [pid 5076] umount2("./164/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6073] <... close resumed>) = 0 [pid 6072] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 174.826056][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 174.826077][ T28] audit: type=1800 audit(1710613056.924:980): pid=6071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 174.840274][ T6073] loop2: detected capacity change from 0 to 1024 [pid 6073] close(4 [pid 6072] <... openat resumed>) = 4 [pid 6071] +++ exited with 0 +++ [pid 5076] newfstatat(AT_FDCWD, "./164/binderfs", [pid 6073] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6071, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6073] mkdir("./bus", 0777 [pid 5076] unlink("./164/binderfs" [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 6073] <... mkdir resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5073] <... restart_syscall resumed>) = 0 [pid 5076] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3 [pid 5073] umount2("./161", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6073] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5076] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] rmdir("./164" [pid 5073] openat(AT_FDCWD, "./161", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... rmdir resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5076] mkdir("./165", 0777 [pid 5073] newfstatat(3, "", [pid 5076] <... mkdir resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] getdents64(3, [pid 5076] <... openat resumed>) = 3 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] umount2("./161/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6072] ioctl(4, LOOP_SET_FD, 3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5077] <... ioctl resumed>) = 0 [pid 6073] <... mount resumed>) = 0 [pid 6072] <... ioctl resumed>) = 0 [pid 5077] close(3 [pid 6073] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6073] chdir("./bus") = 0 [pid 6073] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6073] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5077] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 6072] close(3 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6073] <... symlink resumed>) = 0 [pid 5073] umount2("./161/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./161/bus", [pid 6073] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6072] <... close resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./161/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./161/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./161/bus" [pid 6072] close(4 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6074 [pid 5073] <... rmdir resumed>) = 0 [pid 5073] umount2("./161/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6072] <... close resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./161/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./161/binderfs" [pid 5074] <... ioctl resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 6074 attached [pid 6072] mkdir("./bus", 0777 [pid 6073] <... creat resumed>) = 4 [pid 5073] getdents64(3, [pid 6074] set_robust_list(0x55556e32a660, 24 [pid 6073] rename("./bus", "./file2" [pid 6072] <... mkdir resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6074] <... set_robust_list resumed>) = 0 [pid 6072] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6073] <... rename resumed>) = -1 EEXIST (File exists) [pid 5073] close(3 [pid 6073] memfd_create("syzkaller", 0 [pid 5073] <... close resumed>) = 0 [pid 6074] chdir("./164" [pid 6073] <... memfd_create resumed>) = 5 [pid 5076] <... ioctl resumed>) = 0 [pid 5073] rmdir("./161" [pid 6074] <... chdir resumed>) = 0 [pid 6074] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6073] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6072] <... mount resumed>) = 0 [pid 5074] close(3 [pid 6072] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6074] <... prctl resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 6074] setpgid(0, 0 [pid 6073] <... mmap resumed>) = 0x7f0356e00000 [pid 6072] <... openat resumed>) = 3 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6074] <... setpgid resumed>) = 0 [pid 6072] chdir("./bus"./strace-static-x86_64: Process 6075 attached [pid 6074] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6072] <... chdir resumed>) = 0 [pid 6075] set_robust_list(0x55556e32a660, 24 [ 174.881139][ T6072] loop5: detected capacity change from 0 to 1024 [pid 6072] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6075] <... set_robust_list resumed>) = 0 [pid 6072] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6075 [pid 6075] chdir("./162" [pid 6074] <... openat resumed>) = 3 [pid 6072] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6075] <... chdir resumed>) = 0 [pid 6075] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6075] setpgid(0, 0 [pid 6072] <... symlink resumed>) = 0 [pid 6075] <... setpgid resumed>) = 0 [pid 6075] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6074] write(3, "1000", 4 [pid 6075] <... openat resumed>) = 3 [pid 6074] <... write resumed>) = 4 [pid 6072] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5073] <... rmdir resumed>) = 0 [pid 6075] write(3, "1000", 4 [pid 6073] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] mkdir("./162", 0777 [pid 6075] <... write resumed>) = 4 [pid 6075] close(3) = 0 [pid 6074] close(3 [pid 5073] <... mkdir resumed>) = 0 [pid 6075] symlink("/dev/binderfs", "./binderfs" [pid 5076] close(3 [pid 6075] <... symlink resumed>) = 0 [pid 6074] <... close resumed>) = 0 [pid 6073] <... write resumed>) = 524288 [pid 6072] <... creat resumed>) = 4 [pid 5076] <... close resumed>) = 0 [pid 6074] symlink("/dev/binderfs", "./binderfs" [pid 6075] memfd_create("syzkaller", 0 [pid 6074] <... symlink resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6072] rename("./bus", "./file2" [pid 5073] <... openat resumed>) = 3 [pid 6075] <... memfd_create resumed>) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6075] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6076 [pid 6075] <... mmap resumed>) = 0x7f0356e00000 [pid 6075] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288./strace-static-x86_64: Process 6076 attached [pid 6076] set_robust_list(0x55556e32a660, 24) = 0 [pid 6076] chdir("./165" [pid 6072] <... rename resumed>) = -1 EEXIST (File exists) [pid 6076] <... chdir resumed>) = 0 [pid 6072] memfd_create("syzkaller", 0 [pid 6076] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6074] memfd_create("syzkaller", 0 [pid 6072] <... memfd_create resumed>) = 5 [pid 6076] <... prctl resumed>) = 0 [pid 6074] <... memfd_create resumed>) = 3 [pid 6072] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6076] setpgid(0, 0 [pid 6073] munmap(0x7f0356e00000, 138412032 [pid 6072] <... mmap resumed>) = 0x7f0356e00000 [pid 6074] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6076] <... setpgid resumed>) = 0 [pid 6074] <... mmap resumed>) = 0x7f0356e00000 [pid 6076] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6074] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6073] <... munmap resumed>) = 0 [pid 6076] <... openat resumed>) = 3 [pid 6075] <... write resumed>) = 524288 [pid 6074] <... write resumed>) = 524288 [pid 6072] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... ioctl resumed>) = 0 [pid 6076] write(3, "1000", 4) = 4 [pid 6075] munmap(0x7f0356e00000, 138412032 [pid 6073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6076] close(3 [pid 6075] <... munmap resumed>) = 0 [pid 6074] munmap(0x7f0356e00000, 138412032 [pid 6073] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6076] <... close resumed>) = 0 [pid 6074] <... munmap resumed>) = 0 [pid 6073] close(5 [pid 6076] symlink("/dev/binderfs", "./binderfs" [pid 6075] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6073] <... close resumed>) = 0 [pid 6072] <... write resumed>) = 524288 [pid 5073] close(3 [pid 6076] <... symlink resumed>) = 0 [pid 6075] <... openat resumed>) = 4 [pid 6074] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6072] munmap(0x7f0356e00000, 138412032 [pid 5073] <... close resumed>) = 0 [pid 6075] ioctl(4, LOOP_SET_FD, 3 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6076] memfd_create("syzkaller", 0 [pid 6074] <... openat resumed>) = 4 [pid 6076] <... memfd_create resumed>) = 3 [pid 6076] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6074] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6077 attached [pid 6072] <... munmap resumed>) = 0 [pid 6077] set_robust_list(0x55556e32a660, 24 [pid 6075] <... ioctl resumed>) = 0 [pid 6072] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6077 [pid 6077] <... set_robust_list resumed>) = 0 [pid 6075] close(3 [pid 6072] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6077] chdir("./162" [pid 6075] <... close resumed>) = 0 [pid 6072] close(5 [pid 6077] <... chdir resumed>) = 0 [pid 6076] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6075] close(4 [pid 6073] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6075] <... close resumed>) = 0 [pid 6077] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6076] <... write resumed>) = 524288 [pid 6074] <... ioctl resumed>) = 0 [pid 6073] <... open resumed>) = 5 [pid 6072] <... close resumed>) = 0 [pid 6073] ftruncate(5, 0) = 0 [pid 6073] exit_group(0) = ? [pid 6073] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6073, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5075] umount2("./162", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6072] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6074] close(3 [pid 5075] openat(AT_FDCWD, "./162", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6076] munmap(0x7f0356e00000, 138412032 [pid 6074] <... close resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 6076] <... munmap resumed>) = 0 [pid 6074] close(4 [pid 5075] newfstatat(3, "", [pid 6074] <... close resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6074] mkdir("./bus", 0777 [pid 5075] getdents64(3, [pid 6077] <... prctl resumed>) = 0 [pid 6075] mkdir("./bus", 0777 [pid 6074] <... mkdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6077] setpgid(0, 0 [pid 6076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [ 175.024985][ T6075] loop1: detected capacity change from 0 to 1024 [ 175.030648][ T6074] loop4: detected capacity change from 0 to 1024 [ 175.052512][ T28] audit: type=1800 audit(1710613057.154:981): pid=6073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop2" ino=20 res=0 errno=0 [pid 5075] umount2("./162/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6077] <... setpgid resumed>) = 0 [pid 6076] <... openat resumed>) = 4 [pid 6075] <... mkdir resumed>) = 0 [pid 6072] <... open resumed>) = 5 [pid 6076] ioctl(4, LOOP_SET_FD, 3 [pid 6074] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6077] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6075] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6072] ftruncate(5, 0) = 0 [pid 6072] exit_group(0) = ? [pid 6072] +++ exited with 0 +++ [pid 6077] <... openat resumed>) = 3 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6072, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6077] write(3, "1000", 4 [pid 5075] <... umount2 resumed>) = 0 [pid 6077] <... write resumed>) = 4 [pid 6075] <... mount resumed>) = 0 [pid 5075] umount2("./162/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6077] close(3 [pid 6076] <... ioctl resumed>) = 0 [pid 6075] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6076] close(3 [pid 5078] umount2("./164", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6077] <... close resumed>) = 0 [pid 6076] <... close resumed>) = 0 [pid 6075] <... openat resumed>) = 3 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./162/bus", [ 175.085422][ T6076] loop3: detected capacity change from 0 to 1024 [pid 6077] symlink("/dev/binderfs", "./binderfs" [pid 6076] close(4 [pid 6075] chdir("./bus" [pid 5078] openat(AT_FDCWD, "./164", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6077] <... symlink resumed>) = 0 [pid 6076] <... close resumed>) = 0 [pid 6075] <... chdir resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6076] mkdir("./bus", 0777 [pid 6077] memfd_create("syzkaller", 0 [pid 6076] <... mkdir resumed>) = 0 [pid 6075] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6074] <... mount resumed>) = 0 [pid 5078] newfstatat(3, "", [pid 5075] umount2("./162/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6076] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6074] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6075] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] openat(AT_FDCWD, "./162/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6077] <... memfd_create resumed>) = 3 [pid 6077] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] getdents64(3, [pid 5075] <... openat resumed>) = 4 [pid 6077] <... mmap resumed>) = 0x7f0356e00000 [pid 6075] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] newfstatat(4, "", [pid 6074] <... openat resumed>) = 3 [pid 6074] chdir("./bus" [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6075] <... symlink resumed>) = 0 [pid 6074] <... chdir resumed>) = 0 [pid 5075] getdents64(4, [pid 6074] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, [pid 6074] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] umount2("./164/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6074] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5075] close(4) = 0 [ 175.132839][ T28] audit: type=1800 audit(1710613057.184:982): pid=6072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop5" ino=20 res=0 errno=0 [pid 6077] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6075] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6074] <... symlink resumed>) = 0 [pid 5075] rmdir("./162/bus" [pid 6074] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5075] <... rmdir resumed>) = 0 [pid 5075] umount2("./162/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... umount2 resumed>) = 0 [pid 6075] <... creat resumed>) = 4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6075] rename("./bus", "./file2" [pid 5075] newfstatat(AT_FDCWD, "./162/binderfs", [pid 6075] <... rename resumed>) = -1 EEXIST (File exists) [pid 6074] <... creat resumed>) = 4 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./162/binderfs" [pid 6074] rename("./bus", "./file2" [pid 5075] <... unlink resumed>) = 0 [pid 6074] <... rename resumed>) = -1 EEXIST (File exists) [pid 6075] memfd_create("syzkaller", 0 [pid 5075] getdents64(3, [pid 5078] umount2("./164/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] close(3 [pid 6077] <... write resumed>) = 524288 [pid 6075] <... memfd_create resumed>) = 5 [pid 6074] memfd_create("syzkaller", 0 [pid 5075] <... close resumed>) = 0 [pid 6075] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] newfstatat(AT_FDCWD, "./164/bus", [pid 5075] rmdir("./162" [pid 6075] <... mmap resumed>) = 0x7f0356e00000 [pid 6074] <... memfd_create resumed>) = 5 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5078] umount2("./164/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] mkdir("./163", 0777 [pid 6074] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... mkdir resumed>) = 0 [pid 6075] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6074] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] openat(AT_FDCWD, "./164/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6076] <... mount resumed>) = 0 [pid 5078] <... openat resumed>) = 4 [pid 5075] <... openat resumed>) = 3 [pid 5078] newfstatat(4, "", [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6076] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6076] chdir("./bus") = 0 [pid 6076] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6075] <... write resumed>) = 524288 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6076] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6075] munmap(0x7f0356e00000, 138412032 [pid 5078] getdents64(4, [pid 6077] munmap(0x7f0356e00000, 138412032 [pid 6076] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6074] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6077] <... munmap resumed>) = 0 [pid 6076] <... creat resumed>) = 4 [pid 6075] <... munmap resumed>) = 0 [pid 6076] rename("./bus", "./file2" [pid 5078] getdents64(4, [pid 6076] <... rename resumed>) = -1 EEXIST (File exists) [pid 6077] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6076] memfd_create("syzkaller", 0 [pid 6075] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6074] <... write resumed>) = 524288 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6077] <... openat resumed>) = 4 [pid 6076] <... memfd_create resumed>) = 5 [pid 6077] ioctl(4, LOOP_SET_FD, 3 [pid 6076] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6077] <... ioctl resumed>) = 0 [pid 6076] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] close(4 [pid 6075] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... close resumed>) = 0 [pid 6075] close(5 [pid 5078] rmdir("./164/bus" [pid 5075] <... ioctl resumed>) = 0 [pid 6076] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... rmdir resumed>) = 0 [pid 5075] close(3 [pid 6075] <... close resumed>) = 0 [pid 6074] munmap(0x7f0356e00000, 138412032 [pid 5078] umount2("./164/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... close resumed>) = 0 [pid 6074] <... munmap resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] newfstatat(AT_FDCWD, "./164/binderfs", [pid 6075] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6074] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6078 [pid 6074] <... openat resumed>) = -1 EBUSY (Device or resource busy) ./strace-static-x86_64: Process 6078 attached [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 175.278608][ T6077] loop0: detected capacity change from 0 to 1024 [pid 6078] set_robust_list(0x55556e32a660, 24 [pid 6077] close(3 [pid 6076] <... write resumed>) = 524288 [pid 6075] <... open resumed>) = 5 [pid 6074] close(5 [pid 5078] unlink("./164/binderfs" [pid 6074] <... close resumed>) = 0 [pid 6077] <... close resumed>) = 0 [pid 6077] close(4) = 0 [pid 6077] mkdir("./bus", 0777) = 0 [pid 6077] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6076] munmap(0x7f0356e00000, 138412032) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 6078] <... set_robust_list resumed>) = 0 [pid 6075] ftruncate(5, 0 [pid 5078] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6078] chdir("./163" [pid 6075] <... ftruncate resumed>) = 0 [pid 6078] <... chdir resumed>) = 0 [pid 5078] close(3 [pid 6076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6075] exit_group(0 [pid 6074] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] <... close resumed>) = 0 [pid 6078] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6076] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] rmdir("./164" [pid 6078] <... prctl resumed>) = 0 [pid 6076] close(5 [pid 6075] <... exit_group resumed>) = ? [pid 6074] <... open resumed>) = 5 [pid 5078] <... rmdir resumed>) = 0 [ 175.328842][ T28] audit: type=1800 audit(1710613057.434:983): pid=6075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop1" ino=20 res=0 errno=0 [pid 6076] <... close resumed>) = 0 [pid 6074] ftruncate(5, 0) = 0 [pid 6074] exit_group(0) = ? [pid 6074] +++ exited with 0 +++ [pid 6076] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6078] setpgid(0, 0 [pid 5078] mkdir("./165", 0777 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6074, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6078] <... setpgid resumed>) = 0 [pid 6078] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5078] <... mkdir resumed>) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] umount2("./164", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6078] <... openat resumed>) = 3 [pid 5078] <... openat resumed>) = 3 [pid 5077] openat(AT_FDCWD, "./164", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6076] <... open resumed>) = 5 [pid 6076] ftruncate(5, 0) = 0 [pid 6078] write(3, "1000", 4 [pid 6076] exit_group(0 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5077] <... openat resumed>) = 3 [pid 6078] <... write resumed>) = 4 [pid 6077] <... mount resumed>) = 0 [pid 6076] <... exit_group resumed>) = ? [pid 5077] newfstatat(3, "", [pid 6078] close(3) = 0 [pid 6078] symlink("/dev/binderfs", "./binderfs" [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6078] <... symlink resumed>) = 0 [pid 6077] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6076] +++ exited with 0 +++ [pid 6075] +++ exited with 0 +++ [pid 5077] getdents64(3, [pid 6078] memfd_create("syzkaller", 0 [pid 6077] <... openat resumed>) = 3 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6076, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6075, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5077] umount2("./164/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6077] chdir("./bus") = 0 [pid 5074] umount2("./162", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6077] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./162", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6077] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... openat resumed>) = 3 [pid 6078] <... memfd_create resumed>) = 3 [pid 6077] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5074] newfstatat(3, "", [pid 6078] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] umount2("./165", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] openat(AT_FDCWD, "./165", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] getdents64(3, [pid 5077] <... umount2 resumed>) = 0 [pid 6078] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] umount2("./164/bus", MNT_DETACH|UMOUNT_NOFOLLOW [ 175.364716][ T28] audit: type=1800 audit(1710613057.464:984): pid=6074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop4" ino=20 res=0 errno=0 [pid 5076] newfstatat(3, "", [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6077] <... symlink resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./162/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6077] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5077] newfstatat(AT_FDCWD, "./164/bus", [pid 5076] getdents64(3, [pid 6078] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... umount2 resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] umount2("./165/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... ioctl resumed>) = 0 [pid 5074] umount2("./162/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./162/bus", [pid 6077] <... creat resumed>) = 4 [pid 6077] rename("./bus", "./file2" [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] close(3 [pid 5077] umount2("./164/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./162/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./162/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6077] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] <... close resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = 0 [pid 6078] <... write resumed>) = 524288 [pid 6077] memfd_create("syzkaller", 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] openat(AT_FDCWD, "./164/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] newfstatat(4, "", [pid 6078] munmap(0x7f0356e00000, 138412032 [pid 6077] <... memfd_create resumed>) = 5 [pid 5077] <... openat resumed>) = 4 [pid 6077] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] newfstatat(4, "", [pid 5076] umount2("./165/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 6079 attached [pid 6078] <... munmap resumed>) = 0 [pid 6077] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] getdents64(4, [pid 6079] set_robust_list(0x55556e32a660, 24 [pid 6078] openat(AT_FDCWD, "/dev/loop2", O_RDWR [ 175.443149][ T28] audit: type=1800 audit(1710613057.504:985): pid=6076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop3" ino=20 res=0 errno=0 [pid 6077] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6079 [pid 5076] newfstatat(AT_FDCWD, "./165/bus", [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6078] <... openat resumed>) = 4 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] getdents64(4, [pid 6079] <... set_robust_list resumed>) = 0 [pid 6078] ioctl(4, LOOP_SET_FD, 3 [pid 5076] umount2("./165/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] close(4 [pid 5077] getdents64(4, [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] openat(AT_FDCWD, "./165/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6079] chdir("./165" [pid 6077] <... write resumed>) = 524288 [pid 5077] getdents64(4, [pid 5076] <... openat resumed>) = 4 [pid 5074] <... close resumed>) = 0 [pid 6079] <... chdir resumed>) = 0 [pid 5074] rmdir("./162/bus" [pid 5076] newfstatat(4, "", [pid 5074] <... rmdir resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] close(4 [pid 5076] getdents64(4, [pid 5077] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6079] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] umount2("./162/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6079] <... prctl resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6079] setpgid(0, 0 [pid 5077] rmdir("./164/bus" [pid 5076] getdents64(4, [pid 5074] newfstatat(AT_FDCWD, "./162/binderfs", [pid 5077] <... rmdir resumed>) = 0 [pid 5077] umount2("./164/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] close(4 [pid 5074] unlink("./162/binderfs" [pid 6079] <... setpgid resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./164/binderfs", [pid 5076] <... close resumed>) = 0 [pid 6079] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6077] munmap(0x7f0356e00000, 138412032 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] rmdir("./165/bus" [pid 5074] <... unlink resumed>) = 0 [pid 6077] <... munmap resumed>) = 0 [pid 5077] unlink("./164/binderfs" [pid 5076] <... rmdir resumed>) = 0 [pid 6079] <... openat resumed>) = 3 [pid 6078] <... ioctl resumed>) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 5074] getdents64(3, [pid 6079] write(3, "1000", 4 [pid 6078] close(3 [pid 6079] <... write resumed>) = 4 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6079] close(3 [pid 6078] <... close resumed>) = 0 [pid 6077] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5077] getdents64(3, [pid 5076] umount2("./165/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] close(3 [pid 6079] <... close resumed>) = 0 [pid 6078] close(4 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] <... close resumed>) = 0 [pid 6079] symlink("/dev/binderfs", "./binderfs" [pid 6078] <... close resumed>) = 0 [pid 6077] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] rmdir("./162" [pid 6078] mkdir("./bus", 0777 [pid 6079] <... symlink resumed>) = 0 [pid 6077] close(5 [pid 5077] close(3 [pid 5076] newfstatat(AT_FDCWD, "./165/binderfs", [pid 5074] <... rmdir resumed>) = 0 [ 175.508234][ T6078] loop2: detected capacity change from 0 to 1024 [pid 5074] mkdir("./163", 0777 [pid 5077] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 6079] memfd_create("syzkaller", 0 [pid 6078] <... mkdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6077] <... close resumed>) = 0 [pid 5077] rmdir("./164" [pid 5076] unlink("./165/binderfs" [pid 5074] <... openat resumed>) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6079] <... memfd_create resumed>) = 3 [pid 5076] <... unlink resumed>) = 0 [pid 6079] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6078] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6079] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] getdents64(3, [pid 6079] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] mkdir("./165", 0777 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 5076] rmdir("./165" [pid 6077] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] <... rmdir resumed>) = 0 [pid 5076] mkdir("./166", 0777) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6077] <... open resumed>) = 5 [pid 5077] <... openat resumed>) = 3 [pid 6077] ftruncate(5, 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 6079] <... write resumed>) = 524288 [pid 6078] <... mount resumed>) = 0 [pid 6077] <... ftruncate resumed>) = 0 [pid 6078] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6077] exit_group(0 [pid 6078] <... openat resumed>) = 3 [pid 6077] <... exit_group resumed>) = ? [pid 6079] munmap(0x7f0356e00000, 138412032 [pid 6078] chdir("./bus" [pid 6077] +++ exited with 0 +++ [pid 6079] <... munmap resumed>) = 0 [pid 6078] <... chdir resumed>) = 0 [pid 6078] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6077, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6079] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6078] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... ioctl resumed>) = 0 [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 6078] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5074] close(3 [pid 5073] <... restart_syscall resumed>) = 0 [pid 6079] <... openat resumed>) = 4 [pid 6078] <... symlink resumed>) = 0 [pid 5077] <... ioctl resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5073] umount2("./162", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6078] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6079] ioctl(4, LOOP_SET_FD, 3 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] openat(AT_FDCWD, "./162", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 175.592771][ T28] audit: type=1800 audit(1710613057.694:986): pid=6077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop0" ino=20 res=0 errno=0 [pid 5076] <... ioctl resumed>) = 0 [pid 5077] close(3 [pid 5073] newfstatat(3, "", [pid 5077] <... close resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6078] <... creat resumed>) = 4 [pid 5076] close(3 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6080 [pid 5073] getdents64(3, ./strace-static-x86_64: Process 6081 attached [pid 6078] rename("./bus", "./file2" [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6081 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 ./strace-static-x86_64: Process 6080 attached [pid 6079] <... ioctl resumed>) = 0 [pid 6078] <... rename resumed>) = -1 EEXIST (File exists) [pid 5073] umount2("./162/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6080] set_robust_list(0x55556e32a660, 24 [pid 6078] memfd_create("syzkaller", 0) = 5 [pid 6078] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6081] set_robust_list(0x55556e32a660, 24 [pid 6078] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] <... close resumed>) = 0 [pid 6080] <... set_robust_list resumed>) = 0 [pid 6078] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6080] chdir("./163" [pid 6081] <... set_robust_list resumed>) = 0 [pid 6080] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 6082 attached [pid 6081] chdir("./165" [pid 6080] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6082 [pid 5073] <... umount2 resumed>) = 0 [pid 6082] set_robust_list(0x55556e32a660, 24 [pid 6081] <... chdir resumed>) = 0 [pid 6082] <... set_robust_list resumed>) = 0 [pid 6081] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5073] umount2("./162/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6081] <... prctl resumed>) = 0 [pid 6082] chdir("./166" [pid 6081] setpgid(0, 0 [pid 6080] <... prctl resumed>) = 0 [pid 6078] <... write resumed>) = 524288 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6082] <... chdir resumed>) = 0 [pid 6081] <... setpgid resumed>) = 0 [pid 6080] setpgid(0, 0 [pid 5073] newfstatat(AT_FDCWD, "./162/bus", [pid 6082] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6081] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6080] <... setpgid resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6082] setpgid(0, 0 [pid 5073] umount2("./162/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6082] <... setpgid resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6082] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6081] <... openat resumed>) = 3 [pid 6080] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6079] close(3 [pid 5073] openat(AT_FDCWD, "./162/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6082] <... openat resumed>) = 3 [pid 6080] <... openat resumed>) = 3 [pid 6079] <... close resumed>) = 0 [pid 6080] write(3, "1000", 4 [pid 6079] close(4 [pid 5073] <... openat resumed>) = 4 [pid 6080] <... write resumed>) = 4 [pid 6079] <... close resumed>) = 0 [pid 6082] write(3, "1000", 4 [pid 5073] newfstatat(4, "", [pid 6082] <... write resumed>) = 4 [pid 6081] write(3, "1000", 4 [pid 6080] close(3 [pid 6079] mkdir("./bus", 0777 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6082] close(3 [pid 6081] <... write resumed>) = 4 [pid 6080] <... close resumed>) = 0 [pid 6079] <... mkdir resumed>) = 0 [ 175.669267][ T6079] loop5: detected capacity change from 0 to 1024 [pid 6080] symlink("/dev/binderfs", "./binderfs" [pid 6079] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6078] munmap(0x7f0356e00000, 138412032 [pid 6082] <... close resumed>) = 0 [pid 6081] close(3 [pid 6080] <... symlink resumed>) = 0 [pid 6078] <... munmap resumed>) = 0 [pid 5073] getdents64(4, [pid 6082] symlink("/dev/binderfs", "./binderfs" [pid 6081] <... close resumed>) = 0 [pid 6080] memfd_create("syzkaller", 0 [pid 6082] <... symlink resumed>) = 0 [pid 6081] symlink("/dev/binderfs", "./binderfs" [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6082] memfd_create("syzkaller", 0 [pid 6080] <... memfd_create resumed>) = 3 [pid 6078] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5073] getdents64(4, [pid 6082] <... memfd_create resumed>) = 3 [pid 6081] <... symlink resumed>) = 0 [pid 6080] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6078] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6082] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6081] memfd_create("syzkaller", 0 [pid 6080] <... mmap resumed>) = 0x7f0356e00000 [pid 5073] close(4 [pid 6082] <... mmap resumed>) = 0x7f0356e00000 [pid 6081] <... memfd_create resumed>) = 3 [pid 6080] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6079] <... mount resumed>) = 0 [pid 6078] close(5 [pid 5073] <... close resumed>) = 0 [pid 6079] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5073] rmdir("./162/bus" [pid 6079] <... openat resumed>) = 3 [pid 6081] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6079] chdir("./bus" [pid 6081] <... mmap resumed>) = 0x7f0356e00000 [pid 6079] <... chdir resumed>) = 0 [pid 6078] <... close resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 6082] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6081] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6079] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] umount2("./162/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./162/binderfs", [pid 6079] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6080] <... write resumed>) = 524288 [pid 6079] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6082] <... write resumed>) = 524288 [pid 6079] <... symlink resumed>) = 0 [pid 6078] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5073] unlink("./162/binderfs" [pid 6079] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5073] <... unlink resumed>) = 0 [pid 5073] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3 [pid 6079] <... creat resumed>) = 4 [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./162" [pid 6079] rename("./bus", "./file2" [pid 5073] <... rmdir resumed>) = 0 [pid 6080] munmap(0x7f0356e00000, 138412032 [pid 6081] <... write resumed>) = 524288 [pid 6080] <... munmap resumed>) = 0 [pid 5073] mkdir("./163", 0777 [pid 6078] <... open resumed>) = 5 [pid 6080] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6078] ftruncate(5, 0 [pid 5073] <... mkdir resumed>) = 0 [pid 6080] ioctl(4, LOOP_SET_FD, 3 [pid 6082] munmap(0x7f0356e00000, 138412032 [pid 6081] munmap(0x7f0356e00000, 138412032 [pid 6079] <... rename resumed>) = -1 EEXIST (File exists) [pid 6078] <... ftruncate resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6079] memfd_create("syzkaller", 0) = 5 [pid 6079] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6079] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6080] <... ioctl resumed>) = 0 [pid 6080] close(3) = 0 [pid 6080] close(4) = 0 [pid 6080] mkdir("./bus", 0777) = 0 [pid 6080] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5073] <... openat resumed>) = 3 [pid 6078] exit_group(0 [pid 6081] <... munmap resumed>) = 0 [pid 6082] <... munmap resumed>) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6081] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6078] <... exit_group resumed>) = ? [pid 6079] munmap(0x7f0356e00000, 138412032 [pid 6082] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6081] <... openat resumed>) = 4 [pid 6080] <... mount resumed>) = 0 [pid 6078] +++ exited with 0 +++ [ 175.803363][ T6080] loop1: detected capacity change from 0 to 1024 [ 175.806240][ T28] audit: type=1800 audit(1710613057.904:987): pid=6078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop2" ino=20 res=0 errno=0 [pid 6081] ioctl(4, LOOP_SET_FD, 3 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6078, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6082] <... openat resumed>) = 4 [pid 6080] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6079] <... munmap resumed>) = 0 [pid 6080] <... openat resumed>) = 3 [pid 6082] ioctl(4, LOOP_SET_FD, 3 [pid 5075] umount2("./163", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./163", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6080] chdir("./bus" [pid 5075] newfstatat(3, "", [pid 6080] <... chdir resumed>) = 0 [pid 6080] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] umount2("./163/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6081] <... ioctl resumed>) = 0 [pid 6082] <... ioctl resumed>) = 0 [pid 6080] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6079] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6082] close(3 [pid 6081] close(3 [pid 6080] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5075] <... umount2 resumed>) = 0 [pid 6082] <... close resumed>) = 0 [pid 6081] <... close resumed>) = 0 [pid 6080] <... symlink resumed>) = 0 [pid 6079] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... ioctl resumed>) = 0 [pid 6082] close(4 [pid 6081] close(4 [pid 6080] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5075] umount2("./163/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] close(3 [pid 6082] <... close resumed>) = 0 [pid 6081] <... close resumed>) = 0 [pid 6080] <... creat resumed>) = 4 [pid 6079] close(5 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... close resumed>) = 0 [pid 6082] mkdir("./bus", 0777 [pid 6081] mkdir("./bus", 0777 [pid 6080] rename("./bus", "./file2" [pid 5075] newfstatat(AT_FDCWD, "./163/bus", [pid 6082] <... mkdir resumed>) = 0 [pid 6081] <... mkdir resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6082] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6080] <... rename resumed>) = -1 EEXIST (File exists) ./strace-static-x86_64: Process 6083 attached [pid 6081] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5075] umount2("./163/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6083] set_robust_list(0x55556e32a660, 24 [pid 6080] memfd_create("syzkaller", 0 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6083 [pid 6083] <... set_robust_list resumed>) = 0 [pid 6080] <... memfd_create resumed>) = 5 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6083] chdir("./163" [pid 6080] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [ 175.852490][ T6081] loop4: detected capacity change from 0 to 1024 [ 175.862375][ T6082] loop3: detected capacity change from 0 to 1024 [pid 5075] openat(AT_FDCWD, "./163/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6083] <... chdir resumed>) = 0 [pid 6082] <... mount resumed>) = 0 [pid 6080] <... mmap resumed>) = 0x7f0356e00000 [pid 6079] <... close resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 6083] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6082] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6080] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6082] <... openat resumed>) = 3 [pid 5075] newfstatat(4, "", [pid 6083] <... prctl resumed>) = 0 [pid 6082] chdir("./bus" [pid 6079] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6082] <... chdir resumed>) = 0 [pid 6082] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6082] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6083] setpgid(0, 0) = 0 [pid 6083] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6082] <... symlink resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6082] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 4 [pid 6082] rename("./bus", "./file2" [pid 5075] getdents64(4, [pid 6083] <... openat resumed>) = 3 [pid 6081] <... mount resumed>) = 0 [pid 6079] <... open resumed>) = 5 [pid 6083] write(3, "1000", 4 [pid 6082] <... rename resumed>) = -1 EEXIST (File exists) [pid 6081] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6080] <... write resumed>) = 524288 [pid 6079] ftruncate(5, 0 [pid 6083] <... write resumed>) = 4 [pid 6082] memfd_create("syzkaller", 0 [pid 6081] <... openat resumed>) = 3 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6083] close(3 [pid 6082] <... memfd_create resumed>) = 5 [pid 6082] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] getdents64(4, [pid 6082] <... mmap resumed>) = 0x7f0356e00000 [pid 6083] <... close resumed>) = 0 [pid 6082] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6081] chdir("./bus" [pid 6079] <... ftruncate resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6083] symlink("/dev/binderfs", "./binderfs" [pid 6081] <... chdir resumed>) = 0 [pid 6079] exit_group(0 [pid 6083] <... symlink resumed>) = 0 [pid 5075] close(4 [pid 6081] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6079] <... exit_group resumed>) = ? [pid 6083] memfd_create("syzkaller", 0 [pid 5075] <... close resumed>) = 0 [pid 6083] <... memfd_create resumed>) = 3 [pid 5075] rmdir("./163/bus") = 0 [pid 5075] umount2("./163/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6079] +++ exited with 0 +++ [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6083] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6081] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6079, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6083] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] newfstatat(AT_FDCWD, "./163/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./163/binderfs") = 0 [pid 5075] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] close(3 [pid 6083] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] restart_syscall(<... resuming interrupted clone ...> [pid 5075] <... close resumed>) = 0 [pid 6081] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] <... restart_syscall resumed>) = 0 [pid 5075] rmdir("./163" [pid 6080] munmap(0x7f0356e00000, 138412032 [pid 5075] <... rmdir resumed>) = 0 [pid 6080] <... munmap resumed>) = 0 [pid 5075] mkdir("./164", 0777 [pid 6081] <... symlink resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [ 175.927289][ T28] audit: type=1800 audit(1710613058.034:988): pid=6079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop5" ino=20 res=0 errno=0 [pid 6080] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6081] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] umount2("./165", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6080] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... openat resumed>) = 3 [pid 6082] <... write resumed>) = 524288 [pid 6081] <... creat resumed>) = 4 [pid 6080] close(5 [pid 5078] openat(AT_FDCWD, "./165", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5078] newfstatat(3, "", [pid 6081] rename("./bus", "./file2" [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6083] <... write resumed>) = 524288 [pid 6081] <... rename resumed>) = -1 EEXIST (File exists) [pid 6080] <... close resumed>) = 0 [pid 5078] getdents64(3, [pid 6083] munmap(0x7f0356e00000, 138412032 [pid 6081] memfd_create("syzkaller", 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6081] <... memfd_create resumed>) = 5 [pid 6083] <... munmap resumed>) = 0 [pid 6082] munmap(0x7f0356e00000, 138412032 [pid 6080] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6081] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] umount2("./165/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6083] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6081] <... mmap resumed>) = 0x7f0356e00000 [pid 6083] <... openat resumed>) = 4 [pid 6082] <... munmap resumed>) = 0 [pid 6082] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6083] ioctl(4, LOOP_SET_FD, 3 [pid 6082] close(5) = 0 [pid 6080] <... open resumed>) = 5 [pid 5078] <... umount2 resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 6080] ftruncate(5, 0) = 0 [pid 6080] exit_group(0 [pid 5078] umount2("./165/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] close(3) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] newfstatat(AT_FDCWD, "./165/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6080] <... exit_group resumed>) = ? [pid 5078] umount2("./165/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6080] +++ exited with 0 +++ [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./165/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6084 attached [pid 6082] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6081] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... openat resumed>) = 4 [pid 6084] set_robust_list(0x55556e32a660, 24 [pid 6083] <... ioctl resumed>) = 0 [pid 6081] <... write resumed>) = 524288 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6084 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6080, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6084] <... set_robust_list resumed>) = 0 [pid 6081] munmap(0x7f0356e00000, 138412032 [pid 5078] newfstatat(4, "", [pid 5074] umount2("./163", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6084] chdir("./164" [pid 6081] <... munmap resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6084] <... chdir resumed>) = 0 [pid 6082] <... open resumed>) = 5 [pid 5078] getdents64(4, [pid 5074] openat(AT_FDCWD, "./163", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6084] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6083] close(3 [pid 6082] ftruncate(5, 0 [pid 6081] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] <... openat resumed>) = 3 [pid 6084] <... prctl resumed>) = 0 [pid 6083] <... close resumed>) = 0 [pid 6082] <... ftruncate resumed>) = 0 [pid 6081] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] getdents64(4, [pid 5074] newfstatat(3, "", [pid 6084] setpgid(0, 0 [pid 6083] close(4 [pid 6082] exit_group(0 [pid 6081] close(5 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6084] <... setpgid resumed>) = 0 [pid 6083] <... close resumed>) = 0 [pid 6082] <... exit_group resumed>) = ? [pid 5078] close(4 [pid 5074] getdents64(3, [pid 6083] mkdir("./bus", 0777 [pid 5078] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6084] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6083] <... mkdir resumed>) = 0 [pid 6081] <... close resumed>) = 0 [pid 5078] rmdir("./165/bus" [pid 5074] umount2("./163/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6083] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6082] +++ exited with 0 +++ [pid 5078] <... rmdir resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6082, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6084] <... openat resumed>) = 3 [pid 5076] umount2("./166", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6084] write(3, "1000", 4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6084] <... write resumed>) = 4 [pid 5078] umount2("./165/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] openat(AT_FDCWD, "./166", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6084] close(3 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... openat resumed>) = 3 [pid 5078] newfstatat(AT_FDCWD, "./165/binderfs", [pid 5076] newfstatat(3, "", [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6084] <... close resumed>) = 0 [pid 5078] unlink("./165/binderfs" [ 176.025462][ T6083] loop0: detected capacity change from 0 to 1024 [ 176.034117][ T28] audit: type=1800 audit(1710613058.134:989): pid=6080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop1" ino=20 res=0 errno=0 [pid 5076] getdents64(3, [pid 6084] symlink("/dev/binderfs", "./binderfs" [pid 6083] <... mount resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] <... umount2 resumed>) = 0 [pid 6083] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5076] umount2("./166/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./163/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6083] <... openat resumed>) = 3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6084] <... symlink resumed>) = 0 [pid 6083] chdir("./bus" [pid 6081] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] getdents64(3, [pid 5074] newfstatat(AT_FDCWD, "./163/bus", [pid 6083] <... chdir resumed>) = 0 [pid 6083] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./163/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6083] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6083] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5074] openat(AT_FDCWD, "./163/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6084] memfd_create("syzkaller", 0 [pid 6081] <... open resumed>) = 5 [pid 5076] <... umount2 resumed>) = 0 [pid 5074] <... openat resumed>) = 4 [pid 6083] <... symlink resumed>) = 0 [pid 5074] newfstatat(4, "", [pid 6084] <... memfd_create resumed>) = 3 [pid 6083] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6081] ftruncate(5, 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6084] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6081] <... ftruncate resumed>) = 0 [pid 5078] close(3 [pid 5074] getdents64(4, [pid 6084] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... close resumed>) = 0 [pid 5078] rmdir("./165" [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6083] <... creat resumed>) = 4 [pid 5078] <... rmdir resumed>) = 0 [pid 5074] getdents64(4, [pid 6081] exit_group(0 [pid 6084] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6083] rename("./bus", "./file2" [pid 5076] umount2("./166/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6081] <... exit_group resumed>) = ? [pid 5078] mkdir("./166", 0777 [pid 6081] +++ exited with 0 +++ [pid 5078] <... mkdir resumed>) = 0 [pid 5074] close(4 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6081, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... close resumed>) = 0 [pid 6083] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] <... openat resumed>) = 3 [pid 5076] newfstatat(AT_FDCWD, "./166/bus", [pid 5074] rmdir("./163/bus" [pid 6083] memfd_create("syzkaller", 0 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./166/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] umount2("./165", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... rmdir resumed>) = 0 [pid 6083] <... memfd_create resumed>) = 5 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./166/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] umount2("./163/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6083] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] openat(AT_FDCWD, "./165", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6083] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] <... openat resumed>) = 3 [pid 5076] <... openat resumed>) = 4 [pid 5074] newfstatat(AT_FDCWD, "./163/binderfs", [pid 5077] newfstatat(3, "", [pid 5076] newfstatat(4, "", [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] getdents64(3, [pid 5076] getdents64(4, [pid 5074] unlink("./163/binderfs" [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6083] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] umount2("./165/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] getdents64(4, [pid 5074] <... unlink resumed>) = 0 [pid 5074] getdents64(3, [pid 6084] <... write resumed>) = 524288 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] close(4 [pid 5074] close(3) = 0 [pid 5076] <... close resumed>) = 0 [pid 5076] rmdir("./166/bus" [pid 6084] munmap(0x7f0356e00000, 138412032 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] rmdir("./163" [pid 5076] umount2("./166/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./166/binderfs", [pid 5074] <... rmdir resumed>) = 0 [pid 6084] <... munmap resumed>) = 0 [pid 6083] <... write resumed>) = 524288 [pid 5078] <... ioctl resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] mkdir("./164", 0777 [pid 5077] <... umount2 resumed>) = 0 [pid 5076] unlink("./166/binderfs" [pid 6084] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] <... unlink resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 6084] <... openat resumed>) = 4 [pid 5076] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3) = 0 [pid 5076] rmdir("./166" [pid 5077] umount2("./165/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... rmdir resumed>) = 0 [pid 5076] mkdir("./167", 0777 [pid 6084] ioctl(4, LOOP_SET_FD, 3 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6083] munmap(0x7f0356e00000, 138412032 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... mkdir resumed>) = 0 [pid 5078] close(3 [pid 5077] newfstatat(AT_FDCWD, "./165/bus", [pid 5078] <... close resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] umount2("./165/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./165/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5074] <... openat resumed>) = 3 [pid 5077] <... openat resumed>) = 4 [pid 5076] <... openat resumed>) = 3 [pid 6083] <... munmap resumed>) = 0 [pid 5077] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5077] getdents64(4, ./strace-static-x86_64: Process 6085 attached 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6085] set_robust_list(0x55556e32a660, 24 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6085 [pid 6085] <... set_robust_list resumed>) = 0 [pid 5077] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6085] chdir("./166" [pid 6084] <... ioctl resumed>) = 0 [pid 6083] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6085] <... chdir resumed>) = 0 [pid 6084] close(3 [pid 6083] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] close(4 [pid 6085] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6084] <... close resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 6085] <... prctl resumed>) = 0 [pid 5077] rmdir("./165/bus" [pid 6083] close(5 [pid 6085] setpgid(0, 0 [pid 6084] close(4) = 0 [pid 6084] mkdir("./bus", 0777 [pid 6085] <... setpgid resumed>) = 0 [pid 6085] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6084] <... mkdir resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 6085] <... openat resumed>) = 3 [pid 5077] umount2("./165/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6084] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6085] write(3, "1000", 4) = 4 [pid 5077] newfstatat(AT_FDCWD, "./165/binderfs", [pid 6085] close(3 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5077] unlink("./165/binderfs") = 0 [pid 5077] getdents64(3, [pid 6083] <... close resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] close(3) = 0 [pid 5077] rmdir("./165") = 0 [pid 5077] mkdir("./166", 0777) = 0 [pid 6085] <... close resumed>) = 0 [pid 6085] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [ 176.191229][ T6084] loop2: detected capacity change from 0 to 1024 [pid 6085] memfd_create("syzkaller", 0 [pid 6083] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 6085] <... memfd_create resumed>) = 3 [pid 6085] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6085] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6083] <... open resumed>) = 5 [pid 5074] <... ioctl resumed>) = 0 [pid 6083] ftruncate(5, 0 [pid 5074] close(3 [pid 5076] close(3) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... close resumed>) = 0 [pid 6083] <... ftruncate resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6086 ./strace-static-x86_64: Process 6086 attached [pid 6086] set_robust_list(0x55556e32a660, 24) = 0 [pid 6086] chdir("./167") = 0 [pid 6086] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6084] <... mount resumed>) = 0 [pid 6086] <... prctl resumed>) = 0 [pid 6084] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6086] setpgid(0, 0 [pid 6084] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6087 attached [pid 6086] <... setpgid resumed>) = 0 [pid 6084] chdir("./bus" [pid 6083] exit_group(0 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6087 [pid 6086] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6084] <... chdir resumed>) = 0 [pid 6083] <... exit_group resumed>) = ? [pid 6084] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6086] <... openat resumed>) = 3 [pid 6084] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6083] +++ exited with 0 +++ [pid 6086] write(3, "1000", 4 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6083, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6087] set_robust_list(0x55556e32a660, 24 [pid 6086] <... write resumed>) = 4 [pid 6085] <... write resumed>) = 524288 [pid 6087] <... set_robust_list resumed>) = 0 [pid 6084] <... symlink resumed>) = 0 [pid 5077] <... ioctl resumed>) = 0 [pid 6086] close(3 [pid 6084] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6087] chdir("./164") = 0 [pid 6086] <... close resumed>) = 0 [pid 6087] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6086] symlink("/dev/binderfs", "./binderfs" [pid 6087] setpgid(0, 0) = 0 [pid 6086] <... symlink resumed>) = 0 [pid 6085] munmap(0x7f0356e00000, 138412032 [pid 5073] umount2("./163", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6087] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6085] <... munmap resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6086] memfd_create("syzkaller", 0 [pid 6085] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] openat(AT_FDCWD, "./163", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6087] <... openat resumed>) = 3 [pid 6086] <... memfd_create resumed>) = 3 [pid 6085] <... openat resumed>) = 4 [pid 5073] <... openat resumed>) = 3 [pid 6087] write(3, "1000", 4 [pid 6086] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] newfstatat(3, "", [pid 6087] <... write resumed>) = 4 [pid 6085] ioctl(4, LOOP_SET_FD, 3 [pid 6084] <... creat resumed>) = 4 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6087] close(3 [pid 6086] <... mmap resumed>) = 0x7f0356e00000 [pid 6085] <... ioctl resumed>) = 0 [pid 5077] close(3 [pid 6087] <... close resumed>) = 0 [pid 5073] getdents64(3, [pid 6087] symlink("/dev/binderfs", "./binderfs" [pid 6084] rename("./bus", "./file2" [pid 5077] <... close resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6087] <... symlink resumed>) = 0 [pid 6086] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6084] <... rename resumed>) = -1 EEXIST (File exists) [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] umount2("./163/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6087] memfd_create("syzkaller", 0 [pid 6084] memfd_create("syzkaller", 0) = 5 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6088 [pid 6084] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6087] <... memfd_create resumed>) = 3 [pid 6086] <... write resumed>) = 524288 ./strace-static-x86_64: Process 6088 attached [pid 6087] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6084] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... umount2 resumed>) = 0 [pid 6085] close(3 [pid 6088] set_robust_list(0x55556e32a660, 24 [pid 6087] <... mmap resumed>) = 0x7f0356e00000 [pid 6085] <... close resumed>) = 0 [pid 5073] umount2("./163/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6088] <... set_robust_list resumed>) = 0 [ 176.306765][ T6085] loop5: detected capacity change from 0 to 1024 [pid 6087] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6086] munmap(0x7f0356e00000, 138412032 [pid 6085] close(4 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6085] <... close resumed>) = 0 [pid 6088] chdir("./166" [pid 5073] newfstatat(AT_FDCWD, "./163/bus", [pid 6085] mkdir("./bus", 0777) = 0 [pid 6085] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6088] <... chdir resumed>) = 0 [pid 6086] <... munmap resumed>) = 0 [pid 5073] umount2("./163/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6088] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6086] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./163/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6086] <... openat resumed>) = 4 [pid 6085] <... mount resumed>) = 0 [pid 5073] <... openat resumed>) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6086] ioctl(4, LOOP_SET_FD, 3 [pid 5073] getdents64(4, [pid 6085] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6085] <... openat resumed>) = 3 [pid 6084] <... write resumed>) = 524288 [pid 6085] chdir("./bus") = 0 [pid 6085] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6085] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6084] munmap(0x7f0356e00000, 138412032 [pid 6085] <... symlink resumed>) = 0 [pid 6084] <... munmap resumed>) = 0 [pid 5073] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6085] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6084] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6088] setpgid(0, 0 [pid 6084] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] close(4 [pid 6084] close(5 [pid 5073] <... close resumed>) = 0 [pid 6088] <... setpgid resumed>) = 0 [pid 5073] rmdir("./163/bus" [pid 6085] <... creat resumed>) = 4 [pid 5073] <... rmdir resumed>) = 0 [pid 5073] umount2("./163/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./163/binderfs", [pid 6088] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6085] rename("./bus", "./file2" [pid 6084] <... close resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6088] <... openat resumed>) = 3 [pid 6085] <... rename resumed>) = -1 EEXIST (File exists) [pid 5073] unlink("./163/binderfs" [pid 6085] memfd_create("syzkaller", 0) = 5 [pid 6084] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5073] <... unlink resumed>) = 0 [pid 6085] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] getdents64(3, [pid 6086] <... ioctl resumed>) = 0 [pid 6085] <... mmap resumed>) = 0x7f0356e00000 [pid 6088] write(3, "1000", 4 [pid 6087] <... write resumed>) = 524288 [pid 6086] close(3 [pid 6085] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6088] <... write resumed>) = 4 [pid 6087] munmap(0x7f0356e00000, 138412032 [pid 6086] <... close resumed>) = 0 [pid 6084] <... open resumed>) = 5 [pid 5073] close(3 [pid 6088] close(3 [pid 6086] close(4 [pid 6084] ftruncate(5, 0 [pid 6086] <... close resumed>) = 0 [pid 6088] <... close resumed>) = 0 [pid 6086] mkdir("./bus", 0777 [pid 6084] <... ftruncate resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 6088] symlink("/dev/binderfs", "./binderfs" [pid 6087] <... munmap resumed>) = 0 [pid 6086] <... mkdir resumed>) = 0 [pid 6084] exit_group(0 [pid 5073] rmdir("./163" [pid 6088] <... symlink resumed>) = 0 [pid 6087] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6086] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6084] <... exit_group resumed>) = ? [pid 6088] memfd_create("syzkaller", 0 [ 176.374441][ T6086] loop3: detected capacity change from 0 to 1024 [pid 6087] <... openat resumed>) = 4 [pid 6084] +++ exited with 0 +++ [pid 5073] <... rmdir resumed>) = 0 [pid 6087] ioctl(4, LOOP_SET_FD, 3 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6084, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5073] mkdir("./164", 0777 [pid 6088] <... memfd_create resumed>) = 3 [pid 6088] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... mkdir resumed>) = 0 [pid 6088] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] umount2("./164", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6086] <... mount resumed>) = 0 [pid 6086] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6086] chdir("./bus") = 0 [pid 6086] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6088] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6086] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] openat(AT_FDCWD, "./164", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6086] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6085] <... write resumed>) = 524288 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6086] <... symlink resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5073] <... openat resumed>) = 3 [pid 6086] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6085] munmap(0x7f0356e00000, 138412032 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5075] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6086] <... creat resumed>) = 4 [pid 6085] <... munmap resumed>) = 0 [pid 5075] umount2("./164/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6086] rename("./bus", "./file2" [pid 5075] <... umount2 resumed>) = 0 [pid 6086] <... rename resumed>) = -1 EEXIST (File exists) [pid 6085] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6088] <... write resumed>) = 524288 [pid 6086] memfd_create("syzkaller", 0 [pid 6085] close(5 [pid 6086] <... memfd_create resumed>) = 5 [pid 6086] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6087] <... ioctl resumed>) = 0 [pid 6088] munmap(0x7f0356e00000, 138412032 [pid 6087] close(3 [pid 6086] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6088] <... munmap resumed>) = 0 [pid 6087] <... close resumed>) = 0 [pid 6088] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6087] close(4 [pid 5075] umount2("./164/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6088] <... openat resumed>) = 4 [pid 6087] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 176.420345][ T6087] loop1: detected capacity change from 0 to 1024 [pid 6088] ioctl(4, LOOP_SET_FD, 3 [pid 6087] mkdir("./bus", 0777 [pid 5075] newfstatat(AT_FDCWD, "./164/bus", [pid 6088] <... ioctl resumed>) = 0 [pid 6087] <... mkdir resumed>) = 0 [pid 6087] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6086] <... write resumed>) = 524288 [pid 6085] <... close resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 5075] umount2("./164/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6085] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./164/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5075] newfstatat(4, "", [pid 6085] <... open resumed>) = 5 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] close(3 [pid 6085] ftruncate(5, 0 [pid 5075] getdents64(4, [pid 5073] <... close resumed>) = 0 [pid 6085] <... ftruncate resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] close(4 [pid 6085] exit_group(0 [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./164/bus"./strace-static-x86_64: Process 6089 attached [pid 6088] close(3 [pid 6085] <... exit_group resumed>) = ? [pid 5075] <... rmdir resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6089 [pid 6089] set_robust_list(0x55556e32a660, 24 [pid 6088] <... close resumed>) = 0 [pid 6089] <... set_robust_list resumed>) = 0 [pid 6088] close(4) = 0 [pid 6087] <... mount resumed>) = 0 [pid 6089] chdir("./164" [pid 6088] mkdir("./bus", 0777 [pid 6089] <... chdir resumed>) = 0 [pid 6088] <... mkdir resumed>) = 0 [pid 6087] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6086] munmap(0x7f0356e00000, 138412032 [pid 6085] +++ exited with 0 +++ [pid 5075] umount2("./164/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6089] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6088] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6085, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6087] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 176.478929][ T6088] loop4: detected capacity change from 0 to 1024 [pid 5075] newfstatat(AT_FDCWD, "./164/binderfs", [pid 6089] <... prctl resumed>) = 0 [pid 6087] chdir("./bus" [pid 6086] <... munmap resumed>) = 0 [pid 5078] umount2("./166", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6087] <... chdir resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6089] setpgid(0, 0 [pid 6087] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] unlink("./164/binderfs" [pid 6089] <... setpgid resumed>) = 0 [pid 6089] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6087] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6086] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./166", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... unlink resumed>) = 0 [pid 6089] <... openat resumed>) = 3 [pid 6087] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] <... openat resumed>) = 3 [pid 5078] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6089] write(3, "1000", 4 [pid 5078] getdents64(3, [pid 5075] getdents64(3, [pid 6089] <... write resumed>) = 4 [pid 6087] <... symlink resumed>) = 0 [pid 6086] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6089] close(3 [pid 6087] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6086] close(5 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6089] <... close resumed>) = 0 [pid 6086] <... close resumed>) = 0 [pid 5075] close(3 [pid 6089] symlink("/dev/binderfs", "./binderfs" [pid 5078] umount2("./166/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... close resumed>) = 0 [pid 6089] <... symlink resumed>) = 0 [pid 5075] rmdir("./164" [pid 6089] memfd_create("syzkaller", 0 [pid 6087] <... creat resumed>) = 4 [pid 5075] <... rmdir resumed>) = 0 [pid 6089] <... memfd_create resumed>) = 3 [pid 6088] <... mount resumed>) = 0 [pid 6087] rename("./bus", "./file2" [pid 5078] <... umount2 resumed>) = 0 [pid 6089] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6088] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6087] <... rename resumed>) = -1 EEXIST (File exists) [pid 5075] mkdir("./165", 0777 [pid 6088] <... openat resumed>) = 3 [pid 6089] <... mmap resumed>) = 0x7f0356e00000 [pid 6088] chdir("./bus" [pid 6086] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] umount2("./166/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6088] <... chdir resumed>) = 0 [pid 6088] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6087] memfd_create("syzkaller", 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... mkdir resumed>) = 0 [pid 6088] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6087] <... memfd_create resumed>) = 5 [pid 5078] newfstatat(AT_FDCWD, "./166/bus", [pid 6088] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6087] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6087] <... mmap resumed>) = 0x7f0356e00000 [pid 6086] <... open resumed>) = 5 [pid 5078] umount2("./166/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6086] ftruncate(5, 0 [pid 5075] <... openat resumed>) = 3 [pid 5078] openat(AT_FDCWD, "./166/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6088] <... symlink resumed>) = 0 [pid 5078] <... openat resumed>) = 4 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6088] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6086] <... ftruncate resumed>) = 0 [pid 5078] newfstatat(4, "", [pid 6086] exit_group(0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6086] <... exit_group resumed>) = ? [pid 6089] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6087] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6086] +++ exited with 0 +++ [pid 5078] getdents64(4, [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6086, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] umount2("./167", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] close(4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... close resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./167", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] rmdir("./166/bus" [pid 5076] <... openat resumed>) = 3 [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5076] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] umount2("./167/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6088] <... creat resumed>) = 4 [pid 5078] umount2("./166/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6088] rename("./bus", "./file2" [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] newfstatat(AT_FDCWD, "./166/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6089] <... write resumed>) = 524288 [pid 6088] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] unlink("./166/binderfs" [pid 5076] <... umount2 resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 6087] <... write resumed>) = 524288 [pid 6088] memfd_create("syzkaller", 0 [pid 5078] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5078] close(3) = 0 [pid 5078] rmdir("./166" [pid 6088] <... memfd_create resumed>) = 5 [pid 5078] <... rmdir resumed>) = 0 [pid 5078] mkdir("./167", 0777 [pid 5076] umount2("./167/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6088] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... mkdir resumed>) = 0 [pid 6088] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./167/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5076] umount2("./167/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./167/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6089] munmap(0x7f0356e00000, 138412032 [pid 6088] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6087] munmap(0x7f0356e00000, 138412032 [pid 5078] <... openat resumed>) = 3 [pid 5076] <... openat resumed>) = 4 [pid 5075] <... ioctl resumed>) = 0 [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5076] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] close(4) = 0 [pid 5076] rmdir("./167/bus" [pid 6089] <... munmap resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 6087] <... munmap resumed>) = 0 [pid 6089] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6087] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] umount2("./167/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6087] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6089] <... openat resumed>) = 4 [pid 6087] close(5 [pid 6089] ioctl(4, LOOP_SET_FD, 3 [pid 6088] <... write resumed>) = 524288 [pid 6087] <... close resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./167/binderfs", [pid 5075] close(3 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./167/binderfs") = 0 [pid 5076] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3) = 0 [pid 5076] rmdir("./167") = 0 [pid 5076] mkdir("./168", 0777) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 6088] munmap(0x7f0356e00000, 138412032 [pid 6087] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5075] <... close resumed>) = 0 [pid 6088] <... munmap resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6088] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6088] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6089] <... ioctl resumed>) = 0 [pid 6088] close(5 [pid 6087] <... open resumed>) = 5 ./strace-static-x86_64: Process 6090 attached [pid 6088] <... close resumed>) = 0 [pid 5078] <... ioctl resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6090 [pid 6090] set_robust_list(0x55556e32a660, 24) = 0 [pid 6090] chdir("./165") = 0 [pid 6090] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6090] setpgid(0, 0 [pid 6089] close(3 [pid 6087] ftruncate(5, 0 [pid 6089] <... close resumed>) = 0 [pid 6087] <... ftruncate resumed>) = 0 [pid 6089] close(4 [pid 6090] <... setpgid resumed>) = 0 [pid 6089] <... close resumed>) = 0 [pid 6090] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5078] close(3 [pid 6090] write(3, "1000", 4) = 4 [pid 5078] <... close resumed>) = 0 [pid 6090] close(3 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6090] <... close resumed>) = 0 [pid 6090] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 6091 attached ) = 0 [pid 6089] mkdir("./bus", 0777 [pid 6091] set_robust_list(0x55556e32a660, 24) = 0 [pid 6090] memfd_create("syzkaller", 0 [pid 6089] <... mkdir resumed>) = 0 [pid 6091] chdir("./167" [pid 6090] <... memfd_create resumed>) = 3 [pid 6089] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6091] <... chdir resumed>) = 0 [pid 6090] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6091 [pid 6091] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6090] <... mmap resumed>) = 0x7f0356e00000 [pid 6088] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6091] <... prctl resumed>) = 0 [pid 6090] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6087] exit_group(0 [pid 6091] setpgid(0, 0 [pid 6087] <... exit_group resumed>) = ? [pid 6091] <... setpgid resumed>) = 0 [pid 6091] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6087] +++ exited with 0 +++ [pid 6091] <... openat resumed>) = 3 [pid 6088] <... open resumed>) = 5 [pid 6091] write(3, "1000", 4 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6087, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [ 176.644247][ T6089] loop0: detected capacity change from 0 to 1024 [pid 6091] <... write resumed>) = 4 [pid 5074] umount2("./164", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6091] close(3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6091] <... close resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./164", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6091] symlink("/dev/binderfs", "./binderfs" [pid 6090] <... write resumed>) = 524288 [pid 6089] <... mount resumed>) = 0 [pid 6088] ftruncate(5, 0 [pid 6091] <... symlink resumed>) = 0 [pid 6089] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6088] <... ftruncate resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 6091] memfd_create("syzkaller", 0 [pid 6089] <... openat resumed>) = 3 [pid 6088] exit_group(0 [pid 5074] newfstatat(3, "", [pid 6088] <... exit_group resumed>) = ? [pid 6091] <... memfd_create resumed>) = 3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6091] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] getdents64(3, [pid 6091] <... mmap resumed>) = 0x7f0356e00000 [pid 6089] chdir("./bus" [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6091] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] close(3 [pid 6088] +++ exited with 0 +++ [pid 5076] <... close resumed>) = 0 [pid 5074] umount2("./164/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6089] <... chdir resumed>) = 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6088, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5077] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 6089] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6090] munmap(0x7f0356e00000, 138412032 [pid 5077] umount2("./166", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6090] <... munmap resumed>) = 0 [pid 6089] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6092 attached [pid 5077] openat(AT_FDCWD, "./166", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6092 [pid 6092] set_robust_list(0x55556e32a660, 24 [pid 6091] <... write resumed>) = 524288 [pid 6090] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6089] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6092] <... set_robust_list resumed>) = 0 [pid 6090] <... openat resumed>) = 4 [pid 5077] <... openat resumed>) = 3 [pid 6092] chdir("./168" [pid 6090] ioctl(4, LOOP_SET_FD, 3 [pid 5077] newfstatat(3, "", [pid 6092] <... chdir resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6092] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6089] <... symlink resumed>) = 0 [pid 5077] getdents64(3, [pid 6092] <... prctl resumed>) = 0 [pid 6089] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] <... umount2 resumed>) = 0 [pid 6092] setpgid(0, 0 [pid 5077] umount2("./166/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6092] <... setpgid resumed>) = 0 [pid 6092] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6091] munmap(0x7f0356e00000, 138412032 [pid 6089] <... creat resumed>) = 4 [pid 5074] umount2("./164/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6091] <... munmap resumed>) = 0 [pid 6089] rename("./bus", "./file2" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... umount2 resumed>) = 0 [pid 6089] <... rename resumed>) = -1 EEXIST (File exists) [pid 5074] newfstatat(AT_FDCWD, "./164/bus", [pid 6092] write(3, "1000", 4 [pid 6091] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6089] memfd_create("syzkaller", 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6092] <... write resumed>) = 4 [pid 6091] <... openat resumed>) = 4 [pid 6092] close(3 [pid 6091] ioctl(4, LOOP_SET_FD, 3 [pid 6089] <... memfd_create resumed>) = 5 [pid 5074] umount2("./164/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6092] <... close resumed>) = 0 [pid 6089] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] umount2("./166/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./164/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6092] symlink("/dev/binderfs", "./binderfs" [pid 6091] <... ioctl resumed>) = 0 [pid 6089] <... mmap resumed>) = 0x7f0356e00000 [pid 5074] <... openat resumed>) = 4 [pid 5074] newfstatat(4, "", [pid 5077] newfstatat(AT_FDCWD, "./166/bus", [pid 6092] <... symlink resumed>) = 0 [pid 6091] close(3 [pid 6090] <... ioctl resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6089] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6092] memfd_create("syzkaller", 0 [pid 6091] <... close resumed>) = 0 [pid 6091] close(4) = 0 [pid 6092] <... memfd_create resumed>) = 3 [pid 6091] mkdir("./bus", 0777 [pid 5074] getdents64(4, [pid 5077] umount2("./166/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6092] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6091] <... mkdir resumed>) = 0 [pid 6090] close(3 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6090] <... close resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./166/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6092] <... mmap resumed>) = 0x7f0356e00000 [pid 6091] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6090] close(4 [pid 5077] <... openat resumed>) = 4 [pid 5074] getdents64(4, [pid 6092] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6090] <... close resumed>) = 0 [pid 5077] newfstatat(4, "", [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6090] mkdir("./bus", 0777 [pid 5074] close(4 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... close resumed>) = 0 [ 176.745471][ T6090] loop2: detected capacity change from 0 to 1024 [ 176.777776][ T6091] loop5: detected capacity change from 0 to 1024 [pid 6090] <... mkdir resumed>) = 0 [pid 6089] <... write resumed>) = 524288 [pid 5077] getdents64(4, [pid 5074] rmdir("./164/bus" [pid 6090] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6089] munmap(0x7f0356e00000, 138412032 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] <... rmdir resumed>) = 0 [pid 6089] <... munmap resumed>) = 0 [pid 5077] getdents64(4, [pid 5074] umount2("./164/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] close(4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... close resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./164/binderfs", [pid 5077] rmdir("./166/bus" [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6092] <... write resumed>) = 524288 [pid 6089] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5077] <... rmdir resumed>) = 0 [pid 5074] unlink("./164/binderfs") = 0 [pid 5074] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6089] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] close(3 [pid 6089] close(5 [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./164" [pid 6091] <... mount resumed>) = 0 [pid 6091] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6091] chdir("./bus") = 0 [pid 6091] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6091] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6089] <... close resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 6092] munmap(0x7f0356e00000, 138412032 [pid 6091] <... symlink resumed>) = 0 [pid 5074] mkdir("./165", 0777 [pid 6092] <... munmap resumed>) = 0 [pid 6091] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5077] umount2("./166/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... mkdir resumed>) = 0 [pid 6092] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6092] <... openat resumed>) = 4 [pid 6092] ioctl(4, LOOP_SET_FD, 3 [pid 6090] <... mount resumed>) = 0 [pid 6089] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] newfstatat(AT_FDCWD, "./166/binderfs", [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6091] <... creat resumed>) = 4 [pid 6090] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5077] unlink("./166/binderfs" [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6091] rename("./bus", "./file2") = -1 EEXIST (File exists) [pid 6090] <... openat resumed>) = 3 [pid 5077] <... unlink resumed>) = 0 [pid 6090] chdir("./bus" [pid 5077] getdents64(3, [pid 6091] memfd_create("syzkaller", 0 [pid 6090] <... chdir resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6091] <... memfd_create resumed>) = 5 [pid 6090] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5077] close(3) = 0 [pid 6091] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6089] <... open resumed>) = 5 [pid 6091] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] rmdir("./166" [pid 6090] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6092] <... ioctl resumed>) = 0 [pid 6090] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6089] ftruncate(5, 0 [pid 5077] <... rmdir resumed>) = 0 [pid 6092] close(3 [pid 6091] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6089] <... ftruncate resumed>) = 0 [pid 5077] mkdir("./167", 0777 [pid 6090] <... symlink resumed>) = 0 [pid 6092] <... close resumed>) = 0 [pid 6090] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6089] exit_group(0 [pid 5077] <... mkdir resumed>) = 0 [pid 6092] close(4) = 0 [pid 6091] <... write resumed>) = 524288 [pid 6089] <... exit_group resumed>) = ? [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6092] mkdir("./bus", 0777) = 0 [pid 6091] munmap(0x7f0356e00000, 138412032 [pid 5077] <... openat resumed>) = 3 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 6092] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6089] +++ exited with 0 +++ [pid 6091] <... munmap resumed>) = 0 [pid 6090] <... creat resumed>) = 4 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6089, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 6091] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6090] rename("./bus", "./file2" [pid 6091] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6091] close(5 [pid 6090] <... rename resumed>) = -1 EEXIST (File exists) [pid 5073] umount2("./164", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6090] memfd_create("syzkaller", 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./164", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6090] <... memfd_create resumed>) = 5 [pid 6091] <... close resumed>) = 0 [pid 6090] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... openat resumed>) = 3 [pid 5073] newfstatat(3, "", [pid 6090] <... mmap resumed>) = 0x7f0356e00000 [ 176.875527][ T6092] loop3: detected capacity change from 0 to 1024 [pid 6090] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] umount2("./164/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6091] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6092] <... mount resumed>) = 0 [pid 6090] <... write resumed>) = 524288 [pid 5077] <... ioctl resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 6092] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6092] chdir("./bus" [pid 5074] close(3 [pid 6092] <... chdir resumed>) = 0 [pid 6090] munmap(0x7f0356e00000, 138412032 [pid 5074] <... close resumed>) = 0 [pid 5073] umount2("./164/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6092] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6092] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6091] <... open resumed>) = 5 [pid 5073] newfstatat(AT_FDCWD, "./164/bus", [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6091] ftruncate(5, 0 [pid 6090] <... munmap resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6091] <... ftruncate resumed>) = 0 [pid 6090] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5077] close(3 [pid 6090] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... close resumed>) = 0 [pid 5073] umount2("./164/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6093 attached [pid 6091] exit_group(0 [pid 6090] close(5 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6093 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6094 attached [pid 6093] set_robust_list(0x55556e32a660, 24 [pid 6092] <... symlink resumed>) = 0 [pid 6091] <... exit_group resumed>) = ? [pid 6090] <... close resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./164/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6094] set_robust_list(0x55556e32a660, 24 [pid 6093] <... set_robust_list resumed>) = 0 [pid 6092] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5073] <... openat resumed>) = 4 [pid 6094] <... set_robust_list resumed>) = 0 [pid 6093] chdir("./165" [pid 6091] +++ exited with 0 +++ [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6094 [pid 5073] newfstatat(4, "", [pid 6094] chdir("./167" [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6091, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5078] restart_syscall(<... resuming interrupted clone ...> [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6094] <... chdir resumed>) = 0 [pid 5078] <... restart_syscall resumed>) = 0 [pid 6094] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5073] getdents64(4, [pid 6094] setpgid(0, 0 [pid 5078] umount2("./167", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6094] <... setpgid resumed>) = 0 [pid 6093] <... chdir resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6094] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6093] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5078] openat(AT_FDCWD, "./167", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] getdents64(4, [pid 6094] <... openat resumed>) = 3 [pid 6093] <... prctl resumed>) = 0 [pid 6092] <... creat resumed>) = 4 [pid 6090] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] <... openat resumed>) = 3 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6094] write(3, "1000", 4 [pid 6093] setpgid(0, 0 [pid 6092] rename("./bus", "./file2" [pid 6090] <... open resumed>) = 5 [pid 5078] newfstatat(3, "", [pid 5073] close(4 [pid 6094] <... write resumed>) = 4 [pid 6093] <... setpgid resumed>) = 0 [pid 6090] ftruncate(5, 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... close resumed>) = 0 [pid 6094] close(3 [pid 6093] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6090] <... ftruncate resumed>) = 0 [pid 5078] getdents64(3, [pid 5073] rmdir("./164/bus" [pid 6094] <... close resumed>) = 0 [pid 6092] <... rename resumed>) = -1 EEXIST (File exists) [pid 6090] exit_group(0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6094] symlink("/dev/binderfs", "./binderfs" [pid 6090] <... exit_group resumed>) = ? [pid 5078] umount2("./167/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6092] memfd_create("syzkaller", 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5073] umount2("./164/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6094] <... symlink resumed>) = 0 [pid 6093] <... openat resumed>) = 3 [pid 6092] <... memfd_create resumed>) = 5 [pid 6090] +++ exited with 0 +++ [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6092] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6090, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5073] newfstatat(AT_FDCWD, "./164/binderfs", [pid 6094] memfd_create("syzkaller", 0 [pid 6093] write(3, "1000", 4 [pid 6092] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 6093] <... write resumed>) = 4 [pid 6092] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... umount2 resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6093] close(3 [pid 5075] <... restart_syscall resumed>) = 0 [pid 5073] unlink("./164/binderfs" [pid 6093] <... close resumed>) = 0 [pid 6094] <... memfd_create resumed>) = 3 [pid 6094] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6093] symlink("/dev/binderfs", "./binderfs" [pid 6094] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... unlink resumed>) = 0 [pid 5078] umount2("./167/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] getdents64(3, [pid 6093] <... symlink resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5078] newfstatat(AT_FDCWD, "./167/bus", [pid 5075] umount2("./165", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] close(3 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] umount2("./167/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "./165", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... close resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... openat resumed>) = 3 [pid 6093] memfd_create("syzkaller", 0 [pid 5073] rmdir("./164" [pid 6093] <... memfd_create resumed>) = 3 [pid 5078] openat(AT_FDCWD, "./167/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] newfstatat(3, "", [pid 5073] <... rmdir resumed>) = 0 [pid 6094] <... write resumed>) = 524288 [pid 5078] <... openat resumed>) = 4 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] mkdir("./165", 0777 [pid 6093] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] getdents64(3, [pid 5073] <... mkdir resumed>) = 0 [pid 5078] newfstatat(4, "", [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] umount2("./165/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5078] getdents64(4, [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, [pid 6093] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5078] close(4) = 0 [pid 5078] rmdir("./167/bus") = 0 [pid 5078] umount2("./167/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] newfstatat(AT_FDCWD, "./167/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6094] munmap(0x7f0356e00000, 138412032 [pid 5078] unlink("./167/binderfs") = 0 [pid 6093] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] getdents64(3, [pid 6092] <... write resumed>) = 524288 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6094] <... munmap resumed>) = 0 [pid 6092] munmap(0x7f0356e00000, 138412032 [pid 5078] close(3 [pid 6093] <... write resumed>) = 524288 [pid 6092] <... munmap resumed>) = 0 [pid 6094] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 6093] munmap(0x7f0356e00000, 138412032 [pid 5078] rmdir("./167" [pid 6094] <... openat resumed>) = 4 [pid 6093] <... munmap resumed>) = 0 [pid 6092] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] umount2("./165/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6094] ioctl(4, LOOP_SET_FD, 3 [pid 6093] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5078] <... rmdir resumed>) = 0 [pid 6093] ioctl(4, LOOP_SET_FD, 3 [pid 6092] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6094] <... ioctl resumed>) = 0 [pid 5078] mkdir("./168", 0777 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6094] close(3 [pid 6092] close(5 [pid 5078] <... mkdir resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./165/bus", [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6092] <... close resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6093] <... ioctl resumed>) = 0 [pid 6094] <... close resumed>) = 0 [pid 6092] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] <... openat resumed>) = 3 [pid 5075] umount2("./165/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... ioctl resumed>) = 0 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 6094] close(4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./165/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6094] <... close resumed>) = 0 [pid 5073] close(3 [pid 6094] mkdir("./bus", 0777 [pid 6093] close(3 [pid 5075] <... openat resumed>) = 4 [pid 5073] <... close resumed>) = 0 [pid 6092] <... open resumed>) = 5 [pid 6093] <... close resumed>) = 0 [pid 6094] <... mkdir resumed>) = 0 [pid 6093] close(4 [pid 6092] ftruncate(5, 0 [pid 5075] newfstatat(4, "", [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6093] <... close resumed>) = 0 [pid 6093] mkdir("./bus", 0777 [pid 6092] <... ftruncate resumed>) = 0 [pid 6093] <... mkdir resumed>) = 0 [ 177.073710][ T6094] loop4: detected capacity change from 0 to 1024 [ 177.073788][ T6093] loop1: detected capacity change from 0 to 1024 [pid 6093] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, ""./strace-static-x86_64: Process 6095 attached [pid 6094] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6093] <... mount resumed>) = 0 [pid 6092] exit_group(0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6095] set_robust_list(0x55556e32a660, 24 [pid 6093] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6092] <... exit_group resumed>) = ? [pid 5075] getdents64(4, [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6095 [pid 6095] <... set_robust_list resumed>) = 0 [pid 6093] <... openat resumed>) = 3 [pid 6095] chdir("./165" [pid 6093] chdir("./bus" [pid 6092] +++ exited with 0 +++ [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6095] <... chdir resumed>) = 0 [pid 6093] <... chdir resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6092, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] getdents64(4, [pid 6095] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6093] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6095] <... prctl resumed>) = 0 [pid 6093] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6095] setpgid(0, 0 [pid 6093] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5075] close(4 [pid 6095] <... setpgid resumed>) = 0 [pid 5076] umount2("./168", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... close resumed>) = 0 [pid 6095] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] rmdir("./165/bus" [pid 6095] <... openat resumed>) = 3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... rmdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./168", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] umount2("./165/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6095] write(3, "1000", 4 [pid 5076] <... openat resumed>) = 3 [pid 6095] <... write resumed>) = 4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6095] close(3 [pid 6094] <... mount resumed>) = 0 [pid 6093] <... symlink resumed>) = 0 [pid 5076] newfstatat(3, "", [pid 5075] newfstatat(AT_FDCWD, "./165/binderfs", [pid 6095] <... close resumed>) = 0 [pid 6094] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6093] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6095] symlink("/dev/binderfs", "./binderfs" [pid 6094] <... openat resumed>) = 3 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6095] <... symlink resumed>) = 0 [pid 6094] chdir("./bus" [pid 5076] getdents64(3, [pid 5075] unlink("./165/binderfs" [pid 6095] memfd_create("syzkaller", 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6095] <... memfd_create resumed>) = 3 [pid 5076] umount2("./168/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... unlink resumed>) = 0 [pid 6095] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5078] <... ioctl resumed>) = 0 [pid 5075] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] close(3 [pid 6095] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6094] <... chdir resumed>) = 0 [pid 6093] <... creat resumed>) = 4 [pid 5078] close(3 [pid 5076] <... umount2 resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 6093] rename("./bus", "./file2" [pid 6094] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] <... close resumed>) = 0 [pid 5076] umount2("./168/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] rmdir("./165" [pid 6094] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6095] <... write resumed>) = 524288 [pid 6093] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6094] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5075] <... rmdir resumed>) = 0 [pid 6093] memfd_create("syzkaller", 0) = 5 [pid 6093] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6094] <... symlink resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./168/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 6096 attached [pid 6094] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5076] umount2("./168/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] mkdir("./166", 0777 [pid 6093] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6096 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... mkdir resumed>) = 0 [pid 6096] set_robust_list(0x55556e32a660, 24 [pid 5076] openat(AT_FDCWD, "./168/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6096] <... set_robust_list resumed>) = 0 [pid 6096] chdir("./168" [pid 6095] munmap(0x7f0356e00000, 138412032 [pid 5076] <... openat resumed>) = 4 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6096] <... chdir resumed>) = 0 [pid 5076] newfstatat(4, "", [pid 5075] <... openat resumed>) = 3 [pid 6096] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6095] <... munmap resumed>) = 0 [pid 6094] <... creat resumed>) = 4 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6096] <... prctl resumed>) = 0 [pid 6094] rename("./bus", "./file2" [pid 5076] getdents64(4, [pid 6096] setpgid(0, 0 [pid 6095] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6094] <... rename resumed>) = -1 EEXIST (File exists) [pid 6093] <... write resumed>) = 524288 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6096] <... setpgid resumed>) = 0 [pid 6095] <... openat resumed>) = 4 [pid 6094] memfd_create("syzkaller", 0 [pid 5076] getdents64(4, [pid 6095] ioctl(4, LOOP_SET_FD, 3 [pid 6094] <... memfd_create resumed>) = 5 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6096] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6093] munmap(0x7f0356e00000, 138412032 [pid 5076] close(4 [pid 6096] <... openat resumed>) = 3 [pid 6093] <... munmap resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5076] rmdir("./168/bus" [pid 6094] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... rmdir resumed>) = 0 [pid 6095] <... ioctl resumed>) = 0 [pid 6096] write(3, "1000", 4 [pid 6094] <... mmap resumed>) = 0x7f0356e00000 [pid 6093] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6095] close(3 [pid 5076] umount2("./168/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6096] <... write resumed>) = 4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./168/binderfs", [pid 6096] close(3 [pid 6095] <... close resumed>) = 0 [pid 6095] close(4 [pid 6093] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6096] <... close resumed>) = 0 [pid 6095] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6096] symlink("/dev/binderfs", "./binderfs" [pid 6095] mkdir("./bus", 0777 [pid 6093] close(5 [pid 6096] <... symlink resumed>) = 0 [pid 6095] <... mkdir resumed>) = 0 [pid 6095] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5076] unlink("./168/binderfs" [pid 6094] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... unlink resumed>) = 0 [pid 5076] getdents64(3, [pid 6096] memfd_create("syzkaller", 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6096] <... memfd_create resumed>) = 3 [pid 5076] close(3) = 0 [pid 5076] rmdir("./168") = 0 [pid 6096] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5076] mkdir("./169", 0777 [pid 6096] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6095] <... mount resumed>) = 0 [pid 6093] <... close resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 6095] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5076] <... mkdir resumed>) = 0 [pid 6095] <... openat resumed>) = 3 [pid 6095] chdir("./bus") = 0 [pid 6095] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6093] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6095] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6095] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6095] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6093] <... open resumed>) = 5 [pid 5075] close(3 [pid 6096] <... write resumed>) = 524288 [pid 6094] <... write resumed>) = 524288 [pid 6093] ftruncate(5, 0 [pid 5075] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6095] <... creat resumed>) = 4 [pid 6095] rename("./bus", "./file2") = -1 EEXIST (File exists) [ 177.240664][ T6095] loop0: detected capacity change from 0 to 1024 [pid 6094] munmap(0x7f0356e00000, 138412032./strace-static-x86_64: Process 6097 attached [pid 6096] munmap(0x7f0356e00000, 138412032 [pid 6095] memfd_create("syzkaller", 0 [pid 6093] <... ftruncate resumed>) = 0 [pid 6097] set_robust_list(0x55556e32a660, 24 [pid 6096] <... munmap resumed>) = 0 [pid 6095] <... memfd_create resumed>) = 5 [pid 6094] <... munmap resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6097 [pid 6097] <... set_robust_list resumed>) = 0 [pid 6095] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6093] exit_group(0 [pid 6097] chdir("./166" [pid 6095] <... mmap resumed>) = 0x7f0356e00000 [pid 6093] <... exit_group resumed>) = ? [pid 6097] <... chdir resumed>) = 0 [pid 6095] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6094] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6093] +++ exited with 0 +++ [pid 6097] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6096] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6097] <... prctl resumed>) = 0 [pid 6096] <... openat resumed>) = 4 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6093, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6097] setpgid(0, 0 [pid 6096] ioctl(4, LOOP_SET_FD, 3 [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 6097] <... setpgid resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5074] <... restart_syscall resumed>) = 0 [pid 6094] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] umount2("./165", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./165", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6094] close(5 [pid 5076] close(3 [pid 5074] <... openat resumed>) = 3 [pid 5074] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] umount2("./165/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6097] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6096] <... ioctl resumed>) = 0 [pid 6096] close(3) = 0 [pid 6096] close(4) = 0 [pid 6097] <... openat resumed>) = 3 [pid 6096] mkdir("./bus", 0777 [pid 5076] <... close resumed>) = 0 [pid 6096] <... mkdir resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6097] write(3, "1000", 4) = 4 [pid 6097] close(3) = 0 [pid 6097] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6097] memfd_create("syzkaller", 0 [pid 6096] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6097] <... memfd_create resumed>) = 3 [pid 6095] <... write resumed>) = 524288 [pid 6094] <... close resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6098 [pid 6097] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6095] munmap(0x7f0356e00000, 138412032 [pid 6094] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5074] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 6098 attached [pid 6098] set_robust_list(0x55556e32a660, 24) = 0 [pid 6098] chdir("./169" [pid 6097] <... mmap resumed>) = 0x7f0356e00000 [pid 6096] <... mount resumed>) = 0 [pid 6095] <... munmap resumed>) = 0 [pid 6098] <... chdir resumed>) = 0 [pid 6097] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6098] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5074] umount2("./165/bus", MNT_DETACH|UMOUNT_NOFOLLOW [ 177.328985][ T6096] loop5: detected capacity change from 0 to 1024 [pid 6098] setpgid(0, 0) = 0 [pid 6095] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6095] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] newfstatat(AT_FDCWD, "./165/bus", [pid 6095] close(5 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6096] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5074] umount2("./165/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6094] <... open resumed>) = 5 [pid 6096] <... openat resumed>) = 3 [pid 6094] ftruncate(5, 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6098] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6096] chdir("./bus" [pid 6095] <... close resumed>) = 0 [pid 6094] <... ftruncate resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./165/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6098] write(3, "1000", 4 [pid 6096] <... chdir resumed>) = 0 [pid 6094] exit_group(0 [pid 5074] <... openat resumed>) = 4 [pid 6096] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6094] <... exit_group resumed>) = ? [pid 5074] newfstatat(4, "", [pid 6098] <... write resumed>) = 4 [pid 6096] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6098] close(3 [pid 6096] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5074] getdents64(4, [pid 6098] <... close resumed>) = 0 [pid 6096] <... symlink resumed>) = 0 [pid 6095] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6098] symlink("/dev/binderfs", "./binderfs" [pid 6096] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5074] getdents64(4, [pid 6098] <... symlink resumed>) = 0 [pid 6098] memfd_create("syzkaller", 0 [pid 6097] <... write resumed>) = 524288 [pid 6095] <... open resumed>) = 5 [pid 6094] +++ exited with 0 +++ [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6094, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5074] close(4) = 0 [pid 6098] <... memfd_create resumed>) = 3 [pid 5074] rmdir("./165/bus" [pid 6095] ftruncate(5, 0) = 0 [pid 6097] munmap(0x7f0356e00000, 138412032 [pid 6095] exit_group(0 [pid 5074] <... rmdir resumed>) = 0 [pid 6098] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6097] <... munmap resumed>) = 0 [pid 6095] <... exit_group resumed>) = ? [pid 5074] umount2("./165/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6098] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] umount2("./167", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] newfstatat(AT_FDCWD, "./165/binderfs", [pid 6097] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6096] <... creat resumed>) = 4 [pid 6095] +++ exited with 0 +++ [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6097] <... openat resumed>) = 4 [pid 5077] openat(AT_FDCWD, "./167", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6095, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6097] ioctl(4, LOOP_SET_FD, 3 [pid 6098] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6096] rename("./bus", "./file2" [pid 5077] <... openat resumed>) = 3 [pid 5074] unlink("./165/binderfs" [pid 5073] umount2("./165", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6097] <... ioctl resumed>) = 0 [pid 6097] close(3 [pid 6096] <... rename resumed>) = -1 EEXIST (File exists) [pid 5074] <... unlink resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6096] memfd_create("syzkaller", 0 [pid 5073] openat(AT_FDCWD, "./165", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6097] <... close resumed>) = 0 [pid 6096] <... memfd_create resumed>) = 5 [pid 5077] newfstatat(3, "", [pid 5074] getdents64(3, [pid 5073] <... openat resumed>) = 3 [pid 6097] close(4 [pid 6096] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] newfstatat(3, "", [pid 6096] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] getdents64(3, [pid 5074] close(3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6096] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] <... close resumed>) = 0 [pid 5073] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] umount2("./165/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6098] <... write resumed>) = 524288 [pid 6097] <... close resumed>) = 0 [pid 5077] umount2("./167/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] rmdir("./165" [pid 6097] mkdir("./bus", 0777 [pid 5074] <... rmdir resumed>) = 0 [pid 6098] munmap(0x7f0356e00000, 138412032 [pid 6097] <... mkdir resumed>) = 0 [pid 5074] mkdir("./166", 0777 [pid 6097] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6098] <... munmap resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 6098] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] <... umount2 resumed>) = 0 [pid 6098] <... openat resumed>) = 4 [pid 6097] <... mount resumed>) = 0 [pid 5073] umount2("./165/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6098] ioctl(4, LOOP_SET_FD, 3 [ 177.435818][ T6097] loop2: detected capacity change from 0 to 1024 [pid 5073] newfstatat(AT_FDCWD, "./165/bus", [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6097] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5074] <... openat resumed>) = 3 [pid 5073] umount2("./165/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6096] <... write resumed>) = 524288 [pid 6096] munmap(0x7f0356e00000, 138412032) = 0 [pid 6096] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6096] close(5 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./165/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6097] <... openat resumed>) = 3 [pid 6098] <... ioctl resumed>) = 0 [pid 6097] chdir("./bus" [pid 5073] newfstatat(4, "", [pid 6098] close(3 [pid 6097] <... chdir resumed>) = 0 [pid 6098] <... close resumed>) = 0 [pid 6097] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5077] <... umount2 resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6098] close(4 [pid 6097] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] umount2("./167/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] getdents64(4, [pid 6098] <... close resumed>) = 0 [pid 6097] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6098] mkdir("./bus", 0777 [pid 6097] <... symlink resumed>) = 0 [pid 6096] <... close resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] getdents64(4, [pid 6098] <... mkdir resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6097] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6096] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] newfstatat(AT_FDCWD, "./167/bus", [pid 5073] close(4 [pid 6098] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5073] <... close resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] rmdir("./165/bus") = 0 [pid 5073] umount2("./165/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] umount2("./167/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] newfstatat(AT_FDCWD, "./165/binderfs", [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./167/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./165/binderfs") = 0 [pid 6097] <... creat resumed>) = 4 [pid 6096] <... open resumed>) = 5 [pid 5077] <... openat resumed>) = 4 [pid 5073] getdents64(3, [pid 6096] ftruncate(5, 0 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6096] <... ftruncate resumed>) = 0 [pid 5073] close(3 [pid 6097] rename("./bus", "./file2" [pid 6096] exit_group(0 [pid 5077] newfstatat(4, "", [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./165" [pid 6096] <... exit_group resumed>) = ? [pid 5073] <... rmdir resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6098] <... mount resumed>) = 0 [pid 6097] <... rename resumed>) = -1 EEXIST (File exists) [pid 6096] +++ exited with 0 +++ [pid 5077] getdents64(4, [pid 5074] <... ioctl resumed>) = 0 [pid 5073] mkdir("./166", 0777 [pid 6098] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6097] memfd_create("syzkaller", 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6096, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6098] <... openat resumed>) = 3 [pid 6097] <... memfd_create resumed>) = 5 [pid 5077] getdents64(4, [pid 6098] chdir("./bus" [pid 6097] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6098] <... chdir resumed>) = 0 [pid 6097] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 6098] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5077] close(4 [pid 5074] close(3) = 0 [pid 5078] umount2("./168", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 177.478776][ T6098] loop3: detected capacity change from 0 to 1024 ./strace-static-x86_64: Process 6099 attached [pid 6098] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6097] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] openat(AT_FDCWD, "./168", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... close resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6099] set_robust_list(0x55556e32a660, 24 [pid 6098] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] <... openat resumed>) = 3 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6099 [pid 6099] <... set_robust_list resumed>) = 0 [pid 5078] newfstatat(3, "", [pid 6099] chdir("./166" [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6099] <... chdir resumed>) = 0 [pid 6098] <... symlink resumed>) = 0 [pid 6097] <... write resumed>) = 524288 [pid 5078] getdents64(3, [pid 5077] rmdir("./167/bus" [pid 5073] <... openat resumed>) = 3 [pid 6099] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6099] <... prctl resumed>) = 0 [pid 5078] umount2("./168/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6098] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6099] setpgid(0, 0) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 6099] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5077] umount2("./167/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6099] write(3, "1000", 4) = 4 [pid 6099] close(3) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6099] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5077] newfstatat(AT_FDCWD, "./167/binderfs", [pid 6098] <... creat resumed>) = 4 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6098] rename("./bus", "./file2" [pid 5077] unlink("./167/binderfs" [pid 6099] memfd_create("syzkaller", 0 [pid 6098] <... rename resumed>) = -1 EEXIST (File exists) [pid 5077] <... unlink resumed>) = 0 [pid 5077] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6098] memfd_create("syzkaller", 0 [pid 6097] munmap(0x7f0356e00000, 138412032 [pid 5077] close(3) = 0 [pid 6098] <... memfd_create resumed>) = 5 [pid 5077] rmdir("./167" [pid 6099] <... memfd_create resumed>) = 3 [pid 6097] <... munmap resumed>) = 0 [pid 6099] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5077] <... rmdir resumed>) = 0 [pid 6099] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6098] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6097] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] <... umount2 resumed>) = 0 [pid 5077] mkdir("./168", 0777 [pid 6098] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] umount2("./168/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] newfstatat(AT_FDCWD, "./168/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6099] <... write resumed>) = 524288 [pid 6098] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6097] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... mkdir resumed>) = 0 [pid 5078] umount2("./168/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./168/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5078] newfstatat(4, "", [pid 5073] <... ioctl resumed>) = 0 [pid 6097] close(5 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(4, [pid 6099] munmap(0x7f0356e00000, 138412032 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, [pid 6099] <... munmap resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5078] close(4) = 0 [pid 5078] rmdir("./168/bus" [pid 6099] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5078] <... rmdir resumed>) = 0 [pid 6099] <... openat resumed>) = 4 [pid 5078] umount2("./168/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6099] ioctl(4, LOOP_SET_FD, 3 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6099] <... ioctl resumed>) = 0 [pid 6097] <... close resumed>) = 0 [pid 5078] newfstatat(AT_FDCWD, "./168/binderfs", [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] close(3 [pid 5077] <... openat resumed>) = 3 [pid 5073] <... close resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5078] unlink("./168/binderfs") = 0 [pid 6098] <... write resumed>) = 524288 [pid 5078] getdents64(3, [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6100 ./strace-static-x86_64: Process 6100 attached [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6100] set_robust_list(0x55556e32a660, 24 [pid 5078] close(3 [pid 6100] <... set_robust_list resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 6100] chdir("./166" [pid 5078] rmdir("./168" [pid 6097] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] <... rmdir resumed>) = 0 [pid 6100] <... chdir resumed>) = 0 [pid 6099] close(3 [pid 5078] mkdir("./169", 0777 [pid 6100] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6099] <... close resumed>) = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 6100] setpgid(0, 0 [pid 6098] munmap(0x7f0356e00000, 138412032 [pid 6097] <... open resumed>) = 5 [pid 6100] <... setpgid resumed>) = 0 [pid 6099] close(4 [pid 6098] <... munmap resumed>) = 0 [pid 6097] ftruncate(5, 0 [pid 6099] <... close resumed>) = 0 [pid 6098] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6100] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6099] mkdir("./bus", 0777 [pid 6098] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6097] <... ftruncate resumed>) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6100] <... openat resumed>) = 3 [pid 6099] <... mkdir resumed>) = 0 [pid 6098] close(5 [pid 6097] exit_group(0 [pid 5078] <... openat resumed>) = 3 [pid 6100] write(3, "1000", 4 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 6100] <... write resumed>) = 4 [pid 6099] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6100] close(3 [pid 6097] <... exit_group resumed>) = ? [pid 6100] <... close resumed>) = 0 [pid 6100] symlink("/dev/binderfs", "./binderfs" [pid 6097] +++ exited with 0 +++ [pid 6100] <... symlink resumed>) = 0 [pid 6099] <... mount resumed>) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6097, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6099] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6099] chdir("./bus") = 0 [pid 6100] memfd_create("syzkaller", 0 [pid 6099] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6100] <... memfd_create resumed>) = 3 [pid 6099] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6100] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6099] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6100] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] umount2("./166", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./166", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6099] <... symlink resumed>) = 0 [pid 6098] <... close resumed>) = 0 [ 177.616803][ T6099] loop1: detected capacity change from 0 to 1024 [pid 5075] newfstatat(3, "", [pid 6098] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6100] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6099] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5077] <... ioctl resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6098] <... open resumed>) = 5 [pid 5077] close(3) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6098] ftruncate(5, 0./strace-static-x86_64: Process 6101 attached [pid 6101] set_robust_list(0x55556e32a660, 24 [pid 5075] getdents64(3, [pid 6101] <... set_robust_list resumed>) = 0 [pid 6098] <... ftruncate resumed>) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6101 [pid 6101] chdir("./168" [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6098] exit_group(0 [pid 6101] <... chdir resumed>) = 0 [pid 6098] <... exit_group resumed>) = ? [pid 5078] <... ioctl resumed>) = 0 [pid 5075] umount2("./166/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6101] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6101] setpgid(0, 0 [pid 6098] +++ exited with 0 +++ [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6098, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6101] <... setpgid resumed>) = 0 [pid 6099] <... creat resumed>) = 4 [pid 6101] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6099] rename("./bus", "./file2" [pid 5076] umount2("./169", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6101] <... openat resumed>) = 3 [pid 6101] write(3, "1000", 4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6101] <... write resumed>) = 4 [pid 6101] close(3 [pid 6099] <... rename resumed>) = -1 EEXIST (File exists) [pid 5076] openat(AT_FDCWD, "./169", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6099] memfd_create("syzkaller", 0 [pid 5076] <... openat resumed>) = 3 [pid 6101] <... close resumed>) = 0 [pid 6101] symlink("/dev/binderfs", "./binderfs" [pid 6100] <... write resumed>) = 524288 [pid 6099] <... memfd_create resumed>) = 5 [pid 5078] close(3 [pid 5076] newfstatat(3, "", [pid 5075] <... umount2 resumed>) = 0 [pid 6099] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6101] <... symlink resumed>) = 0 [pid 6099] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] getdents64(3, [pid 6101] memfd_create("syzkaller", 0 [pid 6099] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] umount2("./166/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6100] munmap(0x7f0356e00000, 138412032 [pid 5076] umount2("./169/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6102 [pid 6101] <... memfd_create resumed>) = 3 [pid 6100] <... munmap resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./166/bus", [pid 6101] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6101] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] umount2("./166/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6102 attached ) = -1 EINVAL (Invalid argument) [pid 6102] set_robust_list(0x55556e32a660, 24 [pid 6100] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] openat(AT_FDCWD, "./166/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6102] <... set_robust_list resumed>) = 0 [pid 6100] <... openat resumed>) = 4 [pid 5076] <... umount2 resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 5075] newfstatat(4, "", [pid 6102] chdir("./169" [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6100] ioctl(4, LOOP_SET_FD, 3 [pid 5075] getdents64(4, [pid 6101] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] umount2("./169/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6102] <... chdir resumed>) = 0 [pid 6101] <... write resumed>) = 524288 [pid 6100] <... ioctl resumed>) = 0 [pid 6099] <... write resumed>) = 524288 [pid 5075] getdents64(4, [pid 6102] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6099] munmap(0x7f0356e00000, 138412032 [pid 5076] newfstatat(AT_FDCWD, "./169/bus", [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6102] <... prctl resumed>) = 0 [pid 6101] munmap(0x7f0356e00000, 138412032 [pid 6099] <... munmap resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] close(4 [pid 6102] setpgid(0, 0 [pid 6101] <... munmap resumed>) = 0 [pid 6100] close(3 [pid 6099] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] umount2("./169/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... close resumed>) = 0 [pid 6102] <... setpgid resumed>) = 0 [pid 6100] <... close resumed>) = 0 [pid 6099] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] rmdir("./166/bus" [pid 6101] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6100] close(4 [pid 5076] openat(AT_FDCWD, "./169/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6101] <... openat resumed>) = 4 [pid 5076] <... openat resumed>) = 4 [pid 5075] <... rmdir resumed>) = 0 [pid 6100] <... close resumed>) = 0 [pid 6102] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6101] ioctl(4, LOOP_SET_FD, 3 [pid 6100] mkdir("./bus", 0777 [pid 6099] close(5 [pid 5076] newfstatat(4, "", [pid 5075] umount2("./166/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6102] <... openat resumed>) = 3 [pid 6100] <... mkdir resumed>) = 0 [pid 6099] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6100] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5075] newfstatat(AT_FDCWD, "./166/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6102] write(3, "1000", 4 [pid 5075] unlink("./166/binderfs" [pid 6102] <... write resumed>) = 4 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, [pid 6102] close(3) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] <... unlink resumed>) = 0 [pid 6102] symlink("/dev/binderfs", "./binderfs" [pid 6099] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5076] getdents64(4, [pid 6102] <... symlink resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] getdents64(3, [pid 5076] close(4) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6102] memfd_create("syzkaller", 0 [pid 5076] rmdir("./169/bus" [pid 5075] close(3 [pid 6101] <... ioctl resumed>) = 0 [pid 6102] <... memfd_create resumed>) = 3 [pid 6101] close(3 [pid 6100] <... mount resumed>) = 0 [pid 6099] <... open resumed>) = 5 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 6101] <... close resumed>) = 0 [pid 6100] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5076] umount2("./169/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6099] ftruncate(5, 0 [pid 6102] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] rmdir("./166" [pid 6101] close(4 [pid 6100] <... openat resumed>) = 3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6102] <... mmap resumed>) = 0x7f0356e00000 [pid 6101] <... close resumed>) = 0 [pid 6099] <... ftruncate resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./169/binderfs", [pid 5075] <... rmdir resumed>) = 0 [pid 6101] mkdir("./bus", 0777 [pid 6100] chdir("./bus" [pid 6102] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6101] <... mkdir resumed>) = 0 [pid 6100] <... chdir resumed>) = 0 [pid 6099] exit_group(0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] mkdir("./167", 0777 [pid 6099] <... exit_group resumed>) = ? [pid 5075] <... mkdir resumed>) = 0 [pid 6101] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6100] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] unlink("./169/binderfs" [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [ 177.750035][ T6100] loop0: detected capacity change from 0 to 1024 [ 177.777978][ T6101] loop4: detected capacity change from 0 to 1024 [pid 6100] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6099] +++ exited with 0 +++ [pid 5076] <... unlink resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6100] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5076] getdents64(3, [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6099, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3 [pid 5074] umount2("./166", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./166", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... close resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5076] rmdir("./169" [pid 5074] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, [pid 5076] <... rmdir resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6100] <... symlink resumed>) = 0 [pid 5074] umount2("./166/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] mkdir("./170", 0777 [pid 6102] <... write resumed>) = 524288 [pid 5076] <... mkdir resumed>) = 0 [pid 6100] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5074] <... umount2 resumed>) = 0 [pid 6102] munmap(0x7f0356e00000, 138412032 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6102] <... munmap resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 6102] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6101] <... mount resumed>) = 0 [pid 6100] <... creat resumed>) = 4 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] <... ioctl resumed>) = 0 [pid 5074] umount2("./166/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6102] ioctl(4, LOOP_SET_FD, 3 [pid 6101] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6100] rename("./bus", "./file2" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6100] <... rename resumed>) = -1 EEXIST (File exists) [pid 6102] <... ioctl resumed>) = 0 [pid 6101] chdir("./bus" [pid 6100] memfd_create("syzkaller", 0 [pid 5075] close(3 [pid 5074] newfstatat(AT_FDCWD, "./166/bus", [pid 6102] close(3 [pid 6101] <... chdir resumed>) = 0 [pid 6100] <... memfd_create resumed>) = 5 [pid 5075] <... close resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6102] <... close resumed>) = 0 [pid 6101] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6100] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] umount2("./166/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6102] close(4 [pid 6100] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6101] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6102] <... close resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./166/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6101] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6102] mkdir("./bus", 0777 [pid 5074] <... openat resumed>) = 4 ./strace-static-x86_64: Process 6103 attached [pid 6101] <... symlink resumed>) = 0 [pid 6100] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... ioctl resumed>) = 0 [pid 6103] set_robust_list(0x55556e32a660, 24 [pid 6102] <... mkdir resumed>) = 0 [pid 6101] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6103 [pid 5074] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6103] <... set_robust_list resumed>) = 0 [pid 5076] close(3 [pid 5074] getdents64(4, [pid 6103] chdir("./167" [pid 5076] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6101] <... creat resumed>) = 4 [ 177.876186][ T6102] loop5: detected capacity change from 0 to 1024 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] close(4 [pid 6102] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6101] rename("./bus", "./file2" [pid 5074] <... close resumed>) = 0 [pid 6103] <... chdir resumed>) = 0 [pid 6103] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] rmdir("./166/bus" [pid 6103] <... prctl resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6104 [pid 5074] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6104 attached [pid 6103] setpgid(0, 0) = 0 [pid 6103] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] umount2("./166/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6103] <... openat resumed>) = 3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./166/binderfs", [pid 6103] write(3, "1000", 4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6103] <... write resumed>) = 4 [pid 6100] <... write resumed>) = 524288 [pid 5074] unlink("./166/binderfs" [pid 6103] close(3 [pid 5074] <... unlink resumed>) = 0 [pid 6104] set_robust_list(0x55556e32a660, 24 [pid 6103] <... close resumed>) = 0 [pid 6101] <... rename resumed>) = -1 EEXIST (File exists) [pid 6100] munmap(0x7f0356e00000, 138412032 [pid 5074] getdents64(3, [pid 6104] <... set_robust_list resumed>) = 0 [pid 6103] symlink("/dev/binderfs", "./binderfs" [pid 6101] memfd_create("syzkaller", 0 [pid 6100] <... munmap resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6104] chdir("./170" [pid 6103] <... symlink resumed>) = 0 [pid 6101] <... memfd_create resumed>) = 5 [pid 6104] <... chdir resumed>) = 0 [pid 6101] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6102] <... mount resumed>) = 0 [pid 5074] close(3 [pid 6104] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6103] memfd_create("syzkaller", 0 [pid 6101] <... mmap resumed>) = 0x7f0356e00000 [pid 6100] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] <... close resumed>) = 0 [pid 6104] <... prctl resumed>) = 0 [pid 6103] <... memfd_create resumed>) = 3 [pid 6102] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6100] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] rmdir("./166" [pid 6103] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6100] close(5 [pid 5074] <... rmdir resumed>) = 0 [pid 6104] setpgid(0, 0 [pid 6103] <... mmap resumed>) = 0x7f0356e00000 [pid 6102] <... openat resumed>) = 3 [pid 6101] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6104] <... setpgid resumed>) = 0 [pid 6102] chdir("./bus" [pid 6103] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] mkdir("./167", 0777 [pid 6104] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6102] <... chdir resumed>) = 0 [pid 6100] <... close resumed>) = 0 [pid 6102] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6104] <... openat resumed>) = 3 [pid 6104] write(3, "1000", 4 [pid 6102] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... mkdir resumed>) = 0 [pid 6104] <... write resumed>) = 4 [pid 6102] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6104] close(3) = 0 [pid 6104] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6103] <... write resumed>) = 524288 [pid 6102] <... symlink resumed>) = 0 [pid 6100] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6104] memfd_create("syzkaller", 0 [pid 6102] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6104] <... memfd_create resumed>) = 3 [pid 6104] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6101] <... write resumed>) = 524288 [pid 6102] <... creat resumed>) = 4 [pid 6104] <... mmap resumed>) = 0x7f0356e00000 [pid 6100] <... open resumed>) = 5 [pid 6102] rename("./bus", "./file2" [pid 6100] ftruncate(5, 0) = 0 [pid 6100] exit_group(0) = ? [pid 6102] <... rename resumed>) = -1 EEXIST (File exists) [pid 6102] memfd_create("syzkaller", 0 [pid 6101] munmap(0x7f0356e00000, 138412032 [pid 6103] munmap(0x7f0356e00000, 138412032 [pid 6102] <... memfd_create resumed>) = 5 [pid 6102] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6101] <... munmap resumed>) = 0 [pid 6103] <... munmap resumed>) = 0 [pid 6103] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6104] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6103] <... openat resumed>) = 4 [pid 6102] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6101] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6100] +++ exited with 0 +++ [pid 6104] <... write resumed>) = 524288 [pid 6103] ioctl(4, LOOP_SET_FD, 3 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6100, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 6101] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6101] close(5 [pid 5073] umount2("./166", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./166", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6101] <... close resumed>) = 0 [pid 5073] umount2("./166/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6104] munmap(0x7f0356e00000, 138412032) = 0 [pid 6101] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5074] <... ioctl resumed>) = 0 [pid 6104] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5074] close(3 [pid 6104] <... openat resumed>) = 4 [pid 5074] <... close resumed>) = 0 [pid 6104] ioctl(4, LOOP_SET_FD, 3 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6102] <... write resumed>) = 524288 [pid 6101] <... open resumed>) = 5 [pid 6103] <... ioctl resumed>) = 0 [pid 6102] munmap(0x7f0356e00000, 138412032 [pid 6101] ftruncate(5, 0 [pid 5073] <... umount2 resumed>) = 0 [pid 6103] close(3 [pid 6101] <... ftruncate resumed>) = 0 [pid 6103] <... close resumed>) = 0 [pid 6103] close(4 [pid 6102] <... munmap resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6105 [pid 5073] umount2("./166/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6105 attached [pid 6104] <... ioctl resumed>) = 0 [pid 6103] <... close resumed>) = 0 [pid 6101] exit_group(0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6105] set_robust_list(0x55556e32a660, 24 [pid 6104] close(3 [pid 6103] mkdir("./bus", 0777 [pid 6102] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6101] <... exit_group resumed>) = ? [pid 5073] newfstatat(AT_FDCWD, "./166/bus", [pid 6104] <... close resumed>) = 0 [pid 6103] <... mkdir resumed>) = 0 [pid 6105] <... set_robust_list resumed>) = 0 [pid 6104] close(4 [pid 6103] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6105] chdir("./167") = 0 [pid 6102] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6105] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5073] umount2("./166/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6105] <... prctl resumed>) = 0 [pid 6105] setpgid(0, 0 [pid 6104] <... close resumed>) = 0 [pid 6102] close(5 [pid 6101] +++ exited with 0 +++ [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6104] mkdir("./bus", 0777 [pid 6103] <... mount resumed>) = 0 [pid 6105] <... setpgid resumed>) = 0 [ 178.015096][ T6103] loop2: detected capacity change from 0 to 1024 [ 178.045624][ T6104] loop3: detected capacity change from 0 to 1024 [pid 6103] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6105] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6104] <... mkdir resumed>) = 0 [pid 6103] <... openat resumed>) = 3 [pid 6102] <... close resumed>) = 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6101, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5073] openat(AT_FDCWD, "./166/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6105] <... openat resumed>) = 3 [pid 6104] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6102] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5073] <... openat resumed>) = 4 [pid 5073] newfstatat(4, "", [pid 6105] write(3, "1000", 4 [pid 6103] chdir("./bus" [pid 6105] <... write resumed>) = 4 [pid 6103] <... chdir resumed>) = 0 [pid 6105] close(3 [pid 6103] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5077] umount2("./168", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6105] <... close resumed>) = 0 [pid 6103] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] getdents64(4, [pid 6105] symlink("/dev/binderfs", "./binderfs" [pid 6103] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5077] openat(AT_FDCWD, "./168", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6105] <... symlink resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6105] memfd_create("syzkaller", 0 [pid 6103] <... symlink resumed>) = 0 [pid 5077] newfstatat(3, "", [pid 6105] <... memfd_create resumed>) = 3 [pid 6103] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, [pid 6105] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] getdents64(3, [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6105] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] close(4 [pid 6102] <... open resumed>) = 5 [pid 6105] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./166/bus") = 0 [pid 6102] ftruncate(5, 0 [pid 6103] <... creat resumed>) = 4 [pid 6102] <... ftruncate resumed>) = 0 [pid 5077] umount2("./168/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6102] exit_group(0 [pid 5073] umount2("./166/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6103] rename("./bus", "./file2" [pid 6102] <... exit_group resumed>) = ? [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./166/binderfs", [pid 6103] <... rename resumed>) = -1 EEXIST (File exists) [pid 6103] memfd_create("syzkaller", 0 [pid 6102] +++ exited with 0 +++ [pid 6103] <... memfd_create resumed>) = 5 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6104] <... mount resumed>) = 0 [pid 6103] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6102, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5073] unlink("./166/binderfs" [pid 6104] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6103] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] restart_syscall(<... resuming interrupted clone ...> [pid 5073] <... unlink resumed>) = 0 [pid 6104] <... openat resumed>) = 3 [pid 5078] <... restart_syscall resumed>) = 0 [pid 6104] chdir("./bus" [pid 5073] getdents64(3, [pid 6104] <... chdir resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6104] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5078] umount2("./169", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = 0 [pid 5073] close(3 [pid 6104] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6103] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] umount2("./168/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... close resumed>) = 0 [pid 6104] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] rmdir("./166" [pid 5078] openat(AT_FDCWD, "./169", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5078] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] newfstatat(AT_FDCWD, "./168/bus", [pid 5073] <... rmdir resumed>) = 0 [pid 6104] <... symlink resumed>) = 0 [pid 5078] getdents64(3, [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] mkdir("./167", 0777 [pid 5077] umount2("./168/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] umount2("./169/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... mkdir resumed>) = 0 [pid 6104] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5077] openat(AT_FDCWD, "./168/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6105] <... write resumed>) = 524288 [pid 5077] <... openat resumed>) = 4 [pid 5073] <... openat resumed>) = 3 [pid 5077] newfstatat(4, "", [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6105] munmap(0x7f0356e00000, 138412032 [pid 5077] getdents64(4, [pid 6105] <... munmap resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6105] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6105] ioctl(4, LOOP_SET_FD, 3 [pid 6104] <... creat resumed>) = 4 [pid 6103] <... write resumed>) = 524288 [pid 5078] <... umount2 resumed>) = 0 [pid 5077] close(4 [pid 6104] rename("./bus", "./file2" [pid 5078] umount2("./169/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... close resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] rmdir("./168/bus" [pid 6104] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] newfstatat(AT_FDCWD, "./169/bus", [pid 5077] <... rmdir resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] umount2("./168/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6104] memfd_create("syzkaller", 0 [pid 5078] umount2("./169/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6105] <... ioctl resumed>) = 0 [pid 6104] <... memfd_create resumed>) = 5 [pid 6103] munmap(0x7f0356e00000, 138412032 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./168/binderfs", [pid 6105] close(3 [pid 6103] <... munmap resumed>) = 0 [pid 6105] <... close resumed>) = 0 [pid 6103] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6105] close(4 [pid 6103] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6105] <... close resumed>) = 0 [pid 6103] close(5) = 0 [pid 6105] mkdir("./bus", 0777) = 0 [pid 6104] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] openat(AT_FDCWD, "./169/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] unlink("./168/binderfs" [pid 6105] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5073] <... ioctl resumed>) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 5078] <... openat resumed>) = 4 [pid 6104] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] newfstatat(4, "", [pid 5077] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] close(3 [pid 5073] close(3 [pid 6105] <... mount resumed>) = 0 [pid 6105] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5073] <... close resumed>) = 0 [pid 6105] <... openat resumed>) = 3 [pid 6104] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] getdents64(4, [pid 5077] <... close resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6105] chdir("./bus" [pid 6103] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] rmdir("./168"./strace-static-x86_64: Process 6106 attached [pid 6105] <... chdir resumed>) = 0 [pid 5078] getdents64(4, [pid 5077] <... rmdir resumed>) = 0 [pid 6106] set_robust_list(0x55556e32a660, 24 [pid 6105] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] mkdir("./169", 0777 [pid 6106] <... set_robust_list resumed>) = 0 [pid 6105] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] close(4 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6106 [pid 6106] chdir("./167" [pid 6105] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] <... close resumed>) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 6106] <... chdir resumed>) = 0 [pid 5078] rmdir("./169/bus" [pid 6106] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6105] <... symlink resumed>) = 0 [pid 6103] <... open resumed>) = 5 [pid 5078] <... rmdir resumed>) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6106] setpgid(0, 0 [pid 5078] umount2("./169/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6106] <... setpgid resumed>) = 0 [pid 6105] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6106] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6103] ftruncate(5, 0 [pid 5078] newfstatat(AT_FDCWD, "./169/binderfs", [pid 5077] <... openat resumed>) = 3 [pid 6103] <... ftruncate resumed>) = 0 [pid 6106] <... openat resumed>) = 3 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 6106] write(3, "1000", 4 [pid 6103] exit_group(0 [pid 5078] unlink("./169/binderfs" [pid 6106] <... write resumed>) = 4 [pid 6103] <... exit_group resumed>) = ? [pid 5078] <... unlink resumed>) = 0 [pid 6106] close(3 [pid 6103] +++ exited with 0 +++ [pid 5078] getdents64(3, [pid 6104] <... write resumed>) = 524288 [pid 6106] <... close resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [ 178.190734][ T6105] loop1: detected capacity change from 0 to 1024 [pid 6106] symlink("/dev/binderfs", "./binderfs" [pid 6105] <... creat resumed>) = 4 [pid 5078] close(3 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6103, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6106] <... symlink resumed>) = 0 [pid 6105] rename("./bus", "./file2" [pid 5075] umount2("./167", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] <... close resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./167", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6106] memfd_create("syzkaller", 0 [pid 5075] <... openat resumed>) = 3 [pid 6105] <... rename resumed>) = -1 EEXIST (File exists) [pid 5075] newfstatat(3, "", [pid 6106] <... memfd_create resumed>) = 3 [pid 6105] memfd_create("syzkaller", 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6105] <... memfd_create resumed>) = 5 [pid 5075] getdents64(3, [pid 6106] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6105] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6106] <... mmap resumed>) = 0x7f0356e00000 [pid 6105] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] umount2("./167/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6104] munmap(0x7f0356e00000, 138412032 [pid 5078] rmdir("./169" [pid 6104] <... munmap resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5078] mkdir("./170", 0777 [pid 6104] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5078] <... mkdir resumed>) = 0 [pid 6104] close(5 [pid 6106] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] <... ioctl resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 6106] <... write resumed>) = 524288 [pid 6105] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6104] <... close resumed>) = 0 [pid 6104] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] close(3 [pid 5075] <... umount2 resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] umount2("./167/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6107 attached [pid 6106] munmap(0x7f0356e00000, 138412032 [pid 5075] newfstatat(AT_FDCWD, "./167/bus", [pid 6107] set_robust_list(0x55556e32a660, 24 [pid 6106] <... munmap resumed>) = 0 [pid 6104] <... open resumed>) = 5 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6107 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6107] <... set_robust_list resumed>) = 0 [pid 6104] ftruncate(5, 0 [pid 5075] umount2("./167/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6107] chdir("./169" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./167/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6107] <... chdir resumed>) = 0 [pid 6106] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6104] <... ftruncate resumed>) = 0 [pid 5078] <... ioctl resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 6107] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6106] <... openat resumed>) = 4 [pid 6105] <... write resumed>) = 524288 [pid 5075] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] close(4) = 0 [pid 5075] rmdir("./167/bus") = 0 [pid 6107] <... prctl resumed>) = 0 [pid 6106] ioctl(4, LOOP_SET_FD, 3 [pid 6105] munmap(0x7f0356e00000, 138412032 [pid 6104] exit_group(0 [pid 5078] close(3 [pid 6107] setpgid(0, 0 [pid 6105] <... munmap resumed>) = 0 [pid 5075] umount2("./167/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./167/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./167/binderfs") = 0 [pid 6105] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] getdents64(3, [pid 6105] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6105] close(5 [pid 5075] close(3 [pid 6107] <... setpgid resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 6107] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6106] <... ioctl resumed>) = 0 [pid 6104] <... exit_group resumed>) = ? [pid 5075] rmdir("./167") = 0 [pid 5075] mkdir("./168", 0777 [pid 6104] +++ exited with 0 +++ [pid 6106] close(3 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6104, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6107] <... openat resumed>) = 3 [pid 5075] <... mkdir resumed>) = 0 [pid 6106] <... close resumed>) = 0 [pid 5076] umount2("./170", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6107] write(3, "1000", 4 [pid 6106] close(4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6108 attached [pid 6107] <... write resumed>) = 4 [pid 6106] <... close resumed>) = 0 [pid 6105] <... close resumed>) = 0 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6108 [pid 5076] openat(AT_FDCWD, "./170", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6107] close(3 [pid 6106] mkdir("./bus", 0777 [pid 5076] <... openat resumed>) = 3 [pid 5075] <... openat resumed>) = 3 [pid 5076] newfstatat(3, "", [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6107] <... close resumed>) = 0 [pid 6106] <... mkdir resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6107] symlink("/dev/binderfs", "./binderfs" [pid 5076] getdents64(3, [pid 6105] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6108] set_robust_list(0x55556e32a660, 24 [pid 6107] <... symlink resumed>) = 0 [pid 6106] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5076] umount2("./170/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6108] <... set_robust_list resumed>) = 0 [pid 6107] memfd_create("syzkaller", 0 [pid 6108] chdir("./170" [pid 6105] <... open resumed>) = 5 [pid 6107] <... memfd_create resumed>) = 3 [pid 6108] <... chdir resumed>) = 0 [pid 6106] <... mount resumed>) = 0 [pid 6105] ftruncate(5, 0 [pid 5076] <... umount2 resumed>) = 0 [pid 6108] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6107] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6105] <... ftruncate resumed>) = 0 [pid 6106] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6108] <... prctl resumed>) = 0 [pid 6107] <... mmap resumed>) = 0x7f0356e00000 [pid 6106] <... openat resumed>) = 3 [pid 6105] exit_group(0 [pid 6108] setpgid(0, 0 [pid 6105] <... exit_group resumed>) = ? [pid 6108] <... setpgid resumed>) = 0 [pid 6107] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6106] chdir("./bus" [pid 6105] +++ exited with 0 +++ [pid 6108] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6106] <... chdir resumed>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6105, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6106] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6108] <... openat resumed>) = 3 [pid 6106] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 178.337155][ T6106] loop0: detected capacity change from 0 to 1024 [pid 6108] write(3, "1000", 4 [pid 6106] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5074] umount2("./167", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6108] <... write resumed>) = 4 [pid 5076] umount2("./170/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... ioctl resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6108] close(3 [pid 5074] openat(AT_FDCWD, "./167", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] newfstatat(AT_FDCWD, "./170/bus", [pid 5074] <... openat resumed>) = 3 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] newfstatat(3, "", [pid 6108] <... close resumed>) = 0 [pid 6108] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6106] <... symlink resumed>) = 0 [pid 5076] umount2("./170/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] getdents64(3, [pid 6108] memfd_create("syzkaller", 0 [pid 5076] openat(AT_FDCWD, "./170/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] <... openat resumed>) = 4 [pid 5074] umount2("./167/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] newfstatat(4, "", [pid 6106] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6108] <... memfd_create resumed>) = 3 [pid 5076] getdents64(4, [pid 5074] <... umount2 resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6106] <... creat resumed>) = 4 [pid 5076] close(4 [pid 5075] close(3 [pid 5076] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5076] rmdir("./170/bus" [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6108] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6107] <... write resumed>) = 524288 [pid 5076] <... rmdir resumed>) = 0 [pid 6108] <... mmap resumed>) = 0x7f0356e00000 [pid 6106] rename("./bus", "./file2" [pid 6107] munmap(0x7f0356e00000, 138412032 [pid 5076] umount2("./170/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6109 attached [pid 6106] <... rename resumed>) = -1 EEXIST (File exists) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./167/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6109] set_robust_list(0x55556e32a660, 24 [pid 6107] <... munmap resumed>) = 0 [pid 6106] memfd_create("syzkaller", 0 [pid 5076] newfstatat(AT_FDCWD, "./170/binderfs", [pid 6109] <... set_robust_list resumed>) = 0 [pid 6106] <... memfd_create resumed>) = 5 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6109 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6109] chdir("./168" [pid 6107] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6106] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] unlink("./170/binderfs" [pid 5074] newfstatat(AT_FDCWD, "./167/bus", [pid 6109] <... chdir resumed>) = 0 [pid 6106] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] <... unlink resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6109] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6107] <... openat resumed>) = 4 [pid 6109] <... prctl resumed>) = 0 [pid 6107] ioctl(4, LOOP_SET_FD, 3 [pid 6106] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] getdents64(3, [pid 5074] umount2("./167/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6109] setpgid(0, 0 [pid 6108] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6109] <... setpgid resumed>) = 0 [pid 6109] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6106] <... write resumed>) = 524288 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] openat(AT_FDCWD, "./167/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] close(3 [pid 5074] <... openat resumed>) = 4 [pid 5076] <... close resumed>) = 0 [pid 5074] newfstatat(4, "", [pid 6109] <... openat resumed>) = 3 [pid 6106] munmap(0x7f0356e00000, 138412032 [pid 5076] rmdir("./170" [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6109] write(3, "1000", 4 [pid 6107] <... ioctl resumed>) = 0 [pid 6106] <... munmap resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] getdents64(4, [pid 6109] <... write resumed>) = 4 [pid 6108] <... write resumed>) = 524288 [pid 6107] close(3 [pid 5076] mkdir("./171", 0777 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6109] close(3 [pid 6106] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] getdents64(4, [pid 6109] <... close resumed>) = 0 [pid 6106] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... mkdir resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6109] symlink("/dev/binderfs", "./binderfs" [pid 5074] close(4 [pid 6109] <... symlink resumed>) = 0 [pid 6106] close(5 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5074] <... close resumed>) = 0 [pid 6107] <... close resumed>) = 0 [pid 6106] <... close resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5074] rmdir("./167/bus" [pid 6107] close(4 [pid 6109] memfd_create("syzkaller", 0 [pid 6107] <... close resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 6107] mkdir("./bus", 0777 [pid 6109] <... memfd_create resumed>) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5074] umount2("./167/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6109] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6109] <... mmap resumed>) = 0x7f0356e00000 [pid 5074] newfstatat(AT_FDCWD, "./167/binderfs", [pid 6109] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6107] <... mkdir resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6108] munmap(0x7f0356e00000, 138412032 [pid 5074] unlink("./167/binderfs" [pid 6108] <... munmap resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 6108] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] getdents64(3, [pid 6107] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6108] <... openat resumed>) = 4 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6108] ioctl(4, LOOP_SET_FD, 3 [ 178.446757][ T6107] loop4: detected capacity change from 0 to 1024 [pid 6106] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5074] close(3) = 0 [pid 5074] rmdir("./167") = 0 [pid 5074] mkdir("./168", 0777) = 0 [pid 6109] <... write resumed>) = 524288 [pid 6106] <... open resumed>) = 5 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6106] ftruncate(5, 0) = 0 [pid 6108] <... ioctl resumed>) = 0 [pid 6107] <... mount resumed>) = 0 [pid 6108] close(3 [pid 6107] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6106] exit_group(0 [pid 6107] chdir("./bus" [pid 6106] <... exit_group resumed>) = ? [pid 6107] <... chdir resumed>) = 0 [pid 6106] +++ exited with 0 +++ [pid 6108] <... close resumed>) = 0 [pid 6107] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6108] close(4 [pid 6107] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6106, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6108] <... close resumed>) = 0 [pid 6107] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 6109] munmap(0x7f0356e00000, 138412032 [pid 5073] <... restart_syscall resumed>) = 0 [pid 6109] <... munmap resumed>) = 0 [pid 6108] mkdir("./bus", 0777 [pid 5073] umount2("./167", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./167", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6109] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6108] <... mkdir resumed>) = 0 [pid 6107] <... symlink resumed>) = 0 [pid 5073] newfstatat(3, "", [pid 6109] <... openat resumed>) = 4 [pid 6108] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6107] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 178.490729][ T6108] loop5: detected capacity change from 0 to 1024 [pid 6109] ioctl(4, LOOP_SET_FD, 3 [pid 5076] <... ioctl resumed>) = 0 [pid 5073] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] umount2("./167/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6107] <... creat resumed>) = 4 [pid 5074] <... ioctl resumed>) = 0 [pid 6107] rename("./bus", "./file2") = -1 EEXIST (File exists) [pid 6107] memfd_create("syzkaller", 0) = 5 [pid 5076] close(3 [pid 5073] <... umount2 resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 6107] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6107] <... mmap resumed>) = 0x7f0356e00000 [pid 5073] umount2("./167/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./167/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] close(3 [pid 5073] umount2("./167/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6110 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] openat(AT_FDCWD, "./167/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6111 attached ) = 4 [pid 6111] set_robust_list(0x55556e32a660, 24 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6111 [pid 5073] newfstatat(4, "", ./strace-static-x86_64: Process 6110 attached [pid 6111] <... set_robust_list resumed>) = 0 [pid 6108] <... mount resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6109] <... ioctl resumed>) = 0 [pid 6111] chdir("./168" [pid 5073] getdents64(4, [pid 6111] <... chdir resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6111] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6109] close(3 [pid 6108] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5073] getdents64(4, [pid 6111] <... prctl resumed>) = 0 [pid 6110] set_robust_list(0x55556e32a660, 24 [pid 6108] <... openat resumed>) = 3 [pid 6109] <... close resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6111] setpgid(0, 0 [pid 6110] <... set_robust_list resumed>) = 0 [pid 6109] close(4 [pid 6108] chdir("./bus" [pid 5073] close(4 [pid 6111] <... setpgid resumed>) = 0 [pid 6110] chdir("./171" [pid 6109] <... close resumed>) = 0 [pid 6108] <... chdir resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 6111] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6109] mkdir("./bus", 0777 [pid 6108] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] rmdir("./167/bus" [pid 6111] <... openat resumed>) = 3 [pid 6110] <... chdir resumed>) = 0 [pid 6109] <... mkdir resumed>) = 0 [ 178.533182][ T6109] loop2: detected capacity change from 0 to 1024 [pid 5073] <... rmdir resumed>) = 0 [pid 6111] write(3, "1000", 4 [pid 6110] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6108] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6107] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] umount2("./167/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6111] <... write resumed>) = 4 [pid 6110] <... prctl resumed>) = 0 [pid 6108] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6111] close(3 [pid 6110] setpgid(0, 0 [pid 5073] newfstatat(AT_FDCWD, "./167/binderfs", [pid 6111] <... close resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6111] symlink("/dev/binderfs", "./binderfs" [pid 5073] unlink("./167/binderfs" [pid 6111] <... symlink resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5073] getdents64(3, [pid 6111] memfd_create("syzkaller", 0 [pid 6107] <... write resumed>) = 524288 [pid 6109] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6110] <... setpgid resumed>) = 0 [pid 6110] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5073] close(3 [pid 6111] <... memfd_create resumed>) = 3 [pid 5073] <... close resumed>) = 0 [pid 6111] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] rmdir("./167" [pid 6111] <... mmap resumed>) = 0x7f0356e00000 [pid 5073] <... rmdir resumed>) = 0 [pid 5073] mkdir("./168", 0777 [pid 6111] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6110] <... openat resumed>) = 3 [pid 6108] <... symlink resumed>) = 0 [pid 6108] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6110] write(3, "1000", 4) = 4 [pid 5073] <... mkdir resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6110] close(3 [pid 5073] <... openat resumed>) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6110] <... close resumed>) = 0 [pid 6111] <... write resumed>) = 524288 [pid 6110] symlink("/dev/binderfs", "./binderfs" [pid 6107] munmap(0x7f0356e00000, 138412032 [pid 6110] <... symlink resumed>) = 0 [pid 6110] memfd_create("syzkaller", 0 [pid 6111] munmap(0x7f0356e00000, 138412032 [pid 6110] <... memfd_create resumed>) = 3 [pid 6108] <... creat resumed>) = 4 [pid 6107] <... munmap resumed>) = 0 [pid 6110] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6108] rename("./bus", "./file2" [pid 6111] <... munmap resumed>) = 0 [pid 6110] <... mmap resumed>) = 0x7f0356e00000 [pid 6109] <... mount resumed>) = 0 [pid 6107] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6109] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6108] <... rename resumed>) = -1 EEXIST (File exists) [pid 6107] close(5 [pid 6111] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6110] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6109] chdir("./bus" [pid 6108] memfd_create("syzkaller", 0 [pid 6107] <... close resumed>) = 0 [pid 6111] <... openat resumed>) = 4 [pid 5073] <... ioctl resumed>) = 0 [pid 6111] ioctl(4, LOOP_SET_FD, 3 [pid 6109] <... chdir resumed>) = 0 [pid 6108] <... memfd_create resumed>) = 5 [pid 6109] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6108] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6107] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6109] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6108] <... mmap resumed>) = 0x7f0356e00000 [pid 5073] close(3 [pid 6109] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6108] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... close resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6109] <... symlink resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6112 ./strace-static-x86_64: Process 6112 attached [pid 6112] set_robust_list(0x55556e32a660, 24 [pid 6110] <... write resumed>) = 524288 [pid 6109] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6107] <... open resumed>) = 5 [pid 6112] <... set_robust_list resumed>) = 0 [pid 6110] munmap(0x7f0356e00000, 138412032 [pid 6111] <... ioctl resumed>) = 0 [pid 6110] <... munmap resumed>) = 0 [pid 6107] ftruncate(5, 0 [pid 6111] close(3 [pid 6107] <... ftruncate resumed>) = 0 [pid 6111] <... close resumed>) = 0 [pid 6107] exit_group(0 [pid 6112] chdir("./168" [pid 6111] close(4 [pid 6107] <... exit_group resumed>) = ? [pid 6107] +++ exited with 0 +++ [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6107, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6112] <... chdir resumed>) = 0 [pid 6110] openat(AT_FDCWD, "/dev/loop3", O_RDWR [ 178.666710][ T6111] loop1: detected capacity change from 0 to 1024 [pid 6112] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6111] <... close resumed>) = 0 [pid 6110] <... openat resumed>) = 4 [pid 6112] <... prctl resumed>) = 0 [pid 6111] mkdir("./bus", 0777 [pid 6110] ioctl(4, LOOP_SET_FD, 3 [pid 6112] setpgid(0, 0 [pid 6109] <... creat resumed>) = 4 [pid 6111] <... mkdir resumed>) = 0 [pid 6111] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6112] <... setpgid resumed>) = 0 [pid 6110] <... ioctl resumed>) = 0 [pid 6109] rename("./bus", "./file2" [pid 6108] <... write resumed>) = 524288 [pid 5077] umount2("./169", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6112] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6111] <... mount resumed>) = 0 [pid 6110] close(3 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6109] <... rename resumed>) = -1 EEXIST (File exists) [pid 6110] <... close resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./169", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6111] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6110] close(4 [pid 6108] munmap(0x7f0356e00000, 138412032 [pid 5077] <... openat resumed>) = 3 [pid 6111] <... openat resumed>) = 3 [pid 6110] <... close resumed>) = 0 [pid 6109] memfd_create("syzkaller", 0 [pid 6108] <... munmap resumed>) = 0 [pid 5077] newfstatat(3, "", [pid 6111] chdir("./bus" [pid 6110] mkdir("./bus", 0777 [pid 6109] <... memfd_create resumed>) = 5 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6111] <... chdir resumed>) = 0 [pid 6109] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] getdents64(3, [pid 6112] <... openat resumed>) = 3 [pid 6111] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6109] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6112] write(3, "1000", 4 [pid 6111] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6110] <... mkdir resumed>) = 0 [pid 6112] <... write resumed>) = 4 [pid 6111] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6108] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] umount2("./169/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6112] close(3 [pid 6110] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6109] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6112] <... close resumed>) = 0 [pid 6108] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6112] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6111] <... symlink resumed>) = 0 [pid 6108] close(5 [pid 6112] memfd_create("syzkaller", 0 [pid 6111] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6112] <... memfd_create resumed>) = 3 [pid 5077] <... umount2 resumed>) = 0 [pid 6112] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6111] <... creat resumed>) = 4 [pid 6108] <... close resumed>) = 0 [pid 6109] <... write resumed>) = 524288 [pid 6108] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6112] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6111] rename("./bus", "./file2" [ 178.708899][ T6110] loop3: detected capacity change from 0 to 1024 [pid 5077] umount2("./169/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6110] <... mount resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./169/bus", [pid 6110] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] umount2("./169/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6110] <... openat resumed>) = 3 [pid 6111] <... rename resumed>) = -1 EEXIST (File exists) [pid 6108] <... open resumed>) = 5 [pid 6110] chdir("./bus" [pid 5077] openat(AT_FDCWD, "./169/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6109] munmap(0x7f0356e00000, 138412032 [pid 6110] <... chdir resumed>) = 0 [pid 6108] ftruncate(5, 0 [pid 6111] memfd_create("syzkaller", 0 [pid 5077] <... openat resumed>) = 4 [pid 6111] <... memfd_create resumed>) = 5 [pid 6110] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6109] <... munmap resumed>) = 0 [pid 6108] <... ftruncate resumed>) = 0 [pid 5077] newfstatat(4, "", [pid 6111] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6110] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6108] exit_group(0 [pid 6111] <... mmap resumed>) = 0x7f0356e00000 [pid 6110] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6109] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6108] <... exit_group resumed>) = ? [pid 5077] getdents64(4, [pid 6111] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] close(4) = 0 [pid 5077] rmdir("./169/bus") = 0 [pid 5077] umount2("./169/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./169/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6112] <... write resumed>) = 524288 [pid 6109] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6108] +++ exited with 0 +++ [pid 5077] unlink("./169/binderfs" [pid 6111] <... write resumed>) = 524288 [pid 6110] <... symlink resumed>) = 0 [pid 6109] close(5 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6108, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5077] <... unlink resumed>) = 0 [pid 6112] munmap(0x7f0356e00000, 138412032) = 0 [pid 5077] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] close(3 [pid 6109] <... close resumed>) = 0 [pid 6112] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6110] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5077] <... close resumed>) = 0 [pid 5078] umount2("./170", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6112] <... openat resumed>) = 4 [pid 5077] rmdir("./169" [pid 6112] ioctl(4, LOOP_SET_FD, 3 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... rmdir resumed>) = 0 [pid 6110] <... creat resumed>) = 4 [pid 6109] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] openat(AT_FDCWD, "./170", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5077] mkdir("./170", 0777 [pid 5078] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 5078] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6110] rename("./bus", "./file2" [pid 5078] umount2("./170/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6111] munmap(0x7f0356e00000, 138412032 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6111] <... munmap resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 6111] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6111] close(5 [pid 6110] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] <... umount2 resumed>) = 0 [pid 6109] <... open resumed>) = 5 [pid 6110] memfd_create("syzkaller", 0 [pid 6109] ftruncate(5, 0 [pid 6110] <... memfd_create resumed>) = 5 [pid 6109] <... ftruncate resumed>) = 0 [pid 5078] umount2("./170/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6110] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6109] exit_group(0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6110] <... mmap resumed>) = 0x7f0356e00000 [pid 6109] <... exit_group resumed>) = ? [pid 5078] newfstatat(AT_FDCWD, "./170/bus", [pid 6112] <... ioctl resumed>) = 0 [pid 6112] close(3) = 0 [pid 6111] <... close resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6112] close(4) = 0 [pid 6112] mkdir("./bus", 0777 [pid 5078] umount2("./170/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6112] <... mkdir resumed>) = 0 [pid 6111] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6109] +++ exited with 0 +++ [pid 5078] openat(AT_FDCWD, "./170/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6110] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... openat resumed>) = 4 [pid 5078] newfstatat(4, "", [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6109, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6112] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] umount2("./168", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] getdents64(4, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6111] <... open resumed>) = 5 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] openat(AT_FDCWD, "./168", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] getdents64(4, [pid 5075] <... openat resumed>) = 3 [pid 6111] ftruncate(5, 0 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] newfstatat(3, "", [pid 6111] <... ftruncate resumed>) = 0 [pid 5078] close(4 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] <... close resumed>) = 0 [pid 5075] getdents64(3, [pid 6111] exit_group(0 [pid 5078] rmdir("./170/bus" [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6111] <... exit_group resumed>) = ? [pid 5078] <... rmdir resumed>) = 0 [pid 5075] umount2("./168/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6111] +++ exited with 0 +++ [pid 6110] <... write resumed>) = 524288 [pid 5078] umount2("./170/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... ioctl resumed>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6111, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 6110] munmap(0x7f0356e00000, 138412032 [pid 5078] newfstatat(AT_FDCWD, "./170/binderfs", [pid 6112] <... mount resumed>) = 0 [pid 6110] <... munmap resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 178.814466][ T6112] loop0: detected capacity change from 0 to 1024 [pid 5074] <... restart_syscall resumed>) = 0 [pid 6112] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6112] chdir("./bus" [pid 5078] unlink("./170/binderfs" [pid 6112] <... chdir resumed>) = 0 [pid 6110] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5078] <... unlink resumed>) = 0 [pid 6112] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] umount2("./168", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6112] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6112] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6110] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] getdents64(3, [pid 5077] close(3 [pid 5074] openat(AT_FDCWD, "./168", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6112] <... symlink resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5074] newfstatat(3, "", [pid 6110] close(5 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6112] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] getdents64(3, [pid 5078] close(3 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] umount2("./168/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6113 attached [pid 6112] <... creat resumed>) = 4 [pid 6110] <... close resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 6113] set_robust_list(0x55556e32a660, 24 [pid 6112] rename("./bus", "./file2" [pid 6110] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] rmdir("./170" [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6113 [pid 5075] umount2("./168/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... rmdir resumed>) = 0 [pid 6113] <... set_robust_list resumed>) = 0 [pid 5078] mkdir("./171", 0777 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./168/bus", [pid 6113] chdir("./170" [pid 5078] <... mkdir resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6113] <... chdir resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5075] umount2("./168/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6113] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5078] ioctl(3, LOOP_CLR_FD [pid 6113] <... prctl resumed>) = 0 [pid 6112] <... rename resumed>) = -1 EEXIST (File exists) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6113] setpgid(0, 0 [pid 5075] openat(AT_FDCWD, "./168/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6113] <... setpgid resumed>) = 0 [pid 6112] memfd_create("syzkaller", 0 [pid 5075] <... openat resumed>) = 4 [pid 5074] umount2("./168/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6113] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6110] <... open resumed>) = 5 [pid 6112] <... memfd_create resumed>) = 5 [pid 5075] newfstatat(4, "", [pid 6113] <... openat resumed>) = 3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./168/bus", [pid 6112] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6112] <... mmap resumed>) = 0x7f0356e00000 [pid 5074] umount2("./168/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] openat(AT_FDCWD, "./168/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6113] write(3, "1000", 4 [pid 5075] getdents64(4, [pid 5074] <... openat resumed>) = 4 [pid 6113] <... write resumed>) = 4 [pid 6110] ftruncate(5, 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6113] close(3 [pid 6110] <... ftruncate resumed>) = 0 [pid 5075] close(4 [pid 5074] newfstatat(4, "", [pid 6113] <... close resumed>) = 0 [pid 6112] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6110] exit_group(0 [pid 5075] <... close resumed>) = 0 [pid 6113] symlink("/dev/binderfs", "./binderfs" [pid 6110] <... exit_group resumed>) = ? [pid 5075] rmdir("./168/bus" [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6113] <... symlink resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 6110] +++ exited with 0 +++ [pid 5075] umount2("./168/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6113] memfd_create("syzkaller", 0 [pid 5078] <... ioctl resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6110, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./168/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./168/binderfs" [pid 5074] getdents64(4, [pid 5076] umount2("./171", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... unlink resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6113] <... memfd_create resumed>) = 3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./171", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6113] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... openat resumed>) = 3 [pid 5075] getdents64(3, [pid 5074] getdents64(4, [pid 5076] newfstatat(3, "", [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6113] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] close(4 [pid 6113] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] getdents64(3, [pid 5074] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] close(3 [pid 5076] umount2("./171/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./168" [pid 5074] rmdir("./168/bus" [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5075] mkdir("./169", 0777 [pid 5078] close(3 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] umount2("./168/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6113] <... write resumed>) = 524288 [pid 6112] <... write resumed>) = 524288 [pid 5078] <... close resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] newfstatat(AT_FDCWD, "./168/binderfs", [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] unlink("./168/binderfs" [pid 6113] munmap(0x7f0356e00000, 138412032./strace-static-x86_64: Process 6114 attached [pid 6112] munmap(0x7f0356e00000, 138412032 [pid 5076] <... umount2 resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 6114] set_robust_list(0x55556e32a660, 24 [pid 6113] <... munmap resumed>) = 0 [pid 6112] <... munmap resumed>) = 0 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6114 [pid 5076] umount2("./171/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] getdents64(3, [pid 5075] <... ioctl resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6114] <... set_robust_list resumed>) = 0 [pid 6112] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] close(3 [pid 6114] chdir("./171" [pid 6113] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6112] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] newfstatat(AT_FDCWD, "./171/bus", [pid 5074] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6112] close(5 [pid 5074] rmdir("./168" [pid 6114] <... chdir resumed>) = 0 [pid 6113] <... openat resumed>) = 4 [pid 5075] close(3 [pid 6114] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6113] ioctl(4, LOOP_SET_FD, 3 [pid 6114] <... prctl resumed>) = 0 [pid 5076] umount2("./171/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... close resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 6114] setpgid(0, 0 [pid 6113] <... ioctl resumed>) = 0 [pid 6114] <... setpgid resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6114] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6112] <... close resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6115 [pid 6114] <... openat resumed>) = 3 [pid 6114] write(3, "1000", 4) = 4 ./strace-static-x86_64: Process 6115 attached [pid 6114] close(3 [pid 6115] set_robust_list(0x55556e32a660, 24 [pid 6114] <... close resumed>) = 0 [pid 6115] <... set_robust_list resumed>) = 0 [pid 6114] symlink("/dev/binderfs", "./binderfs" [pid 6115] chdir("./169" [pid 6114] <... symlink resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./171/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] mkdir("./169", 0777 [pid 6112] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5076] <... openat resumed>) = 4 [pid 6115] <... chdir resumed>) = 0 [pid 6114] memfd_create("syzkaller", 0 [pid 6115] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6114] <... memfd_create resumed>) = 3 [pid 5076] newfstatat(4, "", [pid 6115] <... prctl resumed>) = 0 [pid 6114] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... mkdir resumed>) = 0 [pid 6115] setpgid(0, 0 [pid 6114] <... mmap resumed>) = 0x7f0356e00000 [pid 6112] <... open resumed>) = 5 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6115] <... setpgid resumed>) = 0 [pid 6112] ftruncate(5, 0 [pid 5076] getdents64(4, [pid 6115] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6113] close(3 [pid 6112] <... ftruncate resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6115] <... openat resumed>) = 3 [pid 6114] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6113] <... close resumed>) = 0 [pid 6112] exit_group(0 [pid 5076] getdents64(4, [pid 6112] <... exit_group resumed>) = ? [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6115] write(3, "1000", 4 [pid 6114] <... write resumed>) = 524288 [pid 6113] close(4 [pid 6112] +++ exited with 0 +++ [pid 5076] close(4 [pid 6115] <... write resumed>) = 4 [pid 6114] munmap(0x7f0356e00000, 138412032 [pid 6113] <... close resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6112, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6115] close(3 [pid 6113] mkdir("./bus", 0777 [pid 5076] rmdir("./171/bus" [pid 6115] <... close resumed>) = 0 [pid 6114] <... munmap resumed>) = 0 [pid 6113] <... mkdir resumed>) = 0 [pid 6115] symlink("/dev/binderfs", "./binderfs" [pid 6113] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5076] <... rmdir resumed>) = 0 [pid 6115] <... symlink resumed>) = 0 [ 178.999623][ T6113] loop4: detected capacity change from 0 to 1024 [pid 6115] memfd_create("syzkaller", 0 [pid 5076] umount2("./171/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6115] <... memfd_create resumed>) = 3 [pid 6114] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6113] <... mount resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6115] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6114] <... openat resumed>) = 4 [pid 6113] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5073] umount2("./168", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6115] <... mmap resumed>) = 0x7f0356e00000 [pid 6114] ioctl(4, LOOP_SET_FD, 3 [pid 6113] <... openat resumed>) = 3 [pid 5076] newfstatat(AT_FDCWD, "./171/binderfs", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6113] chdir("./bus" [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] openat(AT_FDCWD, "./168", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6114] <... ioctl resumed>) = 0 [pid 6113] <... chdir resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5076] unlink("./171/binderfs" [pid 5073] <... openat resumed>) = 3 [pid 5073] newfstatat(3, "", [pid 5076] <... unlink resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] umount2("./168/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6113] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6113] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6115] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] getdents64(3, [pid 6113] <... symlink resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6113] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5076] close(3) = 0 [pid 5074] close(3 [pid 6114] close(3 [pid 5074] <... close resumed>) = 0 [pid 6114] <... close resumed>) = 0 [pid 6113] <... creat resumed>) = 4 [pid 5076] rmdir("./171" [pid 6114] close(4 [pid 6113] rename("./bus", "./file2" [pid 6114] <... close resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 6114] mkdir("./bus", 0777 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... umount2 resumed>) = 0 [pid 6113] <... rename resumed>) = -1 EEXIST (File exists) [pid 5076] mkdir("./172", 0777 [pid 6114] <... mkdir resumed>) = 0 [pid 6113] memfd_create("syzkaller", 0 [pid 6114] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6113] <... memfd_create resumed>) = 5 [pid 5076] <... mkdir resumed>) = 0 [pid 6113] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5073] umount2("./168/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 6116 attached ) = 3 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6116 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6116] set_robust_list(0x55556e32a660, 24 [pid 6113] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6116] <... set_robust_list resumed>) = 0 [pid 6115] <... write resumed>) = 524288 [pid 6116] chdir("./169" [pid 5073] newfstatat(AT_FDCWD, "./168/bus", [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6114] <... mount resumed>) = 0 [pid 6116] <... chdir resumed>) = 0 [pid 6116] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6115] munmap(0x7f0356e00000, 138412032 [pid 6114] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6116] setpgid(0, 0 [pid 6114] <... openat resumed>) = 3 [pid 6116] <... setpgid resumed>) = 0 [pid 6115] <... munmap resumed>) = 0 [pid 6114] chdir("./bus" [pid 5073] umount2("./168/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6116] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6115] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6114] <... chdir resumed>) = 0 [ 179.067253][ T6114] loop5: detected capacity change from 0 to 1024 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6116] <... openat resumed>) = 3 [pid 6115] <... openat resumed>) = 4 [pid 6114] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6113] <... write resumed>) = 524288 [pid 6114] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] openat(AT_FDCWD, "./168/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6116] write(3, "1000", 4 [pid 5073] <... openat resumed>) = 4 [pid 6115] ioctl(4, LOOP_SET_FD, 3 [pid 5073] newfstatat(4, "", [pid 6116] <... write resumed>) = 4 [pid 6114] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6116] close(3) = 0 [pid 6116] symlink("/dev/binderfs", "./binderfs" [pid 6114] <... symlink resumed>) = 0 [pid 6116] <... symlink resumed>) = 0 [pid 6116] memfd_create("syzkaller", 0 [pid 6114] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6116] <... memfd_create resumed>) = 3 [pid 6116] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5073] getdents64(4, [pid 6114] <... creat resumed>) = 4 [pid 6113] munmap(0x7f0356e00000, 138412032) = 0 [pid 6114] rename("./bus", "./file2" [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6114] <... rename resumed>) = -1 EEXIST (File exists) [pid 5073] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6115] <... ioctl resumed>) = 0 [pid 6114] memfd_create("syzkaller", 0 [pid 6113] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] close(4 [pid 6115] close(3) = 0 [pid 5073] <... close resumed>) = 0 [pid 6115] close(4 [pid 5073] rmdir("./168/bus" [pid 6115] <... close resumed>) = 0 [pid 6116] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6114] <... memfd_create resumed>) = 5 [pid 6113] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... rmdir resumed>) = 0 [pid 6115] mkdir("./bus", 0777 [pid 6114] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6113] close(5 [pid 6114] <... mmap resumed>) = 0x7f0356e00000 [pid 6115] <... mkdir resumed>) = 0 [pid 6114] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] umount2("./168/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6116] <... write resumed>) = 524288 [pid 6115] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5076] <... ioctl resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 179.134473][ T6115] loop2: detected capacity change from 0 to 1024 [pid 5073] newfstatat(AT_FDCWD, "./168/binderfs", [pid 6113] <... close resumed>) = 0 [pid 5076] close(3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... close resumed>) = 0 [pid 6113] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] unlink("./168/binderfs" [pid 6116] munmap(0x7f0356e00000, 138412032 [pid 5073] <... unlink resumed>) = 0 [pid 6116] <... munmap resumed>) = 0 [pid 6116] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5073] getdents64(3, [pid 6116] ioctl(4, LOOP_SET_FD, 3 [pid 6114] <... write resumed>) = 524288 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6117 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6117 attached [pid 6115] <... mount resumed>) = 0 [pid 6113] <... open resumed>) = 5 [pid 5073] close(3) = 0 [pid 5073] rmdir("./168" [pid 6115] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6117] set_robust_list(0x55556e32a660, 24) = 0 [pid 6115] <... openat resumed>) = 3 [pid 5073] <... rmdir resumed>) = 0 [pid 6117] chdir("./172" [pid 6115] chdir("./bus" [pid 6114] munmap(0x7f0356e00000, 138412032 [pid 6113] ftruncate(5, 0 [pid 5073] mkdir("./169", 0777 [pid 6115] <... chdir resumed>) = 0 [pid 6115] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6114] <... munmap resumed>) = 0 [pid 6113] <... ftruncate resumed>) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 6117] <... chdir resumed>) = 0 [pid 6115] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6113] exit_group(0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6117] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6115] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6113] <... exit_group resumed>) = ? [pid 6113] +++ exited with 0 +++ [pid 6117] <... prctl resumed>) = 0 [pid 6114] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] <... openat resumed>) = 3 [pid 6117] setpgid(0, 0 [pid 6114] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6117] <... setpgid resumed>) = 0 [pid 6115] <... symlink resumed>) = 0 [pid 6114] close(5 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6113, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6117] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6116] <... ioctl resumed>) = 0 [pid 6115] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6114] <... close resumed>) = 0 [pid 5077] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5077] umount2("./170", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./170", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6116] close(3 [pid 6117] <... openat resumed>) = 3 [pid 6116] <... close resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 6117] write(3, "1000", 4 [pid 6116] close(4 [pid 6115] <... creat resumed>) = 4 [pid 5077] newfstatat(3, "", [pid 6117] <... write resumed>) = 4 [pid 6116] <... close resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6116] mkdir("./bus", 0777 [pid 5077] getdents64(3, [pid 6117] close(3 [pid 6116] <... mkdir resumed>) = 0 [pid 6115] rename("./bus", "./file2" [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6117] <... close resumed>) = 0 [pid 6116] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6114] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] umount2("./170/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6117] symlink("/dev/binderfs", "./binderfs" [pid 6115] <... rename resumed>) = -1 EEXIST (File exists) [ 179.212337][ T6116] loop1: detected capacity change from 0 to 1024 [pid 6117] <... symlink resumed>) = 0 [pid 6116] <... mount resumed>) = 0 [pid 6115] memfd_create("syzkaller", 0 [pid 6116] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5077] <... umount2 resumed>) = 0 [pid 6115] <... memfd_create resumed>) = 5 [pid 6117] memfd_create("syzkaller", 0 [pid 6116] <... openat resumed>) = 3 [pid 6115] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6114] <... open resumed>) = 5 [pid 6116] chdir("./bus") = 0 [pid 6116] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6114] ftruncate(5, 0 [pid 6116] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6114] <... ftruncate resumed>) = 0 [pid 6116] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6115] <... mmap resumed>) = 0x7f0356e00000 [pid 5073] <... ioctl resumed>) = 0 [pid 6114] exit_group(0) = ? [pid 6115] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6114] +++ exited with 0 +++ [pid 6117] <... memfd_create resumed>) = 3 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6114, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5077] umount2("./170/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] close(3 [pid 6117] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... close resumed>) = 0 [pid 6116] <... symlink resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6116] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5077] newfstatat(AT_FDCWD, "./170/bus", [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6117] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] umount2("./170/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./171", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./170/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6116] <... creat resumed>) = 4 [pid 5078] openat(AT_FDCWD, "./171", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] newfstatat(4, "", [pid 6116] rename("./bus", "./file2" [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] <... openat resumed>) = 3 [pid 6117] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] newfstatat(3, "", [pid 5077] getdents64(4, ./strace-static-x86_64: Process 6118 attached [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6118] set_robust_list(0x55556e32a660, 24 [pid 5078] getdents64(3, [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6118 [pid 6118] <... set_robust_list resumed>) = 0 [pid 6116] <... rename resumed>) = -1 EEXIST (File exists) [pid 5077] getdents64(4, [pid 6118] chdir("./169" [pid 6116] memfd_create("syzkaller", 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6118] <... chdir resumed>) = 0 [pid 6116] <... memfd_create resumed>) = 5 [pid 5078] umount2("./171/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] close(4 [pid 6116] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] <... close resumed>) = 0 [pid 6116] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] rmdir("./170/bus") = 0 [pid 6118] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6116] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6118] <... prctl resumed>) = 0 [pid 6118] setpgid(0, 0) = 0 [pid 6118] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6118] write(3, "1000", 4 [pid 5077] umount2("./170/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6118] <... write resumed>) = 4 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6118] close(3) = 0 [pid 5077] newfstatat(AT_FDCWD, "./170/binderfs", [pid 6115] <... write resumed>) = 524288 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6118] symlink("/dev/binderfs", "./binderfs" [pid 6115] munmap(0x7f0356e00000, 138412032 [pid 5077] unlink("./170/binderfs" [pid 6118] <... symlink resumed>) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 5077] getdents64(3, [pid 6118] memfd_create("syzkaller", 0 [pid 6115] <... munmap resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6118] <... memfd_create resumed>) = 3 [pid 5077] close(3 [pid 6118] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] <... close resumed>) = 0 [pid 6117] <... write resumed>) = 524288 [pid 6118] <... mmap resumed>) = 0x7f0356e00000 [pid 6115] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6117] munmap(0x7f0356e00000, 138412032 [pid 6115] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] rmdir("./170" [pid 6115] close(5 [pid 6118] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6117] <... munmap resumed>) = 0 [pid 6116] <... write resumed>) = 524288 [pid 5078] <... umount2 resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 6118] <... write resumed>) = 524288 [pid 6117] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6116] munmap(0x7f0356e00000, 138412032 [pid 6115] <... close resumed>) = 0 [pid 5078] umount2("./171/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] mkdir("./171", 0777 [pid 6117] <... openat resumed>) = 4 [pid 6116] <... munmap resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... mkdir resumed>) = 0 [pid 6118] munmap(0x7f0356e00000, 138412032 [pid 6117] ioctl(4, LOOP_SET_FD, 3 [pid 6115] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] newfstatat(AT_FDCWD, "./171/bus", [pid 6118] <... munmap resumed>) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6116] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6118] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6116] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... openat resumed>) = 3 [pid 6118] <... openat resumed>) = 4 [pid 6116] close(5 [pid 5078] umount2("./171/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] ioctl(3, LOOP_CLR_FD [pid 6116] <... close resumed>) = 0 [pid 6118] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6117] <... ioctl resumed>) = 0 [pid 6116] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6118] close(3 [pid 6117] close(3 [pid 5078] openat(AT_FDCWD, "./171/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6118] <... close resumed>) = 0 [pid 6117] <... close resumed>) = 0 [pid 6118] close(4 [pid 6117] close(4 [pid 6115] <... open resumed>) = 5 [pid 5078] <... openat resumed>) = 4 [pid 6118] <... close resumed>) = 0 [pid 6117] <... close resumed>) = 0 [pid 6117] mkdir("./bus", 0777) = 0 [pid 6116] <... open resumed>) = 5 [pid 6117] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6116] ftruncate(5, 0 [pid 6115] ftruncate(5, 0) = 0 [pid 6118] mkdir("./bus", 0777 [pid 6116] <... ftruncate resumed>) = 0 [pid 6118] <... mkdir resumed>) = 0 [pid 6115] exit_group(0) = ? [pid 5078] newfstatat(4, "", [pid 6116] exit_group(0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5078] close(4) = 0 [pid 6116] <... exit_group resumed>) = ? [pid 5078] rmdir("./171/bus" [pid 6118] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5078] <... rmdir resumed>) = 0 [pid 5078] umount2("./171/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] newfstatat(AT_FDCWD, "./171/binderfs", [pid 6116] +++ exited with 0 +++ [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] unlink("./171/binderfs" [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6116, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6117] <... mount resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 6117] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5074] <... restart_syscall resumed>) = 0 [pid 6117] <... openat resumed>) = 3 [pid 6115] +++ exited with 0 +++ [pid 5078] getdents64(3, [pid 6117] chdir("./bus" [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6115, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6117] <... chdir resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] umount2("./169", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6117] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5078] close(3 [pid 5077] <... ioctl resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6117] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... close resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./169", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 179.378947][ T6117] loop3: detected capacity change from 0 to 1024 [ 179.384224][ T6118] loop0: detected capacity change from 0 to 1024 [pid 6117] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] rmdir("./171" [pid 5077] close(3 [pid 5074] <... openat resumed>) = 3 [pid 6118] <... mount resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5074] newfstatat(3, "", [pid 6118] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6117] <... symlink resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] umount2("./169", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6118] <... openat resumed>) = 3 [pid 5078] mkdir("./172", 0777 [pid 5074] getdents64(3, [pid 6118] chdir("./bus" [pid 5078] <... mkdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6118] <... chdir resumed>) = 0 [pid 5074] umount2("./169/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6118] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] openat(AT_FDCWD, "./169", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6118] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6117] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... openat resumed>) = 3 [pid 5078] <... openat resumed>) = 3 [pid 5075] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6119 [pid 5075] getdents64(3, ./strace-static-x86_64: Process 6119 attached [pid 6118] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6118] <... symlink resumed>) = 0 [pid 5075] umount2("./169/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6119] set_robust_list(0x55556e32a660, 24 [pid 6118] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6119] <... set_robust_list resumed>) = 0 [pid 6117] <... creat resumed>) = 4 [pid 6117] rename("./bus", "./file2" [pid 6119] chdir("./171" [pid 6117] <... rename resumed>) = -1 EEXIST (File exists) [pid 6117] memfd_create("syzkaller", 0) = 5 [pid 6118] <... creat resumed>) = 4 [pid 6117] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6119] <... chdir resumed>) = 0 [pid 6118] rename("./bus", "./file2" [pid 6117] <... mmap resumed>) = 0x7f0356e00000 [pid 6119] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6117] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... umount2 resumed>) = 0 [pid 6119] <... prctl resumed>) = 0 [pid 5074] umount2("./169/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6118] <... rename resumed>) = -1 EEXIST (File exists) [pid 5075] <... umount2 resumed>) = 0 [pid 6119] setpgid(0, 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6119] <... setpgid resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./169/bus", [pid 6118] memfd_create("syzkaller", 0 [pid 5075] umount2("./169/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6119] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6118] <... memfd_create resumed>) = 5 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6118] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] newfstatat(AT_FDCWD, "./169/bus", [pid 6119] <... openat resumed>) = 3 [pid 5074] umount2("./169/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6118] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./169/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] openat(AT_FDCWD, "./169/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./169/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5075] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, [pid 6119] write(3, "1000", 4 [pid 5078] <... ioctl resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] <... openat resumed>) = 4 [pid 6119] <... write resumed>) = 4 [pid 6118] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6117] <... write resumed>) = 524288 [pid 5075] getdents64(4, [pid 5074] newfstatat(4, "", [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] close(4) = 0 [pid 5075] rmdir("./169/bus") = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6119] close(3 [pid 5075] umount2("./169/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./169/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./169/binderfs" [pid 6119] <... close resumed>) = 0 [pid 6119] symlink("/dev/binderfs", "./binderfs" [pid 5075] <... unlink resumed>) = 0 [pid 5074] getdents64(4, [pid 5075] getdents64(3, [pid 6119] <... symlink resumed>) = 0 [pid 5078] close(3 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6119] memfd_create("syzkaller", 0 [pid 5078] <... close resumed>) = 0 [pid 5074] getdents64(4, [pid 6119] <... memfd_create resumed>) = 3 [pid 6118] <... write resumed>) = 524288 [pid 6117] munmap(0x7f0356e00000, 138412032 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] close(3 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] close(4 [pid 5075] <... close resumed>) = 0 [pid 6119] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] rmdir("./169" [pid 5074] <... close resumed>) = 0 [pid 6119] <... mmap resumed>) = 0x7f0356e00000 [pid 6117] <... munmap resumed>) = 0 [pid 5074] rmdir("./169/bus" [pid 6117] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5074] umount2("./169/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6117] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] mkdir("./170", 0777 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./169/binderfs", [pid 6117] close(5 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6117] <... close resumed>) = 0 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6120 [pid 5074] unlink("./169/binderfs"./strace-static-x86_64: Process 6120 attached [pid 6119] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... unlink resumed>) = 0 [pid 6120] set_robust_list(0x55556e32a660, 24) = 0 [pid 6118] munmap(0x7f0356e00000, 138412032 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6120] chdir("./172" [pid 6118] <... munmap resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6120] <... chdir resumed>) = 0 [pid 6120] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6118] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6120] <... prctl resumed>) = 0 [pid 6118] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6120] setpgid(0, 0 [pid 6118] close(5 [pid 6117] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5074] getdents64(3, [pid 6120] <... setpgid resumed>) = 0 [pid 6118] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6120] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6117] <... open resumed>) = 5 [pid 5074] close(3 [pid 6120] write(3, "1000", 4) = 4 [pid 6117] ftruncate(5, 0 [pid 6120] close(3 [pid 6118] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6117] <... ftruncate resumed>) = 0 [pid 6120] <... close resumed>) = 0 [pid 6117] exit_group(0 [pid 6120] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6119] <... write resumed>) = 524288 [pid 6117] <... exit_group resumed>) = ? [pid 5074] <... close resumed>) = 0 [pid 6120] memfd_create("syzkaller", 0 [pid 6117] +++ exited with 0 +++ [pid 5074] rmdir("./169" [pid 6120] <... memfd_create resumed>) = 3 [pid 6118] <... open resumed>) = 5 [pid 6118] ftruncate(5, 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6117, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6120] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6118] <... ftruncate resumed>) = 0 [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5074] <... rmdir resumed>) = 0 [pid 6120] <... mmap resumed>) = 0x7f0356e00000 [pid 6119] munmap(0x7f0356e00000, 138412032 [pid 6118] exit_group(0 [pid 5076] <... restart_syscall resumed>) = 0 [pid 6119] <... munmap resumed>) = 0 [pid 5074] mkdir("./170", 0777 [pid 6118] <... exit_group resumed>) = ? [pid 5074] <... mkdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6118] +++ exited with 0 +++ [pid 5076] umount2("./172", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... openat resumed>) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6119] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./172", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6118, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6119] <... openat resumed>) = 4 [pid 5076] <... openat resumed>) = 3 [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 6119] ioctl(4, LOOP_SET_FD, 3 [pid 5076] newfstatat(3, "", [pid 5073] <... restart_syscall resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] umount2("./169", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./172/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6120] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... ioctl resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./169", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6119] <... ioctl resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5076] umount2("./172/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] close(3 [pid 5073] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] umount2("./169/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6120] <... write resumed>) = 524288 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6120] munmap(0x7f0356e00000, 138412032 [pid 6119] close(3 [pid 5076] newfstatat(AT_FDCWD, "./172/bus", [pid 5075] <... close resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] umount2("./172/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] close(3./strace-static-x86_64: Process 6121 attached [pid 6120] <... munmap resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6121 [pid 5074] <... close resumed>) = 0 [pid 6120] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6119] <... close resumed>) = 0 [pid 6121] set_robust_list(0x55556e32a660, 24 [pid 5076] openat(AT_FDCWD, "./172/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6121] <... set_robust_list resumed>) = 0 [pid 6120] <... openat resumed>) = 4 [pid 6119] close(4 [pid 5076] <... openat resumed>) = 4 [pid 6120] ioctl(4, LOOP_SET_FD, 3 [pid 6119] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 6121] chdir("./170" [pid 5076] newfstatat(4, "", [pid 6119] mkdir("./bus", 0777 [pid 6121] <... chdir resumed>) = 0 [pid 6119] <... mkdir resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6122 ./strace-static-x86_64: Process 6122 attached [pid 5073] umount2("./169/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] getdents64(4, [pid 6121] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6122] set_robust_list(0x55556e32a660, 24 [pid 6121] <... prctl resumed>) = 0 [pid 6119] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6121] setpgid(0, 0 [pid 5076] getdents64(4, [pid 6121] <... setpgid resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] newfstatat(AT_FDCWD, "./169/bus", [pid 6122] <... set_robust_list resumed>) = 0 [pid 6121] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6120] <... ioctl resumed>) = 0 [pid 5076] close(4 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6122] chdir("./170" [pid 5073] umount2("./169/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6122] <... chdir resumed>) = 0 [pid 6121] <... openat resumed>) = 3 [pid 6120] close(3 [pid 5076] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6122] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6121] write(3, "1000", 4 [pid 5076] rmdir("./172/bus" [pid 5073] openat(AT_FDCWD, "./169/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6122] <... prctl resumed>) = 0 [pid 6121] <... write resumed>) = 4 [pid 6120] <... close resumed>) = 0 [pid 5073] <... openat resumed>) = 4 [pid 6122] setpgid(0, 0 [pid 6120] close(4 [pid 6119] <... mount resumed>) = 0 [ 179.626597][ T6119] loop4: detected capacity change from 0 to 1024 [ 179.660337][ T6120] loop5: detected capacity change from 0 to 1024 [pid 5076] <... rmdir resumed>) = 0 [pid 5073] newfstatat(4, "", [pid 6122] <... setpgid resumed>) = 0 [pid 6121] close(3 [pid 6120] <... close resumed>) = 0 [pid 5076] umount2("./172/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6122] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6121] <... close resumed>) = 0 [pid 6120] mkdir("./bus", 0777 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6121] symlink("/dev/binderfs", "./binderfs" [pid 6119] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5076] newfstatat(AT_FDCWD, "./172/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] getdents64(4, [pid 6119] <... openat resumed>) = 3 [pid 5076] unlink("./172/binderfs" [pid 6119] chdir("./bus" [pid 6120] <... mkdir resumed>) = 0 [pid 6119] <... chdir resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6119] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] getdents64(3, [pid 6122] <... openat resumed>) = 3 [pid 6121] <... symlink resumed>) = 0 [pid 6120] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6119] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] getdents64(4, [pid 6122] write(3, "1000", 4 [pid 6119] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5076] close(3 [pid 6122] <... write resumed>) = 4 [pid 6121] memfd_create("syzkaller", 0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6122] close(3 [pid 5076] <... close resumed>) = 0 [pid 5073] close(4 [pid 6122] <... close resumed>) = 0 [pid 6121] <... memfd_create resumed>) = 3 [pid 5076] rmdir("./172" [pid 5073] <... close resumed>) = 0 [pid 6122] symlink("/dev/binderfs", "./binderfs" [pid 6121] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] rmdir("./169/bus" [pid 6122] <... symlink resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 6122] memfd_create("syzkaller", 0 [pid 6121] <... mmap resumed>) = 0x7f0356e00000 [pid 6120] <... mount resumed>) = 0 [pid 5076] mkdir("./173", 0777 [pid 5073] umount2("./169/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6122] <... memfd_create resumed>) = 3 [pid 6120] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6119] <... symlink resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6122] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6120] <... openat resumed>) = 3 [pid 5073] newfstatat(AT_FDCWD, "./169/binderfs", [pid 6122] <... mmap resumed>) = 0x7f0356e00000 [pid 6120] chdir("./bus") = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6120] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5073] unlink("./169/binderfs" [pid 6120] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6122] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6121] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6119] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5076] <... mkdir resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 6120] <... symlink resumed>) = 0 [pid 6120] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5073] getdents64(3, [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3 [pid 5076] <... openat resumed>) = 3 [pid 5073] <... close resumed>) = 0 [pid 6120] <... creat resumed>) = 4 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5073] rmdir("./169" [pid 6120] rename("./bus", "./file2" [pid 5073] <... rmdir resumed>) = 0 [pid 5073] mkdir("./170", 0777 [pid 6119] <... creat resumed>) = 4 [pid 5073] <... mkdir resumed>) = 0 [pid 6120] <... rename resumed>) = -1 EEXIST (File exists) [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6119] rename("./bus", "./file2" [pid 5073] <... openat resumed>) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6119] <... rename resumed>) = -1 EEXIST (File exists) [pid 6120] memfd_create("syzkaller", 0) = 5 [pid 6120] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6119] memfd_create("syzkaller", 0 [pid 6122] <... write resumed>) = 524288 [pid 6119] <... memfd_create resumed>) = 5 [pid 6119] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6122] munmap(0x7f0356e00000, 138412032 [pid 6121] <... write resumed>) = 524288 [pid 6119] <... mmap resumed>) = 0x7f0356e00000 [pid 6122] <... munmap resumed>) = 0 [pid 6121] munmap(0x7f0356e00000, 138412032 [pid 6120] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6122] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6121] <... munmap resumed>) = 0 [pid 6119] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6121] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6122] <... openat resumed>) = 4 [pid 6121] <... openat resumed>) = 4 [pid 6119] <... write resumed>) = 524288 [pid 6121] ioctl(4, LOOP_SET_FD, 3 [pid 6122] ioctl(4, LOOP_SET_FD, 3 [pid 6120] <... write resumed>) = 524288 [pid 6119] munmap(0x7f0356e00000, 138412032 [pid 5076] <... ioctl resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 5076] close(3) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6120] munmap(0x7f0356e00000, 138412032 [pid 6119] <... munmap resumed>) = 0 [pid 5073] close(3 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6123 [pid 5073] <... close resumed>) = 0 [pid 6122] <... ioctl resumed>) = 0 [pid 6122] close(3) = 0 ./strace-static-x86_64: Process 6123 attached [pid 6122] close(4 [pid 6120] <... munmap resumed>) = 0 [pid 6123] set_robust_list(0x55556e32a660, 24 [pid 6122] <... close resumed>) = 0 [pid 6121] <... ioctl resumed>) = 0 [pid 6119] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6123] <... set_robust_list resumed>) = 0 [pid 6122] mkdir("./bus", 0777 [pid 6119] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6123] chdir("./173" [pid 6122] <... mkdir resumed>) = 0 [pid 6119] close(5 [pid 6120] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6123] <... chdir resumed>) = 0 [pid 6122] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, ""./strace-static-x86_64: Process 6124 attached [pid 6123] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6120] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6124 [pid 6124] set_robust_list(0x55556e32a660, 24 [pid 6123] <... prctl resumed>) = 0 [pid 6120] close(5 [pid 6124] <... set_robust_list resumed>) = 0 [pid 6123] setpgid(0, 0 [pid 6124] chdir("./170" [pid 6123] <... setpgid resumed>) = 0 [pid 6124] <... chdir resumed>) = 0 [pid 6123] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6124] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6123] <... openat resumed>) = 3 [pid 6121] close(3 [pid 6124] <... prctl resumed>) = 0 [pid 6123] write(3, "1000", 4 [pid 6121] <... close resumed>) = 0 [pid 6124] setpgid(0, 0 [pid 6123] <... write resumed>) = 4 [pid 6124] <... setpgid resumed>) = 0 [pid 6123] close(3 [pid 6124] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6123] <... close resumed>) = 0 [pid 6124] <... openat resumed>) = 3 [pid 6123] symlink("/dev/binderfs", "./binderfs" [pid 6124] write(3, "1000", 4 [pid 6123] <... symlink resumed>) = 0 [pid 6121] close(4 [pid 6124] <... write resumed>) = 4 [pid 6123] memfd_create("syzkaller", 0 [pid 6124] close(3) = 0 [pid 6123] <... memfd_create resumed>) = 3 [pid 6121] <... close resumed>) = 0 [pid 6124] symlink("/dev/binderfs", "./binderfs" [pid 6123] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6124] <... symlink resumed>) = 0 [pid 6123] <... mmap resumed>) = 0x7f0356e00000 [ 179.793447][ T6121] loop2: detected capacity change from 0 to 1024 [ 179.793794][ T6122] loop1: detected capacity change from 0 to 1024 [pid 6122] <... mount resumed>) = 0 [pid 6121] mkdir("./bus", 0777 [pid 6120] <... close resumed>) = 0 [pid 6119] <... close resumed>) = 0 [pid 6124] memfd_create("syzkaller", 0 [pid 6121] <... mkdir resumed>) = 0 [pid 6119] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6124] <... memfd_create resumed>) = 3 [pid 6122] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6121] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6120] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6123] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6122] <... openat resumed>) = 3 [pid 6124] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6122] chdir("./bus") = 0 [pid 6122] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6124] <... mmap resumed>) = 0x7f0356e00000 [pid 6122] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6124] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6120] <... open resumed>) = 5 [pid 6123] <... write resumed>) = 524288 [pid 6122] <... symlink resumed>) = 0 [pid 6120] ftruncate(5, 0 [ 179.873953][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 179.873974][ T28] audit: type=1800 audit(1710613061.974:1028): pid=6120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop5" ino=20 res=0 errno=0 [pid 6122] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6124] <... write resumed>) = 524288 [pid 6121] <... mount resumed>) = 0 [pid 6120] <... ftruncate resumed>) = 0 [pid 6119] <... open resumed>) = 5 [pid 6124] munmap(0x7f0356e00000, 138412032) = 0 [pid 6124] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6124] ioctl(4, LOOP_SET_FD, 3 [pid 6123] munmap(0x7f0356e00000, 138412032 [pid 6121] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6120] exit_group(0 [pid 6119] ftruncate(5, 0 [pid 6121] <... openat resumed>) = 3 [pid 6120] <... exit_group resumed>) = ? [pid 6119] <... ftruncate resumed>) = 0 [pid 6123] <... munmap resumed>) = 0 [pid 6122] <... creat resumed>) = 4 [pid 6121] chdir("./bus" [pid 6120] +++ exited with 0 +++ [pid 6119] exit_group(0 [pid 6123] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6122] rename("./bus", "./file2" [pid 6121] <... chdir resumed>) = 0 [pid 6119] <... exit_group resumed>) = ? [pid 6123] <... openat resumed>) = 4 [pid 6121] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6119] +++ exited with 0 +++ [pid 6123] ioctl(4, LOOP_SET_FD, 3 [pid 6121] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6120, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6121] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6119, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5077] umount2("./171", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./171", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6122] <... rename resumed>) = -1 EEXIST (File exists) [pid 5077] <... openat resumed>) = 3 [pid 6122] memfd_create("syzkaller", 0 [pid 5077] newfstatat(3, "", [pid 6122] <... memfd_create resumed>) = 5 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6122] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6121] <... symlink resumed>) = 0 [pid 6123] <... ioctl resumed>) = 0 [pid 5077] getdents64(3, [pid 6123] close(3 [pid 6122] <... mmap resumed>) = 0x7f0356e00000 [pid 6121] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] umount2("./172", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6123] <... close resumed>) = 0 [pid 6122] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6121] <... creat resumed>) = 4 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] umount2("./171/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6124] <... ioctl resumed>) = 0 [pid 6123] close(4 [pid 6121] rename("./bus", "./file2" [pid 5078] openat(AT_FDCWD, "./172", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... umount2 resumed>) = 0 [pid 6124] close(3 [pid 6123] <... close resumed>) = 0 [pid 6121] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] <... openat resumed>) = 3 [pid 6124] <... close resumed>) = 0 [pid 6123] mkdir("./bus", 0777 [pid 6121] memfd_create("syzkaller", 0 [pid 5078] newfstatat(3, "", [pid 6121] <... memfd_create resumed>) = 5 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6121] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6124] close(4 [pid 6123] <... mkdir resumed>) = 0 [pid 6121] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] getdents64(3, [pid 6124] <... close resumed>) = 0 [pid 6123] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6122] <... write resumed>) = 524288 [pid 6121] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] umount2("./171/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6124] mkdir("./bus", 0777 [pid 5078] umount2("./172/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6124] <... mkdir resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./171/bus", [ 179.911333][ T28] audit: type=1800 audit(1710613062.014:1029): pid=6119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 179.933150][ T6124] loop0: detected capacity change from 0 to 1024 [ 179.953751][ T6123] loop3: detected capacity change from 0 to 1024 [pid 6124] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6122] munmap(0x7f0356e00000, 138412032 [pid 6121] <... write resumed>) = 524288 [pid 5078] <... umount2 resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] umount2("./172/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] newfstatat(AT_FDCWD, "./172/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] umount2("./171/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6122] <... munmap resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./171/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5077] newfstatat(4, "", [pid 6122] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5078] umount2("./172/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6122] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6123] <... mount resumed>) = 0 [pid 5077] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] close(4) = 0 [pid 5078] openat(AT_FDCWD, "./172/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6121] munmap(0x7f0356e00000, 138412032 [pid 5077] rmdir("./171/bus" [pid 6124] <... mount resumed>) = 0 [pid 6123] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] <... openat resumed>) = 4 [pid 6124] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6123] <... openat resumed>) = 3 [pid 6122] close(5 [pid 6121] <... munmap resumed>) = 0 [pid 5078] newfstatat(4, "", [pid 5077] <... rmdir resumed>) = 0 [pid 6124] <... openat resumed>) = 3 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6124] chdir("./bus" [pid 6123] chdir("./bus" [pid 6121] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] getdents64(4, [pid 5077] umount2("./171/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6121] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6121] close(5 [pid 5077] newfstatat(AT_FDCWD, "./171/binderfs", [pid 6124] <... chdir resumed>) = 0 [pid 6123] <... chdir resumed>) = 0 [pid 6122] <... close resumed>) = 0 [pid 6121] <... close resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6124] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6123] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5078] getdents64(4, [pid 6123] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6124] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6121] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] close(4 [pid 5077] unlink("./171/binderfs" [pid 6124] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6123] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6122] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] <... close resumed>) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 5078] rmdir("./172/bus") = 0 [pid 6124] <... symlink resumed>) = 0 [pid 6123] <... symlink resumed>) = 0 [pid 6122] <... open resumed>) = 5 [pid 5078] umount2("./172/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] close(3) = 0 [pid 5077] rmdir("./171") = 0 [pid 5077] mkdir("./172", 0777) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 6121] <... open resumed>) = 5 [pid 6121] ftruncate(5, 0) = 0 [pid 6121] exit_group(0) = ? [pid 6124] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6123] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6122] ftruncate(5, 0 [pid 6121] +++ exited with 0 +++ [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6124] <... creat resumed>) = 4 [pid 6123] <... creat resumed>) = 4 [pid 6122] <... ftruncate resumed>) = 0 [pid 5078] newfstatat(AT_FDCWD, "./172/binderfs", [pid 6124] rename("./bus", "./file2" [pid 6122] exit_group(0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6123] rename("./bus", "./file2" [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6121, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5078] unlink("./172/binderfs" [pid 5075] umount2("./170", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6123] <... rename resumed>) = -1 EEXIST (File exists) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 180.056874][ T28] audit: type=1800 audit(1710613062.154:1030): pid=6122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop1" ino=20 res=0 errno=0 [pid 6123] memfd_create("syzkaller", 0 [pid 5078] <... unlink resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./170", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6122] <... exit_group resumed>) = ? [pid 6123] <... memfd_create resumed>) = 5 [pid 5075] <... openat resumed>) = 3 [pid 6124] <... rename resumed>) = -1 EEXIST (File exists) [pid 6123] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5075] newfstatat(3, "", [pid 6124] memfd_create("syzkaller", 0 [pid 5078] getdents64(3, [pid 6124] <... memfd_create resumed>) = 5 [pid 6122] +++ exited with 0 +++ [pid 5077] <... ioctl resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6124] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] getdents64(3, [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6122, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6123] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6124] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] close(3 [pid 5075] umount2("./170/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] close(3 [pid 5077] <... close resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] rmdir("./172" [pid 5075] <... umount2 resumed>) = 0 [pid 5074] umount2("./170", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... rmdir resumed>) = 0 [pid 6124] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6125 attached [pid 5074] openat(AT_FDCWD, "./170", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6125] set_robust_list(0x55556e32a660, 24 [pid 5074] <... openat resumed>) = 3 [pid 6125] <... set_robust_list resumed>) = 0 [pid 5075] umount2("./170/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] newfstatat(3, "", [pid 6125] chdir("./172" [pid 5078] mkdir("./173", 0777 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6125 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6125] <... chdir resumed>) = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 5074] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [ 180.102495][ T28] audit: type=1800 audit(1710613062.184:1031): pid=6121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop2" ino=20 res=0 errno=0 [pid 5074] umount2("./170/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6125] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] newfstatat(AT_FDCWD, "./170/bus", [pid 6125] <... prctl resumed>) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 6125] setpgid(0, 0 [pid 5078] <... openat resumed>) = 3 [pid 5075] umount2("./170/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6125] <... setpgid resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6123] <... write resumed>) = 524288 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 6125] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6123] munmap(0x7f0356e00000, 138412032 [pid 5075] openat(AT_FDCWD, "./170/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5075] newfstatat(4, "", [pid 6123] <... munmap resumed>) = 0 [pid 5074] umount2("./170/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, [pid 5074] newfstatat(AT_FDCWD, "./170/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6125] <... openat resumed>) = 3 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6125] write(3, "1000", 4 [pid 5075] close(4 [pid 6125] <... write resumed>) = 4 [pid 6125] close(3 [pid 6123] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] <... close resumed>) = 0 [pid 5074] umount2("./170/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6125] <... close resumed>) = 0 [pid 6124] <... write resumed>) = 524288 [pid 6123] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] rmdir("./170/bus" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6125] symlink("/dev/binderfs", "./binderfs" [pid 6124] munmap(0x7f0356e00000, 138412032 [pid 6123] close(5 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./170/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6125] <... symlink resumed>) = 0 [pid 5075] umount2("./170/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... openat resumed>) = 4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./170/binderfs", [pid 5074] newfstatat(4, "", [pid 6124] <... munmap resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6125] memfd_create("syzkaller", 0 [pid 5074] getdents64(4, [pid 5075] unlink("./170/binderfs" [pid 6125] <... memfd_create resumed>) = 3 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] <... unlink resumed>) = 0 [pid 6125] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] getdents64(3, [pid 5074] getdents64(4, [pid 6124] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6125] <... mmap resumed>) = 0x7f0356e00000 [pid 6124] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] close(3 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6124] close(5 [pid 5075] <... close resumed>) = 0 [pid 5074] close(4) = 0 [pid 5074] rmdir("./170/bus") = 0 [pid 5075] rmdir("./170" [pid 5074] umount2("./170/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6125] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6124] <... close resumed>) = 0 [pid 6123] <... close resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 6123] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] mkdir("./171", 0777) = 0 [pid 6124] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6124] <... open resumed>) = 5 [pid 6125] <... write resumed>) = 524288 [pid 5078] <... ioctl resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./170/binderfs", [pid 6124] ftruncate(5, 0 [pid 5078] close(3 [pid 6124] <... ftruncate resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6125] munmap(0x7f0356e00000, 138412032 [pid 6124] exit_group(0 [pid 6125] <... munmap resumed>) = 0 [pid 6124] <... exit_group resumed>) = ? [pid 6124] +++ exited with 0 +++ [pid 6125] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6125] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6126 attached [pid 6123] <... open resumed>) = 5 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6124, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6126 [pid 5075] <... ioctl resumed>) = 0 [pid 6125] <... ioctl resumed>) = 0 [pid 6125] close(3) = 0 [pid 6125] close(4) = 0 [pid 5074] unlink("./170/binderfs" [pid 6126] set_robust_list(0x55556e32a660, 24 [pid 6123] ftruncate(5, 0 [pid 5075] close(3 [pid 5074] <... unlink resumed>) = 0 [pid 5073] umount2("./170", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6126] <... set_robust_list resumed>) = 0 [pid 6123] <... ftruncate resumed>) = 0 [pid 6126] chdir("./173" [pid 6125] mkdir("./bus", 0777 [pid 5075] <... close resumed>) = 0 [pid 5074] getdents64(3, [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6126] <... chdir resumed>) = 0 [pid 6125] <... mkdir resumed>) = 0 [pid 6123] exit_group(0 [ 180.217492][ T28] audit: type=1800 audit(1710613062.314:1032): pid=6124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 180.236091][ T6125] loop4: detected capacity change from 0 to 1024 [ 180.240217][ T28] audit: type=1800 audit(1710613062.354:1033): pid=6123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop3" ino=20 res=0 errno=0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] openat(AT_FDCWD, "./170", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6126] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6125] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6123] <... exit_group resumed>) = ? [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6127 attached [pid 6126] <... prctl resumed>) = 0 [pid 6125] <... mount resumed>) = 0 [pid 6123] +++ exited with 0 +++ [pid 5074] close(3 [pid 5073] <... openat resumed>) = 3 [pid 6127] set_robust_list(0x55556e32a660, 24 [pid 6126] setpgid(0, 0 [pid 6125] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6123, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6127 [pid 5074] <... close resumed>) = 0 [pid 5073] newfstatat(3, "", [pid 6127] <... set_robust_list resumed>) = 0 [pid 6126] <... setpgid resumed>) = 0 [pid 6125] <... openat resumed>) = 3 [pid 5074] rmdir("./170" [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6127] chdir("./171" [pid 6126] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6125] chdir("./bus" [pid 5074] <... rmdir resumed>) = 0 [pid 5073] getdents64(3, [pid 6127] <... chdir resumed>) = 0 [pid 6126] <... openat resumed>) = 3 [pid 5074] mkdir("./171", 0777 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6127] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6126] write(3, "1000", 4 [pid 6125] <... chdir resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5073] umount2("./170/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6127] <... prctl resumed>) = 0 [pid 6126] <... write resumed>) = 4 [pid 6125] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] umount2("./173", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6126] close(3 [pid 5074] <... openat resumed>) = 3 [pid 6126] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6126] symlink("/dev/binderfs", "./binderfs" [pid 5076] openat(AT_FDCWD, "./173", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6126] <... symlink resumed>) = 0 [pid 6126] memfd_create("syzkaller", 0 [pid 5076] <... openat resumed>) = 3 [pid 6126] <... memfd_create resumed>) = 3 [pid 6126] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6127] setpgid(0, 0 [pid 6126] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6125] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] newfstatat(3, "", [pid 5073] <... umount2 resumed>) = 0 [pid 6127] <... setpgid resumed>) = 0 [pid 6125] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6127] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] getdents64(3, [pid 5073] umount2("./170/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6127] <... openat resumed>) = 3 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6127] write(3, "1000", 4 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./170/bus", [pid 6127] <... write resumed>) = 4 [pid 5076] umount2("./173/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./170/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6127] close(3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6127] <... close resumed>) = 0 [pid 6125] <... symlink resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./170/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6127] symlink("/dev/binderfs", "./binderfs" [pid 5073] <... openat resumed>) = 4 [pid 6127] <... symlink resumed>) = 0 [pid 6125] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5076] <... umount2 resumed>) = 0 [pid 5073] newfstatat(4, "", [pid 6127] memfd_create("syzkaller", 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6127] <... memfd_create resumed>) = 3 [pid 5073] getdents64(4, [pid 5076] umount2("./173/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6127] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] getdents64(4, [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6127] <... mmap resumed>) = 0x7f0356e00000 [pid 5073] close(4 [pid 5076] newfstatat(AT_FDCWD, "./173/bus", [pid 5073] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./173/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] rmdir("./170/bus" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./173/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] <... rmdir resumed>) = 0 [pid 5073] umount2("./170/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] newfstatat(4, "", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] newfstatat(AT_FDCWD, "./170/binderfs", [pid 5076] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] close(4) = 0 [pid 5076] rmdir("./173/bus") = 0 [pid 5073] unlink("./170/binderfs" [pid 6125] <... creat resumed>) = 4 [pid 5076] umount2("./173/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6125] rename("./bus", "./file2" [pid 5073] <... unlink resumed>) = 0 [pid 6127] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6126] <... write resumed>) = 524288 [pid 6125] <... rename resumed>) = -1 EEXIST (File exists) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] getdents64(3, [pid 6125] memfd_create("syzkaller", 0) = 5 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3 [pid 6126] munmap(0x7f0356e00000, 138412032 [pid 6125] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] newfstatat(AT_FDCWD, "./173/binderfs", [pid 5073] <... close resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5073] rmdir("./170" [pid 5074] close(3 [pid 6125] <... mmap resumed>) = 0x7f0356e00000 [pid 5074] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5076] unlink("./173/binderfs" [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6126] <... munmap resumed>) = 0 [pid 6125] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288./strace-static-x86_64: Process 6128 attached [pid 6126] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5076] <... unlink resumed>) = 0 [pid 5073] mkdir("./171", 0777 [pid 5076] getdents64(3, [pid 6126] <... openat resumed>) = 4 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 6126] ioctl(4, LOOP_SET_FD, 3 [pid 5076] close(3) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] rmdir("./173" [pid 5073] <... openat resumed>) = 3 [pid 6128] set_robust_list(0x55556e32a660, 24 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6128 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6128] <... set_robust_list resumed>) = 0 [pid 5076] mkdir("./174", 0777 [pid 6128] chdir("./171" [pid 5076] <... mkdir resumed>) = 0 [pid 6125] <... write resumed>) = 524288 [pid 6128] <... chdir resumed>) = 0 [pid 6128] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6128] setpgid(0, 0 [pid 5076] <... openat resumed>) = 3 [pid 6128] <... setpgid resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6128] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6128] write(3, "1000", 4 [pid 6127] <... write resumed>) = 524288 [pid 6126] <... ioctl resumed>) = 0 [pid 6125] munmap(0x7f0356e00000, 138412032 [pid 6128] <... write resumed>) = 4 [pid 6127] munmap(0x7f0356e00000, 138412032 [pid 6126] close(3 [pid 6125] <... munmap resumed>) = 0 [pid 6128] close(3 [pid 6127] <... munmap resumed>) = 0 [pid 6128] <... close resumed>) = 0 [pid 6126] <... close resumed>) = 0 [pid 6127] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6126] close(4 [pid 6125] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6128] symlink("/dev/binderfs", "./binderfs" [pid 6127] <... openat resumed>) = 4 [pid 6128] <... symlink resumed>) = 0 [pid 6127] ioctl(4, LOOP_SET_FD, 3 [pid 6126] <... close resumed>) = 0 [pid 6125] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6128] memfd_create("syzkaller", 0) = 3 [pid 6125] close(5 [pid 6128] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6128] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6126] mkdir("./bus", 0777 [pid 6125] <... close resumed>) = 0 [pid 6126] <... mkdir resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 6127] <... ioctl resumed>) = 0 [pid 6126] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6125] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6127] close(3 [pid 6126] <... mount resumed>) = 0 [pid 6125] <... open resumed>) = 5 [ 180.393799][ T6126] loop5: detected capacity change from 0 to 1024 [ 180.420694][ T6127] loop2: detected capacity change from 0 to 1024 [pid 5076] <... ioctl resumed>) = 0 [pid 6127] <... close resumed>) = 0 [pid 6126] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6125] ftruncate(5, 0 [pid 6127] close(4 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6129 [pid 6127] <... close resumed>) = 0 [pid 6128] <... write resumed>) = 524288 ./strace-static-x86_64: Process 6129 attached [pid 6127] mkdir("./bus", 0777 [pid 6126] <... openat resumed>) = 3 [pid 6125] <... ftruncate resumed>) = 0 [pid 5076] close(3 [pid 6126] chdir("./bus" [pid 6127] <... mkdir resumed>) = 0 [pid 6126] <... chdir resumed>) = 0 [pid 6126] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6125] exit_group(0 [pid 6126] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6125] <... exit_group resumed>) = ? [pid 6129] set_robust_list(0x55556e32a660, 24 [pid 6128] munmap(0x7f0356e00000, 138412032 [pid 6129] <... set_robust_list resumed>) = 0 [pid 6128] <... munmap resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 6129] chdir("./171") = 0 [pid 6128] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6126] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6128] <... openat resumed>) = 4 [pid 6127] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6126] <... symlink resumed>) = 0 [pid 6125] +++ exited with 0 +++ [ 180.454205][ T28] audit: type=1800 audit(1710613062.554:1034): pid=6125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop4" ino=20 res=0 errno=0 [pid 6129] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6128] ioctl(4, LOOP_SET_FD, 3 [pid 6126] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6129] <... prctl resumed>) = 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6125, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6129] setpgid(0, 0 [pid 5077] umount2("./172", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6130 [pid 6129] <... setpgid resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6130 attached [pid 6129] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6126] <... creat resumed>) = 4 [pid 5077] openat(AT_FDCWD, "./172", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6130] set_robust_list(0x55556e32a660, 24 [pid 5077] <... openat resumed>) = 3 [pid 6129] <... openat resumed>) = 3 [pid 6129] write(3, "1000", 4) = 4 [pid 6129] close(3 [pid 6130] <... set_robust_list resumed>) = 0 [pid 6129] <... close resumed>) = 0 [pid 6129] symlink("/dev/binderfs", "./binderfs" [pid 6130] chdir("./174" [pid 6129] <... symlink resumed>) = 0 [pid 6130] <... chdir resumed>) = 0 [pid 6129] memfd_create("syzkaller", 0) = 3 [pid 6129] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6130] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6129] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6126] rename("./bus", "./file2" [pid 5077] newfstatat(3, "", [pid 6128] <... ioctl resumed>) = 0 [pid 6128] close(3 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6130] <... prctl resumed>) = 0 [pid 6128] <... close resumed>) = 0 [pid 6127] <... mount resumed>) = 0 [pid 6130] setpgid(0, 0 [pid 6128] close(4 [pid 5077] getdents64(3, [pid 6130] <... setpgid resumed>) = 0 [pid 6128] <... close resumed>) = 0 [pid 6126] <... rename resumed>) = -1 EEXIST (File exists) [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6130] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6128] mkdir("./bus", 0777 [pid 5077] umount2("./172/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6130] <... openat resumed>) = 3 [pid 6129] <... write resumed>) = 524288 [pid 6128] <... mkdir resumed>) = 0 [pid 6127] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6126] memfd_create("syzkaller", 0 [pid 6130] write(3, "1000", 4 [pid 6127] <... openat resumed>) = 3 [pid 6126] <... memfd_create resumed>) = 5 [pid 6130] <... write resumed>) = 4 [pid 6127] chdir("./bus" [pid 6126] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6127] <... chdir resumed>) = 0 [pid 6128] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6126] <... mmap resumed>) = 0x7f0356e00000 [pid 6130] close(3 [pid 6127] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6130] <... close resumed>) = 0 [pid 6127] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6127] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6129] munmap(0x7f0356e00000, 138412032 [pid 6130] symlink("/dev/binderfs", "./binderfs" [pid 6127] <... symlink resumed>) = 0 [pid 6130] <... symlink resumed>) = 0 [pid 6127] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6129] <... munmap resumed>) = 0 [pid 6129] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 180.505759][ T6128] loop1: detected capacity change from 0 to 1024 [pid 6130] memfd_create("syzkaller", 0 [pid 6129] ioctl(4, LOOP_SET_FD, 3 [pid 6128] <... mount resumed>) = 0 [pid 6127] <... creat resumed>) = 4 [pid 6126] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... umount2 resumed>) = 0 [pid 6129] <... ioctl resumed>) = 0 [pid 6128] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6127] rename("./bus", "./file2" [pid 5077] umount2("./172/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6128] <... openat resumed>) = 3 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6130] <... memfd_create resumed>) = 3 [pid 6128] chdir("./bus" [pid 5077] newfstatat(AT_FDCWD, "./172/bus", [pid 6130] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6128] <... chdir resumed>) = 0 [pid 6127] <... rename resumed>) = -1 EEXIST (File exists) [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6130] <... mmap resumed>) = 0x7f0356e00000 [pid 6128] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6127] memfd_create("syzkaller", 0 [pid 5077] umount2("./172/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6127] <... memfd_create resumed>) = 5 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6127] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] openat(AT_FDCWD, "./172/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6128] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6127] <... mmap resumed>) = 0x7f0356e00000 [pid 6126] <... write resumed>) = 524288 [pid 5077] <... openat resumed>) = 4 [pid 6128] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5077] newfstatat(4, "", [pid 6128] <... symlink resumed>) = 0 [pid 6128] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6127] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6128] <... creat resumed>) = 4 [pid 5077] getdents64(4, [pid 6128] rename("./bus", "./file2" [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6129] close(3 [pid 6128] <... rename resumed>) = -1 EEXIST (File exists) [pid 6126] munmap(0x7f0356e00000, 138412032 [pid 5077] getdents64(4, [pid 6129] <... close resumed>) = 0 [pid 6128] memfd_create("syzkaller", 0 [pid 6126] <... munmap resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6129] close(4 [pid 6128] <... memfd_create resumed>) = 5 [pid 5077] close(4 [pid 6130] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... close resumed>) = 0 [pid 5077] rmdir("./172/bus" [pid 6129] <... close resumed>) = 0 [pid 6128] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6129] mkdir("./bus", 0777 [pid 6128] <... mmap resumed>) = 0x7f0356e00000 [pid 6126] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] <... rmdir resumed>) = 0 [pid 6130] <... write resumed>) = 524288 [pid 6129] <... mkdir resumed>) = 0 [pid 5077] umount2("./172/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6129] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./172/binderfs", [pid 6126] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] unlink("./172/binderfs") = 0 [pid 5077] getdents64(3, [pid 6126] close(5 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [ 180.577371][ T6129] loop0: detected capacity change from 0 to 1024 [pid 6130] munmap(0x7f0356e00000, 138412032 [pid 6127] <... write resumed>) = 524288 [pid 6126] <... close resumed>) = 0 [pid 5077] close(3) = 0 [pid 5077] rmdir("./172" [pid 6130] <... munmap resumed>) = 0 [pid 6127] munmap(0x7f0356e00000, 138412032 [pid 6128] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6127] <... munmap resumed>) = 0 [pid 6130] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5077] <... rmdir resumed>) = 0 [pid 6130] <... openat resumed>) = 4 [pid 6130] ioctl(4, LOOP_SET_FD, 3 [pid 6129] <... mount resumed>) = 0 [pid 6127] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5077] mkdir("./173", 0777 [pid 6129] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6126] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6129] chdir("./bus") = 0 [pid 6129] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6129] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6130] <... ioctl resumed>) = 0 [pid 6127] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6126] <... open resumed>) = 5 [pid 5077] <... mkdir resumed>) = 0 [pid 6130] close(3 [pid 6129] <... symlink resumed>) = 0 [pid 6128] <... write resumed>) = 524288 [pid 6127] close(5 [pid 6126] ftruncate(5, 0 [pid 6130] <... close resumed>) = 0 [pid 6129] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6127] <... close resumed>) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6130] close(4 [pid 6128] munmap(0x7f0356e00000, 138412032 [pid 6130] <... close resumed>) = 0 [pid 6130] mkdir("./bus", 0777) = 0 [pid 6130] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6126] <... ftruncate resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 6128] <... munmap resumed>) = 0 [pid 6127] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6126] exit_group(0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 6128] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6126] <... exit_group resumed>) = ? [ 180.649290][ T6130] loop3: detected capacity change from 0 to 1024 [ 180.662991][ T28] audit: type=1800 audit(1710613062.764:1035): pid=6126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop5" ino=20 res=0 errno=0 [pid 6126] +++ exited with 0 +++ [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6126, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6128] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] restart_syscall(<... resuming interrupted clone ...> [pid 6128] close(5 [pid 5078] <... restart_syscall resumed>) = 0 [pid 5078] umount2("./173", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6130] <... mount resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./173", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6127] <... open resumed>) = 5 [pid 5078] <... openat resumed>) = 3 [pid 6130] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] newfstatat(3, "", [pid 6130] <... openat resumed>) = 3 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] umount2("./173/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6130] chdir("./bus") = 0 [pid 6130] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6130] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6130] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 4 [pid 6130] rename("./bus", "./file2") = -1 EEXIST (File exists) [pid 6130] memfd_create("syzkaller", 0) = 5 [pid 6130] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6130] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6127] ftruncate(5, 0 [pid 6129] <... creat resumed>) = 4 [pid 6128] <... close resumed>) = 0 [pid 6127] <... ftruncate resumed>) = 0 [pid 5078] <... umount2 resumed>) = 0 [pid 6128] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6130] <... write resumed>) = 524288 [ 180.698160][ T28] audit: type=1800 audit(1710613062.804:1036): pid=6127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop2" ino=20 res=0 errno=0 [pid 6129] rename("./bus", "./file2" [pid 6127] exit_group(0 [pid 5078] umount2("./173/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6130] munmap(0x7f0356e00000, 138412032 [pid 6129] <... rename resumed>) = -1 EEXIST (File exists) [pid 6128] <... open resumed>) = 5 [pid 6127] <... exit_group resumed>) = ? [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... ioctl resumed>) = 0 [pid 5078] newfstatat(AT_FDCWD, "./173/bus", [pid 6129] memfd_create("syzkaller", 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6129] <... memfd_create resumed>) = 5 [pid 5078] umount2("./173/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./173/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5078] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6129] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6129] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] getdents64(4, [pid 6127] +++ exited with 0 +++ [pid 6130] <... munmap resumed>) = 0 [pid 6129] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6128] ftruncate(5, 0 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] close(3 [pid 6130] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6128] <... ftruncate resumed>) = 0 [pid 5078] close(4 [pid 5077] <... close resumed>) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6127, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6130] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6130] close(5 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] <... close resumed>) = 0 [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 5078] rmdir("./173/bus" [pid 5075] <... restart_syscall resumed>) = 0 ./strace-static-x86_64: Process 6131 attached [pid 6128] exit_group(0 [pid 5078] <... rmdir resumed>) = 0 [pid 6131] set_robust_list(0x55556e32a660, 24 [pid 6128] <... exit_group resumed>) = ? [pid 5078] umount2("./173/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6131 [pid 6131] <... set_robust_list resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./171", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6131] chdir("./173" [pid 5078] newfstatat(AT_FDCWD, "./173/binderfs", [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6131] <... chdir resumed>) = 0 [pid 6130] <... close resumed>) = 0 [pid 6128] +++ exited with 0 +++ [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] openat(AT_FDCWD, "./171", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6130] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6128, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 6131] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6130] <... open resumed>) = 5 [pid 6129] <... write resumed>) = 524288 [ 180.743626][ T28] audit: type=1800 audit(1710613062.844:1037): pid=6128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop1" ino=20 res=0 errno=0 [pid 5078] unlink("./173/binderfs" [pid 5075] <... openat resumed>) = 3 [pid 6131] <... prctl resumed>) = 0 [pid 6130] ftruncate(5, 0 [pid 6129] munmap(0x7f0356e00000, 138412032 [pid 5078] <... unlink resumed>) = 0 [pid 5075] newfstatat(3, "", [pid 5074] <... restart_syscall resumed>) = 0 [pid 6131] setpgid(0, 0 [pid 6130] <... ftruncate resumed>) = 0 [pid 6129] <... munmap resumed>) = 0 [pid 5078] getdents64(3, [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6131] <... setpgid resumed>) = 0 [pid 6131] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6130] exit_group(0 [pid 5075] getdents64(3, [pid 6131] <... openat resumed>) = 3 [pid 6130] <... exit_group resumed>) = ? [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] umount2("./171", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6131] write(3, "1000", 4 [pid 5075] umount2("./171/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6131] <... write resumed>) = 4 [pid 5074] openat(AT_FDCWD, "./171", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6131] close(3 [pid 5074] <... openat resumed>) = 3 [pid 6131] <... close resumed>) = 0 [pid 5074] newfstatat(3, "", [pid 6131] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6130] +++ exited with 0 +++ [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] close(3 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6130, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5074] getdents64(3, [pid 5078] <... close resumed>) = 0 [pid 6131] memfd_create("syzkaller", 0 [pid 6129] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5078] rmdir("./173" [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6131] <... memfd_create resumed>) = 3 [pid 6129] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... rmdir resumed>) = 0 [pid 5074] umount2("./171/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6131] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6129] close(5 [pid 5078] mkdir("./174", 0777 [pid 5076] umount2("./174", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6131] <... mmap resumed>) = 0x7f0356e00000 [pid 6129] <... close resumed>) = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5076] openat(AT_FDCWD, "./174", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] umount2("./171/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... openat resumed>) = 3 [pid 5076] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5076] newfstatat(3, "", [pid 5075] umount2("./171/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] newfstatat(AT_FDCWD, "./171/bus", [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6131] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] umount2("./174/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6129] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./171/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] newfstatat(AT_FDCWD, "./171/bus", [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./171/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./171/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... openat resumed>) = 4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(4, "", [pid 6129] <... open resumed>) = 5 [pid 5075] openat(AT_FDCWD, "./171/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6129] ftruncate(5, 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6129] <... ftruncate resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 5074] getdents64(4, [pid 5076] <... umount2 resumed>) = 0 [pid 6129] exit_group(0 [pid 5076] umount2("./174/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] newfstatat(4, "", [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6129] <... exit_group resumed>) = ? [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] getdents64(4, [pid 5076] newfstatat(AT_FDCWD, "./174/bus", [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./174/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./174/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6129] +++ exited with 0 +++ [pid 5076] getdents64(4, [pid 6131] <... write resumed>) = 524288 [pid 5075] getdents64(4, [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6131] munmap(0x7f0356e00000, 138412032 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] close(4 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6129, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6131] <... munmap resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, [pid 5074] <... close resumed>) = 0 [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 6131] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] getdents64(4, [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] rmdir("./171/bus" [pid 6131] <... openat resumed>) = 4 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] close(4 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... restart_syscall resumed>) = 0 [pid 5076] close(4 [pid 5075] <... close resumed>) = 0 [pid 6131] ioctl(4, LOOP_SET_FD, 3 [pid 5074] umount2("./171/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... close resumed>) = 0 [pid 5075] rmdir("./171/bus" [pid 5076] rmdir("./174/bus") = 0 [pid 5073] umount2("./171", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./174/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./174/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] openat(AT_FDCWD, "./171", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] unlink("./174/binderfs") = 0 [pid 5073] <... openat resumed>) = 3 [pid 5076] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3 [pid 5073] newfstatat(3, "", [pid 5076] <... close resumed>) = 0 [pid 5076] rmdir("./174" [pid 6131] <... ioctl resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6131] close(3 [pid 5076] mkdir("./175", 0777 [pid 5075] umount2("./171/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] newfstatat(AT_FDCWD, "./171/binderfs", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6131] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6131] close(4 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./171/binderfs", [pid 5074] unlink("./171/binderfs" [pid 5073] getdents64(3, [pid 6131] <... close resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 6131] mkdir("./bus", 0777 [pid 5075] unlink("./171/binderfs" [pid 5074] getdents64(3, [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6131] <... mkdir resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5075] <... unlink resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] getdents64(3, [pid 5074] close(3 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] <... close resumed>) = 0 [pid 5073] umount2("./171/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] close(3 [pid 5074] rmdir("./171" [pid 6131] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5075] <... close resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5075] rmdir("./171" [pid 5074] mkdir("./172", 0777 [pid 5078] <... ioctl resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 6131] <... mount resumed>) = 0 [pid 5075] mkdir("./172", 0777 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] <... umount2 resumed>) = 0 [pid 6131] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] close(3 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5073] umount2("./171/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6131] <... openat resumed>) = 3 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6131] chdir("./bus" [pid 5075] <... openat resumed>) = 3 [pid 5073] newfstatat(AT_FDCWD, "./171/bus", [pid 6131] <... chdir resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6131] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] umount2("./171/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6131] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6131] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5073] openat(AT_FDCWD, "./171/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6132 attached [pid 6131] <... symlink resumed>) = 0 [pid 5073] <... openat resumed>) = 4 [pid 6132] set_robust_list(0x55556e32a660, 24 [pid 6131] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6132] <... set_robust_list resumed>) = 0 [pid 5073] getdents64(4, [pid 6132] chdir("./174" [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6132] <... chdir resumed>) = 0 [pid 5073] close(4 [pid 6132] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5073] <... close resumed>) = 0 [pid 6132] <... prctl resumed>) = 0 [pid 5073] rmdir("./171/bus" [pid 6132] setpgid(0, 0 [pid 6131] <... creat resumed>) = 4 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6132 [pid 5073] <... rmdir resumed>) = 0 [pid 5073] umount2("./171/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6132] <... setpgid resumed>) = 0 [pid 6131] rename("./bus", "./file2" [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6132] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5073] newfstatat(AT_FDCWD, "./171/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6132] <... openat resumed>) = 3 [pid 5073] unlink("./171/binderfs") = 0 [pid 5073] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 6131] <... rename resumed>) = -1 EEXIST (File exists) [ 180.862896][ T6131] loop4: detected capacity change from 0 to 1024 [pid 5073] rmdir("./171" [pid 6131] memfd_create("syzkaller", 0 [pid 5073] <... rmdir resumed>) = 0 [pid 6132] write(3, "1000", 4 [pid 6131] <... memfd_create resumed>) = 5 [pid 6132] <... write resumed>) = 4 [pid 6132] close(3 [pid 6131] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6132] <... close resumed>) = 0 [pid 6131] <... mmap resumed>) = 0x7f0356e00000 [pid 6132] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6132] memfd_create("syzkaller", 0 [pid 5073] mkdir("./172", 0777 [pid 5076] <... ioctl resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 6132] <... memfd_create resumed>) = 3 [pid 5076] close(3 [pid 6131] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... close resumed>) = 0 [pid 6132] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6133 attached [pid 6132] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6133] set_robust_list(0x55556e32a660, 24 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6133 [pid 5075] <... ioctl resumed>) = 0 [pid 5074] close(3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6133] <... set_robust_list resumed>) = 0 [pid 6133] chdir("./175" [pid 6132] <... write resumed>) = 524288 [pid 5074] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6133] <... chdir resumed>) = 0 [pid 6131] <... write resumed>) = 524288 [pid 6133] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6133] setpgid(0, 0 [pid 6131] munmap(0x7f0356e00000, 138412032./strace-static-x86_64: Process 6134 attached [pid 6133] <... setpgid resumed>) = 0 [pid 6133] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6131] <... munmap resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6134 [pid 6131] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5075] close(3) = 0 [pid 6134] set_robust_list(0x55556e32a660, 24 [pid 6133] <... openat resumed>) = 3 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6134] <... set_robust_list resumed>) = 0 [pid 6133] write(3, "1000", 4 [pid 6134] chdir("./172" [pid 6133] <... write resumed>) = 4 [pid 6131] close(5 [pid 6134] <... chdir resumed>) = 0 [pid 6133] close(3 [pid 6132] munmap(0x7f0356e00000, 138412032 [pid 6131] <... close resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 6134] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6133] <... close resumed>) = 0 [pid 6134] <... prctl resumed>) = 0 [pid 6133] symlink("/dev/binderfs", "./binderfs" [pid 6132] <... munmap resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6135 ./strace-static-x86_64: Process 6135 attached [pid 6135] set_robust_list(0x55556e32a660, 24) = 0 [pid 6135] chdir("./172") = 0 [pid 6135] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6135] setpgid(0, 0) = 0 [pid 6135] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6133] <... symlink resumed>) = 0 [pid 6132] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6134] setpgid(0, 0 [pid 6132] <... openat resumed>) = 4 [pid 6134] <... setpgid resumed>) = 0 [pid 6133] memfd_create("syzkaller", 0 [pid 6132] ioctl(4, LOOP_SET_FD, 3 [pid 6135] write(3, "1000", 4 [pid 5073] close(3 [pid 6135] <... write resumed>) = 4 [pid 5073] <... close resumed>) = 0 [pid 6135] close(3 [pid 6131] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6135] <... close resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6135] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6135] memfd_create("syzkaller", 0) = 3 [pid 6135] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6134] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6133] <... memfd_create resumed>) = 3 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6136 [pid 6134] <... openat resumed>) = 3 [pid 6135] <... mmap resumed>) = 0x7f0356e00000 [pid 6133] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6131] <... open resumed>) = 5 [pid 6135] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6134] write(3, "1000", 4 [pid 6133] <... mmap resumed>) = 0x7f0356e00000 [pid 6132] <... ioctl resumed>) = 0 [pid 6131] ftruncate(5, 0./strace-static-x86_64: Process 6136 attached [pid 6134] <... write resumed>) = 4 [pid 6133] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6132] close(3 [pid 6131] <... ftruncate resumed>) = 0 [pid 6134] close(3 [pid 6136] set_robust_list(0x55556e32a660, 24) = 0 [pid 6134] <... close resumed>) = 0 [pid 6133] <... write resumed>) = 524288 [pid 6132] <... close resumed>) = 0 [pid 6131] exit_group(0 [pid 6136] chdir("./172" [pid 6134] symlink("/dev/binderfs", "./binderfs" [pid 6132] close(4 [pid 6131] <... exit_group resumed>) = ? [pid 6136] <... chdir resumed>) = 0 [pid 6132] <... close resumed>) = 0 [pid 6136] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6136] setpgid(0, 0 [pid 6134] <... symlink resumed>) = 0 [pid 6132] mkdir("./bus", 0777 [pid 6136] <... setpgid resumed>) = 0 [pid 6132] <... mkdir resumed>) = 0 [pid 6136] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [ 181.022473][ T6132] loop5: detected capacity change from 0 to 1024 [pid 6132] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6136] <... openat resumed>) = 3 [pid 6134] memfd_create("syzkaller", 0 [pid 6131] +++ exited with 0 +++ [pid 6136] write(3, "1000", 4 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6131, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6136] <... write resumed>) = 4 [pid 6136] close(3) = 0 [pid 5077] umount2("./173", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6136] symlink("/dev/binderfs", "./binderfs" [pid 6134] <... memfd_create resumed>) = 3 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6136] <... symlink resumed>) = 0 [pid 6134] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6133] munmap(0x7f0356e00000, 138412032 [pid 5077] openat(AT_FDCWD, "./173", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6136] memfd_create("syzkaller", 0 [pid 6134] <... mmap resumed>) = 0x7f0356e00000 [pid 6133] <... munmap resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5077] newfstatat(3, "", [pid 6136] <... memfd_create resumed>) = 3 [pid 6135] <... write resumed>) = 524288 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6136] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6135] munmap(0x7f0356e00000, 138412032 [pid 5077] getdents64(3, [pid 6136] <... mmap resumed>) = 0x7f0356e00000 [pid 6135] <... munmap resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] umount2("./173/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6135] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6133] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6135] <... openat resumed>) = 4 [pid 6134] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6132] <... mount resumed>) = 0 [pid 6133] <... openat resumed>) = 4 [pid 6132] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6133] ioctl(4, LOOP_SET_FD, 3 [pid 6132] <... openat resumed>) = 3 [pid 6136] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6135] ioctl(4, LOOP_SET_FD, 3 [pid 6132] chdir("./bus") = 0 [pid 6132] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6132] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6136] <... write resumed>) = 524288 [pid 6132] <... symlink resumed>) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 6134] <... write resumed>) = 524288 [pid 5077] umount2("./173/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6133] <... ioctl resumed>) = 0 [pid 6132] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./173/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6136] munmap(0x7f0356e00000, 138412032 [pid 6135] <... ioctl resumed>) = 0 [pid 5077] umount2("./173/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6136] <... munmap resumed>) = 0 [pid 6135] close(3 [pid 6133] close(3 [pid 6132] <... creat resumed>) = 4 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6133] <... close resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./173/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6136] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6135] <... close resumed>) = 0 [pid 6133] close(4 [pid 6132] rename("./bus", "./file2" [pid 5077] <... openat resumed>) = 4 [pid 6136] <... openat resumed>) = 4 [pid 6135] close(4 [pid 6133] <... close resumed>) = 0 [pid 5077] newfstatat(4, "", [pid 6136] ioctl(4, LOOP_SET_FD, 3 [pid 6135] <... close resumed>) = 0 [pid 6133] mkdir("./bus", 0777 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6134] munmap(0x7f0356e00000, 138412032 [pid 6132] <... rename resumed>) = -1 EEXIST (File exists) [pid 6133] <... mkdir resumed>) = 0 [pid 6133] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6135] mkdir("./bus", 0777 [pid 5077] getdents64(4, [pid 6135] <... mkdir resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] close(4) = 0 [pid 5077] rmdir("./173/bus") = 0 [pid 6135] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5077] umount2("./173/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6134] <... munmap resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./173/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6135] <... mount resumed>) = 0 [pid 6134] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6133] <... mount resumed>) = 0 [pid 6132] memfd_create("syzkaller", 0 [pid 5077] unlink("./173/binderfs" [pid 6135] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6133] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5077] <... unlink resumed>) = 0 [pid 6135] <... openat resumed>) = 3 [pid 6133] <... openat resumed>) = 3 [pid 6135] chdir("./bus" [pid 6133] chdir("./bus" [pid 5077] getdents64(3, [pid 6135] <... chdir resumed>) = 0 [pid 6133] <... chdir resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6135] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6133] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5077] close(3 [pid 6136] <... ioctl resumed>) = 0 [pid 6135] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6133] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... close resumed>) = 0 [pid 6136] close(3 [pid 6135] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6133] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5077] rmdir("./173" [pid 6136] <... close resumed>) = 0 [pid 6135] <... symlink resumed>) = 0 [pid 6134] <... openat resumed>) = 4 [pid 6133] <... symlink resumed>) = 0 [pid 6132] <... memfd_create resumed>) = 5 [pid 5077] <... rmdir resumed>) = 0 [pid 6136] close(4 [ 181.114317][ T6133] loop3: detected capacity change from 0 to 1024 [ 181.117794][ T6135] loop2: detected capacity change from 0 to 1024 [ 181.154179][ T6136] loop0: detected capacity change from 0 to 1024 [pid 6135] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6134] ioctl(4, LOOP_SET_FD, 3 [pid 6133] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6132] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] mkdir("./174", 0777 [pid 6136] <... close resumed>) = 0 [pid 6132] <... mmap resumed>) = 0x7f0356e00000 [pid 6136] mkdir("./bus", 0777 [pid 6132] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... mkdir resumed>) = 0 [pid 6136] <... mkdir resumed>) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6134] <... ioctl resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 6134] close(3 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 6136] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6135] <... creat resumed>) = 4 [pid 6134] <... close resumed>) = 0 [pid 6134] close(4) = 0 [pid 6135] rename("./bus", "./file2" [pid 6134] mkdir("./bus", 0777 [pid 6133] <... creat resumed>) = 4 [pid 6134] <... mkdir resumed>) = 0 [pid 6133] rename("./bus", "./file2" [pid 6135] <... rename resumed>) = -1 EEXIST (File exists) [pid 6134] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6133] <... rename resumed>) = -1 EEXIST (File exists) [pid 6135] memfd_create("syzkaller", 0 [pid 6133] memfd_create("syzkaller", 0 [pid 6135] <... memfd_create resumed>) = 5 [pid 6133] <... memfd_create resumed>) = 5 [pid 6135] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6133] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6136] <... mount resumed>) = 0 [pid 6135] <... mmap resumed>) = 0x7f0356e00000 [pid 6133] <... mmap resumed>) = 0x7f0356e00000 [pid 6136] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6135] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6134] <... mount resumed>) = 0 [pid 6132] <... write resumed>) = 524288 [pid 6136] <... openat resumed>) = 3 [pid 6134] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6136] chdir("./bus") = 0 [pid 6134] <... openat resumed>) = 3 [pid 6136] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6134] chdir("./bus" [pid 6133] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6132] munmap(0x7f0356e00000, 138412032 [pid 6136] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6134] <... chdir resumed>) = 0 [pid 6132] <... munmap resumed>) = 0 [pid 6136] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6135] <... write resumed>) = 524288 [pid 6134] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6132] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] <... ioctl resumed>) = 0 [pid 6134] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6132] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 181.195076][ T6134] loop1: detected capacity change from 0 to 1024 [pid 6132] close(5 [pid 6133] <... write resumed>) = 524288 [pid 6134] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6136] <... symlink resumed>) = 0 [pid 6136] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6133] munmap(0x7f0356e00000, 138412032 [pid 6134] <... symlink resumed>) = 0 [pid 6134] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6132] <... close resumed>) = 0 [pid 6133] <... munmap resumed>) = 0 [pid 6132] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] close(3 [pid 6136] <... creat resumed>) = 4 [pid 6133] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5077] <... close resumed>) = 0 [pid 6136] rename("./bus", "./file2" [pid 6133] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6133] close(5 [pid 6134] <... creat resumed>) = 4 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6136] <... rename resumed>) = -1 EEXIST (File exists) [pid 6135] munmap(0x7f0356e00000, 138412032 [pid 6134] rename("./bus", "./file2" [pid 6133] <... close resumed>) = 0 [pid 6136] memfd_create("syzkaller", 0 [pid 6135] <... munmap resumed>) = 0 [pid 6132] <... open resumed>) = 5 [pid 6136] <... memfd_create resumed>) = 5 [pid 6135] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6136] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6135] <... openat resumed>) = -1 EBUSY (Device or resource busy) ./strace-static-x86_64: Process 6137 attached [pid 6136] <... mmap resumed>) = 0x7f0356e00000 [pid 6134] <... rename resumed>) = -1 EEXIST (File exists) [pid 6132] ftruncate(5, 0 [pid 6137] set_robust_list(0x55556e32a660, 24 [pid 6134] memfd_create("syzkaller", 0 [pid 6132] <... ftruncate resumed>) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6137 [pid 6137] <... set_robust_list resumed>) = 0 [pid 6132] exit_group(0 [pid 6137] chdir("./174" [pid 6135] close(5 [pid 6134] <... memfd_create resumed>) = 5 [pid 6132] <... exit_group resumed>) = ? [pid 6136] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6133] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6137] <... chdir resumed>) = 0 [pid 6135] <... close resumed>) = 0 [pid 6134] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6137] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6134] <... mmap resumed>) = 0x7f0356e00000 [pid 6137] <... prctl resumed>) = 0 [pid 6137] setpgid(0, 0) = 0 [pid 6133] <... open resumed>) = 5 [pid 6137] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6136] <... write resumed>) = 524288 [pid 6132] +++ exited with 0 +++ [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6132, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5078] umount2("./174", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6137] <... openat resumed>) = 3 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./174", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5078] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(3, [pid 6135] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6133] ftruncate(5, 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6135] <... open resumed>) = 5 [pid 6133] <... ftruncate resumed>) = 0 [pid 5078] umount2("./174/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6135] ftruncate(5, 0 [pid 6133] exit_group(0 [pid 6137] write(3, "1000", 4 [pid 6135] <... ftruncate resumed>) = 0 [pid 6133] <... exit_group resumed>) = ? [pid 6137] <... write resumed>) = 4 [pid 6135] exit_group(0 [pid 6137] close(3 [pid 6136] munmap(0x7f0356e00000, 138412032 [pid 6135] <... exit_group resumed>) = ? [pid 6134] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6133] +++ exited with 0 +++ [pid 6137] <... close resumed>) = 0 [pid 6136] <... munmap resumed>) = 0 [pid 6135] +++ exited with 0 +++ [pid 5078] <... umount2 resumed>) = 0 [pid 6137] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6133, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6135, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6136] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] umount2("./175", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./172", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6137] memfd_create("syzkaller", 0 [pid 6136] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6136] close(5 [pid 5078] umount2("./174/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "./172", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... openat resumed>) = 3 [pid 5078] newfstatat(AT_FDCWD, "./174/bus", [pid 5075] newfstatat(3, "", [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] umount2("./174/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] getdents64(3, [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] openat(AT_FDCWD, "./174/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] umount2("./172/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... openat resumed>) = 4 [pid 6137] <... memfd_create resumed>) = 3 [pid 5078] newfstatat(4, "", [pid 5076] openat(AT_FDCWD, "./175", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6137] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6136] <... close resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5076] newfstatat(3, "", [pid 6137] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] getdents64(4, [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(3, [pid 5078] getdents64(4, [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] umount2("./175/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] close(4) = 0 [pid 6134] <... write resumed>) = 524288 [pid 5078] rmdir("./174/bus") = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 6136] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] umount2("./174/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] newfstatat(AT_FDCWD, "./174/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6137] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6134] munmap(0x7f0356e00000, 138412032 [pid 5078] unlink("./174/binderfs") = 0 [pid 5078] getdents64(3, [pid 6134] <... munmap resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5078] close(3 [pid 5075] umount2("./172/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6136] <... open resumed>) = 5 [pid 5075] newfstatat(AT_FDCWD, "./172/bus", [pid 5078] rmdir("./174" [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6136] ftruncate(5, 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5075] umount2("./172/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6134] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6136] <... ftruncate resumed>) = 0 [pid 6134] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6134] close(5 [pid 5076] umount2("./175/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "./172/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] mkdir("./175", 0777 [pid 5075] <... openat resumed>) = 4 [pid 6136] exit_group(0 [pid 5078] <... mkdir resumed>) = 0 [pid 5075] newfstatat(4, "", [pid 6137] <... write resumed>) = 524288 [pid 6136] <... exit_group resumed>) = ? [pid 6134] <... close resumed>) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6137] munmap(0x7f0356e00000, 138412032 [pid 5078] <... openat resumed>) = 3 [pid 5075] getdents64(4, [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] newfstatat(AT_FDCWD, "./175/bus", [pid 6137] <... munmap resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./175/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./175/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, [pid 5075] getdents64(4, [pid 6136] +++ exited with 0 +++ [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6136, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5076] getdents64(4, [pid 5075] close(4 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] close(4) = 0 [pid 5075] <... close resumed>) = 0 [pid 5073] umount2("./172", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6137] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] rmdir("./175/bus" [pid 5075] rmdir("./172/bus" [pid 6137] <... openat resumed>) = 4 [pid 5076] <... rmdir resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6137] ioctl(4, LOOP_SET_FD, 3 [pid 5076] umount2("./175/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... rmdir resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./172", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] umount2("./172/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6137] <... ioctl resumed>) = 0 [pid 6134] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... openat resumed>) = 3 [pid 6137] close(3 [pid 5076] newfstatat(AT_FDCWD, "./175/binderfs", [pid 5075] newfstatat(AT_FDCWD, "./172/binderfs", [pid 5073] newfstatat(3, "", [pid 6137] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6137] close(4 [pid 6134] <... open resumed>) = 5 [pid 5076] unlink("./175/binderfs" [pid 5075] unlink("./172/binderfs" [pid 5073] getdents64(3, [pid 6137] <... close resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6137] mkdir("./bus", 0777 [pid 6134] ftruncate(5, 0 [pid 5076] <... unlink resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5073] umount2("./172/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6137] <... mkdir resumed>) = 0 [pid 6134] <... ftruncate resumed>) = 0 [pid 5076] getdents64(3, [pid 5075] getdents64(3, [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3 [pid 6137] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6134] exit_group(0 [pid 5076] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 6137] <... mount resumed>) = 0 [pid 6134] <... exit_group resumed>) = ? [pid 5076] rmdir("./175" [pid 5073] <... umount2 resumed>) = 0 [pid 6137] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5076] <... rmdir resumed>) = 0 [pid 5073] umount2("./172/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6137] chdir("./bus" [pid 5076] mkdir("./176", 0777 [pid 6137] <... chdir resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6137] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6134] +++ exited with 0 +++ [pid 5078] <... ioctl resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] rmdir("./172" [pid 5073] newfstatat(AT_FDCWD, "./172/bus", [pid 6137] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6134, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] close(3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] mkdir("./173", 0777 [pid 5074] umount2("./172", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./172/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6137] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] <... close resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6137] <... symlink resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] openat(AT_FDCWD, "./172", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5073] openat(AT_FDCWD, "./172/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6137] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5073] <... openat resumed>) = 4 [pid 5074] <... openat resumed>) = 3 [pid 5073] newfstatat(4, "", [pid 5074] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, [ 181.422678][ T6137] loop4: detected capacity change from 0 to 1024 [pid 5073] getdents64(4, [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, [pid 6137] <... creat resumed>) = 4 [pid 5074] umount2("./172/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 ./strace-static-x86_64: Process 6138 attached [pid 6137] rename("./bus", "./file2" [pid 5074] <... umount2 resumed>) = 0 [pid 6138] set_robust_list(0x55556e32a660, 24 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6138 [pid 6138] <... set_robust_list resumed>) = 0 [pid 6137] <... rename resumed>) = -1 EEXIST (File exists) [pid 6138] chdir("./175" [pid 6137] memfd_create("syzkaller", 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5073] rmdir("./172/bus" [pid 6138] <... chdir resumed>) = 0 [pid 6137] <... memfd_create resumed>) = 5 [pid 5074] umount2("./172/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6137] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... rmdir resumed>) = 0 [pid 6138] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5073] umount2("./172/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6138] <... prctl resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6138] setpgid(0, 0 [pid 5073] newfstatat(AT_FDCWD, "./172/binderfs", [pid 6138] <... setpgid resumed>) = 0 [pid 6137] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] close(3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... close resumed>) = 0 [pid 5073] unlink("./172/binderfs" [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6138] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6137] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] newfstatat(AT_FDCWD, "./172/bus", [pid 5073] <... unlink resumed>) = 0 [pid 6138] <... openat resumed>) = 3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] getdents64(3, [pid 5074] umount2("./172/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6138] write(3, "1000", 4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6138] <... write resumed>) = 4 [pid 5074] openat(AT_FDCWD, "./172/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6139 attached [pid 6138] close(3 [pid 6137] <... write resumed>) = 524288 [pid 5075] <... ioctl resumed>) = 0 [pid 5074] <... openat resumed>) = 4 [pid 5073] close(3 [pid 6139] set_robust_list(0x55556e32a660, 24 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6139 [pid 5075] close(3 [pid 6139] <... set_robust_list resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5073] rmdir("./172" [pid 6138] <... close resumed>) = 0 [pid 5074] newfstatat(4, "", [pid 6138] symlink("/dev/binderfs", "./binderfs" [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 6139] chdir("./176" [pid 6138] <... symlink resumed>) = 0 [pid 6137] munmap(0x7f0356e00000, 138412032 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] getdents64(4, [pid 6139] <... chdir resumed>) = 0 [pid 6138] memfd_create("syzkaller", 0 [pid 6137] <... munmap resumed>) = 0 [pid 5073] mkdir("./173", 0777./strace-static-x86_64: Process 6140 attached [pid 6139] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6138] <... memfd_create resumed>) = 3 [pid 6137] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6140 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] <... mkdir resumed>) = 0 [pid 6140] set_robust_list(0x55556e32a660, 24 [pid 6139] <... prctl resumed>) = 0 [pid 6138] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6137] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] getdents64(4, [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6140] <... set_robust_list resumed>) = 0 [pid 6139] setpgid(0, 0 [pid 6138] <... mmap resumed>) = 0x7f0356e00000 [pid 6137] close(5 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] <... openat resumed>) = 3 [pid 6139] <... setpgid resumed>) = 0 [pid 5074] close(4 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6139] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] <... close resumed>) = 0 [pid 6139] <... openat resumed>) = 3 [pid 6139] write(3, "1000", 4) = 4 [pid 6139] close(3) = 0 [pid 6139] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6139] memfd_create("syzkaller", 0) = 3 [pid 6139] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6137] <... close resumed>) = 0 [pid 5074] rmdir("./172/bus" [pid 6139] <... mmap resumed>) = 0x7f0356e00000 [pid 6140] chdir("./173" [pid 6139] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6138] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... rmdir resumed>) = 0 [pid 6140] <... chdir resumed>) = 0 [pid 6140] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] umount2("./172/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6140] <... prctl resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6140] setpgid(0, 0) = 0 [pid 5074] newfstatat(AT_FDCWD, "./172/binderfs", [pid 6140] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6140] <... openat resumed>) = 3 [pid 5074] unlink("./172/binderfs") = 0 [pid 5074] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6140] write(3, "1000", 4 [pid 5074] close(3) = 0 [pid 6140] <... write resumed>) = 4 [pid 5074] rmdir("./172" [pid 6140] close(3) = 0 [pid 6140] symlink("/dev/binderfs", "./binderfs" [pid 5074] <... rmdir resumed>) = 0 [pid 6140] <... symlink resumed>) = 0 [pid 6140] memfd_create("syzkaller", 0 [pid 5074] mkdir("./173", 0777) = 0 [pid 6137] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6140] <... memfd_create resumed>) = 3 [pid 6140] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6137] <... open resumed>) = 5 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6139] <... write resumed>) = 524288 [pid 6137] ftruncate(5, 0 [pid 5073] <... ioctl resumed>) = 0 [pid 6137] <... ftruncate resumed>) = 0 [pid 6137] exit_group(0) = ? [pid 6140] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6137] +++ exited with 0 +++ [pid 6138] <... write resumed>) = 524288 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6137, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5074] <... openat resumed>) = 3 [pid 6138] munmap(0x7f0356e00000, 138412032 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5077] umount2("./174", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./174", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5077] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6139] munmap(0x7f0356e00000, 138412032 [pid 6138] <... munmap resumed>) = 0 [pid 5077] getdents64(3, [pid 6139] <... munmap resumed>) = 0 [pid 6138] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] close(3 [pid 6138] <... openat resumed>) = 4 [pid 5077] umount2("./174/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6138] ioctl(4, LOOP_SET_FD, 3 [pid 5073] <... close resumed>) = 0 [pid 6139] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6139] <... openat resumed>) = 4 [pid 5077] <... umount2 resumed>) = 0 [pid 5077] umount2("./174/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6140] <... write resumed>) = 524288 [pid 6138] <... ioctl resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./174/bus", [pid 6140] munmap(0x7f0356e00000, 138412032 [pid 6138] close(3 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6141 ./strace-static-x86_64: Process 6141 attached [pid 6139] ioctl(4, LOOP_SET_FD, 3 [pid 5077] umount2("./174/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6141] set_robust_list(0x55556e32a660, 24 [pid 6140] <... munmap resumed>) = 0 [pid 6138] <... close resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6141] <... set_robust_list resumed>) = 0 [pid 6138] close(4 [pid 5077] openat(AT_FDCWD, "./174/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6138] <... close resumed>) = 0 [pid 6138] mkdir("./bus", 0777 [pid 6141] chdir("./173" [pid 5077] <... openat resumed>) = 4 [pid 6141] <... chdir resumed>) = 0 [pid 5077] newfstatat(4, "", [pid 6141] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6141] <... prctl resumed>) = 0 [pid 5077] getdents64(4, [pid 6140] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6138] <... mkdir resumed>) = 0 [pid 6141] setpgid(0, 0 [pid 6140] <... openat resumed>) = 4 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6140] ioctl(4, LOOP_SET_FD, 3 [pid 6141] <... setpgid resumed>) = 0 [pid 5077] getdents64(4, [pid 6141] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6141] <... openat resumed>) = 3 [pid 6138] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5077] close(4) = 0 [pid 6141] write(3, "1000", 4 [pid 5077] rmdir("./174/bus" [pid 5074] <... ioctl resumed>) = 0 [pid 6141] <... write resumed>) = 4 [pid 5077] <... rmdir resumed>) = 0 [pid 6141] close(3 [pid 5077] umount2("./174/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6141] <... close resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6141] symlink("/dev/binderfs", "./binderfs" [pid 5077] newfstatat(AT_FDCWD, "./174/binderfs", [pid 6141] <... symlink resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6141] memfd_create("syzkaller", 0 [pid 6139] <... ioctl resumed>) = 0 [pid 5077] unlink("./174/binderfs" [pid 6141] <... memfd_create resumed>) = 3 [pid 6139] close(3 [pid 5077] <... unlink resumed>) = 0 [pid 6141] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6139] <... close resumed>) = 0 [pid 5077] getdents64(3, [pid 6141] <... mmap resumed>) = 0x7f0356e00000 [pid 6139] close(4 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6141] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6139] <... close resumed>) = 0 [pid 6138] <... mount resumed>) = 0 [pid 5077] close(3) = 0 [pid 6139] mkdir("./bus", 0777 [pid 5077] rmdir("./174" [pid 6139] <... mkdir resumed>) = 0 [pid 6138] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5077] <... rmdir resumed>) = 0 [pid 5074] close(3 [pid 6138] <... openat resumed>) = 3 [pid 6139] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5074] <... close resumed>) = 0 [pid 6138] chdir("./bus" [pid 5077] mkdir("./175", 0777) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6138] <... chdir resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] ioctl(3, LOOP_CLR_FD [pid 6138] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6142 ./strace-static-x86_64: Process 6142 attached [pid 6142] set_robust_list(0x55556e32a660, 24 [pid 6138] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6138] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6142] <... set_robust_list resumed>) = 0 [pid 6139] <... mount resumed>) = 0 [pid 6142] chdir("./173" [pid 6139] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6142] <... chdir resumed>) = 0 [pid 6139] chdir("./bus" [pid 6142] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6139] <... chdir resumed>) = 0 [pid 6139] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6142] <... prctl resumed>) = 0 [pid 6139] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6142] setpgid(0, 0 [pid 6140] <... ioctl resumed>) = 0 [pid 6139] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6142] <... setpgid resumed>) = 0 [pid 6141] <... write resumed>) = 524288 [pid 6140] close(3 [pid 6139] <... symlink resumed>) = 0 [pid 6142] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6140] <... close resumed>) = 0 [pid 6138] <... symlink resumed>) = 0 [ 181.616838][ T6138] loop5: detected capacity change from 0 to 1024 [ 181.629254][ T6139] loop3: detected capacity change from 0 to 1024 [ 181.655184][ T6140] loop2: detected capacity change from 0 to 1024 [pid 6140] close(4 [pid 6138] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6140] <... close resumed>) = 0 [pid 6139] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6140] mkdir("./bus", 0777 [pid 6142] <... openat resumed>) = 3 [pid 6141] munmap(0x7f0356e00000, 138412032) = 0 [pid 6142] write(3, "1000", 4) = 4 [pid 6140] <... mkdir resumed>) = 0 [pid 6139] <... creat resumed>) = 4 [pid 6142] close(3 [pid 6141] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6139] rename("./bus", "./file2" [pid 6142] <... close resumed>) = 0 [pid 6141] <... openat resumed>) = 4 [pid 6140] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6138] <... creat resumed>) = 4 [pid 6142] symlink("/dev/binderfs", "./binderfs" [pid 6141] ioctl(4, LOOP_SET_FD, 3 [pid 6139] <... rename resumed>) = -1 EEXIST (File exists) [pid 6142] <... symlink resumed>) = 0 [pid 6138] rename("./bus", "./file2" [pid 6142] memfd_create("syzkaller", 0 [pid 6138] <... rename resumed>) = -1 EEXIST (File exists) [pid 6139] memfd_create("syzkaller", 0) = 5 [pid 6142] <... memfd_create resumed>) = 3 [pid 6139] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6138] memfd_create("syzkaller", 0 [pid 5077] <... ioctl resumed>) = 0 [pid 6142] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6138] <... memfd_create resumed>) = 5 [pid 6142] <... mmap resumed>) = 0x7f0356e00000 [pid 6142] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6139] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6138] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6141] <... ioctl resumed>) = 0 [pid 6138] <... mmap resumed>) = 0x7f0356e00000 [pid 6141] close(3 [pid 5077] close(3 [pid 6141] <... close resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 6141] close(4 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6141] <... close resumed>) = 0 [pid 6140] <... mount resumed>) = 0 [pid 6139] <... write resumed>) = 524288 [pid 6141] mkdir("./bus", 0777) = 0 [pid 6142] <... write resumed>) = 524288 [pid 6141] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6140] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6138] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288./strace-static-x86_64: Process 6143 attached [pid 6143] set_robust_list(0x55556e32a660, 24) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6143 [pid 6143] chdir("./175") = 0 [pid 6143] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6143] setpgid(0, 0 [pid 6140] <... openat resumed>) = 3 [pid 6143] <... setpgid resumed>) = 0 [pid 6140] chdir("./bus") = 0 [ 181.705856][ T6141] loop0: detected capacity change from 0 to 1024 [pid 6143] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6140] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6143] <... openat resumed>) = 3 [pid 6141] <... mount resumed>) = 0 [pid 6140] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6139] munmap(0x7f0356e00000, 138412032 [pid 6141] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6141] chdir("./bus") = 0 [pid 6141] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6140] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6141] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6143] write(3, "1000", 4 [pid 6141] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6139] <... munmap resumed>) = 0 [pid 6143] <... write resumed>) = 4 [pid 6142] munmap(0x7f0356e00000, 138412032 [pid 6141] <... symlink resumed>) = 0 [pid 6139] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6143] close(3 [pid 6142] <... munmap resumed>) = 0 [pid 6141] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6139] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6143] <... close resumed>) = 0 [pid 6141] <... creat resumed>) = 4 [pid 6139] close(5 [pid 6143] symlink("/dev/binderfs", "./binderfs" [pid 6141] rename("./bus", "./file2" [pid 6140] <... symlink resumed>) = 0 [pid 6143] <... symlink resumed>) = 0 [pid 6142] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6141] <... rename resumed>) = -1 EEXIST (File exists) [pid 6143] memfd_create("syzkaller", 0 [pid 6142] <... openat resumed>) = 4 [pid 6143] <... memfd_create resumed>) = 3 [pid 6142] ioctl(4, LOOP_SET_FD, 3 [pid 6143] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6141] memfd_create("syzkaller", 0 [pid 6143] <... mmap resumed>) = 0x7f0356e00000 [pid 6142] <... ioctl resumed>) = 0 [pid 6141] <... memfd_create resumed>) = 5 [pid 6140] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6138] <... write resumed>) = 524288 [pid 6138] munmap(0x7f0356e00000, 138412032) = 0 [pid 6141] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6139] <... close resumed>) = 0 [pid 6138] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6141] <... mmap resumed>) = 0x7f0356e00000 [pid 6139] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6138] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6138] close(5 [pid 6141] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6140] <... creat resumed>) = 4 [pid 6138] <... close resumed>) = 0 [pid 6143] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6140] rename("./bus", "./file2" [pid 6139] <... open resumed>) = 5 [pid 6139] ftruncate(5, 0) = 0 [pid 6139] exit_group(0 [pid 6142] close(3 [pid 6141] <... write resumed>) = 524288 [pid 6140] <... rename resumed>) = -1 EEXIST (File exists) [pid 6139] <... exit_group resumed>) = ? [pid 6138] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6142] <... close resumed>) = 0 [pid 6142] close(4 [pid 6139] +++ exited with 0 +++ [pid 6140] memfd_create("syzkaller", 0 [pid 6142] <... close resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6139, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6140] <... memfd_create resumed>) = 5 [pid 6140] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6142] mkdir("./bus", 0777) = 0 [pid 6140] <... mmap resumed>) = 0x7f0356e00000 [pid 6138] <... open resumed>) = 5 [pid 6142] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6143] <... write resumed>) = 524288 [pid 6143] munmap(0x7f0356e00000, 138412032 [pid 5076] umount2("./176", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6143] <... munmap resumed>) = 0 [pid 6138] ftruncate(5, 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6138] <... ftruncate resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./176", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6142] <... mount resumed>) = 0 [pid 6140] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6138] exit_group(0 [pid 5076] newfstatat(3, "", [pid 6143] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6142] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [ 181.786682][ T6142] loop1: detected capacity change from 0 to 1024 [pid 6141] munmap(0x7f0356e00000, 138412032 [pid 6143] <... openat resumed>) = 4 [pid 6142] <... openat resumed>) = 3 [pid 6141] <... munmap resumed>) = 0 [pid 6138] <... exit_group resumed>) = ? [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6142] chdir("./bus" [pid 6143] ioctl(4, LOOP_SET_FD, 3 [pid 6142] <... chdir resumed>) = 0 [pid 5076] getdents64(3, [pid 6138] +++ exited with 0 +++ [pid 6141] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6138, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6141] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] restart_syscall(<... resuming interrupted clone ...> [pid 6141] close(5 [pid 5078] <... restart_syscall resumed>) = 0 [pid 6142] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6142] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] umount2("./175", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./175", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] umount2("./176/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6142] <... symlink resumed>) = 0 [pid 6141] <... close resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5078] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6141] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] umount2("./175/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6142] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6143] <... ioctl resumed>) = 0 [pid 6143] close(3 [pid 6140] <... write resumed>) = 524288 [pid 6143] <... close resumed>) = 0 [pid 6142] <... creat resumed>) = 4 [pid 6141] <... open resumed>) = 5 [pid 6140] munmap(0x7f0356e00000, 138412032 [pid 5078] <... umount2 resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 6143] close(4) = 0 [pid 6142] rename("./bus", "./file2" [pid 6141] ftruncate(5, 0 [pid 6143] mkdir("./bus", 0777) = 0 [pid 6142] <... rename resumed>) = -1 EEXIST (File exists) [pid 6141] <... ftruncate resumed>) = 0 [pid 6140] <... munmap resumed>) = 0 [pid 5076] umount2("./176/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6140] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 181.844323][ T6143] loop4: detected capacity change from 0 to 1024 [pid 5076] newfstatat(AT_FDCWD, "./176/bus", [pid 6143] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6142] memfd_create("syzkaller", 0 [pid 6141] exit_group(0 [pid 6140] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] umount2("./175/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6142] <... memfd_create resumed>) = 5 [pid 6141] <... exit_group resumed>) = ? [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6142] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6141] +++ exited with 0 +++ [pid 6140] close(5 [pid 5078] newfstatat(AT_FDCWD, "./175/bus", [pid 5076] umount2("./176/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6142] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6142] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] umount2("./175/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] openat(AT_FDCWD, "./176/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6141, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5076] <... openat resumed>) = 4 [pid 5078] openat(AT_FDCWD, "./175/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] newfstatat(4, "", [pid 5073] umount2("./173", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... openat resumed>) = 4 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] newfstatat(4, "", [pid 5076] getdents64(4, [pid 5073] openat(AT_FDCWD, "./173", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] <... openat resumed>) = 3 [pid 6143] <... mount resumed>) = 0 [pid 5078] getdents64(4, [pid 5076] getdents64(4, [pid 5073] newfstatat(3, "", [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5078] getdents64(4, [pid 5076] close(4 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6143] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] <... close resumed>) = 0 [pid 6143] <... openat resumed>) = 3 [pid 6142] <... write resumed>) = 524288 [pid 6140] <... close resumed>) = 0 [pid 5078] close(4 [pid 5073] getdents64(3, [pid 5078] <... close resumed>) = 0 [pid 6143] chdir("./bus" [pid 6140] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] rmdir("./175/bus" [pid 5076] rmdir("./176/bus" [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6143] <... chdir resumed>) = 0 [pid 6142] munmap(0x7f0356e00000, 138412032 [pid 5078] <... rmdir resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5073] umount2("./173/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6143] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] umount2("./176/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6143] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6143] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5076] newfstatat(AT_FDCWD, "./176/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6143] <... symlink resumed>) = 0 [pid 5078] umount2("./175/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] unlink("./176/binderfs" [pid 6143] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6142] <... munmap resumed>) = 0 [pid 6140] <... open resumed>) = 5 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] newfstatat(AT_FDCWD, "./175/binderfs", [pid 6142] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6140] ftruncate(5, 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 6142] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6140] <... ftruncate resumed>) = 0 [pid 5078] unlink("./175/binderfs" [pid 5076] getdents64(3, [pid 6142] close(5 [pid 6140] exit_group(0 [pid 5078] <... unlink resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5078] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5078] close(3) = 0 [pid 5078] rmdir("./175") = 0 [pid 5078] mkdir("./176", 0777) = 0 [pid 6142] <... close resumed>) = 0 [pid 5076] close(3 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 6140] <... exit_group resumed>) = ? [pid 6140] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6140, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5076] <... close resumed>) = 0 [pid 5075] umount2("./173", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./173", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5075] newfstatat(3, "", [pid 6143] <... creat resumed>) = 4 [pid 5076] rmdir("./176" [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, [pid 6143] rename("./bus", "./file2" [pid 6142] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] <... umount2 resumed>) = 0 [pid 5075] umount2("./173/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./173/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6143] <... rename resumed>) = -1 EEXIST (File exists) [pid 5076] mkdir("./177", 0777 [pid 5075] <... umount2 resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6143] memfd_create("syzkaller", 0 [pid 5073] newfstatat(AT_FDCWD, "./173/bus", [pid 6143] <... memfd_create resumed>) = 5 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6143] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... mkdir resumed>) = 0 [pid 6143] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] umount2("./173/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./173/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6142] <... open resumed>) = 5 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6142] ftruncate(5, 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6142] <... ftruncate resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] newfstatat(AT_FDCWD, "./173/bus", [pid 5073] openat(AT_FDCWD, "./173/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... openat resumed>) = 4 [pid 6142] exit_group(0 [pid 5073] newfstatat(4, "", [pid 6142] <... exit_group resumed>) = ? [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] umount2("./173/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6143] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] getdents64(4, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./173/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] close(4 [pid 5075] <... openat resumed>) = 4 [pid 5073] <... close resumed>) = 0 [pid 5075] newfstatat(4, "", [pid 5073] rmdir("./173/bus" [pid 6142] +++ exited with 0 +++ [pid 5078] <... ioctl resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6142, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5073] <... rmdir resumed>) = 0 [pid 6143] <... write resumed>) = 524288 [pid 5078] close(3 [pid 5076] <... ioctl resumed>) = 0 [pid 5075] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] umount2("./173", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... close resumed>) = 0 [pid 5075] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] close(3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... close resumed>) = 0 [pid 5075] close(4 [pid 5074] openat(AT_FDCWD, "./173", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6144 attached [pid 6143] munmap(0x7f0356e00000, 138412032 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... close resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5073] umount2("./173/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6143] <... munmap resumed>) = 0 [pid 5075] rmdir("./173/bus") = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./173/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./173/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] unlink("./173/binderfs" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... unlink resumed>) = 0 [pid 6143] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5075] newfstatat(AT_FDCWD, "./173/binderfs", [pid 5073] getdents64(3, [pid 6143] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6143] close(5 [pid 5075] unlink("./173/binderfs" [pid 5073] close(3 [pid 5075] <... unlink resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 6144] set_robust_list(0x55556e32a660, 24 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6144 [pid 5075] getdents64(3, [pid 5074] newfstatat(3, "", [pid 5073] rmdir("./173" [pid 6144] <... set_robust_list resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 6144] chdir("./176" [pid 5075] close(3 [pid 5073] mkdir("./174", 0777 [pid 5074] getdents64(3, [pid 6144] <... chdir resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] <... mkdir resumed>) = 0 [pid 6144] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] rmdir("./173" [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR./strace-static-x86_64: Process 6145 attached [pid 6144] <... prctl resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] umount2("./173/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... openat resumed>) = 3 [pid 5075] mkdir("./174", 0777 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6143] <... close resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6145 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6145] set_robust_list(0x55556e32a660, 24 [pid 6144] setpgid(0, 0 [pid 6145] <... set_robust_list resumed>) = 0 [pid 6144] <... setpgid resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 6143] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6145] chdir("./177" [pid 6144] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6145] <... chdir resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6145] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6144] write(3, "1000", 4) = 4 [pid 6145] <... prctl resumed>) = 0 [pid 6144] close(3 [pid 6145] setpgid(0, 0 [pid 6144] <... close resumed>) = 0 [pid 6143] <... open resumed>) = 5 [pid 6145] <... setpgid resumed>) = 0 [pid 6144] symlink("/dev/binderfs", "./binderfs" [pid 6143] ftruncate(5, 0 [pid 5074] <... umount2 resumed>) = 0 [pid 6144] <... symlink resumed>) = 0 [pid 6143] <... ftruncate resumed>) = 0 [pid 6144] memfd_create("syzkaller", 0 [pid 6143] exit_group(0) = ? [pid 5074] umount2("./173/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6145] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6143] +++ exited with 0 +++ [pid 5074] newfstatat(AT_FDCWD, "./173/bus", [pid 6144] <... memfd_create resumed>) = 3 [pid 6145] <... openat resumed>) = 3 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6143, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6144] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] umount2("./175", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6144] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./173/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] openat(AT_FDCWD, "./175", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... openat resumed>) = 3 [pid 5074] openat(AT_FDCWD, "./173/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] newfstatat(3, "", [pid 5074] <... openat resumed>) = 4 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] newfstatat(4, "", [pid 5077] getdents64(3, [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] getdents64(4, [pid 6144] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] umount2("./175/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6145] write(3, "1000", 4 [pid 5074] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6145] <... write resumed>) = 4 [pid 5074] close(4 [pid 6145] close(3) = 0 [pid 5074] <... close resumed>) = 0 [pid 6145] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6144] <... write resumed>) = 524288 [pid 5074] rmdir("./173/bus" [pid 5077] <... umount2 resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 5074] umount2("./173/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./173/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./173/binderfs") = 0 [pid 5074] getdents64(3, [pid 6145] memfd_create("syzkaller", 0 [pid 6144] munmap(0x7f0356e00000, 138412032 [pid 5075] <... ioctl resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 5074] rmdir("./173") = 0 [pid 5077] umount2("./175/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] mkdir("./174", 0777 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... mkdir resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./175/bus", [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] umount2("./175/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... openat resumed>) = 3 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./175/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5077] newfstatat(4, "", [pid 5075] close(3 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... close resumed>) = 0 [pid 5073] close(3 [pid 6145] <... memfd_create resumed>) = 3 [pid 6144] <... munmap resumed>) = 0 [pid 5077] getdents64(4, [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... close resumed>) = 0 [pid 6145] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6144] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6145] <... mmap resumed>) = 0x7f0356e00000 [pid 6144] <... openat resumed>) = 4 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6144] ioctl(4, LOOP_SET_FD, 3 [pid 5077] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] close(4) = 0 [pid 5077] rmdir("./175/bus" [pid 6145] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6146 attached [pid 5077] umount2("./175/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6146 [pid 6146] set_robust_list(0x55556e32a660, 24 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6146] <... set_robust_list resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6147 [pid 6146] chdir("./174" [pid 5077] newfstatat(AT_FDCWD, "./175/binderfs", [pid 6146] <... chdir resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6146] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5077] unlink("./175/binderfs" [pid 6146] <... prctl resumed>) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 6146] setpgid(0, 0) = 0 [pid 5077] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6146] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5077] close(3) = 0 [pid 5077] rmdir("./175" [pid 6146] write(3, "1000", 4 [pid 5077] <... rmdir resumed>) = 0 [pid 6146] <... write resumed>) = 4 [pid 5077] mkdir("./176", 0777 [pid 6146] close(3) = 0 [pid 6146] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6146] memfd_create("syzkaller", 0 [pid 5077] <... mkdir resumed>) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6146] <... memfd_create resumed>) = 3 [pid 5077] <... openat resumed>) = 3 [pid 6146] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 6146] <... mmap resumed>) = 0x7f0356e00000 ./strace-static-x86_64: Process 6147 attached [pid 6147] set_robust_list(0x55556e32a660, 24 [pid 6145] <... write resumed>) = 524288 [pid 6147] <... set_robust_list resumed>) = 0 [pid 6146] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6147] chdir("./174" [pid 6145] munmap(0x7f0356e00000, 138412032 [pid 6144] <... ioctl resumed>) = 0 [pid 6147] <... chdir resumed>) = 0 [pid 6145] <... munmap resumed>) = 0 [pid 6144] close(3 [pid 5074] <... ioctl resumed>) = 0 [pid 6147] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6144] <... close resumed>) = 0 [pid 6147] <... prctl resumed>) = 0 [pid 6144] close(4 [pid 6147] setpgid(0, 0 [pid 6144] <... close resumed>) = 0 [pid 5074] close(3 [pid 6147] <... setpgid resumed>) = 0 [pid 6144] mkdir("./bus", 0777 [pid 6147] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6145] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6144] <... mkdir resumed>) = 0 [pid 6147] <... openat resumed>) = 3 [pid 6144] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5074] <... close resumed>) = 0 [pid 6147] write(3, "1000", 4 [pid 6145] <... openat resumed>) = 4 [pid 6144] <... mount resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6147] <... write resumed>) = 4 [ 182.172134][ T6144] loop5: detected capacity change from 0 to 1024 [pid 6144] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6147] close(3 [pid 6145] ioctl(4, LOOP_SET_FD, 3 [pid 6144] <... openat resumed>) = 3 [pid 6147] <... close resumed>) = 0 [pid 5077] <... ioctl resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6148 [pid 6147] symlink("/dev/binderfs", "./binderfs") = 0 ./strace-static-x86_64: Process 6148 attached [pid 6147] memfd_create("syzkaller", 0 [pid 6144] chdir("./bus" [pid 5077] close(3 [pid 6148] set_robust_list(0x55556e32a660, 24 [pid 6144] <... chdir resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6147] <... memfd_create resumed>) = 3 [pid 6144] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6147] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6144] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6147] <... mmap resumed>) = 0x7f0356e00000 [pid 6144] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6148] <... set_robust_list resumed>) = 0 [pid 6144] <... symlink resumed>) = 0 [pid 6148] chdir("./174" [pid 6147] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6144] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6146] <... write resumed>) = 524288 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6149 [pid 6146] munmap(0x7f0356e00000, 138412032./strace-static-x86_64: Process 6149 attached [pid 6148] <... chdir resumed>) = 0 [pid 6146] <... munmap resumed>) = 0 [pid 6144] <... creat resumed>) = 4 [pid 6148] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6149] set_robust_list(0x55556e32a660, 24 [pid 6148] setpgid(0, 0 [pid 6146] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6145] <... ioctl resumed>) = 0 [pid 6144] rename("./bus", "./file2" [pid 6149] <... set_robust_list resumed>) = 0 [pid 6148] <... setpgid resumed>) = 0 [pid 6146] <... openat resumed>) = 4 [pid 6145] close(3 [pid 6144] <... rename resumed>) = -1 EEXIST (File exists) [pid 6146] ioctl(4, LOOP_SET_FD, 3 [pid 6149] chdir("./176" [pid 6148] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6145] <... close resumed>) = 0 [pid 6144] memfd_create("syzkaller", 0 [pid 6149] <... chdir resumed>) = 0 [pid 6145] close(4 [pid 6144] <... memfd_create resumed>) = 5 [pid 6149] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6147] <... write resumed>) = 524288 [pid 6145] <... close resumed>) = 0 [pid 6144] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6149] <... prctl resumed>) = 0 [pid 6145] mkdir("./bus", 0777 [pid 6144] <... mmap resumed>) = 0x7f0356e00000 [pid 6149] setpgid(0, 0 [pid 6145] <... mkdir resumed>) = 0 [pid 6149] <... setpgid resumed>) = 0 [pid 6148] <... openat resumed>) = 3 [pid 6147] munmap(0x7f0356e00000, 138412032 [pid 6145] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6144] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6149] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6147] <... munmap resumed>) = 0 [pid 6149] <... openat resumed>) = 3 [pid 6148] write(3, "1000", 4 [pid 6146] <... ioctl resumed>) = 0 [pid 6148] <... write resumed>) = 4 [pid 6146] close(3 [pid 6148] close(3 [pid 6146] <... close resumed>) = 0 [pid 6148] <... close resumed>) = 0 [pid 6146] close(4 [pid 6148] symlink("/dev/binderfs", "./binderfs" [pid 6146] <... close resumed>) = 0 [pid 6149] write(3, "1000", 4 [pid 6148] <... symlink resumed>) = 0 [pid 6147] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6146] mkdir("./bus", 0777 [pid 6145] <... mount resumed>) = 0 [pid 6149] <... write resumed>) = 4 [ 182.230989][ T6145] loop3: detected capacity change from 0 to 1024 [ 182.267815][ T6146] loop2: detected capacity change from 0 to 1024 [pid 6147] <... openat resumed>) = 4 [pid 6145] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6149] close(3) = 0 [pid 6145] <... openat resumed>) = 3 [pid 6146] <... mkdir resumed>) = 0 [pid 6149] symlink("/dev/binderfs", "./binderfs" [pid 6147] ioctl(4, LOOP_SET_FD, 3 [pid 6145] chdir("./bus" [pid 6148] memfd_create("syzkaller", 0 [pid 6146] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6149] <... symlink resumed>) = 0 [pid 6148] <... memfd_create resumed>) = 3 [pid 6147] <... ioctl resumed>) = 0 [pid 6145] <... chdir resumed>) = 0 [pid 6148] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6149] memfd_create("syzkaller", 0 [pid 6148] <... mmap resumed>) = 0x7f0356e00000 [pid 6147] close(3 [pid 6146] <... mount resumed>) = 0 [pid 6145] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6144] <... write resumed>) = 524288 [pid 6149] <... memfd_create resumed>) = 3 [pid 6148] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6147] <... close resumed>) = 0 [pid 6146] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6145] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6149] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6148] <... write resumed>) = 524288 [pid 6147] close(4 [pid 6146] <... openat resumed>) = 3 [pid 6145] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6144] munmap(0x7f0356e00000, 138412032 [pid 6146] chdir("./bus" [pid 6147] <... close resumed>) = 0 [pid 6146] <... chdir resumed>) = 0 [pid 6147] mkdir("./bus", 0777 [pid 6145] <... symlink resumed>) = 0 [pid 6145] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6144] <... munmap resumed>) = 0 [pid 6147] <... mkdir resumed>) = 0 [pid 6146] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6149] <... mmap resumed>) = 0x7f0356e00000 [pid 6146] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6146] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6149] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6147] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6146] <... symlink resumed>) = 0 [ 182.308933][ T6147] loop0: detected capacity change from 0 to 1024 [pid 6144] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6145] <... creat resumed>) = 4 [pid 6148] munmap(0x7f0356e00000, 138412032 [pid 6145] rename("./bus", "./file2" [pid 6148] <... munmap resumed>) = 0 [pid 6146] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6144] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6145] <... rename resumed>) = -1 EEXIST (File exists) [pid 6144] close(5 [pid 6148] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6145] memfd_create("syzkaller", 0 [pid 6144] <... close resumed>) = 0 [pid 6148] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6147] <... mount resumed>) = 0 [pid 6146] <... creat resumed>) = 4 [pid 6145] <... memfd_create resumed>) = 5 [pid 6148] close(3 [pid 6145] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6148] <... close resumed>) = 0 [pid 6147] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6145] <... mmap resumed>) = 0x7f0356e00000 [pid 6144] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6148] close(4) = 0 [pid 6148] mkdir("./bus", 0777 [pid 6149] <... write resumed>) = 524288 [pid 6148] <... mkdir resumed>) = 0 [pid 6148] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6147] <... openat resumed>) = 3 [pid 6147] chdir("./bus" [pid 6149] munmap(0x7f0356e00000, 138412032 [pid 6147] <... chdir resumed>) = 0 [pid 6144] <... open resumed>) = 5 [pid 6149] <... munmap resumed>) = 0 [pid 6147] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6144] ftruncate(5, 0 [pid 6148] <... mount resumed>) = 0 [pid 6145] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6148] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6147] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6148] <... openat resumed>) = 3 [pid 6147] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6144] <... ftruncate resumed>) = 0 [pid 6148] chdir("./bus") = 0 [pid 6149] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6148] openat(AT_FDCWD, "/dev/loop1", O_RDWR [ 182.386685][ T6148] loop1: detected capacity change from 0 to 1024 [pid 6144] exit_group(0 [pid 6149] <... openat resumed>) = 4 [pid 6148] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6147] <... symlink resumed>) = 0 [pid 6148] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6148] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6146] rename("./bus", "./file2" [pid 6149] ioctl(4, LOOP_SET_FD, 3 [pid 6144] <... exit_group resumed>) = ? [pid 6148] <... creat resumed>) = 4 [pid 6146] <... rename resumed>) = -1 EEXIST (File exists) [pid 6148] rename("./bus", "./file2" [pid 6146] memfd_create("syzkaller", 0 [pid 6148] <... rename resumed>) = -1 EEXIST (File exists) [pid 6146] <... memfd_create resumed>) = 5 [pid 6144] +++ exited with 0 +++ [pid 6148] memfd_create("syzkaller", 0 [pid 6146] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6148] <... memfd_create resumed>) = 5 [pid 6146] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6144, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6148] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] restart_syscall(<... resuming interrupted clone ...> [pid 6148] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... restart_syscall resumed>) = 0 [pid 6148] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6147] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6146] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] umount2("./176", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6149] <... ioctl resumed>) = 0 [pid 6148] <... write resumed>) = 524288 [pid 6147] <... creat resumed>) = 4 [pid 6145] <... write resumed>) = 524288 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./176", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6147] rename("./bus", "./file2" [pid 6145] munmap(0x7f0356e00000, 138412032 [pid 5078] <... openat resumed>) = 3 [pid 6149] close(3 [pid 6148] munmap(0x7f0356e00000, 138412032 [pid 6147] <... rename resumed>) = -1 EEXIST (File exists) [pid 6145] <... munmap resumed>) = 0 [pid 5078] newfstatat(3, "", [pid 6149] <... close resumed>) = 0 [pid 6148] <... munmap resumed>) = 0 [pid 6147] memfd_create("syzkaller", 0 [pid 6149] close(4 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6149] <... close resumed>) = 0 [pid 5078] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6149] mkdir("./bus", 0777 [pid 6148] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5078] umount2("./176/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6149] <... mkdir resumed>) = 0 [pid 6148] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6148] close(5 [pid 6147] <... memfd_create resumed>) = 5 [ 182.431336][ T6149] loop4: detected capacity change from 0 to 1024 [pid 6145] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6147] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6146] <... write resumed>) = 524288 [pid 6145] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... umount2 resumed>) = 0 [pid 6149] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6145] close(5 [pid 6147] <... mmap resumed>) = 0x7f0356e00000 [pid 6148] <... close resumed>) = 0 [pid 6146] munmap(0x7f0356e00000, 138412032) = 0 [pid 6147] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6146] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6145] <... close resumed>) = 0 [pid 5078] umount2("./176/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6146] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6146] close(5 [pid 6145] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] newfstatat(AT_FDCWD, "./176/bus", [pid 6149] <... mount resumed>) = 0 [pid 6148] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6146] <... close resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6149] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6149] chdir("./bus" [pid 5078] umount2("./176/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6149] <... chdir resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6149] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] openat(AT_FDCWD, "./176/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6149] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... openat resumed>) = 4 [pid 5078] newfstatat(4, "", [pid 6149] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6148] <... open resumed>) = 5 [pid 6149] <... symlink resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6149] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] getdents64(4, [pid 6148] ftruncate(5, 0 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6148] <... ftruncate resumed>) = 0 [pid 6147] <... write resumed>) = 524288 [pid 6145] <... open resumed>) = 5 [pid 5078] close(4 [pid 6148] exit_group(0 [pid 6146] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] <... close resumed>) = 0 [pid 6149] <... creat resumed>) = 4 [pid 6148] <... exit_group resumed>) = ? [pid 5078] rmdir("./176/bus" [pid 6149] rename("./bus", "./file2" [pid 6148] +++ exited with 0 +++ [pid 6146] <... open resumed>) = 5 [pid 5078] <... rmdir resumed>) = 0 [pid 6147] munmap(0x7f0356e00000, 138412032 [pid 6146] ftruncate(5, 0 [pid 6145] ftruncate(5, 0 [pid 5078] umount2("./176/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6148, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6149] <... rename resumed>) = -1 EEXIST (File exists) [pid 6147] <... munmap resumed>) = 0 [pid 6146] <... ftruncate resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6149] memfd_create("syzkaller", 0 [pid 6147] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6145] <... ftruncate resumed>) = 0 [pid 5078] newfstatat(AT_FDCWD, "./176/binderfs", [pid 6149] <... memfd_create resumed>) = 5 [pid 6147] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6146] exit_group(0 [pid 6145] exit_group(0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6149] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6147] close(5 [pid 6146] <... exit_group resumed>) = ? [pid 6145] <... exit_group resumed>) = ? [pid 5078] unlink("./176/binderfs" [pid 6149] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... unlink resumed>) = 0 [pid 6146] +++ exited with 0 +++ [pid 6149] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6147] <... close resumed>) = 0 [pid 6145] +++ exited with 0 +++ [pid 5078] getdents64(3, [pid 5074] umount2("./174", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6146, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./174", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] umount2("./174", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... openat resumed>) = 3 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6145, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(3, "", [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5075] openat(AT_FDCWD, "./174", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] <... restart_syscall resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] close(3 [pid 5075] newfstatat(3, "", [pid 5074] getdents64(3, [pid 5078] <... close resumed>) = 0 [pid 6147] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] rmdir("./176") = 0 [pid 5075] getdents64(3, [pid 5074] umount2("./174/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] mkdir("./177", 0777 [pid 5076] umount2("./177", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./174/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... mkdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./177", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6149] <... write resumed>) = 524288 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5076] <... openat resumed>) = 3 [pid 5074] <... umount2 resumed>) = 0 [pid 6147] <... open resumed>) = 5 [pid 5076] newfstatat(3, "", [pid 6147] ftruncate(5, 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5076] getdents64(3, [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6147] <... ftruncate resumed>) = 0 [pid 5074] umount2("./174/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6147] exit_group(0 [pid 5076] umount2("./177/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./174/bus", [pid 6149] munmap(0x7f0356e00000, 138412032 [pid 6147] <... exit_group resumed>) = ? [pid 5076] <... umount2 resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5075] umount2("./174/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6149] <... munmap resumed>) = 0 [pid 6147] +++ exited with 0 +++ [pid 5076] umount2("./177/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] newfstatat(AT_FDCWD, "./174/bus", [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./174/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6147, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6149] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] newfstatat(AT_FDCWD, "./177/bus", [pid 5075] umount2("./174/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./174/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6149] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] openat(AT_FDCWD, "./174/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... openat resumed>) = 4 [pid 5073] umount2("./174", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6149] close(5 [pid 5076] umount2("./177/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... openat resumed>) = 4 [pid 5074] newfstatat(4, "", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(4, "", [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] openat(AT_FDCWD, "./174", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6149] <... close resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./177/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, [pid 5073] <... openat resumed>) = 3 [pid 5075] getdents64(4, [pid 5076] <... openat resumed>) = 4 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] newfstatat(3, "", [pid 6149] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, [pid 5076] newfstatat(4, "", [pid 5075] getdents64(4, [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] close(4 [pid 5073] getdents64(3, [pid 5076] getdents64(4, [pid 5075] close(4 [pid 5074] <... close resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] <... close resumed>) = 0 [pid 5074] rmdir("./174/bus" [pid 5073] umount2("./174/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6149] <... open resumed>) = 5 [pid 5076] getdents64(4, [pid 5075] rmdir("./174/bus" [pid 6149] ftruncate(5, 0 [pid 5075] <... rmdir resumed>) = 0 [pid 6149] <... ftruncate resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] umount2("./174/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... rmdir resumed>) = 0 [pid 5076] close(4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... close resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./174/binderfs", [pid 6149] exit_group(0 [pid 5076] rmdir("./177/bus" [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6149] <... exit_group resumed>) = ? [pid 5075] unlink("./174/binderfs" [pid 5074] umount2("./174/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./174/binderfs", [pid 5073] umount2("./174/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./174/binderfs" [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... unlink resumed>) = 0 [pid 5074] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3 [pid 5073] newfstatat(AT_FDCWD, "./174/bus", [pid 5074] <... close resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] rmdir("./174") = 0 [pid 5073] umount2("./174/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./174/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... ioctl resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5073] <... openat resumed>) = 4 [pid 5074] mkdir("./175", 0777 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, [pid 6149] +++ exited with 0 +++ [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] close(4 [pid 5074] <... mkdir resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] rmdir("./174/bus" [pid 5074] <... openat resumed>) = 3 [pid 5073] <... rmdir resumed>) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] umount2("./174/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] close(3 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6149, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5076] <... rmdir resumed>) = 0 [pid 5075] getdents64(3, [pid 5077] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5077] umount2("./176", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./176", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5077] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] umount2("./176/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./177/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] close(3 [pid 5073] newfstatat(AT_FDCWD, "./174/binderfs", [pid 5076] newfstatat(AT_FDCWD, "./177/binderfs", [pid 5075] <... close resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6150 [pid 5075] rmdir("./174" [pid 5076] unlink("./177/binderfs" [pid 5073] unlink("./174/binderfs"./strace-static-x86_64: Process 6150 attached [pid 5077] <... umount2 resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 6150] set_robust_list(0x55556e32a660, 24 [pid 5076] getdents64(3, [pid 5073] getdents64(3, [pid 5075] mkdir("./175", 0777 [pid 6150] <... set_robust_list resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6150] chdir("./177") = 0 [pid 6150] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] <... mkdir resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3 [pid 6150] <... prctl resumed>) = 0 [pid 5076] close(3 [pid 5073] <... close resumed>) = 0 [pid 6150] setpgid(0, 0 [pid 5076] <... close resumed>) = 0 [pid 5073] rmdir("./174" [pid 5076] rmdir("./177" [pid 6150] <... setpgid resumed>) = 0 [pid 6150] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5073] <... rmdir resumed>) = 0 [pid 5077] umount2("./176/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... rmdir resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5073] mkdir("./175", 0777 [pid 6150] <... openat resumed>) = 3 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] mkdir("./178", 0777 [pid 5075] <... openat resumed>) = 3 [pid 5073] <... mkdir resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./176/bus", [pid 6150] write(3, "1000", 4 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6150] <... write resumed>) = 4 [pid 5077] umount2("./176/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6150] close(3 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6150] <... close resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./176/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6150] symlink("/dev/binderfs", "./binderfs" [pid 5077] <... openat resumed>) = 4 [pid 6150] <... symlink resumed>) = 0 [pid 5077] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] getdents64(4, [pid 6150] memfd_create("syzkaller", 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6150] <... memfd_create resumed>) = 3 [pid 5073] <... openat resumed>) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6150] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] getdents64(4, [pid 5076] <... openat resumed>) = 3 [pid 5074] <... ioctl resumed>) = 0 [pid 6150] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6150] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5074] close(3 [pid 5077] close(4) = 0 [pid 5077] rmdir("./176/bus") = 0 [pid 5074] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] umount2("./176/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 6151 attached [pid 6150] <... write resumed>) = 524288 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6151] set_robust_list(0x55556e32a660, 24 [pid 5077] newfstatat(AT_FDCWD, "./176/binderfs", [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6151 [pid 6151] <... set_robust_list resumed>) = 0 [pid 6150] munmap(0x7f0356e00000, 138412032 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] close(3 [pid 6151] chdir("./175" [pid 6150] <... munmap resumed>) = 0 [pid 5077] unlink("./176/binderfs" [pid 5075] <... close resumed>) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] getdents64(3, [pid 6150] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6150] <... openat resumed>) = 4 [pid 5077] close(3) = 0 [pid 5077] rmdir("./176") = 0 [pid 6150] ioctl(4, LOOP_SET_FD, 3 [pid 6151] <... chdir resumed>) = 0 [pid 6151] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5077] mkdir("./177", 0777 [pid 6151] <... prctl resumed>) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 6151] setpgid(0, 0 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6152 ./strace-static-x86_64: Process 6152 attached [pid 6151] <... setpgid resumed>) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 6151] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5076] <... ioctl resumed>) = 0 [pid 6151] write(3, "1000", 4) = 4 [pid 6151] close(3) = 0 [pid 6151] symlink("/dev/binderfs", "./binderfs" [pid 6150] <... ioctl resumed>) = 0 [pid 6152] set_robust_list(0x55556e32a660, 24 [pid 6151] <... symlink resumed>) = 0 [pid 6150] close(3 [pid 6152] <... set_robust_list resumed>) = 0 [pid 6151] memfd_create("syzkaller", 0 [pid 6150] <... close resumed>) = 0 [pid 5076] close(3 [pid 5073] <... ioctl resumed>) = 0 [pid 6151] <... memfd_create resumed>) = 3 [pid 6150] close(4 [pid 5076] <... close resumed>) = 0 [pid 6152] chdir("./175" [pid 6151] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6152] <... chdir resumed>) = 0 [pid 6150] <... close resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6152] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5077] <... ioctl resumed>) = 0 [pid 6152] <... prctl resumed>) = 0 [pid 6150] mkdir("./bus", 0777) = 0 [pid 5073] close(3 [pid 6150] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6152] setpgid(0, 0 [pid 5073] <... close resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6152] <... setpgid resumed>) = 0 [pid 6151] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6152] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6150] <... mount resumed>) = 0 ./strace-static-x86_64: Process 6154 attached [pid 6152] write(3, "1000", 4 [pid 6150] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5077] close(3 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6153 ./strace-static-x86_64: Process 6153 attached [pid 6154] set_robust_list(0x55556e32a660, 24 [pid 6152] <... write resumed>) = 4 [pid 6150] <... openat resumed>) = 3 [pid 5077] <... close resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6154 [pid 6154] <... set_robust_list resumed>) = 0 [pid 6153] set_robust_list(0x55556e32a660, 24 [pid 6152] close(3 [pid 6150] chdir("./bus" [pid 6154] chdir("./175" [pid 6153] <... set_robust_list resumed>) = 0 [pid 6152] <... close resumed>) = 0 [pid 6150] <... chdir resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6152] symlink("/dev/binderfs", "./binderfs" [pid 6154] <... chdir resumed>) = 0 [ 182.724432][ T6150] loop5: detected capacity change from 0 to 1024 [pid 6150] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6154] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6153] chdir("./178" [pid 6152] <... symlink resumed>) = 0 [pid 6150] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6154] <... prctl resumed>) = 0 [pid 6154] setpgid(0, 0 [pid 6150] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"./strace-static-x86_64: Process 6155 attached [pid 6154] <... setpgid resumed>) = 0 [pid 6155] set_robust_list(0x55556e32a660, 24 [pid 6154] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6155 [pid 6155] <... set_robust_list resumed>) = 0 [pid 6155] chdir("./177" [pid 6154] <... openat resumed>) = 3 [pid 6152] memfd_create("syzkaller", 0 [pid 6155] <... chdir resumed>) = 0 [pid 6154] write(3, "1000", 4 [pid 6150] <... symlink resumed>) = 0 [pid 6155] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6154] <... write resumed>) = 4 [pid 6155] setpgid(0, 0 [pid 6154] close(3 [pid 6150] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6154] <... close resumed>) = 0 [pid 6155] <... setpgid resumed>) = 0 [pid 6154] symlink("/dev/binderfs", "./binderfs" [pid 6155] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6154] <... symlink resumed>) = 0 [pid 6153] <... chdir resumed>) = 0 [pid 6152] <... memfd_create resumed>) = 3 [pid 6155] <... openat resumed>) = 3 [pid 6150] <... creat resumed>) = 4 [pid 6155] write(3, "1000", 4 [pid 6154] memfd_create("syzkaller", 0 [pid 6153] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6152] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6150] rename("./bus", "./file2" [pid 6155] <... write resumed>) = 4 [pid 6153] <... prctl resumed>) = 0 [pid 6152] <... mmap resumed>) = 0x7f0356e00000 [pid 6151] <... write resumed>) = 524288 [pid 6155] close(3 [pid 6154] <... memfd_create resumed>) = 3 [pid 6151] munmap(0x7f0356e00000, 138412032 [pid 6155] <... close resumed>) = 0 [pid 6154] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6155] symlink("/dev/binderfs", "./binderfs" [pid 6154] <... mmap resumed>) = 0x7f0356e00000 [pid 6153] setpgid(0, 0 [pid 6152] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6151] <... munmap resumed>) = 0 [pid 6153] <... setpgid resumed>) = 0 [pid 6151] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6150] <... rename resumed>) = -1 EEXIST (File exists) [pid 6153] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6151] <... openat resumed>) = 4 [pid 6153] <... openat resumed>) = 3 [pid 6151] ioctl(4, LOOP_SET_FD, 3 [pid 6150] memfd_create("syzkaller", 0 [pid 6154] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6150] <... memfd_create resumed>) = 5 [pid 6155] <... symlink resumed>) = 0 [pid 6150] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6155] memfd_create("syzkaller", 0 [pid 6150] <... mmap resumed>) = 0x7f0356e00000 [pid 6155] <... memfd_create resumed>) = 3 [pid 6151] <... ioctl resumed>) = 0 [pid 6150] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6155] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6153] write(3, "1000", 4 [pid 6152] <... write resumed>) = 524288 [pid 6153] <... write resumed>) = 4 [pid 6152] munmap(0x7f0356e00000, 138412032 [pid 6153] close(3) = 0 [pid 6152] <... munmap resumed>) = 0 [pid 6151] close(3 [pid 6155] <... mmap resumed>) = 0x7f0356e00000 [pid 6153] symlink("/dev/binderfs", "./binderfs" [pid 6152] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6151] <... close resumed>) = 0 [pid 6155] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6153] <... symlink resumed>) = 0 [pid 6152] <... openat resumed>) = 4 [pid 6151] close(4 [pid 6153] memfd_create("syzkaller", 0 [pid 6152] ioctl(4, LOOP_SET_FD, 3 [pid 6151] <... close resumed>) = 0 [pid 6153] <... memfd_create resumed>) = 3 [pid 6151] mkdir("./bus", 0777 [pid 6150] <... write resumed>) = 524288 [pid 6154] <... write resumed>) = 524288 [pid 6151] <... mkdir resumed>) = 0 [pid 6155] <... write resumed>) = 524288 [pid 6154] munmap(0x7f0356e00000, 138412032 [pid 6153] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6151] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6154] <... munmap resumed>) = 0 [pid 6153] <... mmap resumed>) = 0x7f0356e00000 [pid 6154] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6150] munmap(0x7f0356e00000, 138412032 [pid 6154] <... openat resumed>) = 4 [pid 6150] <... munmap resumed>) = 0 [ 182.829033][ T6151] loop1: detected capacity change from 0 to 1024 [ 182.857632][ T6152] loop2: detected capacity change from 0 to 1024 [pid 6153] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6154] ioctl(4, LOOP_SET_FD, 3 [pid 6150] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6155] munmap(0x7f0356e00000, 138412032 [pid 6150] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6155] <... munmap resumed>) = 0 [pid 6150] close(5 [pid 6152] <... ioctl resumed>) = 0 [pid 6151] <... mount resumed>) = 0 [pid 6150] <... close resumed>) = 0 [pid 6155] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6155] ioctl(4, LOOP_SET_FD, 3 [pid 6151] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6152] close(3 [pid 6151] <... openat resumed>) = 3 [pid 6152] <... close resumed>) = 0 [pid 6151] chdir("./bus" [pid 6150] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6152] close(4 [pid 6151] <... chdir resumed>) = 0 [pid 6152] <... close resumed>) = 0 [pid 6151] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6152] mkdir("./bus", 0777 [pid 6154] <... ioctl resumed>) = 0 [pid 6153] <... write resumed>) = 524288 [pid 6151] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6150] <... open resumed>) = 5 [pid 6152] <... mkdir resumed>) = 0 [pid 6153] munmap(0x7f0356e00000, 138412032 [pid 6152] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6151] <... symlink resumed>) = 0 [pid 6154] close(3 [pid 6150] ftruncate(5, 0 [pid 6151] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6154] <... close resumed>) = 0 [pid 6150] <... ftruncate resumed>) = 0 [pid 6154] close(4 [pid 6153] <... munmap resumed>) = 0 [pid 6150] exit_group(0 [pid 6155] <... ioctl resumed>) = 0 [pid 6154] <... close resumed>) = 0 [pid 6153] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6150] <... exit_group resumed>) = ? [pid 6155] close(3 [ 182.884656][ T6154] loop0: detected capacity change from 0 to 1024 [ 182.904000][ T6155] loop4: detected capacity change from 0 to 1024 [pid 6154] mkdir("./bus", 0777 [pid 6153] <... openat resumed>) = 4 [pid 6151] <... creat resumed>) = 4 [pid 6154] <... mkdir resumed>) = 0 [pid 6153] ioctl(4, LOOP_SET_FD, 3 [pid 6151] rename("./bus", "./file2" [pid 6155] <... close resumed>) = 0 [pid 6150] +++ exited with 0 +++ [pid 6155] close(4 [pid 6154] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6155] <... close resumed>) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6150, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6155] mkdir("./bus", 0777 [pid 5078] umount2("./177", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6155] <... mkdir resumed>) = 0 [pid 6155] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5078] openat(AT_FDCWD, "./177", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6153] <... ioctl resumed>) = 0 [pid 6152] <... mount resumed>) = 0 [pid 6151] <... rename resumed>) = -1 EEXIST (File exists) [pid 6152] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6151] memfd_create("syzkaller", 0 [pid 6153] close(3 [pid 6152] <... openat resumed>) = 3 [pid 6151] <... memfd_create resumed>) = 5 [pid 5078] <... openat resumed>) = 3 [pid 6154] <... mount resumed>) = 0 [pid 6153] <... close resumed>) = 0 [pid 6152] chdir("./bus" [pid 6154] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6153] close(4 [pid 6152] <... chdir resumed>) = 0 [pid 6151] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6154] <... openat resumed>) = 3 [pid 6153] <... close resumed>) = 0 [pid 6152] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6151] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] newfstatat(3, "", [pid 6155] <... mount resumed>) = 0 [pid 6154] chdir("./bus" [pid 6153] mkdir("./bus", 0777 [pid 6152] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6151] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6155] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6154] <... chdir resumed>) = 0 [pid 6153] <... mkdir resumed>) = 0 [pid 6152] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] getdents64(3, [pid 6155] <... openat resumed>) = 3 [pid 6154] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6151] <... write resumed>) = 524288 [ 182.935604][ T6153] loop3: detected capacity change from 0 to 1024 [pid 6151] munmap(0x7f0356e00000, 138412032 [pid 6155] chdir("./bus" [pid 6154] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6153] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] umount2("./177/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6155] <... chdir resumed>) = 0 [pid 6154] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6152] <... symlink resumed>) = 0 [pid 6151] <... munmap resumed>) = 0 [pid 5078] <... umount2 resumed>) = 0 [pid 6151] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6155] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6151] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6151] close(5 [pid 6155] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6154] <... symlink resumed>) = 0 [pid 6152] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6151] <... close resumed>) = 0 [pid 6155] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6151] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6155] <... symlink resumed>) = 0 [pid 6154] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6153] <... mount resumed>) = 0 [pid 6152] <... creat resumed>) = 4 [pid 6155] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6154] <... creat resumed>) = 4 [pid 6153] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6152] rename("./bus", "./file2" [pid 5078] umount2("./177/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6154] rename("./bus", "./file2" [pid 6153] <... openat resumed>) = 3 [pid 6151] <... open resumed>) = 5 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6153] chdir("./bus" [pid 6152] <... rename resumed>) = -1 EEXIST (File exists) [pid 6151] ftruncate(5, 0 [pid 5078] newfstatat(AT_FDCWD, "./177/bus", [pid 6153] <... chdir resumed>) = 0 [pid 6152] memfd_create("syzkaller", 0 [pid 6151] <... ftruncate resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6155] <... creat resumed>) = 4 [pid 6154] <... rename resumed>) = -1 EEXIST (File exists) [pid 6153] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6151] exit_group(0 [pid 5078] umount2("./177/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6155] rename("./bus", "./file2" [pid 6154] memfd_create("syzkaller", 0 [pid 6153] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6152] <... memfd_create resumed>) = 5 [pid 6151] <... exit_group resumed>) = ? [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6154] <... memfd_create resumed>) = 5 [pid 6152] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6154] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6153] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6152] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] openat(AT_FDCWD, "./177/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6154] <... mmap resumed>) = 0x7f0356e00000 [pid 6152] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... openat resumed>) = 4 [pid 6155] <... rename resumed>) = -1 EEXIST (File exists) [pid 6154] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6153] <... symlink resumed>) = 0 [pid 5078] newfstatat(4, "", [pid 6155] memfd_create("syzkaller", 0 [pid 6151] +++ exited with 0 +++ [pid 6155] <... memfd_create resumed>) = 5 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6151, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6155] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6153] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, [pid 5074] umount2("./175", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5078] close(4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... close resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./175", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6155] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] rmdir("./177/bus" [pid 6155] <... write resumed>) = 524288 [pid 5078] <... rmdir resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 6153] <... creat resumed>) = 4 [pid 6153] rename("./bus", "./file2" [pid 5074] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] umount2("./177/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./175/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6153] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] newfstatat(AT_FDCWD, "./177/binderfs", [pid 6153] memfd_create("syzkaller", 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6153] <... memfd_create resumed>) = 5 [pid 5078] unlink("./177/binderfs") = 0 [pid 6153] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] getdents64(3, [pid 6153] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6154] <... write resumed>) = 524288 [pid 5078] close(3 [pid 6155] munmap(0x7f0356e00000, 138412032 [pid 6154] munmap(0x7f0356e00000, 138412032 [pid 6152] <... write resumed>) = 524288 [pid 5078] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 6153] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] rmdir("./177" [pid 6155] <... munmap resumed>) = 0 [pid 6154] <... munmap resumed>) = 0 [pid 6152] munmap(0x7f0356e00000, 138412032 [pid 5078] <... rmdir resumed>) = 0 [pid 5074] umount2("./175/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6155] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6154] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6153] <... write resumed>) = 524288 [pid 6152] <... munmap resumed>) = 0 [pid 5078] mkdir("./178", 0777 [pid 6153] munmap(0x7f0356e00000, 138412032 [pid 6155] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6154] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6152] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6155] close(5 [pid 6154] close(5 [pid 6152] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] newfstatat(AT_FDCWD, "./175/bus", [pid 6153] <... munmap resumed>) = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 6152] close(5 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6153] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6153] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... openat resumed>) = 3 [pid 6153] close(5 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 6152] <... close resumed>) = 0 [pid 6152] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5074] umount2("./175/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./175/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5074] newfstatat(4, "", [pid 6154] <... close resumed>) = 0 [pid 6154] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6155] <... close resumed>) = 0 [pid 6154] <... open resumed>) = 5 [pid 6153] <... close resumed>) = 0 [pid 6152] <... open resumed>) = 5 [pid 5074] getdents64(4, [pid 6155] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6154] ftruncate(5, 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, [pid 6154] <... ftruncate resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6154] exit_group(0 [pid 6153] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5074] close(4 [pid 6155] <... open resumed>) = 5 [pid 6154] <... exit_group resumed>) = ? [pid 5074] <... close resumed>) = 0 [pid 6155] ftruncate(5, 0 [pid 6153] <... open resumed>) = 5 [pid 6152] ftruncate(5, 0 [pid 5074] rmdir("./175/bus" [pid 6155] <... ftruncate resumed>) = 0 [pid 6153] ftruncate(5, 0 [pid 6155] exit_group(0 [pid 6153] <... ftruncate resumed>) = 0 [pid 6152] <... ftruncate resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 6155] <... exit_group resumed>) = ? [pid 5074] umount2("./175/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6153] exit_group(0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./175/binderfs", [pid 6153] <... exit_group resumed>) = ? [pid 6155] +++ exited with 0 +++ [pid 6154] +++ exited with 0 +++ [pid 6153] +++ exited with 0 +++ [pid 6152] exit_group(0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6152] <... exit_group resumed>) = ? [pid 5078] <... ioctl resumed>) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6154, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6153, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6155, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 5076] <... restart_syscall resumed>) = 0 [pid 5077] <... restart_syscall resumed>) = 0 [pid 5074] unlink("./175/binderfs" [pid 5077] umount2("./177", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./178", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./175", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./177", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] openat(AT_FDCWD, "./178", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] openat(AT_FDCWD, "./175", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... openat resumed>) = 3 [pid 5076] <... openat resumed>) = 3 [pid 5074] <... unlink resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5076] newfstatat(3, "", [pid 5073] newfstatat(3, "", [pid 5077] newfstatat(3, "", [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] getdents64(3, [pid 5076] getdents64(3, [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] getdents64(3, [pid 6152] +++ exited with 0 +++ [pid 5078] close(3 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] close(3 [pid 5078] <... close resumed>) = 0 [pid 5077] umount2("./177/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./178/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6152, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5074] <... close resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] rmdir("./175" [pid 5073] umount2("./175/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... rmdir resumed>) = 0 [pid 5074] mkdir("./176", 0777) = 0 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6156 ./strace-static-x86_64: Process 6156 attached [pid 5076] <... umount2 resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6156] set_robust_list(0x55556e32a660, 24 [pid 5074] <... openat resumed>) = 3 [pid 6156] <... set_robust_list resumed>) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5076] umount2("./178/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./175", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] <... umount2 resumed>) = 0 [pid 6156] chdir("./178" [pid 5077] umount2("./177/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./175", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5075] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6156] <... chdir resumed>) = 0 [pid 6156] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(3, [pid 6156] <... prctl resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./177/bus", [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6156] setpgid(0, 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] newfstatat(AT_FDCWD, "./178/bus", [pid 5075] umount2("./175/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6156] <... setpgid resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6156] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5077] umount2("./177/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./178/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = 0 [pid 5073] umount2("./175/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6156] <... openat resumed>) = 3 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./175/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6156] write(3, "1000", 4 [pid 5077] openat(AT_FDCWD, "./177/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] openat(AT_FDCWD, "./178/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6156] <... write resumed>) = 4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./175/bus", [pid 6156] close(3 [pid 5077] <... openat resumed>) = 4 [pid 5076] <... openat resumed>) = 4 [pid 5075] newfstatat(AT_FDCWD, "./175/bus", [pid 6156] <... close resumed>) = 0 [pid 5077] newfstatat(4, "", [pid 5076] newfstatat(4, "", [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6156] symlink("/dev/binderfs", "./binderfs" [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] umount2("./175/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6156] <... symlink resumed>) = 0 [pid 5077] getdents64(4, [pid 5076] getdents64(4, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./175/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] openat(AT_FDCWD, "./175/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] getdents64(4, [pid 5076] getdents64(4, [pid 5075] <... openat resumed>) = 4 [pid 5073] openat(AT_FDCWD, "./175/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6156] memfd_create("syzkaller", 0 [pid 5077] close(4 [pid 5076] close(4 [pid 5075] newfstatat(4, "", [pid 5073] <... openat resumed>) = 4 [pid 6156] <... memfd_create resumed>) = 3 [pid 5077] <... close resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6156] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] rmdir("./177/bus" [pid 5076] rmdir("./178/bus" [pid 5075] getdents64(4, [pid 5073] newfstatat(4, "", [pid 6156] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] umount2("./177/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] getdents64(4, [pid 5077] newfstatat(AT_FDCWD, "./177/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] getdents64(4, [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] unlink("./177/binderfs" [pid 5076] umount2("./178/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6156] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... unlink resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] getdents64(4, [pid 5076] newfstatat(AT_FDCWD, "./178/binderfs", [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] close(4 [pid 5077] getdents64(3, [pid 5076] unlink("./178/binderfs" [pid 5073] <... close resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5073] rmdir("./175/bus" [pid 5077] close(3 [pid 5076] getdents64(3, [pid 5073] <... rmdir resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5073] umount2("./175/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] rmdir("./177" [pid 5076] close(3 [pid 5075] close(4 [pid 5074] close(3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... rmdir resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./175/binderfs", [pid 5076] rmdir("./178" [pid 5075] rmdir("./175/bus" [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 6157 attached [pid 5077] mkdir("./178", 0777 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5073] unlink("./175/binderfs" [pid 6157] set_robust_list(0x55556e32a660, 24 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6157 [pid 5073] <... unlink resumed>) = 0 [pid 6157] <... set_robust_list resumed>) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 5075] umount2("./175/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6157] chdir("./176" [pid 6156] <... write resumed>) = 524288 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] mkdir("./179", 0777 [pid 5075] newfstatat(AT_FDCWD, "./175/binderfs", [pid 5073] getdents64(3, [pid 6157] <... chdir resumed>) = 0 [pid 6156] munmap(0x7f0356e00000, 138412032 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6157] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6156] <... munmap resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] unlink("./175/binderfs" [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6157] setpgid(0, 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] close(3 [pid 6157] <... setpgid resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5073] <... close resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5073] rmdir("./175") = 0 [pid 5073] mkdir("./176", 0777 [pid 6157] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] <... unlink resumed>) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6156] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] getdents64(3, [pid 5073] <... openat resumed>) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6157] <... openat resumed>) = 3 [pid 6156] <... openat resumed>) = 4 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 6157] write(3, "1000", 4 [pid 6156] ioctl(4, LOOP_SET_FD, 3 [pid 5075] rmdir("./175" [pid 6157] <... write resumed>) = 4 [pid 6157] close(3) = 0 [pid 6156] <... ioctl resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 6157] symlink("/dev/binderfs", "./binderfs" [pid 5077] <... ioctl resumed>) = 0 [pid 5075] mkdir("./176", 0777 [pid 6157] <... symlink resumed>) = 0 [pid 6156] close(3 [pid 6157] memfd_create("syzkaller", 0 [pid 6156] <... close resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 6157] <... memfd_create resumed>) = 3 [pid 6156] close(4 [pid 6157] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6157] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6156] <... close resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 6156] mkdir("./bus", 0777 [pid 5077] close(3) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 6158 attached [pid 6156] <... mkdir resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 6158] set_robust_list(0x55556e32a660, 24 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6158 [pid 6158] <... set_robust_list resumed>) = 0 [pid 6158] chdir("./178") = 0 [pid 6158] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6158] setpgid(0, 0) = 0 [pid 6158] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6157] <... write resumed>) = 524288 [pid 6157] munmap(0x7f0356e00000, 138412032) = 0 [pid 6158] <... openat resumed>) = 3 [pid 6156] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5076] close(3 [pid 5073] close(3) = 0 [ 183.288385][ T6156] loop5: detected capacity change from 0 to 1024 [pid 6158] write(3, "1000", 4 [pid 5076] <... close resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6158] <... write resumed>) = 4 [pid 6157] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6159 attached [pid 6158] close(3 [pid 6157] <... openat resumed>) = 4 [pid 6159] set_robust_list(0x55556e32a660, 24 [pid 6158] <... close resumed>) = 0 [pid 6157] ioctl(4, LOOP_SET_FD, 3 [pid 6156] <... mount resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 6159] <... set_robust_list resumed>) = 0 [pid 6158] symlink("/dev/binderfs", "./binderfs" [pid 6156] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6159] chdir("./176" [pid 6158] <... symlink resumed>) = 0 [pid 6156] <... openat resumed>) = 3 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6159 [pid 6159] <... chdir resumed>) = 0 [pid 6158] memfd_create("syzkaller", 0 [pid 6156] chdir("./bus") = 0 [pid 6156] openat(AT_FDCWD, "/dev/loop5", O_RDWR./strace-static-x86_64: Process 6160 attached [pid 6159] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6158] <... memfd_create resumed>) = 3 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6160 [pid 6159] <... prctl resumed>) = 0 [pid 6158] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6159] setpgid(0, 0 [pid 6158] <... mmap resumed>) = 0x7f0356e00000 [pid 6160] set_robust_list(0x55556e32a660, 24 [pid 6159] <... setpgid resumed>) = 0 [pid 6158] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6159] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6160] <... set_robust_list resumed>) = 0 [pid 6156] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] close(3 [pid 6160] chdir("./179" [pid 6159] write(3, "1000", 4 [pid 5075] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6159] <... write resumed>) = 4 [pid 6159] close(3) = 0 ./strace-static-x86_64: Process 6161 attached [pid 6160] <... chdir resumed>) = 0 [pid 6159] symlink("/dev/binderfs", "./binderfs" [pid 6157] <... ioctl resumed>) = 0 [pid 6156] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6161] set_robust_list(0x55556e32a660, 24 [pid 6160] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6161 [pid 6161] <... set_robust_list resumed>) = 0 [pid 6160] <... prctl resumed>) = 0 [pid 6159] <... symlink resumed>) = 0 [pid 6161] chdir("./176" [pid 6160] setpgid(0, 0 [pid 6156] <... symlink resumed>) = 0 [pid 6161] <... chdir resumed>) = 0 [pid 6160] <... setpgid resumed>) = 0 [pid 6159] memfd_create("syzkaller", 0 [pid 6158] <... write resumed>) = 524288 [pid 6157] close(3 [pid 6161] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6160] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6159] <... memfd_create resumed>) = 3 [ 183.361980][ T6157] loop1: detected capacity change from 0 to 1024 [pid 6158] munmap(0x7f0356e00000, 138412032 [pid 6157] <... close resumed>) = 0 [pid 6156] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6161] <... prctl resumed>) = 0 [pid 6160] <... openat resumed>) = 3 [pid 6159] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6158] <... munmap resumed>) = 0 [pid 6157] close(4 [pid 6159] <... mmap resumed>) = 0x7f0356e00000 [pid 6157] <... close resumed>) = 0 [pid 6160] write(3, "1000", 4 [pid 6159] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6157] mkdir("./bus", 0777 [pid 6160] <... write resumed>) = 4 [pid 6161] setpgid(0, 0 [pid 6160] close(3 [pid 6158] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6157] <... mkdir resumed>) = 0 [pid 6156] <... creat resumed>) = 4 [pid 6161] <... setpgid resumed>) = 0 [pid 6160] <... close resumed>) = 0 [pid 6158] <... openat resumed>) = 4 [pid 6156] rename("./bus", "./file2" [pid 6160] symlink("/dev/binderfs", "./binderfs" [pid 6158] ioctl(4, LOOP_SET_FD, 3 [pid 6161] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6160] <... symlink resumed>) = 0 [pid 6157] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6156] <... rename resumed>) = -1 EEXIST (File exists) [pid 6156] memfd_create("syzkaller", 0 [pid 6161] <... openat resumed>) = 3 [pid 6160] memfd_create("syzkaller", 0 [pid 6156] <... memfd_create resumed>) = 5 [pid 6156] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6161] write(3, "1000", 4) = 4 [pid 6161] close(3) = 0 [pid 6160] <... memfd_create resumed>) = 3 [pid 6156] <... mmap resumed>) = 0x7f0356e00000 [pid 6161] symlink("/dev/binderfs", "./binderfs" [pid 6160] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6161] <... symlink resumed>) = 0 [pid 6161] memfd_create("syzkaller", 0 [pid 6160] <... mmap resumed>) = 0x7f0356e00000 [pid 6159] <... write resumed>) = 524288 [pid 6161] <... memfd_create resumed>) = 3 [pid 6158] <... ioctl resumed>) = 0 [pid 6161] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6159] munmap(0x7f0356e00000, 138412032 [pid 6158] close(3 [pid 6157] <... mount resumed>) = 0 [pid 6161] <... mmap resumed>) = 0x7f0356e00000 [pid 6159] <... munmap resumed>) = 0 [pid 6158] <... close resumed>) = 0 [pid 6157] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6157] chdir("./bus" [pid 6159] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6158] close(4 [pid 6157] <... chdir resumed>) = 0 [pid 6159] <... openat resumed>) = 4 [pid 6158] <... close resumed>) = 0 [pid 6157] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6156] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6159] ioctl(4, LOOP_SET_FD, 3 [pid 6158] mkdir("./bus", 0777 [pid 6157] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6158] <... mkdir resumed>) = 0 [pid 6157] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6161] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6159] <... ioctl resumed>) = 0 [pid 6158] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6160] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6159] close(3) = 0 [pid 6159] close(4) = 0 [pid 6159] mkdir("./bus", 0777) = 0 [pid 6159] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6157] <... symlink resumed>) = 0 [pid 6157] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6161] <... write resumed>) = 524288 [pid 6156] <... write resumed>) = 524288 [pid 6159] <... mount resumed>) = 0 [pid 6161] munmap(0x7f0356e00000, 138412032 [pid 6160] <... write resumed>) = 524288 [pid 6158] <... mount resumed>) = 0 [pid 6157] <... creat resumed>) = 4 [ 183.434580][ T6158] loop4: detected capacity change from 0 to 1024 [ 183.469557][ T6159] loop0: detected capacity change from 0 to 1024 [pid 6156] munmap(0x7f0356e00000, 138412032 [pid 6161] <... munmap resumed>) = 0 [pid 6160] munmap(0x7f0356e00000, 138412032 [pid 6159] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6156] <... munmap resumed>) = 0 [pid 6161] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6159] <... openat resumed>) = 3 [pid 6158] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6157] rename("./bus", "./file2" [pid 6161] <... openat resumed>) = 4 [pid 6160] <... munmap resumed>) = 0 [pid 6159] chdir("./bus" [pid 6158] <... openat resumed>) = 3 [pid 6156] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6161] ioctl(4, LOOP_SET_FD, 3 [pid 6160] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6157] <... rename resumed>) = -1 EEXIST (File exists) [pid 6156] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6161] <... ioctl resumed>) = 0 [pid 6160] <... openat resumed>) = 4 [pid 6159] <... chdir resumed>) = 0 [pid 6158] chdir("./bus" [pid 6157] memfd_create("syzkaller", 0 [pid 6156] close(5 [pid 6161] close(3 [pid 6159] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6158] <... chdir resumed>) = 0 [pid 6157] <... memfd_create resumed>) = 5 [pid 6161] <... close resumed>) = 0 [pid 6159] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6158] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6157] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6161] close(4 [pid 6160] ioctl(4, LOOP_SET_FD, 3 [pid 6159] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6158] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6157] <... mmap resumed>) = 0x7f0356e00000 [pid 6161] <... close resumed>) = 0 [pid 6158] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6156] <... close resumed>) = 0 [pid 6161] mkdir("./bus", 0777 [pid 6159] <... symlink resumed>) = 0 [pid 6158] <... symlink resumed>) = 0 [pid 6161] <... mkdir resumed>) = 0 [pid 6157] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6159] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6158] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6161] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6157] <... write resumed>) = 524288 [pid 6156] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6158] <... creat resumed>) = 4 [pid 6158] rename("./bus", "./file2" [pid 6159] <... creat resumed>) = 4 [pid 6158] <... rename resumed>) = -1 EEXIST (File exists) [pid 6158] memfd_create("syzkaller", 0) = 5 [pid 6159] rename("./bus", "./file2" [pid 6158] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6159] <... rename resumed>) = -1 EEXIST (File exists) [pid 6160] <... ioctl resumed>) = 0 [pid 6156] <... open resumed>) = 5 [pid 6161] <... mount resumed>) = 0 [pid 6160] close(3 [pid 6159] memfd_create("syzkaller", 0 [pid 6157] munmap(0x7f0356e00000, 138412032 [pid 6156] ftruncate(5, 0 [pid 6161] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6160] <... close resumed>) = 0 [pid 6159] <... memfd_create resumed>) = 5 [pid 6158] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6161] <... openat resumed>) = 3 [pid 6160] close(4 [pid 6159] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6157] <... munmap resumed>) = 0 [pid 6156] <... ftruncate resumed>) = 0 [pid 6161] chdir("./bus" [pid 6160] <... close resumed>) = 0 [pid 6159] <... mmap resumed>) = 0x7f0356e00000 [pid 6161] <... chdir resumed>) = 0 [pid 6158] <... write resumed>) = 524288 [pid 6157] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6156] exit_group(0 [ 183.529683][ T6161] loop2: detected capacity change from 0 to 1024 [ 183.550622][ T6160] loop3: detected capacity change from 0 to 1024 [pid 6160] mkdir("./bus", 0777 [pid 6161] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6160] <... mkdir resumed>) = 0 [pid 6157] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6161] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6160] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6157] close(5 [pid 6156] <... exit_group resumed>) = ? [pid 6161] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6156] +++ exited with 0 +++ [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6156, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6159] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6161] <... symlink resumed>) = 0 [pid 6160] <... mount resumed>) = 0 [pid 5078] umount2("./178", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6161] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6160] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6157] <... close resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./178", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6161] <... creat resumed>) = 4 [pid 6158] munmap(0x7f0356e00000, 138412032 [pid 6157] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] newfstatat(3, "", [pid 6160] <... openat resumed>) = 3 [pid 6161] rename("./bus", "./file2" [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6161] <... rename resumed>) = -1 EEXIST (File exists) [pid 6160] chdir("./bus" [pid 6158] <... munmap resumed>) = 0 [pid 5078] getdents64(3, [pid 6161] memfd_create("syzkaller", 0 [pid 6160] <... chdir resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6161] <... memfd_create resumed>) = 5 [pid 6160] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5078] umount2("./178/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6158] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6159] <... write resumed>) = 524288 [pid 6158] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6159] munmap(0x7f0356e00000, 138412032 [pid 6158] close(5 [pid 6161] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6160] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6160] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6159] <... munmap resumed>) = 0 [pid 6161] <... mmap resumed>) = 0x7f0356e00000 [pid 6160] <... symlink resumed>) = 0 [pid 6158] <... close resumed>) = 0 [pid 6157] <... open resumed>) = 5 [pid 6159] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6157] ftruncate(5, 0 [pid 6159] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6157] <... ftruncate resumed>) = 0 [pid 6159] close(5 [pid 6157] exit_group(0 [pid 6160] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6159] <... close resumed>) = 0 [pid 6157] <... exit_group resumed>) = ? [pid 6160] <... creat resumed>) = 4 [pid 6158] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6157] +++ exited with 0 +++ [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6157, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6160] rename("./bus", "./file2" [pid 6158] <... open resumed>) = 5 [pid 5074] umount2("./176", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./176", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6159] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6158] ftruncate(5, 0 [pid 6161] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6160] <... rename resumed>) = -1 EEXIST (File exists) [pid 6158] <... ftruncate resumed>) = 0 [pid 5078] <... umount2 resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 6161] <... write resumed>) = 524288 [pid 6160] memfd_create("syzkaller", 0 [pid 6158] exit_group(0 [pid 5078] umount2("./178/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] newfstatat(3, "", [pid 6159] <... open resumed>) = 5 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6159] ftruncate(5, 0 [pid 5074] getdents64(3, [pid 6159] <... ftruncate resumed>) = 0 [pid 6158] <... exit_group resumed>) = ? [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6160] <... memfd_create resumed>) = 5 [pid 6159] exit_group(0 [pid 6158] +++ exited with 0 +++ [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./176/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6160] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] newfstatat(AT_FDCWD, "./178/bus", [pid 6159] <... exit_group resumed>) = ? [pid 6160] <... mmap resumed>) = 0x7f0356e00000 [pid 6159] +++ exited with 0 +++ [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6158, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6159, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5078] umount2("./178/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 5073] umount2("./176", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./176", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6160] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] umount2("./176/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... restart_syscall resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./178/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5077] umount2("./178", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] newfstatat(4, "", [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] openat(AT_FDCWD, "./178", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... umount2 resumed>) = 0 [pid 6161] munmap(0x7f0356e00000, 138412032 [pid 5073] umount2("./176/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6161] <... munmap resumed>) = 0 [pid 6160] <... write resumed>) = 524288 [pid 5078] getdents64(4, [pid 5077] <... openat resumed>) = 3 [pid 5074] <... umount2 resumed>) = 0 [pid 6161] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6160] munmap(0x7f0356e00000, 138412032 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] newfstatat(3, "", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6161] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] getdents64(4, [pid 5074] umount2("./176/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6161] close(5 [pid 6160] <... munmap resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] newfstatat(AT_FDCWD, "./176/bus", [pid 6160] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5078] close(4 [pid 5077] getdents64(3, [pid 6160] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... close resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] rmdir("./178/bus" [pid 5074] newfstatat(AT_FDCWD, "./176/bus", [pid 6160] close(5 [pid 5078] <... rmdir resumed>) = 0 [pid 5077] umount2("./178/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./176/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6161] <... close resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6161] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] umount2("./178/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./176/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./176/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] openat(AT_FDCWD, "./176/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... openat resumed>) = 4 [pid 5073] <... openat resumed>) = 4 [pid 5078] newfstatat(AT_FDCWD, "./178/binderfs", [pid 5074] newfstatat(4, "", [pid 5073] newfstatat(4, "", [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] unlink("./178/binderfs") = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6161] <... open resumed>) = 5 [pid 5078] getdents64(3, [pid 5074] getdents64(4, [pid 5073] getdents64(4, [pid 6160] <... close resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6161] ftruncate(5, 0 [pid 6160] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] close(3 [pid 5077] <... umount2 resumed>) = 0 [pid 5074] getdents64(4, [pid 5073] getdents64(4, [pid 6161] <... ftruncate resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5077] umount2("./178/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] close(4 [pid 5078] rmdir("./178" [pid 5073] close(4 [pid 6161] exit_group(0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... close resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 6161] <... exit_group resumed>) = ? [pid 5074] rmdir("./176/bus" [pid 5073] rmdir("./176/bus" [pid 6160] <... open resumed>) = 5 [pid 5078] <... rmdir resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./178/bus", [pid 6160] ftruncate(5, 0 [pid 5078] mkdir("./179", 0777 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 6161] +++ exited with 0 +++ [pid 6160] <... ftruncate resumed>) = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 5077] umount2("./178/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./176/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./176/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6161, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5074] newfstatat(AT_FDCWD, "./176/binderfs", [pid 5073] newfstatat(AT_FDCWD, "./176/binderfs", [pid 6160] exit_group(0 [pid 5077] openat(AT_FDCWD, "./178/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] umount2("./176", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6160] <... exit_group resumed>) = ? [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] <... openat resumed>) = 4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] unlink("./176/binderfs" [pid 5077] newfstatat(4, "", [pid 5075] openat(AT_FDCWD, "./176", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] unlink("./176/binderfs" [pid 5073] <... unlink resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5074] <... unlink resumed>) = 0 [pid 5073] getdents64(3, [pid 5078] <... openat resumed>) = 3 [pid 5075] newfstatat(3, "", [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5074] getdents64(3, [pid 5073] close(3 [pid 5077] getdents64(4, [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] <... close resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(3, [pid 5074] close(3 [pid 5073] rmdir("./176" [pid 5077] getdents64(4, [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] <... close resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] rmdir("./176" [pid 5073] <... rmdir resumed>) = 0 [pid 6160] +++ exited with 0 +++ [pid 5077] close(4 [pid 5075] umount2("./176/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... rmdir resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6160, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5073] mkdir("./177", 0777 [pid 5077] rmdir("./178/bus" [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5074] mkdir("./177", 0777 [pid 5073] <... mkdir resumed>) = 0 [pid 5076] <... restart_syscall resumed>) = 0 [pid 5076] umount2("./179", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./179", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] <... openat resumed>) = 3 [pid 5074] <... mkdir resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5077] <... rmdir resumed>) = 0 [pid 5076] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] umount2("./179/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] umount2("./178/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./176/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... openat resumed>) = 3 [pid 5077] newfstatat(AT_FDCWD, "./178/binderfs", [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] newfstatat(AT_FDCWD, "./176/bus", [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5077] unlink("./178/binderfs" [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./176/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... unlink resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./176/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5077] getdents64(3, [pid 5075] newfstatat(4, "", [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] close(3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] <... close resumed>) = 0 [pid 5075] getdents64(4, [pid 5077] rmdir("./178" [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, [pid 5077] <... rmdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5077] mkdir("./179", 0777) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] <... ioctl resumed>) = 0 [pid 5076] umount2("./179/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 5078] close(3 [pid 5073] close(3 [pid 5078] <... close resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] close(4 [pid 5073] <... close resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5076] newfstatat(AT_FDCWD, "./179/bus", [pid 5075] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] rmdir("./176/bus" [pid 5074] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 6163 attached ./strace-static-x86_64: Process 6162 attached [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6163 [pid 6163] set_robust_list(0x55556e32a660, 24 [pid 6162] set_robust_list(0x55556e32a660, 24 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6162 [pid 5076] umount2("./179/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... rmdir resumed>) = 0 [pid 6163] <... set_robust_list resumed>) = 0 [pid 6162] <... set_robust_list resumed>) = 0 [pid 6162] chdir("./179" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./176/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6163] chdir("./177" [pid 5076] openat(AT_FDCWD, "./179/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6163] <... chdir resumed>) = 0 [pid 6162] <... chdir resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5075] newfstatat(AT_FDCWD, "./176/binderfs", [pid 6162] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6163] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] newfstatat(4, "", [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6163] <... prctl resumed>) = 0 [pid 6162] <... prctl resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] unlink("./176/binderfs" [pid 5074] close(3 [pid 5076] getdents64(4, [pid 5075] <... unlink resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(3, [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6163] setpgid(0, 0 [pid 6162] setpgid(0, 0 [pid 5076] getdents64(4, [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] close(3 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] <... close resumed>) = 0 [pid 6163] <... setpgid resumed>) = 0 [pid 6162] <... setpgid resumed>) = 0 [pid 5076] close(4 [pid 5075] rmdir("./176" [pid 6163] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6162] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] <... close resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5076] rmdir("./179/bus" [pid 5075] mkdir("./177", 0777 [pid 6163] <... openat resumed>) = 3 [pid 6162] <... openat resumed>) = 3 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 6164 attached [pid 6162] write(3, "1000", 4 [pid 6163] write(3, "1000", 4 [pid 6162] <... write resumed>) = 4 [pid 6163] <... write resumed>) = 4 [pid 6164] set_robust_list(0x55556e32a660, 24 [pid 6163] close(3 [pid 6162] close(3 [pid 6164] <... set_robust_list resumed>) = 0 [pid 6163] <... close resumed>) = 0 [pid 6162] <... close resumed>) = 0 [pid 5076] umount2("./179/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6164 [pid 6164] chdir("./177" [pid 6163] symlink("/dev/binderfs", "./binderfs" [pid 6162] symlink("/dev/binderfs", "./binderfs" [pid 6163] <... symlink resumed>) = 0 [pid 6162] <... symlink resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... openat resumed>) = 3 [pid 6164] <... chdir resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./179/binderfs", [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6164] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6163] memfd_create("syzkaller", 0 [pid 6162] memfd_create("syzkaller", 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6164] <... prctl resumed>) = 0 [pid 6164] setpgid(0, 0) = 0 [pid 6162] <... memfd_create resumed>) = 3 [pid 5076] unlink("./179/binderfs" [pid 6164] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6163] <... memfd_create resumed>) = 3 [pid 6164] <... openat resumed>) = 3 [pid 6163] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6162] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... unlink resumed>) = 0 [pid 5076] getdents64(3, [pid 6164] write(3, "1000", 4 [pid 6163] <... mmap resumed>) = 0x7f0356e00000 [pid 6162] <... mmap resumed>) = 0x7f0356e00000 [pid 6164] <... write resumed>) = 4 [pid 6163] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6162] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... ioctl resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6164] close(3 [pid 5077] close(3 [pid 5076] close(3 [pid 5077] <... close resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 6164] <... close resumed>) = 0 [pid 6164] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] rmdir("./179") = 0 [pid 6164] memfd_create("syzkaller", 0 [pid 5076] mkdir("./180", 0777 [pid 6164] <... memfd_create resumed>) = 3 [pid 6164] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... mkdir resumed>) = 0 [pid 6164] <... mmap resumed>) = 0x7f0356e00000 ./strace-static-x86_64: Process 6165 attached [pid 6163] <... write resumed>) = 524288 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6165 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6165] set_robust_list(0x55556e32a660, 24 [pid 6164] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6165] <... set_robust_list resumed>) = 0 [pid 6163] munmap(0x7f0356e00000, 138412032 [pid 5076] <... openat resumed>) = 3 [pid 5075] <... ioctl resumed>) = 0 [pid 6165] chdir("./179" [pid 6162] <... write resumed>) = 524288 [pid 6163] <... munmap resumed>) = 0 [pid 6165] <... chdir resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6163] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6162] munmap(0x7f0356e00000, 138412032 [pid 6165] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6163] <... openat resumed>) = 4 [pid 6162] <... munmap resumed>) = 0 [pid 6165] <... prctl resumed>) = 0 [pid 6163] ioctl(4, LOOP_SET_FD, 3 [pid 6165] setpgid(0, 0) = 0 [pid 6164] <... write resumed>) = 524288 [pid 6162] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] close(3 [pid 6165] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6162] <... openat resumed>) = 4 [pid 5075] <... close resumed>) = 0 [pid 6162] ioctl(4, LOOP_SET_FD, 3 [pid 6165] <... openat resumed>) = 3 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6165] write(3, "1000", 4 [pid 6164] munmap(0x7f0356e00000, 138412032) = 0 [pid 6165] <... write resumed>) = 4 [pid 6165] close(3) = 0 ./strace-static-x86_64: Process 6166 attached [pid 6164] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6163] <... ioctl resumed>) = 0 [pid 6165] symlink("/dev/binderfs", "./binderfs" [pid 6162] <... ioctl resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6166 [pid 6164] <... openat resumed>) = 4 [pid 6163] close(3 [pid 6162] close(3 [pid 6165] <... symlink resumed>) = 0 [pid 6164] ioctl(4, LOOP_SET_FD, 3 [pid 6163] <... close resumed>) = 0 [pid 6166] set_robust_list(0x55556e32a660, 24 [pid 6162] <... close resumed>) = 0 [pid 6166] <... set_robust_list resumed>) = 0 [pid 6165] memfd_create("syzkaller", 0 [pid 6166] chdir("./177" [pid 6165] <... memfd_create resumed>) = 3 [pid 6166] <... chdir resumed>) = 0 [pid 6166] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6165] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6166] <... prctl resumed>) = 0 [pid 6166] setpgid(0, 0 [pid 6165] <... mmap resumed>) = 0x7f0356e00000 [pid 6166] <... setpgid resumed>) = 0 [pid 6166] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6164] <... ioctl resumed>) = 0 [pid 6163] close(4 [pid 6162] close(4 [pid 6163] <... close resumed>) = 0 [pid 6165] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6164] close(3 [pid 6163] mkdir("./bus", 0777 [pid 6162] <... close resumed>) = 0 [pid 6162] mkdir("./bus", 0777) = 0 [pid 6163] <... mkdir resumed>) = 0 [pid 6166] <... openat resumed>) = 3 [pid 6165] <... write resumed>) = 524288 [pid 6164] <... close resumed>) = 0 [pid 6163] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6162] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5076] <... ioctl resumed>) = 0 [pid 6166] write(3, "1000", 4 [pid 6165] munmap(0x7f0356e00000, 138412032 [pid 6164] close(4 [pid 6166] <... write resumed>) = 4 [pid 6164] <... close resumed>) = 0 [pid 6165] <... munmap resumed>) = 0 [pid 6166] close(3) = 0 [pid 6165] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6164] mkdir("./bus", 0777 [pid 6166] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6166] memfd_create("syzkaller", 0 [pid 5076] close(3 [pid 6166] <... memfd_create resumed>) = 3 [pid 6165] <... openat resumed>) = 4 [pid 6164] <... mkdir resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 183.919872][ T6163] loop0: detected capacity change from 0 to 1024 [ 183.931930][ T6162] loop5: detected capacity change from 0 to 1024 [ 183.954760][ T6164] loop1: detected capacity change from 0 to 1024 [pid 6165] ioctl(4, LOOP_SET_FD, 3 [pid 6163] <... mount resumed>) = 0 [pid 6163] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 6167 attached [pid 6166] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6164] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6163] <... openat resumed>) = 3 [pid 6167] set_robust_list(0x55556e32a660, 24 [pid 6163] chdir("./bus" [pid 6167] <... set_robust_list resumed>) = 0 [pid 6163] <... chdir resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6167 [pid 6167] chdir("./180" [pid 6163] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6167] <... chdir resumed>) = 0 [pid 6166] <... mmap resumed>) = 0x7f0356e00000 [pid 6163] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6167] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6163] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6167] <... prctl resumed>) = 0 [pid 6167] setpgid(0, 0) = 0 [pid 6167] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6166] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6163] <... symlink resumed>) = 0 [pid 6162] <... mount resumed>) = 0 [pid 6163] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6167] <... openat resumed>) = 3 [pid 6162] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6167] write(3, "1000", 4 [pid 6164] <... mount resumed>) = 0 [pid 6162] chdir("./bus" [pid 6167] <... write resumed>) = 4 [pid 6165] <... ioctl resumed>) = 0 [pid 6164] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6163] <... creat resumed>) = 4 [pid 6162] <... chdir resumed>) = 0 [pid 6167] close(3 [pid 6165] close(3 [pid 6164] <... openat resumed>) = 3 [pid 6162] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6163] rename("./bus", "./file2" [pid 6167] <... close resumed>) = 0 [pid 6165] <... close resumed>) = 0 [pid 6164] chdir("./bus" [pid 6162] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6167] symlink("/dev/binderfs", "./binderfs" [pid 6163] <... rename resumed>) = -1 EEXIST (File exists) [pid 6167] <... symlink resumed>) = 0 [pid 6165] close(4 [pid 6164] <... chdir resumed>) = 0 [pid 6162] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6166] <... write resumed>) = 524288 [pid 6165] <... close resumed>) = 0 [pid 6164] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6163] memfd_create("syzkaller", 0 [pid 6167] memfd_create("syzkaller", 0) = 3 [pid 6167] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6164] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6165] mkdir("./bus", 0777 [pid 6162] <... symlink resumed>) = 0 [pid 6167] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6166] munmap(0x7f0356e00000, 138412032 [pid 6165] <... mkdir resumed>) = 0 [pid 6164] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6163] <... memfd_create resumed>) = 5 [pid 6162] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6163] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6165] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6164] <... symlink resumed>) = 0 [pid 6163] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6162] <... creat resumed>) = 4 [ 183.992698][ T6165] loop4: detected capacity change from 0 to 1024 [pid 6167] <... write resumed>) = 524288 [pid 6162] rename("./bus", "./file2" [pid 6164] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6166] <... munmap resumed>) = 0 [pid 6166] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6166] ioctl(4, LOOP_SET_FD, 3 [pid 6167] munmap(0x7f0356e00000, 138412032) = 0 [pid 6164] <... creat resumed>) = 4 [pid 6162] <... rename resumed>) = -1 EEXIST (File exists) [pid 6164] rename("./bus", "./file2" [pid 6162] memfd_create("syzkaller", 0 [pid 6167] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6164] <... rename resumed>) = -1 EEXIST (File exists) [pid 6162] <... memfd_create resumed>) = 5 [pid 6167] <... openat resumed>) = 4 [pid 6164] memfd_create("syzkaller", 0 [pid 6162] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6167] ioctl(4, LOOP_SET_FD, 3 [pid 6165] <... mount resumed>) = 0 [pid 6164] <... memfd_create resumed>) = 5 [pid 6163] <... write resumed>) = 524288 [pid 6165] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6164] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6162] <... mmap resumed>) = 0x7f0356e00000 [pid 6165] <... openat resumed>) = 3 [pid 6164] <... mmap resumed>) = 0x7f0356e00000 [pid 6163] munmap(0x7f0356e00000, 138412032 [pid 6165] chdir("./bus" [pid 6166] <... ioctl resumed>) = 0 [pid 6165] <... chdir resumed>) = 0 [pid 6163] <... munmap resumed>) = 0 [pid 6162] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6166] close(3 [pid 6165] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6166] <... close resumed>) = 0 [pid 6166] close(4) = 0 [pid 6165] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6164] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6163] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6166] mkdir("./bus", 0777 [pid 6165] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6163] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6166] <... mkdir resumed>) = 0 [pid 6163] close(5 [pid 6165] <... symlink resumed>) = 0 [pid 6164] <... write resumed>) = 524288 [pid 6166] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6163] <... close resumed>) = 0 [pid 6165] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6163] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6167] <... ioctl resumed>) = 0 [pid 6167] close(3) = 0 [pid 6165] <... creat resumed>) = 4 [pid 6167] close(4 [pid 6165] rename("./bus", "./file2" [pid 6164] munmap(0x7f0356e00000, 138412032 [pid 6167] <... close resumed>) = 0 [pid 6167] mkdir("./bus", 0777 [pid 6163] <... open resumed>) = 5 [pid 6165] <... rename resumed>) = -1 EEXIST (File exists) [pid 6167] <... mkdir resumed>) = 0 [pid 6165] memfd_create("syzkaller", 0 [pid 6164] <... munmap resumed>) = 0 [pid 6167] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6165] <... memfd_create resumed>) = 5 [pid 6164] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6163] ftruncate(5, 0 [pid 6162] <... write resumed>) = 524288 [pid 6165] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6164] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6163] <... ftruncate resumed>) = 0 [pid 6166] <... mount resumed>) = 0 [pid 6165] <... mmap resumed>) = 0x7f0356e00000 [pid 6164] close(5 [pid 6163] exit_group(0) = ? [ 184.064438][ T6166] loop2: detected capacity change from 0 to 1024 [ 184.089493][ T6167] loop3: detected capacity change from 0 to 1024 [pid 6166] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6165] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6164] <... close resumed>) = 0 [pid 6163] +++ exited with 0 +++ [pid 6162] munmap(0x7f0356e00000, 138412032 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6163, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6162] <... munmap resumed>) = 0 [pid 6166] <... openat resumed>) = 3 [pid 6166] chdir("./bus" [pid 6162] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6166] <... chdir resumed>) = 0 [pid 6162] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6166] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5073] umount2("./177", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6167] <... mount resumed>) = 0 [pid 6166] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6167] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6166] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6167] <... openat resumed>) = 3 [pid 6167] chdir("./bus") = 0 [pid 6162] close(5 [pid 5073] openat(AT_FDCWD, "./177", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6167] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6164] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6167] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... openat resumed>) = 3 [pid 6167] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6166] <... symlink resumed>) = 0 [pid 5073] newfstatat(3, "", [pid 6167] <... symlink resumed>) = 0 [pid 6166] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6167] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5073] getdents64(3, [pid 6164] <... open resumed>) = 5 [pid 6167] <... creat resumed>) = 4 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6167] rename("./bus", "./file2") = -1 EEXIST (File exists) [pid 6164] ftruncate(5, 0 [pid 5073] umount2("./177/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6167] memfd_create("syzkaller", 0 [pid 6164] <... ftruncate resumed>) = 0 [pid 6164] exit_group(0 [pid 6162] <... close resumed>) = 0 [pid 6167] <... memfd_create resumed>) = 5 [pid 6164] <... exit_group resumed>) = ? [pid 6167] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6166] <... creat resumed>) = 4 [pid 6165] <... write resumed>) = 524288 [pid 6162] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5073] <... umount2 resumed>) = 0 [pid 6167] <... mmap resumed>) = 0x7f0356e00000 [pid 6166] rename("./bus", "./file2" [pid 6165] munmap(0x7f0356e00000, 138412032 [pid 5073] umount2("./177/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6167] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6166] <... rename resumed>) = -1 EEXIST (File exists) [pid 5073] newfstatat(AT_FDCWD, "./177/bus", [pid 6166] memfd_create("syzkaller", 0 [pid 6165] <... munmap resumed>) = 0 [pid 6165] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6166] <... memfd_create resumed>) = 5 [pid 6165] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6162] <... open resumed>) = 5 [pid 6165] close(5 [pid 6162] ftruncate(5, 0) = 0 [pid 6166] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6164] +++ exited with 0 +++ [pid 6162] exit_group(0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6166] <... mmap resumed>) = 0x7f0356e00000 [pid 6162] <... exit_group resumed>) = ? [pid 6166] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] umount2("./177/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6164, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] openat(AT_FDCWD, "./177/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] umount2("./177", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./177", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6165] <... close resumed>) = 0 [pid 6162] +++ exited with 0 +++ [pid 5074] <... openat resumed>) = 3 [pid 5073] <... openat resumed>) = 4 [pid 6167] <... write resumed>) = 524288 [pid 6166] <... write resumed>) = 524288 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6162, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5074] newfstatat(3, "", [pid 5073] newfstatat(4, "", [pid 6165] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, [pid 5074] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, [pid 5074] umount2("./177/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5078] umount2("./179", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] close(4 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... close resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./179", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6167] munmap(0x7f0356e00000, 138412032 [pid 5073] rmdir("./177/bus" [pid 5078] <... openat resumed>) = 3 [pid 6167] <... munmap resumed>) = 0 [pid 5078] newfstatat(3, "", [pid 5073] <... rmdir resumed>) = 0 [pid 6165] <... open resumed>) = 5 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6165] ftruncate(5, 0 [pid 5078] getdents64(3, [pid 5073] umount2("./177/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = 0 [pid 6166] munmap(0x7f0356e00000, 138412032) = 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6165] <... ftruncate resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] umount2("./179/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6167] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6166] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6165] exit_group(0 [pid 5073] newfstatat(AT_FDCWD, "./177/binderfs", [pid 6167] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6166] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6165] <... exit_group resumed>) = ? [pid 5074] umount2("./177/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6167] close(5 [pid 6166] close(5 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6165] +++ exited with 0 +++ [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6165, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5074] newfstatat(AT_FDCWD, "./177/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./177/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./177/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6167] <... close resumed>) = 0 [pid 5074] <... openat resumed>) = 4 [pid 5073] unlink("./177/binderfs" [pid 5077] umount2("./179", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] newfstatat(4, "", [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6166] <... close resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./179", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] getdents64(4, [pid 5077] <... openat resumed>) = 3 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, [pid 5077] newfstatat(3, "", [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] close(4 [pid 5073] <... unlink resumed>) = 0 [pid 6166] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] getdents64(3, [pid 5074] <... close resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] getdents64(3, [pid 5077] umount2("./179/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] rmdir("./177/bus" [pid 6167] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6166] <... open resumed>) = 5 [pid 5078] <... umount2 resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] close(3 [pid 6166] ftruncate(5, 0 [pid 5074] umount2("./177/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... close resumed>) = 0 [pid 6166] <... ftruncate resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6166] exit_group(0 [pid 5074] newfstatat(AT_FDCWD, "./177/binderfs", [pid 5073] rmdir("./177" [pid 6166] <... exit_group resumed>) = ? [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6166] +++ exited with 0 +++ [pid 5078] umount2("./179/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] unlink("./177/binderfs" [pid 5073] <... rmdir resumed>) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6166, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5074] <... unlink resumed>) = 0 [pid 5073] mkdir("./178", 0777 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] getdents64(3, [pid 5073] <... mkdir resumed>) = 0 [pid 6167] <... open resumed>) = 5 [pid 5078] newfstatat(AT_FDCWD, "./179/bus", [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6167] ftruncate(5, 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./177", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] close(3 [pid 6167] <... ftruncate resumed>) = 0 [pid 5078] umount2("./179/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... close resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5075] openat(AT_FDCWD, "./177", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] rmdir("./177" [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... umount2 resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5074] <... rmdir resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./179/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] umount2("./179/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] newfstatat(3, "", [pid 5074] mkdir("./178", 0777 [pid 6167] exit_group(0 [pid 5078] <... openat resumed>) = 4 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6167] <... exit_group resumed>) = ? [pid 5078] newfstatat(4, "", [pid 5077] newfstatat(AT_FDCWD, "./179/bus", [pid 5075] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] umount2("./177/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6167] +++ exited with 0 +++ [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] getdents64(4, [pid 5077] umount2("./179/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6167, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5078] close(4) = 0 [pid 5078] rmdir("./179/bus") = 0 [pid 5078] umount2("./179/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] newfstatat(AT_FDCWD, "./179/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] unlink("./179/binderfs") = 0 [pid 5077] openat(AT_FDCWD, "./179/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... openat resumed>) = 3 [pid 5078] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5078] close(3) = 0 [pid 5078] rmdir("./179") = 0 [pid 5077] <... openat resumed>) = 4 [pid 5075] <... umount2 resumed>) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5078] mkdir("./180", 0777 [pid 5076] umount2("./180", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] newfstatat(4, "", [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./177/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... mkdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./180", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5075] newfstatat(AT_FDCWD, "./177/bus", [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] getdents64(4, [pid 5076] newfstatat(3, "", [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] umount2("./177/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5077] getdents64(4, [pid 5076] getdents64(3, [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] close(4 [pid 5076] umount2("./180/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "./177/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... close resumed>) = 0 [pid 5077] rmdir("./179/bus" [pid 5075] <... openat resumed>) = 4 [pid 5076] <... umount2 resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] umount2("./180/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] newfstatat(4, "", [pid 5073] <... ioctl resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... ioctl resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./180/bus", [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] umount2("./179/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] close(3 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... close resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./179/binderfs", [pid 5076] umount2("./180/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(4, ./strace-static-x86_64: Process 6168 attached [pid 5078] close(3 [pid 5077] unlink("./179/binderfs" [pid 5076] openat(AT_FDCWD, "./180/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] <... ioctl resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6168 [pid 6168] set_robust_list(0x55556e32a660, 24 [pid 5078] <... close resumed>) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5075] getdents64(4, [pid 5074] close(3 [pid 5077] getdents64(3, [pid 5076] newfstatat(4, "", [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] close(3 [pid 5076] getdents64(4, [pid 5077] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] <... close resumed>) = 0 [pid 6168] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 6169 attached [pid 5075] close(4 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6168] chdir("./178" [pid 5077] rmdir("./179" [pid 5076] getdents64(4, ./strace-static-x86_64: Process 6170 attached [pid 6169] set_robust_list(0x55556e32a660, 24 [pid 6168] <... chdir resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] <... close resumed>) = 0 [pid 6170] set_robust_list(0x55556e32a660, 24 [pid 6169] <... set_robust_list resumed>) = 0 [pid 6168] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] close(4 [pid 5075] rmdir("./177/bus" [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6170 [pid 6170] <... set_robust_list resumed>) = 0 [pid 6169] chdir("./180" [pid 6168] <... prctl resumed>) = 0 [pid 5077] mkdir("./180", 0777 [pid 5076] <... close resumed>) = 0 [pid 6170] chdir("./178" [pid 6169] <... chdir resumed>) = 0 [pid 6168] setpgid(0, 0 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6169 [pid 5077] <... mkdir resumed>) = 0 [pid 5076] rmdir("./180/bus" [pid 5075] <... rmdir resumed>) = 0 [pid 6169] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6168] <... setpgid resumed>) = 0 [pid 6168] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] <... rmdir resumed>) = 0 [pid 6170] <... chdir resumed>) = 0 [pid 6169] <... prctl resumed>) = 0 [pid 6170] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6169] setpgid(0, 0 [pid 6168] <... openat resumed>) = 3 [pid 5076] umount2("./180/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./177/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6170] <... prctl resumed>) = 0 [pid 6169] <... setpgid resumed>) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6170] setpgid(0, 0 [pid 6169] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6168] write(3, "1000", 4 [pid 5077] <... openat resumed>) = 3 [pid 5076] newfstatat(AT_FDCWD, "./180/binderfs", [pid 5075] newfstatat(AT_FDCWD, "./177/binderfs", [pid 6170] <... setpgid resumed>) = 0 [pid 6169] <... openat resumed>) = 3 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 6170] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6169] write(3, "1000", 4 [pid 6168] <... write resumed>) = 4 [pid 5075] unlink("./177/binderfs" [pid 6169] <... write resumed>) = 4 [pid 6168] close(3 [pid 5076] unlink("./180/binderfs" [pid 5075] <... unlink resumed>) = 0 [pid 6170] <... openat resumed>) = 3 [pid 6169] close(3 [pid 6168] <... close resumed>) = 0 [pid 5075] getdents64(3, [pid 6170] write(3, "1000", 4 [pid 6169] <... close resumed>) = 0 [pid 6168] symlink("/dev/binderfs", "./binderfs" [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6170] <... write resumed>) = 4 [pid 6169] symlink("/dev/binderfs", "./binderfs" [pid 6168] <... symlink resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5075] close(3 [pid 6170] close(3 [pid 6169] <... symlink resumed>) = 0 [pid 6168] memfd_create("syzkaller", 0 [pid 5076] getdents64(3, [pid 5075] <... close resumed>) = 0 [pid 6170] <... close resumed>) = 0 [pid 6169] memfd_create("syzkaller", 0 [pid 5075] rmdir("./177" [pid 6170] symlink("/dev/binderfs", "./binderfs" [pid 6168] <... memfd_create resumed>) = 3 [pid 6170] <... symlink resumed>) = 0 [pid 6169] <... memfd_create resumed>) = 3 [pid 6168] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5076] close(3 [pid 6169] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6168] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] <... close resumed>) = 0 [pid 6169] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] rmdir("./180" [pid 5075] mkdir("./178", 0777 [pid 6170] memfd_create("syzkaller", 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5076] mkdir("./181", 0777 [pid 6170] <... memfd_create resumed>) = 3 [pid 6168] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6170] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 6170] <... mmap resumed>) = 0x7f0356e00000 [pid 6169] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5076] <... openat resumed>) = 3 [pid 6170] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6169] <... write resumed>) = 524288 [pid 6168] <... write resumed>) = 524288 [pid 5077] <... ioctl resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6169] munmap(0x7f0356e00000, 138412032 [pid 6168] munmap(0x7f0356e00000, 138412032 [pid 5077] close(3 [pid 6170] <... write resumed>) = 524288 [pid 6169] <... munmap resumed>) = 0 [pid 6168] <... munmap resumed>) = 0 [pid 6168] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6168] ioctl(4, LOOP_SET_FD, 3 [pid 6170] munmap(0x7f0356e00000, 138412032 [pid 6169] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] <... close resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 6169] <... openat resumed>) = 4 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6169] ioctl(4, LOOP_SET_FD, 3 [pid 6168] <... ioctl resumed>) = 0 [pid 6170] <... munmap resumed>) = 0 [pid 6169] <... ioctl resumed>) = 0 [pid 6168] close(3) = 0 [pid 6168] close(4./strace-static-x86_64: Process 6171 attached ) = 0 [pid 6171] set_robust_list(0x55556e32a660, 24 [pid 6170] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6168] mkdir("./bus", 0777 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6171 [pid 6171] <... set_robust_list resumed>) = 0 [pid 6170] <... openat resumed>) = 4 [pid 6168] <... mkdir resumed>) = 0 [pid 6171] chdir("./180" [pid 6170] ioctl(4, LOOP_SET_FD, 3 [pid 6168] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6171] <... chdir resumed>) = 0 [pid 6169] close(3 [pid 5075] close(3 [pid 6171] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6169] <... close resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6170] <... ioctl resumed>) = 0 [pid 5076] close(3 [pid 6171] <... prctl resumed>) = 0 [pid 6170] close(3 [pid 6169] close(4 [pid 5076] <... close resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6170] <... close resumed>) = 0 [pid 6171] setpgid(0, 0 [pid 6169] <... close resumed>) = 0 [pid 6171] <... setpgid resumed>) = 0 [pid 6169] mkdir("./bus", 0777 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6172 ./strace-static-x86_64: Process 6173 attached [pid 6171] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6170] close(4 [pid 6169] <... mkdir resumed>) = 0 [pid 6170] <... close resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6173 [pid 6170] mkdir("./bus", 0777 [pid 6171] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6172 attached [pid 6172] set_robust_list(0x55556e32a660, 24 [pid 6171] write(3, "1000", 4 [pid 6170] <... mkdir resumed>) = 0 [pid 6169] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6168] <... mount resumed>) = 0 [pid 6173] set_robust_list(0x55556e32a660, 24 [pid 6172] <... set_robust_list resumed>) = 0 [pid 6171] <... write resumed>) = 4 [pid 6170] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6173] <... set_robust_list resumed>) = 0 [pid 6172] chdir("./178" [pid 6171] close(3 [pid 6168] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6172] <... chdir resumed>) = 0 [pid 6171] <... close resumed>) = 0 [pid 6168] <... openat resumed>) = 3 [pid 6172] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6171] symlink("/dev/binderfs", "./binderfs" [pid 6173] chdir("./181" [pid 6172] <... prctl resumed>) = 0 [pid 6171] <... symlink resumed>) = 0 [pid 6173] <... chdir resumed>) = 0 [pid 6172] setpgid(0, 0 [pid 6173] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6172] <... setpgid resumed>) = 0 [pid 6171] memfd_create("syzkaller", 0 [pid 6168] chdir("./bus" [pid 6173] <... prctl resumed>) = 0 [pid 6172] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6171] <... memfd_create resumed>) = 3 [pid 6168] <... chdir resumed>) = 0 [pid 6173] setpgid(0, 0 [pid 6172] <... openat resumed>) = 3 [pid 6171] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6168] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6173] <... setpgid resumed>) = 0 [pid 6172] write(3, "1000", 4 [pid 6171] <... mmap resumed>) = 0x7f0356e00000 [pid 6168] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 184.497883][ T6168] loop0: detected capacity change from 0 to 1024 [ 184.508092][ T6169] loop5: detected capacity change from 0 to 1024 [ 184.525252][ T6170] loop1: detected capacity change from 0 to 1024 [pid 6173] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6172] <... write resumed>) = 4 [pid 6171] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6169] <... mount resumed>) = 0 [pid 6172] close(3) = 0 [pid 6173] <... openat resumed>) = 3 [pid 6172] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6173] write(3, "1000", 4) = 4 [pid 6172] memfd_create("syzkaller", 0 [pid 6173] close(3 [pid 6168] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6173] <... close resumed>) = 0 [pid 6173] symlink("/dev/binderfs", "./binderfs" [pid 6172] <... memfd_create resumed>) = 3 [pid 6169] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6172] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6169] <... openat resumed>) = 3 [pid 6169] chdir("./bus" [pid 6172] <... mmap resumed>) = 0x7f0356e00000 [pid 6169] <... chdir resumed>) = 0 [pid 6173] <... symlink resumed>) = 0 [pid 6168] <... symlink resumed>) = 0 [pid 6170] <... mount resumed>) = 0 [pid 6169] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6173] memfd_create("syzkaller", 0 [pid 6168] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6170] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6169] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6173] <... memfd_create resumed>) = 3 [pid 6170] <... openat resumed>) = 3 [pid 6173] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6170] chdir("./bus" [pid 6169] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6173] <... mmap resumed>) = 0x7f0356e00000 [pid 6172] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6170] <... chdir resumed>) = 0 [pid 6169] <... symlink resumed>) = 0 [pid 6173] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6172] <... write resumed>) = 524288 [pid 6170] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6169] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6168] <... creat resumed>) = 4 [pid 6170] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6168] rename("./bus", "./file2" [pid 6170] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6171] <... write resumed>) = 524288 [pid 6168] <... rename resumed>) = -1 EEXIST (File exists) [pid 6171] munmap(0x7f0356e00000, 138412032 [pid 6169] <... creat resumed>) = 4 [pid 6171] <... munmap resumed>) = 0 [pid 6170] <... symlink resumed>) = 0 [pid 6169] rename("./bus", "./file2" [pid 6168] memfd_create("syzkaller", 0) = 5 [pid 6169] <... rename resumed>) = -1 EEXIST (File exists) [pid 6171] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6169] memfd_create("syzkaller", 0 [pid 6168] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6171] <... openat resumed>) = 4 [pid 6169] <... memfd_create resumed>) = 5 [pid 6172] munmap(0x7f0356e00000, 138412032 [pid 6171] ioctl(4, LOOP_SET_FD, 3 [pid 6169] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6168] <... mmap resumed>) = 0x7f0356e00000 [pid 6173] <... write resumed>) = 524288 [pid 6172] <... munmap resumed>) = 0 [pid 6170] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6169] <... mmap resumed>) = 0x7f0356e00000 [pid 6172] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6172] ioctl(4, LOOP_SET_FD, 3 [pid 6173] munmap(0x7f0356e00000, 138412032 [pid 6168] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6173] <... munmap resumed>) = 0 [pid 6169] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6171] <... ioctl resumed>) = 0 [pid 6171] close(3) = 0 [pid 6171] close(4) = 0 [pid 6173] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6171] mkdir("./bus", 0777 [pid 6170] <... creat resumed>) = 4 [pid 6169] <... write resumed>) = 524288 [pid 6171] <... mkdir resumed>) = 0 [pid 6171] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6173] <... openat resumed>) = 4 [pid 6170] rename("./bus", "./file2" [pid 6173] ioctl(4, LOOP_SET_FD, 3 [pid 6172] <... ioctl resumed>) = 0 [pid 6171] <... mount resumed>) = 0 [pid 6172] close(3 [pid 6171] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6172] <... close resumed>) = 0 [pid 6171] <... openat resumed>) = 3 [pid 6171] chdir("./bus") = 0 [pid 6172] close(4 [pid 6171] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6172] <... close resumed>) = 0 [pid 6171] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6172] mkdir("./bus", 0777 [pid 6171] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6172] <... mkdir resumed>) = 0 [pid 6169] munmap(0x7f0356e00000, 138412032 [pid 6172] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6169] <... munmap resumed>) = 0 [pid 6171] <... symlink resumed>) = 0 [pid 6171] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6170] <... rename resumed>) = -1 EEXIST (File exists) [pid 6169] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6168] <... write resumed>) = 524288 [pid 6170] memfd_create("syzkaller", 0 [pid 6169] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6170] <... memfd_create resumed>) = 5 [pid 6169] close(5 [pid 6168] munmap(0x7f0356e00000, 138412032 [pid 6170] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6172] <... mount resumed>) = 0 [pid 6170] <... mmap resumed>) = 0x7f0356e00000 [pid 6169] <... close resumed>) = 0 [pid 6168] <... munmap resumed>) = 0 [pid 6173] <... ioctl resumed>) = 0 [pid 6172] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6173] close(3 [pid 6172] <... openat resumed>) = 3 [pid 6172] chdir("./bus") = 0 [pid 6171] <... creat resumed>) = 4 [pid 6172] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6171] rename("./bus", "./file2" [pid 6172] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6173] <... close resumed>) = 0 [pid 6172] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6171] <... rename resumed>) = -1 EEXIST (File exists) [pid 6170] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6173] close(4 [pid 6172] <... symlink resumed>) = 0 [pid 6171] memfd_create("syzkaller", 0 [pid 6168] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6173] <... close resumed>) = 0 [pid 6171] <... memfd_create resumed>) = 5 [pid 6173] mkdir("./bus", 0777 [pid 6172] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6171] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6173] <... mkdir resumed>) = 0 [pid 6171] <... mmap resumed>) = 0x7f0356e00000 [pid 6168] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6173] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6171] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6169] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6172] <... creat resumed>) = 4 [ 184.622696][ T6171] loop4: detected capacity change from 0 to 1024 [ 184.631900][ T6172] loop2: detected capacity change from 0 to 1024 [ 184.660344][ T6173] loop3: detected capacity change from 0 to 1024 [pid 6172] rename("./bus", "./file2" [pid 6168] close(5 [pid 6172] <... rename resumed>) = -1 EEXIST (File exists) [pid 6170] <... write resumed>) = 524288 [pid 6169] <... open resumed>) = 5 [pid 6168] <... close resumed>) = 0 [pid 6173] <... mount resumed>) = 0 [pid 6171] <... write resumed>) = 524288 [pid 6170] munmap(0x7f0356e00000, 138412032 [pid 6169] ftruncate(5, 0 [pid 6168] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6173] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6172] memfd_create("syzkaller", 0 [pid 6169] <... ftruncate resumed>) = 0 [pid 6172] <... memfd_create resumed>) = 5 [pid 6169] exit_group(0 [pid 6172] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6170] <... munmap resumed>) = 0 [pid 6169] <... exit_group resumed>) = ? [pid 6173] chdir("./bus" [pid 6172] <... mmap resumed>) = 0x7f0356e00000 [pid 6168] <... open resumed>) = 5 [pid 6173] <... chdir resumed>) = 0 [pid 6172] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6170] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6168] ftruncate(5, 0 [pid 6173] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6169] +++ exited with 0 +++ [pid 6168] <... ftruncate resumed>) = 0 [pid 6173] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6173] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6169, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6171] munmap(0x7f0356e00000, 138412032) = 0 [pid 6171] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] umount2("./180", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6172] <... write resumed>) = 524288 [pid 6171] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] openat(AT_FDCWD, "./180", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6173] <... symlink resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 6170] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6170] close(5 [pid 6171] close(5 [pid 6173] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6168] exit_group(0 [pid 5078] newfstatat(3, "", [pid 6168] <... exit_group resumed>) = ? [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6173] <... creat resumed>) = 4 [pid 6172] munmap(0x7f0356e00000, 138412032 [pid 6171] <... close resumed>) = 0 [pid 6170] <... close resumed>) = 0 [pid 6168] +++ exited with 0 +++ [pid 5078] getdents64(3, [pid 6173] rename("./bus", "./file2" [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6168, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6173] <... rename resumed>) = -1 EEXIST (File exists) [pid 6170] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] umount2("./180/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6172] <... munmap resumed>) = 0 [pid 6171] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6172] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5073] umount2("./178", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6172] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6172] close(5 [pid 5073] openat(AT_FDCWD, "./178", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6173] memfd_create("syzkaller", 0) = 5 [pid 6170] <... open resumed>) = 5 [pid 5073] <... openat resumed>) = 3 [pid 6173] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] newfstatat(3, "", [pid 6173] <... mmap resumed>) = 0x7f0356e00000 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6171] <... open resumed>) = 5 [pid 5073] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] umount2("./178/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6171] ftruncate(5, 0 [pid 6172] <... close resumed>) = 0 [pid 6171] <... ftruncate resumed>) = 0 [pid 6170] ftruncate(5, 0) = 0 [pid 6171] exit_group(0 [pid 6172] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6171] <... exit_group resumed>) = ? [pid 6171] +++ exited with 0 +++ [pid 6170] exit_group(0) = ? [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6171, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5077] umount2("./180", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./180", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5077] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] umount2("./180/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6170] +++ exited with 0 +++ [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6170, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5074] umount2("./178", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./178", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] umount2("./178/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6173] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6172] <... open resumed>) = 5 [pid 5078] <... umount2 resumed>) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5077] umount2("./180/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6172] ftruncate(5, 0) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 6173] munmap(0x7f0356e00000, 138412032 [pid 6172] exit_group(0 [pid 5078] umount2("./180/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./178/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6172] <... exit_group resumed>) = ? [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6173] <... munmap resumed>) = 0 [pid 6172] +++ exited with 0 +++ [pid 5078] newfstatat(AT_FDCWD, "./180/bus", [pid 5077] newfstatat(AT_FDCWD, "./180/bus", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] umount2("./180/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] umount2("./180/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6172, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5074] umount2("./178/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] newfstatat(AT_FDCWD, "./178/bus", [pid 6173] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./178", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6173] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] openat(AT_FDCWD, "./180/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] openat(AT_FDCWD, "./180/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./178/bus", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6173] close(5 [pid 5078] <... openat resumed>) = 4 [pid 5077] <... openat resumed>) = 4 [pid 5075] openat(AT_FDCWD, "./178", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] umount2("./178/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] newfstatat(4, "", [pid 5077] newfstatat(4, "", [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5074] umount2("./178/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] getdents64(4, [pid 5077] getdents64(4, [pid 5075] newfstatat(3, "", [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./178/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] openat(AT_FDCWD, "./178/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] getdents64(4, [pid 5077] getdents64(4, [pid 5073] <... openat resumed>) = 4 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] getdents64(3, [pid 5074] <... openat resumed>) = 4 [pid 5078] close(4 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] <... close resumed>) = 0 [pid 5075] umount2("./178/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] newfstatat(4, "", [pid 5078] rmdir("./180/bus" [pid 5077] close(4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] newfstatat(4, "", [pid 6173] <... close resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5074] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] umount2("./180/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] rmdir("./180/bus" [pid 5074] getdents64(4, [pid 5073] getdents64(4, [pid 5075] <... umount2 resumed>) = 0 [pid 5075] umount2("./178/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] newfstatat(AT_FDCWD, "./178/bus", [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] close(4 [pid 5077] <... rmdir resumed>) = 0 [pid 5073] getdents64(4, [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] umount2("./180/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./178/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... close resumed>) = 0 [pid 6173] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] newfstatat(AT_FDCWD, "./180/binderfs", [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] rmdir("./178/bus" [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] openat(AT_FDCWD, "./178/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] unlink("./180/binderfs" [pid 5074] <... rmdir resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./180/binderfs", [pid 5075] <... openat resumed>) = 4 [pid 5073] close(4 [pid 5078] getdents64(3, [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] newfstatat(4, "", [pid 5074] umount2("./178/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] unlink("./180/binderfs" [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... close resumed>) = 0 [pid 5078] close(3 [pid 5075] getdents64(4, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... close resumed>) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 5073] rmdir("./178/bus" [pid 5078] rmdir("./180" [pid 5077] getdents64(3, [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] newfstatat(AT_FDCWD, "./178/binderfs", [pid 5078] <... rmdir resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] getdents64(4, [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5078] mkdir("./181", 0777 [pid 5077] close(3 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] unlink("./178/binderfs" [pid 5073] umount2("./178/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... mkdir resumed>) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] close(4 [pid 5074] <... unlink resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5074] getdents64(3, [pid 5078] <... openat resumed>) = 3 [pid 5075] rmdir("./178/bus" [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5075] <... rmdir resumed>) = 0 [pid 5074] close(3 [pid 5075] umount2("./178/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] rmdir("./178" [pid 5075] newfstatat(AT_FDCWD, "./178/binderfs", [pid 5074] <... rmdir resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] mkdir("./179", 0777 [pid 5075] unlink("./178/binderfs" [pid 5074] <... mkdir resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] getdents64(3, [pid 5074] <... openat resumed>) = 3 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5075] close(3) = 0 [pid 5075] rmdir("./178") = 0 [pid 5075] mkdir("./179", 0777) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6173] <... open resumed>) = 5 [pid 5077] <... close resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5073] newfstatat(AT_FDCWD, "./178/binderfs", [pid 5075] <... openat resumed>) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6173] ftruncate(5, 0 [pid 5077] rmdir("./180" [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6173] <... ftruncate resumed>) = 0 [pid 6173] exit_group(0 [pid 5073] unlink("./178/binderfs" [pid 6173] <... exit_group resumed>) = ? [pid 5073] <... unlink resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 6173] +++ exited with 0 +++ [pid 5073] getdents64(3, [pid 5077] mkdir("./181", 0777 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6173, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 5073] close(3 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./178" [pid 5078] <... ioctl resumed>) = 0 [pid 5076] umount2("./181", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... ioctl resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... rmdir resumed>) = 0 [ 184.906578][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 184.906610][ T28] audit: type=1800 audit(1710613067.004:1082): pid=6173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop3" ino=20 res=0 errno=0 [pid 5076] openat(AT_FDCWD, "./181", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, [pid 5073] mkdir("./179", 0777 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] close(3 [pid 5073] <... mkdir resumed>) = 0 [pid 5078] close(3 [pid 5076] umount2("./181/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... ioctl resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5075] close(3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5075] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6174 attached [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6174 [pid 6174] set_robust_list(0x55556e32a660, 24) = 0 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6176 [pid 6174] chdir("./179") = 0 [pid 6174] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 6175 attached ) = 0 ./strace-static-x86_64: Process 6176 attached [pid 6176] set_robust_list(0x55556e32a660, 24 [pid 6174] setpgid(0, 0 [pid 6175] set_robust_list(0x55556e32a660, 24) = 0 [pid 6174] <... setpgid resumed>) = 0 [pid 6176] <... set_robust_list resumed>) = 0 [pid 6176] chdir("./181" [pid 6175] chdir("./179" [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6175 [pid 6175] <... chdir resumed>) = 0 [pid 6174] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] <... umount2 resumed>) = 0 [pid 6175] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6176] <... chdir resumed>) = 0 [pid 6176] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6176] setpgid(0, 0) = 0 [pid 6176] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6174] <... openat resumed>) = 3 [pid 6176] <... openat resumed>) = 3 [pid 6175] <... prctl resumed>) = 0 [pid 5076] umount2("./181/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./181/bus", [pid 6176] write(3, "1000", 4 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6176] <... write resumed>) = 4 [pid 5076] umount2("./181/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6176] close(3 [pid 6175] setpgid(0, 0) = 0 [pid 6174] write(3, "1000", 4 [pid 6175] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6174] <... write resumed>) = 4 [pid 6174] close(3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6174] <... close resumed>) = 0 [pid 6176] <... close resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./181/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6174] symlink("/dev/binderfs", "./binderfs" [pid 6176] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... openat resumed>) = 4 [pid 6176] <... symlink resumed>) = 0 [pid 5076] newfstatat(4, "", [pid 6176] memfd_create("syzkaller", 0 [pid 6175] <... openat resumed>) = 3 [pid 6174] <... symlink resumed>) = 0 [pid 5077] <... ioctl resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, [pid 6176] <... memfd_create resumed>) = 3 [pid 6175] write(3, "1000", 4 [pid 6174] memfd_create("syzkaller", 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6175] <... write resumed>) = 4 [pid 6176] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6175] close(3 [pid 5076] getdents64(4, [pid 6176] <... mmap resumed>) = 0x7f0356e00000 [pid 6175] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6175] symlink("/dev/binderfs", "./binderfs" [pid 6176] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6175] <... symlink resumed>) = 0 [pid 6174] <... memfd_create resumed>) = 3 [pid 5076] close(4 [pid 6174] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... close resumed>) = 0 [pid 6175] memfd_create("syzkaller", 0 [pid 6174] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] rmdir("./181/bus" [pid 5073] <... ioctl resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] umount2("./181/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6177 attached [pid 6175] <... memfd_create resumed>) = 3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./181/binderfs", [pid 6175] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] close(3 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6177] set_robust_list(0x55556e32a660, 24 [pid 6175] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] <... close resumed>) = 0 [pid 5076] unlink("./181/binderfs" [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6177] <... set_robust_list resumed>) = 0 [pid 6176] <... write resumed>) = 524288 [pid 6175] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... unlink resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6177 [pid 6177] chdir("./179") = 0 [pid 6177] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6177] setpgid(0, 0) = 0 [pid 6177] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6174] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] getdents64(3, [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6178 [pid 6177] <... openat resumed>) = 3 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6178 attached [pid 6177] write(3, "1000", 4 [pid 5076] close(3 [pid 6178] set_robust_list(0x55556e32a660, 24 [pid 6177] <... write resumed>) = 4 [pid 5076] <... close resumed>) = 0 [pid 5076] rmdir("./181" [pid 6178] <... set_robust_list resumed>) = 0 [pid 6178] chdir("./181" [pid 6177] close(3 [pid 6174] <... write resumed>) = 524288 [pid 5076] <... rmdir resumed>) = 0 [pid 6177] <... close resumed>) = 0 [pid 6176] munmap(0x7f0356e00000, 138412032 [pid 6177] symlink("/dev/binderfs", "./binderfs" [pid 6176] <... munmap resumed>) = 0 [pid 6177] <... symlink resumed>) = 0 [pid 6177] memfd_create("syzkaller", 0 [pid 5076] mkdir("./182", 0777 [pid 6178] <... chdir resumed>) = 0 [pid 6175] <... write resumed>) = 524288 [pid 5076] <... mkdir resumed>) = 0 [pid 6178] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6177] <... memfd_create resumed>) = 3 [pid 6176] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6178] <... prctl resumed>) = 0 [pid 6177] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6176] <... openat resumed>) = 4 [pid 5076] <... openat resumed>) = 3 [pid 6178] setpgid(0, 0) = 0 [pid 6176] ioctl(4, LOOP_SET_FD, 3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6177] <... mmap resumed>) = 0x7f0356e00000 [pid 6178] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6177] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6175] munmap(0x7f0356e00000, 138412032 [pid 6174] munmap(0x7f0356e00000, 138412032 [pid 6176] <... ioctl resumed>) = 0 [pid 6176] close(3) = 0 [pid 6176] close(4 [pid 6177] <... write resumed>) = 524288 [pid 6176] <... close resumed>) = 0 [pid 6178] <... openat resumed>) = 3 [pid 6176] mkdir("./bus", 0777 [pid 6178] write(3, "1000", 4 [pid 6176] <... mkdir resumed>) = 0 [pid 6175] <... munmap resumed>) = 0 [pid 6174] <... munmap resumed>) = 0 [pid 6178] <... write resumed>) = 4 [pid 6175] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6174] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6176] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6174] <... openat resumed>) = 4 [ 185.109339][ T6176] loop5: detected capacity change from 0 to 1024 [pid 6178] close(3) = 0 [pid 6175] <... openat resumed>) = 4 [pid 6174] ioctl(4, LOOP_SET_FD, 3 [pid 5076] <... ioctl resumed>) = 0 [pid 6178] symlink("/dev/binderfs", "./binderfs" [pid 6175] ioctl(4, LOOP_SET_FD, 3 [pid 6178] <... symlink resumed>) = 0 [pid 6177] munmap(0x7f0356e00000, 138412032) = 0 [pid 6176] <... mount resumed>) = 0 [pid 6178] memfd_create("syzkaller", 0 [pid 5076] close(3 [pid 6177] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6176] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5076] <... close resumed>) = 0 [pid 6177] <... openat resumed>) = 4 [pid 6176] <... openat resumed>) = 3 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6177] ioctl(4, LOOP_SET_FD, 3 [pid 6176] chdir("./bus") = 0 [pid 6178] <... memfd_create resumed>) = 3 [pid 6175] <... ioctl resumed>) = 0 [pid 6178] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6175] close(3 [pid 6178] <... mmap resumed>) = 0x7f0356e00000 [pid 6176] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6175] <... close resumed>) = 0 [pid 6176] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6175] close(4 [pid 6176] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6175] <... close resumed>) = 0 [pid 6175] mkdir("./bus", 0777 [pid 6176] <... symlink resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6179 ./strace-static-x86_64: Process 6179 attached [pid 6176] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6179] set_robust_list(0x55556e32a660, 24 [pid 6175] <... mkdir resumed>) = 0 [pid 6179] <... set_robust_list resumed>) = 0 [pid 6176] <... creat resumed>) = 4 [pid 6179] chdir("./182") = 0 [pid 6176] rename("./bus", "./file2" [pid 6174] <... ioctl resumed>) = 0 [pid 6179] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6175] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6174] close(3 [pid 6179] <... prctl resumed>) = 0 [pid 6178] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6176] <... rename resumed>) = -1 EEXIST (File exists) [pid 6179] setpgid(0, 0 [pid 6176] memfd_create("syzkaller", 0 [pid 6179] <... setpgid resumed>) = 0 [pid 6176] <... memfd_create resumed>) = 5 [pid 6179] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6176] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6174] <... close resumed>) = 0 [pid 6176] <... mmap resumed>) = 0x7f0356e00000 [pid 6179] <... openat resumed>) = 3 [pid 6178] <... write resumed>) = 524288 [pid 6176] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [ 185.153832][ T6175] loop2: detected capacity change from 0 to 1024 [ 185.164286][ T6174] loop1: detected capacity change from 0 to 1024 [ 185.165850][ T6177] loop0: detected capacity change from 0 to 1024 [pid 6174] close(4 [pid 6179] write(3, "1000", 4) = 4 [pid 6179] close(3) = 0 [pid 6179] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6174] <... close resumed>) = 0 [pid 6174] mkdir("./bus", 0777 [pid 6179] memfd_create("syzkaller", 0) = 3 [pid 6177] <... ioctl resumed>) = 0 [pid 6179] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6174] <... mkdir resumed>) = 0 [pid 6179] <... mmap resumed>) = 0x7f0356e00000 [pid 6177] close(3 [pid 6179] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6178] munmap(0x7f0356e00000, 138412032 [pid 6174] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6177] <... close resumed>) = 0 [pid 6177] close(4 [pid 6178] <... munmap resumed>) = 0 [pid 6178] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6177] <... close resumed>) = 0 [pid 6178] <... openat resumed>) = 4 [pid 6177] mkdir("./bus", 0777 [pid 6178] ioctl(4, LOOP_SET_FD, 3 [pid 6177] <... mkdir resumed>) = 0 [pid 6176] <... write resumed>) = 524288 [pid 6177] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6175] <... mount resumed>) = 0 [pid 6179] <... write resumed>) = 524288 [pid 6177] <... mount resumed>) = 0 [pid 6175] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6175] chdir("./bus" [pid 6177] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6175] <... chdir resumed>) = 0 [pid 6175] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6177] chdir("./bus" [pid 6175] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6177] <... chdir resumed>) = 0 [pid 6175] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6177] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6177] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6176] munmap(0x7f0356e00000, 138412032 [pid 6177] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6176] <... munmap resumed>) = 0 [pid 6175] <... symlink resumed>) = 0 [pid 6176] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6177] <... creat resumed>) = 4 [pid 6176] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6179] munmap(0x7f0356e00000, 138412032 [pid 6177] rename("./bus", "./file2" [pid 6176] close(5 [pid 6179] <... munmap resumed>) = 0 [pid 6178] <... ioctl resumed>) = 0 [pid 6175] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6174] <... mount resumed>) = 0 [pid 6179] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6177] <... rename resumed>) = -1 EEXIST (File exists) [pid 6179] <... openat resumed>) = 4 [pid 6178] close(3 [pid 6177] memfd_create("syzkaller", 0 [pid 6174] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6177] <... memfd_create resumed>) = 5 [pid 6177] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6179] ioctl(4, LOOP_SET_FD, 3 [pid 6178] <... close resumed>) = 0 [pid 6177] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6174] <... openat resumed>) = 3 [ 185.237163][ T6178] loop4: detected capacity change from 0 to 1024 [pid 6178] close(4 [pid 6175] <... creat resumed>) = 4 [pid 6174] chdir("./bus" [pid 6178] <... close resumed>) = 0 [pid 6175] rename("./bus", "./file2" [pid 6174] <... chdir resumed>) = 0 [pid 6178] mkdir("./bus", 0777 [pid 6176] <... close resumed>) = 0 [pid 6178] <... mkdir resumed>) = 0 [pid 6178] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6176] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6175] <... rename resumed>) = -1 EEXIST (File exists) [pid 6174] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6175] memfd_create("syzkaller", 0 [pid 6174] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6175] <... memfd_create resumed>) = 5 [pid 6174] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6179] <... ioctl resumed>) = 0 [pid 6176] <... open resumed>) = 5 [pid 6179] close(3 [pid 6176] ftruncate(5, 0 [pid 6174] <... symlink resumed>) = 0 [pid 6176] <... ftruncate resumed>) = 0 [ 185.283752][ T6179] loop3: detected capacity change from 0 to 1024 [pid 6179] <... close resumed>) = 0 [pid 6177] <... write resumed>) = 524288 [pid 6176] exit_group(0 [pid 6175] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6174] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6179] close(4 [pid 6177] munmap(0x7f0356e00000, 138412032 [pid 6176] <... exit_group resumed>) = ? [pid 6175] <... mmap resumed>) = 0x7f0356e00000 [pid 6179] <... close resumed>) = 0 [pid 6178] <... mount resumed>) = 0 [pid 6174] <... creat resumed>) = 4 [pid 6179] mkdir("./bus", 0777 [pid 6178] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6176] +++ exited with 0 +++ [pid 6179] <... mkdir resumed>) = 0 [pid 6178] <... openat resumed>) = 3 [pid 6179] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6178] chdir("./bus") = 0 [pid 6177] <... munmap resumed>) = 0 [pid 6174] rename("./bus", "./file2" [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6176, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6178] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6177] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6178] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6178] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6177] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6175] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6174] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] umount2("./181", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6179] <... mount resumed>) = 0 [pid 6178] <... symlink resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./181", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6174] memfd_create("syzkaller", 0 [pid 6179] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6174] <... memfd_create resumed>) = 5 [pid 5078] <... openat resumed>) = 3 [ 185.324136][ T28] audit: type=1800 audit(1710613067.424:1083): pid=6176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop5" ino=20 res=0 errno=0 [pid 6179] chdir("./bus" [pid 6178] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6177] close(5 [pid 6174] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] newfstatat(3, "", [pid 6179] <... chdir resumed>) = 0 [pid 6174] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6179] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5078] getdents64(3, [pid 6179] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6179] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6179] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 4 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6179] rename("./bus", "./file2" [pid 5078] umount2("./181/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6179] <... rename resumed>) = -1 EEXIST (File exists) [pid 6179] memfd_create("syzkaller", 0) = 5 [pid 6179] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6177] <... close resumed>) = 0 [pid 6175] <... write resumed>) = 524288 [pid 6179] <... mmap resumed>) = 0x7f0356e00000 [pid 6179] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6178] <... creat resumed>) = 4 [pid 6177] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6175] munmap(0x7f0356e00000, 138412032 [pid 6174] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6178] rename("./bus", "./file2" [pid 6175] <... munmap resumed>) = 0 [pid 5078] <... umount2 resumed>) = 0 [pid 6178] <... rename resumed>) = -1 EEXIST (File exists) [pid 6178] memfd_create("syzkaller", 0 [pid 5078] umount2("./181/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6178] <... memfd_create resumed>) = 5 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6178] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6175] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] newfstatat(AT_FDCWD, "./181/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] umount2("./181/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6179] <... write resumed>) = 524288 [pid 6178] <... mmap resumed>) = 0x7f0356e00000 [pid 6177] <... open resumed>) = 5 [pid 6175] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6174] <... write resumed>) = 524288 [pid 5078] openat(AT_FDCWD, "./181/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6179] munmap(0x7f0356e00000, 138412032 [pid 6178] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6175] close(5 [pid 5078] getdents64(4, [pid 6179] <... munmap resumed>) = 0 [pid 6177] ftruncate(5, 0 [pid 6174] munmap(0x7f0356e00000, 138412032 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6179] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6177] <... ftruncate resumed>) = 0 [pid 6174] <... munmap resumed>) = 0 [pid 5078] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6179] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] close(4 [pid 6179] close(5 [pid 6174] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6178] <... write resumed>) = 524288 [pid 6177] exit_group(0 [pid 6174] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6177] <... exit_group resumed>) = ? [pid 6175] <... close resumed>) = 0 [pid 6179] <... close resumed>) = 0 [pid 6177] +++ exited with 0 +++ [pid 6175] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6174] close(5 [pid 5078] <... close resumed>) = 0 [pid 5078] rmdir("./181/bus" [pid 6178] munmap(0x7f0356e00000, 138412032 [pid 6175] <... open resumed>) = 5 [pid 5078] <... rmdir resumed>) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6177, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6179] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5073] umount2("./179", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6178] <... munmap resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./179", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] umount2("./181/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] <... openat resumed>) = 3 [pid 5078] newfstatat(AT_FDCWD, "./181/binderfs", [pid 5073] newfstatat(3, "", [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] unlink("./181/binderfs" [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6178] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6175] ftruncate(5, 0 [pid 5073] getdents64(3, [pid 6178] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6175] <... ftruncate resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 6175] exit_group(0 [pid 5078] getdents64(3, [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6175] <... exit_group resumed>) = ? [pid 5073] umount2("./179/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6178] close(5 [pid 6175] +++ exited with 0 +++ [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6174] <... close resumed>) = 0 [pid 5078] close(3 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6175, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 5078] <... close resumed>) = 0 [pid 6179] <... open resumed>) = 5 [pid 5078] rmdir("./181" [pid 5075] <... restart_syscall resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [ 185.430439][ T28] audit: type=1800 audit(1710613067.534:1084): pid=6177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop0" ino=20 res=0 errno=0 [pid 5075] umount2("./179", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6179] ftruncate(5, 0 [pid 5078] mkdir("./182", 0777 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./179", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6179] <... ftruncate resumed>) = 0 [pid 6174] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] <... mkdir resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 6178] <... close resumed>) = 0 [pid 5075] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6178] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5075] getdents64(3, [pid 6179] exit_group(0 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] <... openat resumed>) = 3 [pid 5075] umount2("./179/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] ioctl(3, LOOP_CLR_FD [pid 6179] <... exit_group resumed>) = ? [pid 5073] <... umount2 resumed>) = 0 [pid 6179] +++ exited with 0 +++ [pid 6178] <... open resumed>) = 5 [pid 6174] <... open resumed>) = 5 [pid 5075] <... umount2 resumed>) = 0 [pid 5073] umount2("./179/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 185.494340][ T28] audit: type=1800 audit(1710613067.574:1085): pid=6175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 185.521498][ T28] audit: type=1800 audit(1710613067.594:1086): pid=6179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop3" ino=20 res=0 errno=0 [pid 5073] newfstatat(AT_FDCWD, "./179/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6178] ftruncate(5, 0 [pid 6174] ftruncate(5, 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6179, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] umount2("./179/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./179/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6178] <... ftruncate resumed>) = 0 [pid 6174] <... ftruncate resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./179/bus", [pid 5073] openat(AT_FDCWD, "./179/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6178] exit_group(0 [pid 6174] exit_group(0 [pid 6178] <... exit_group resumed>) = ? [pid 6174] <... exit_group resumed>) = ? [pid 5076] umount2("./182", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... openat resumed>) = 4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6174] +++ exited with 0 +++ [pid 5075] umount2("./179/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] newfstatat(4, "", [pid 5076] openat(AT_FDCWD, "./182", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5073] getdents64(4, [pid 5075] openat(AT_FDCWD, "./179/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] newfstatat(3, "", [pid 5075] <... openat resumed>) = 4 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, [pid 6178] +++ exited with 0 +++ [pid 5076] getdents64(3, [pid 5075] newfstatat(4, "", [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6178, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5073] close(4 [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 5076] umount2("./182/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... restart_syscall resumed>) = 0 [pid 5075] getdents64(4, [pid 5073] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] rmdir("./179/bus" [pid 5077] umount2("./181", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(4, [pid 5073] <... rmdir resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./181", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5077] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] getdents64(3, [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] close(4 [pid 5077] umount2("./181/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... close resumed>) = 0 [pid 5073] umount2("./179/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] rmdir("./179/bus" [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./179/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./179/binderfs" [pid 5075] <... rmdir resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5073] getdents64(3, [pid 5078] <... ioctl resumed>) = 0 [pid 5075] umount2("./179/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] close(3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6174, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5078] <... close resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./179/binderfs", [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] close(3 [pid 5074] umount2("./179", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] unlink("./179/binderfs" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./179", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] rmdir("./179" [pid 5077] <... umount2 resumed>) = 0 [pid 5075] getdents64(3, [pid 5074] <... openat resumed>) = 3 [pid 5073] <... rmdir resumed>) = 0 [pid 5074] newfstatat(3, "", [pid 5076] umount2("./182/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] close(3 [pid 5074] getdents64(3, [pid 5073] mkdir("./180", 0777 [pid 5076] newfstatat(AT_FDCWD, "./182/bus", [pid 5075] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] <... mkdir resumed>) = 0 [pid 5074] umount2("./179/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] rmdir("./179" [pid 5076] umount2("./182/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... rmdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5077] umount2("./181/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] openat(AT_FDCWD, "./182/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] mkdir("./180", 0777 [pid 5073] <... openat resumed>) = 3 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... openat resumed>) = 4 [pid 5075] <... mkdir resumed>) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6180 [pid 5077] newfstatat(AT_FDCWD, "./181/bus", [pid 5076] newfstatat(4, "", [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] umount2("./181/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] getdents64(4, [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 6180 attached [pid 5077] openat(AT_FDCWD, "./181/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] getdents64(4, [pid 5075] <... openat resumed>) = 3 [pid 5074] <... umount2 resumed>) = 0 [pid 6180] set_robust_list(0x55556e32a660, 24) = 0 [pid 5077] <... openat resumed>) = 4 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] umount2("./179/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6180] chdir("./182" [pid 5077] newfstatat(4, "", [pid 5076] close(4 [pid 6180] <... chdir resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6180] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] rmdir("./182/bus" [pid 5074] newfstatat(AT_FDCWD, "./179/bus", [pid 6180] <... prctl resumed>) = 0 [pid 6180] setpgid(0, 0 [ 185.542882][ T28] audit: type=1800 audit(1710613067.624:1087): pid=6174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 185.568752][ T28] audit: type=1800 audit(1710613067.624:1088): pid=6178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop4" ino=20 res=0 errno=0 [pid 5077] getdents64(4, [pid 5076] <... rmdir resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6180] <... setpgid resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] umount2("./179/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6180] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5077] close(4 [pid 5076] umount2("./182/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6180] <... openat resumed>) = 3 [pid 5074] openat(AT_FDCWD, "./179/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6180] write(3, "1000", 4) = 4 [pid 5077] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... openat resumed>) = 4 [pid 6180] close(3 [pid 5077] rmdir("./181/bus" [pid 5076] newfstatat(AT_FDCWD, "./182/binderfs", [pid 5074] newfstatat(4, "", [pid 6180] <... close resumed>) = 0 [pid 6180] symlink("/dev/binderfs", "./binderfs" [pid 5077] <... rmdir resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] umount2("./181/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6180] <... symlink resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] getdents64(4, [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] newfstatat(AT_FDCWD, "./181/binderfs", [pid 5076] unlink("./182/binderfs" [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5077] unlink("./181/binderfs") = 0 [pid 5076] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] getdents64(3, [pid 5076] close(3 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6180] memfd_create("syzkaller", 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] <... close resumed>) = 0 [pid 5074] getdents64(4, [pid 6180] <... memfd_create resumed>) = 3 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6180] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] close(3 [pid 5076] rmdir("./182" [pid 5074] close(4 [pid 6180] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] <... close resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5077] rmdir("./181") = 0 [pid 5076] mkdir("./183", 0777 [pid 5077] mkdir("./182", 0777 [pid 5076] <... mkdir resumed>) = 0 [pid 6180] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... mkdir resumed>) = 0 [pid 5074] rmdir("./179/bus" [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5074] <... rmdir resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5074] umount2("./179/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6180] <... write resumed>) = 524288 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6180] munmap(0x7f0356e00000, 138412032 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6180] <... munmap resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5075] <... ioctl resumed>) = 0 [pid 6180] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] newfstatat(AT_FDCWD, "./179/binderfs", [pid 5073] <... ioctl resumed>) = 0 [pid 6180] <... openat resumed>) = 4 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] close(3 [pid 6180] ioctl(4, LOOP_SET_FD, 3 [pid 5074] unlink("./179/binderfs" [pid 5073] close(3 [pid 5075] <... close resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] getdents64(3, [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6181 attached [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6182 attached [pid 6182] set_robust_list(0x55556e32a660, 24 [pid 6181] set_robust_list(0x55556e32a660, 24 [pid 6182] <... set_robust_list resumed>) = 0 [pid 6182] chdir("./180" [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6182 [pid 6181] <... set_robust_list resumed>) = 0 [pid 6180] <... ioctl resumed>) = 0 [pid 6182] <... chdir resumed>) = 0 [pid 6180] close(3 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6181 [pid 6181] chdir("./180" [pid 6180] <... close resumed>) = 0 [pid 6181] <... chdir resumed>) = 0 [pid 6180] close(4) = 0 [pid 6180] mkdir("./bus", 0777 [pid 6181] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6182] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6182] setpgid(0, 0) = 0 [pid 6182] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6182] write(3, "1000", 4 [pid 6181] <... prctl resumed>) = 0 [pid 6180] <... mkdir resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5074] close(3 [pid 6182] <... write resumed>) = 4 [pid 6181] setpgid(0, 0 [pid 6180] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5076] close(3 [pid 5074] <... close resumed>) = 0 [pid 6182] close(3 [pid 6181] <... setpgid resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 6182] <... close resumed>) = 0 [pid 6182] symlink("/dev/binderfs", "./binderfs" [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6182] <... symlink resumed>) = 0 [pid 5074] rmdir("./179" [pid 6181] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5074] <... rmdir resumed>) = 0 [pid 6182] memfd_create("syzkaller", 0) = 3 [pid 6182] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6181] write(3, "1000", 4 [pid 6180] <... mount resumed>) = 0 [pid 5074] mkdir("./180", 0777 [pid 6181] <... write resumed>) = 4 [pid 6180] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6183 [pid 6180] <... openat resumed>) = 3 [pid 6181] close(3 [pid 5074] <... mkdir resumed>) = 0 [pid 6180] chdir("./bus" [pid 6181] <... close resumed>) = 0 [pid 6181] symlink("/dev/binderfs", "./binderfs" [pid 6180] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 6183 attached [pid 6181] <... symlink resumed>) = 0 [pid 6180] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6183] set_robust_list(0x55556e32a660, 24) = 0 [pid 6183] chdir("./183") = 0 [pid 6183] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6183] setpgid(0, 0) = 0 [pid 6183] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6182] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6183] <... openat resumed>) = 3 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6180] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 185.688664][ T6180] loop5: detected capacity change from 0 to 1024 [pid 6183] write(3, "1000", 4 [pid 6181] memfd_create("syzkaller", 0 [pid 6180] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5077] <... ioctl resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 6183] <... write resumed>) = 4 [pid 6182] <... write resumed>) = 524288 [pid 6181] <... memfd_create resumed>) = 3 [pid 6180] <... symlink resumed>) = 0 [pid 5077] close(3 [pid 6183] close(3 [pid 6180] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6183] <... close resumed>) = 0 [pid 6183] symlink("/dev/binderfs", "./binderfs" [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6183] <... symlink resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 6183] memfd_create("syzkaller", 0 [pid 6180] <... creat resumed>) = 4 [pid 6181] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6183] <... memfd_create resumed>) = 3 [pid 6182] munmap(0x7f0356e00000, 138412032 [pid 6180] rename("./bus", "./file2" [pid 6181] <... mmap resumed>) = 0x7f0356e00000 ./strace-static-x86_64: Process 6184 attached [pid 6183] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6182] <... munmap resumed>) = 0 [pid 6181] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6180] <... rename resumed>) = -1 EEXIST (File exists) [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6184 [pid 6184] set_robust_list(0x55556e32a660, 24 [pid 6183] <... mmap resumed>) = 0x7f0356e00000 [pid 6182] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6180] memfd_create("syzkaller", 0 [pid 6182] <... openat resumed>) = 4 [pid 6180] <... memfd_create resumed>) = 5 [pid 6182] ioctl(4, LOOP_SET_FD, 3 [pid 6180] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6184] <... set_robust_list resumed>) = 0 [pid 6181] <... write resumed>) = 524288 [pid 6184] chdir("./182") = 0 [pid 6182] <... ioctl resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 6184] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6182] close(3 [pid 6184] <... prctl resumed>) = 0 [pid 6182] <... close resumed>) = 0 [pid 6182] close(4 [pid 6184] setpgid(0, 0) = 0 [pid 6183] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6182] <... close resumed>) = 0 [pid 6180] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6184] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6182] mkdir("./bus", 0777 [pid 5074] close(3 [pid 6182] <... mkdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 6182] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6181] munmap(0x7f0356e00000, 138412032 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6185 ./strace-static-x86_64: Process 6185 attached [pid 6181] <... munmap resumed>) = 0 [pid 6185] set_robust_list(0x55556e32a660, 24) = 0 [ 185.777165][ T6182] loop2: detected capacity change from 0 to 1024 [pid 6185] chdir("./180" [pid 6184] <... openat resumed>) = 3 [pid 6181] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6181] ioctl(4, LOOP_SET_FD, 3 [pid 6184] write(3, "1000", 4 [pid 6183] <... write resumed>) = 524288 [pid 6182] <... mount resumed>) = 0 [pid 6184] <... write resumed>) = 4 [pid 6182] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6185] <... chdir resumed>) = 0 [pid 6184] close(3 [pid 6182] <... openat resumed>) = 3 [pid 6185] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6185] setpgid(0, 0 [pid 6184] <... close resumed>) = 0 [pid 6183] munmap(0x7f0356e00000, 138412032 [pid 6182] chdir("./bus" [pid 6180] <... write resumed>) = 524288 [pid 6184] symlink("/dev/binderfs", "./binderfs" [pid 6182] <... chdir resumed>) = 0 [pid 6180] munmap(0x7f0356e00000, 138412032 [pid 6185] <... setpgid resumed>) = 0 [pid 6184] <... symlink resumed>) = 0 [pid 6185] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6183] <... munmap resumed>) = 0 [pid 6182] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6180] <... munmap resumed>) = 0 [pid 6185] <... openat resumed>) = 3 [pid 6184] memfd_create("syzkaller", 0 [pid 6183] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6182] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6180] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6185] write(3, "1000", 4 [pid 6184] <... memfd_create resumed>) = 3 [pid 6183] <... openat resumed>) = 4 [pid 6182] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6180] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6185] <... write resumed>) = 4 [pid 6184] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6183] ioctl(4, LOOP_SET_FD, 3 [pid 6185] close(3 [pid 6184] <... mmap resumed>) = 0x7f0356e00000 [pid 6181] <... ioctl resumed>) = 0 [pid 6180] close(5 [pid 6185] <... close resumed>) = 0 [pid 6181] close(3 [pid 6185] symlink("/dev/binderfs", "./binderfs" [pid 6181] <... close resumed>) = 0 [pid 6185] <... symlink resumed>) = 0 [pid 6181] close(4 [pid 6185] memfd_create("syzkaller", 0 [pid 6181] <... close resumed>) = 0 [pid 6185] <... memfd_create resumed>) = 3 [pid 6181] mkdir("./bus", 0777) = 0 [pid 6185] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6181] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6180] <... close resumed>) = 0 [pid 6185] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6182] <... symlink resumed>) = 0 [pid 6182] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6184] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6182] <... creat resumed>) = 4 [pid 6182] rename("./bus", "./file2" [pid 6184] <... write resumed>) = 524288 [pid 6183] <... ioctl resumed>) = 0 [pid 6182] <... rename resumed>) = -1 EEXIST (File exists) [pid 6180] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6181] <... mount resumed>) = 0 [pid 6181] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6184] munmap(0x7f0356e00000, 138412032 [pid 6183] close(3 [pid 6182] memfd_create("syzkaller", 0 [pid 6181] chdir("./bus") = 0 [ 185.830820][ T6181] loop0: detected capacity change from 0 to 1024 [ 185.864355][ T6183] loop3: detected capacity change from 0 to 1024 [pid 6181] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6181] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6185] <... write resumed>) = 524288 [pid 6181] <... symlink resumed>) = 0 [pid 6182] <... memfd_create resumed>) = 5 [pid 6182] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6181] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6185] munmap(0x7f0356e00000, 138412032 [pid 6184] <... munmap resumed>) = 0 [pid 6183] <... close resumed>) = 0 [pid 6182] <... mmap resumed>) = 0x7f0356e00000 [pid 6180] <... open resumed>) = 5 [pid 6181] <... creat resumed>) = 4 [pid 6181] rename("./bus", "./file2" [pid 6183] close(4 [pid 6182] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6181] <... rename resumed>) = -1 EEXIST (File exists) [pid 6180] ftruncate(5, 0 [pid 6185] <... munmap resumed>) = 0 [pid 6183] <... close resumed>) = 0 [pid 6181] memfd_create("syzkaller", 0 [pid 6183] mkdir("./bus", 0777 [pid 6181] <... memfd_create resumed>) = 5 [pid 6180] <... ftruncate resumed>) = 0 [pid 6181] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6185] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6184] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6183] <... mkdir resumed>) = 0 [pid 6181] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6180] exit_group(0 [pid 6185] <... openat resumed>) = 4 [pid 6184] <... openat resumed>) = 4 [pid 6185] ioctl(4, LOOP_SET_FD, 3 [pid 6183] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6180] <... exit_group resumed>) = ? [pid 6180] +++ exited with 0 +++ [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6180, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5078] umount2("./182", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./182", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6181] <... write resumed>) = 524288 [pid 5078] <... openat resumed>) = 3 [pid 6182] <... write resumed>) = 524288 [ 185.919011][ T28] audit: type=1800 audit(1710613068.024:1089): pid=6180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 185.958279][ T6185] loop1: detected capacity change from 0 to 1024 [pid 6184] ioctl(4, LOOP_SET_FD, 3 [pid 5078] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] umount2("./182/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6181] munmap(0x7f0356e00000, 138412032) = 0 [pid 6181] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6185] <... ioctl resumed>) = 0 [pid 6184] <... ioctl resumed>) = 0 [pid 6183] <... mount resumed>) = 0 [pid 6182] munmap(0x7f0356e00000, 138412032 [pid 6181] close(5 [pid 6185] close(3 [pid 6183] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6185] <... close resumed>) = 0 [pid 6185] close(4 [pid 6184] close(3 [pid 6183] <... openat resumed>) = 3 [pid 6182] <... munmap resumed>) = 0 [pid 5078] <... umount2 resumed>) = 0 [pid 6181] <... close resumed>) = 0 [pid 6185] <... close resumed>) = 0 [pid 6184] <... close resumed>) = 0 [pid 6183] chdir("./bus" [pid 6182] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] umount2("./182/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6185] mkdir("./bus", 0777 [pid 6184] close(4 [pid 6183] <... chdir resumed>) = 0 [pid 6182] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6181] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6183] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5078] newfstatat(AT_FDCWD, "./182/bus", [pid 6184] <... close resumed>) = 0 [ 185.975566][ T6184] loop4: detected capacity change from 0 to 1024 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6182] close(5 [pid 6184] mkdir("./bus", 0777 [pid 6185] <... mkdir resumed>) = 0 [pid 6184] <... mkdir resumed>) = 0 [pid 5078] umount2("./182/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./182/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5078] newfstatat(4, "", [pid 6185] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6184] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6181] <... open resumed>) = 5 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6181] ftruncate(5, 0) = 0 [pid 6183] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6181] exit_group(0) = ? [pid 6183] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6181] +++ exited with 0 +++ [pid 6183] <... symlink resumed>) = 0 [pid 6183] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 4 [pid 6183] rename("./bus", "./file2" [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6181, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6183] <... rename resumed>) = -1 EEXIST (File exists) [pid 6182] <... close resumed>) = 0 [pid 5078] getdents64(4, [pid 6182] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6183] memfd_create("syzkaller", 0) = 5 [pid 5073] umount2("./180", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6183] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6184] <... mount resumed>) = 0 [pid 6183] <... mmap resumed>) = 0x7f0356e00000 [pid 6182] <... open resumed>) = 5 [pid 5078] getdents64(4, [pid 5073] openat(AT_FDCWD, "./180", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6184] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6182] ftruncate(5, 0 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5078] close(4 [pid 5073] newfstatat(3, "", [pid 6184] <... openat resumed>) = 3 [pid 6185] <... mount resumed>) = 0 [pid 6184] chdir("./bus" [pid 6183] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6182] <... ftruncate resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6185] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6184] <... chdir resumed>) = 0 [pid 5078] rmdir("./182/bus" [pid 5073] getdents64(3, [pid 6185] <... openat resumed>) = 3 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6185] chdir("./bus" [pid 6184] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6182] exit_group(0 [pid 5078] <... rmdir resumed>) = 0 [pid 5073] umount2("./180/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6185] <... chdir resumed>) = 0 [pid 6184] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6185] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6184] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6182] <... exit_group resumed>) = ? [pid 5078] umount2("./182/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6185] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6182] +++ exited with 0 +++ [pid 6185] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] newfstatat(AT_FDCWD, "./182/binderfs", [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6182, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 186.038300][ T28] audit: type=1800 audit(1710613068.144:1090): pid=6181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop0" ino=20 res=0 errno=0 [pid 5078] unlink("./182/binderfs") = 0 [pid 6185] <... symlink resumed>) = 0 [pid 5078] getdents64(3, [pid 6184] <... symlink resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6185] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] close(3) = 0 [pid 5075] umount2("./180", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6185] <... creat resumed>) = 4 [pid 6184] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6183] <... write resumed>) = 524288 [pid 5078] rmdir("./182" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = 0 [pid 6185] rename("./bus", "./file2" [pid 6184] <... creat resumed>) = 4 [pid 6183] munmap(0x7f0356e00000, 138412032 [pid 5078] <... rmdir resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./180", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] umount2("./180/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6185] <... rename resumed>) = -1 EEXIST (File exists) [pid 6184] rename("./bus", "./file2" [pid 5078] mkdir("./183", 0777 [pid 5075] <... openat resumed>) = 3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6185] memfd_create("syzkaller", 0 [pid 6184] <... rename resumed>) = -1 EEXIST (File exists) [pid 6183] <... munmap resumed>) = 0 [pid 5075] newfstatat(3, "", [pid 6185] <... memfd_create resumed>) = 5 [pid 6183] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] newfstatat(AT_FDCWD, "./180/bus", [pid 6185] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6184] memfd_create("syzkaller", 0 [pid 6183] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... mkdir resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6185] <... mmap resumed>) = 0x7f0356e00000 [pid 6184] <... memfd_create resumed>) = 5 [pid 6183] close(5 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] getdents64(3, [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6185] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6184] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6183] <... close resumed>) = 0 [pid 6184] <... mmap resumed>) = 0x7f0356e00000 [pid 6183] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] <... openat resumed>) = 3 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] umount2("./180/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5075] umount2("./180/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./180/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6184] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... openat resumed>) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6183] <... open resumed>) = 5 [pid 5073] getdents64(4, [pid 6183] ftruncate(5, 0) = 0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [ 186.119572][ T28] audit: type=1800 audit(1710613068.174:1091): pid=6182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop2" ino=20 res=0 errno=0 [pid 6183] exit_group(0 [pid 5073] getdents64(4, [pid 6183] <... exit_group resumed>) = ? [pid 6183] +++ exited with 0 +++ [pid 5075] <... umount2 resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6183, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5073] close(4) = 0 [pid 5076] umount2("./183", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] rmdir("./180/bus" [pid 5075] umount2("./180/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./183", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] <... rmdir resumed>) = 0 [pid 6184] <... write resumed>) = 524288 [pid 5076] newfstatat(3, "", [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./180/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6184] munmap(0x7f0356e00000, 138412032 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] newfstatat(AT_FDCWD, "./180/bus", [pid 5076] getdents64(3, [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] umount2("./180/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./183/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6184] <... munmap resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./180/binderfs", [pid 5075] openat(AT_FDCWD, "./180/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6185] <... write resumed>) = 524288 [pid 6184] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5075] <... openat resumed>) = 4 [pid 5073] unlink("./180/binderfs" [pid 6185] munmap(0x7f0356e00000, 138412032 [pid 5075] newfstatat(4, "", [pid 5073] <... unlink resumed>) = 0 [pid 6185] <... munmap resumed>) = 0 [pid 6184] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, [pid 5075] getdents64(4, [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6184] close(5 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] close(3 [pid 6185] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6184] <... close resumed>) = 0 [pid 5075] getdents64(4, [pid 5073] <... close resumed>) = 0 [pid 6185] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6185] close(5) = 0 [pid 5078] <... ioctl resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] close(4 [pid 5073] rmdir("./180" [pid 5076] <... umount2 resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5075] rmdir("./180/bus" [pid 5073] mkdir("./181", 0777 [pid 5075] <... rmdir resumed>) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 5075] umount2("./180/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6185] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6184] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] close(3 [pid 5076] umount2("./183/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... openat resumed>) = 3 [pid 5078] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5076] newfstatat(AT_FDCWD, "./183/bus", [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] newfstatat(AT_FDCWD, "./180/binderfs", ./strace-static-x86_64: Process 6186 attached [pid 6185] <... open resumed>) = 5 [pid 6184] <... open resumed>) = 5 [pid 5076] umount2("./183/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6185] ftruncate(5, 0 [pid 5076] openat(AT_FDCWD, "./183/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] unlink("./180/binderfs" [pid 6186] set_robust_list(0x55556e32a660, 24 [pid 6185] <... ftruncate resumed>) = 0 [pid 6184] ftruncate(5, 0 [pid 5076] <... openat resumed>) = 4 [pid 5075] <... unlink resumed>) = 0 [pid 6186] <... set_robust_list resumed>) = 0 [pid 5076] newfstatat(4, "", [pid 6186] chdir("./183" [pid 6185] exit_group(0 [pid 6184] <... ftruncate resumed>) = 0 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6186 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, [pid 6186] <... chdir resumed>) = 0 [pid 6185] <... exit_group resumed>) = ? [pid 6184] exit_group(0 [pid 5076] getdents64(4, [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6186] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6186] <... prctl resumed>) = 0 [pid 5076] getdents64(4, [pid 6186] setpgid(0, 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] close(4 [pid 6186] <... setpgid resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5076] rmdir("./183/bus" [pid 6184] <... exit_group resumed>) = ? [pid 5076] <... rmdir resumed>) = 0 [pid 5075] close(3 [pid 6186] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] umount2("./183/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6186] <... openat resumed>) = 3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./183/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./183/binderfs" [pid 6186] write(3, "1000", 4 [pid 6184] +++ exited with 0 +++ [pid 5076] <... unlink resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 6186] <... write resumed>) = 4 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6184, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5076] getdents64(3, [pid 5075] rmdir("./180" [pid 6186] close(3 [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6186] <... close resumed>) = 0 [pid 5077] <... restart_syscall resumed>) = 0 [pid 5076] close(3 [pid 6186] symlink("/dev/binderfs", "./binderfs" [pid 6185] +++ exited with 0 +++ [pid 5076] <... close resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 6186] <... symlink resumed>) = 0 [pid 5076] rmdir("./183" [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6185, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5077] umount2("./182", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... rmdir resumed>) = 0 [pid 5075] mkdir("./181", 0777 [pid 5074] <... restart_syscall resumed>) = 0 [pid 6186] memfd_create("syzkaller", 0 [pid 5077] openat(AT_FDCWD, "./182", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5075] <... mkdir resumed>) = 0 [pid 5077] newfstatat(3, "", [pid 5076] mkdir("./184", 0777 [pid 5074] umount2("./180", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] getdents64(3, [pid 5074] openat(AT_FDCWD, "./180", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6186] <... memfd_create resumed>) = 3 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5074] <... openat resumed>) = 3 [pid 6186] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] umount2("./182/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... openat resumed>) = 3 [pid 5074] newfstatat(3, "", [pid 6186] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] <... openat resumed>) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] umount2("./180/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6186] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5074] <... umount2 resumed>) = 0 [pid 5074] umount2("./180/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] <... umount2 resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./180/bus", [pid 5077] umount2("./182/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6186] <... write resumed>) = 524288 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 6186] munmap(0x7f0356e00000, 138412032 [pid 5077] newfstatat(AT_FDCWD, "./182/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./180/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] close(3 [pid 6186] <... munmap resumed>) = 0 [pid 6186] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] umount2("./182/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... close resumed>) = 0 [pid 6186] <... openat resumed>) = 4 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./180/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6186] ioctl(4, LOOP_SET_FD, 3 [pid 5077] openat(AT_FDCWD, "./182/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... openat resumed>) = 4 [pid 5077] <... openat resumed>) = 4 [pid 5074] newfstatat(4, "", [pid 5077] newfstatat(4, "", [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] getdents64(4, [pid 5074] getdents64(4, [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] <... ioctl resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] getdents64(4, [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6187 [pid 5074] close(4) = 0 ./strace-static-x86_64: Process 6187 attached [pid 6186] <... ioctl resumed>) = 0 [pid 6187] set_robust_list(0x55556e32a660, 24 [pid 6186] close(3 [pid 5074] rmdir("./180/bus" [pid 6187] <... set_robust_list resumed>) = 0 [pid 6186] <... close resumed>) = 0 [pid 6187] chdir("./181" [pid 6186] close(4 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 6187] <... chdir resumed>) = 0 [pid 6186] <... close resumed>) = 0 [pid 6187] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6186] mkdir("./bus", 0777 [pid 5077] close(4 [pid 5074] umount2("./180/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6186] <... mkdir resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6187] <... prctl resumed>) = 0 [pid 6186] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6187] setpgid(0, 0 [pid 5077] rmdir("./182/bus" [pid 5074] newfstatat(AT_FDCWD, "./180/binderfs", [pid 5077] <... rmdir resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./180/binderfs") = 0 [pid 6187] <... setpgid resumed>) = 0 [pid 6186] <... mount resumed>) = 0 [pid 5077] umount2("./182/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] getdents64(3, [pid 6187] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6186] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] close(3 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3 [pid 6187] <... openat resumed>) = 3 [pid 5074] <... close resumed>) = 0 [pid 6187] write(3, "1000", 4 [pid 6186] <... openat resumed>) = 3 [pid 5075] <... close resumed>) = 0 [pid 5074] rmdir("./180" [pid 6187] <... write resumed>) = 4 [pid 6186] chdir("./bus" [pid 5077] newfstatat(AT_FDCWD, "./182/binderfs", [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... rmdir resumed>) = 0 [pid 6187] close(3 [pid 6186] <... chdir resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 6188 attached [pid 6186] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] unlink("./182/binderfs" [pid 6187] <... close resumed>) = 0 [pid 5076] close(3 [pid 6186] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6187] symlink("/dev/binderfs", "./binderfs" [pid 6188] set_robust_list(0x55556e32a660, 24 [pid 6186] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6187] <... symlink resumed>) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5074] mkdir("./181", 0777 [pid 6187] memfd_create("syzkaller", 0 [pid 5077] getdents64(3, [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6188 ./strace-static-x86_64: Process 6189 attached [ 186.290503][ T6186] loop5: detected capacity change from 0 to 1024 [pid 6188] <... set_robust_list resumed>) = 0 [pid 6187] <... memfd_create resumed>) = 3 [pid 6186] <... symlink resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 6188] chdir("./181" [pid 6187] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6186] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] close(3) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5077] rmdir("./182" [pid 5074] <... openat resumed>) = 3 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6189 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6187] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] mkdir("./183", 0777 [pid 6188] <... chdir resumed>) = 0 [pid 6189] set_robust_list(0x55556e32a660, 24 [pid 6188] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5077] <... mkdir resumed>) = 0 [pid 6189] <... set_robust_list resumed>) = 0 [pid 6188] <... prctl resumed>) = 0 [pid 6186] <... creat resumed>) = 4 [pid 6189] chdir("./184" [pid 6188] setpgid(0, 0 [pid 6187] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6186] rename("./bus", "./file2" [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6189] <... chdir resumed>) = 0 [pid 6188] <... setpgid resumed>) = 0 [pid 6186] <... rename resumed>) = -1 EEXIST (File exists) [pid 6189] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6188] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6186] memfd_create("syzkaller", 0 [pid 5077] <... openat resumed>) = 3 [pid 6189] <... prctl resumed>) = 0 [pid 6186] <... memfd_create resumed>) = 5 [pid 6189] setpgid(0, 0 [pid 6186] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6189] <... setpgid resumed>) = 0 [pid 6188] <... openat resumed>) = 3 [pid 6186] <... mmap resumed>) = 0x7f0356e00000 [pid 6189] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5077] ioctl(3, LOOP_CLR_FD [pid 6186] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6189] <... openat resumed>) = 3 [pid 6188] write(3, "1000", 4) = 4 [pid 6189] write(3, "1000", 4 [pid 6188] close(3 [pid 6187] <... write resumed>) = 524288 [pid 6189] <... write resumed>) = 4 [pid 6188] <... close resumed>) = 0 [pid 6187] munmap(0x7f0356e00000, 138412032 [pid 6186] <... write resumed>) = 524288 [pid 5074] <... ioctl resumed>) = 0 [pid 6189] close(3 [pid 6188] symlink("/dev/binderfs", "./binderfs" [pid 6187] <... munmap resumed>) = 0 [pid 6188] <... symlink resumed>) = 0 [pid 6189] <... close resumed>) = 0 [pid 5074] close(3 [pid 6188] memfd_create("syzkaller", 0 [pid 6189] symlink("/dev/binderfs", "./binderfs" [pid 6188] <... memfd_create resumed>) = 3 [pid 5074] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6189] <... symlink resumed>) = 0 [pid 6188] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 6190 attached [pid 6189] memfd_create("syzkaller", 0 [pid 6188] <... mmap resumed>) = 0x7f0356e00000 [pid 6187] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6186] munmap(0x7f0356e00000, 138412032 [pid 6190] set_robust_list(0x55556e32a660, 24 [pid 6189] <... memfd_create resumed>) = 3 [pid 6188] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6187] <... openat resumed>) = 4 [pid 6186] <... munmap resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6190 [pid 6190] <... set_robust_list resumed>) = 0 [pid 6189] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6190] chdir("./181" [pid 6189] <... mmap resumed>) = 0x7f0356e00000 [pid 6187] ioctl(4, LOOP_SET_FD, 3 [pid 6186] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6190] <... chdir resumed>) = 0 [pid 6189] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6188] <... write resumed>) = 524288 [pid 6186] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6190] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6186] close(5 [pid 6190] setpgid(0, 0 [pid 5077] <... ioctl resumed>) = 0 [pid 5077] close(3 [pid 6190] <... setpgid resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6190] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 ./strace-static-x86_64: Process 6191 attached [pid 6191] set_robust_list(0x55556e32a660, 24 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6191 [pid 6191] <... set_robust_list resumed>) = 0 [pid 6191] chdir("./183") = 0 [pid 6190] write(3, "1000", 4 [pid 6189] <... write resumed>) = 524288 [pid 6188] munmap(0x7f0356e00000, 138412032 [pid 6187] <... ioctl resumed>) = 0 [pid 6186] <... close resumed>) = 0 [pid 6190] <... write resumed>) = 4 [pid 6189] munmap(0x7f0356e00000, 138412032 [pid 6190] close(3 [pid 6191] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6189] <... munmap resumed>) = 0 [pid 6191] setpgid(0, 0 [pid 6190] <... close resumed>) = 0 [pid 6189] openat(AT_FDCWD, "/dev/loop3", O_RDWR [ 186.432038][ T6187] loop0: detected capacity change from 0 to 1024 [pid 6187] close(3 [pid 6190] symlink("/dev/binderfs", "./binderfs" [pid 6188] <... munmap resumed>) = 0 [pid 6187] <... close resumed>) = 0 [pid 6189] <... openat resumed>) = 4 [pid 6186] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6190] <... symlink resumed>) = 0 [pid 6191] <... setpgid resumed>) = 0 [pid 6191] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6190] memfd_create("syzkaller", 0 [pid 6189] ioctl(4, LOOP_SET_FD, 3 [pid 6188] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6187] close(4 [pid 6191] <... openat resumed>) = 3 [pid 6191] write(3, "1000", 4) = 4 [pid 6191] close(3) = 0 [pid 6187] <... close resumed>) = 0 [pid 6187] mkdir("./bus", 0777 [pid 6186] <... open resumed>) = 5 [pid 6188] <... openat resumed>) = 4 [pid 6191] symlink("/dev/binderfs", "./binderfs" [pid 6190] <... memfd_create resumed>) = 3 [pid 6191] <... symlink resumed>) = 0 [pid 6190] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6188] ioctl(4, LOOP_SET_FD, 3 [pid 6187] <... mkdir resumed>) = 0 [pid 6186] ftruncate(5, 0 [pid 6191] memfd_create("syzkaller", 0 [pid 6190] <... mmap resumed>) = 0x7f0356e00000 [pid 6191] <... memfd_create resumed>) = 3 [pid 6187] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6186] <... ftruncate resumed>) = 0 [pid 6191] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6190] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6189] <... ioctl resumed>) = 0 [pid 6188] <... ioctl resumed>) = 0 [pid 6187] <... mount resumed>) = 0 [pid 6186] exit_group(0 [pid 6187] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6186] <... exit_group resumed>) = ? [pid 6187] <... openat resumed>) = 3 [pid 6186] +++ exited with 0 +++ [pid 6189] close(3 [pid 6187] chdir("./bus" [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6186, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6188] close(3 [pid 6187] <... chdir resumed>) = 0 [pid 6188] <... close resumed>) = 0 [pid 6187] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6188] close(4 [pid 6187] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6188] <... close resumed>) = 0 [pid 6187] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6190] <... write resumed>) = 524288 [pid 6188] mkdir("./bus", 0777 [pid 6187] <... symlink resumed>) = 0 [pid 6189] <... close resumed>) = 0 [pid 6187] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6189] close(4 [pid 5078] umount2("./183", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6189] <... close resumed>) = 0 [pid 6188] <... mkdir resumed>) = 0 [pid 6189] mkdir("./bus", 0777) = 0 [pid 6187] <... creat resumed>) = 4 [pid 6187] rename("./bus", "./file2" [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./183", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6188] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6187] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] <... openat resumed>) = 3 [pid 6191] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6189] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6187] memfd_create("syzkaller", 0 [pid 5078] newfstatat(3, "", [pid 6187] <... memfd_create resumed>) = 5 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6188] <... mount resumed>) = 0 [ 186.481499][ T6189] loop3: detected capacity change from 0 to 1024 [ 186.494287][ T6188] loop2: detected capacity change from 0 to 1024 [pid 6187] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] getdents64(3, [pid 6188] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6187] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6188] <... openat resumed>) = 3 [pid 5078] umount2("./183/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6188] chdir("./bus" [pid 6190] munmap(0x7f0356e00000, 138412032 [pid 6188] <... chdir resumed>) = 0 [pid 6190] <... munmap resumed>) = 0 [pid 6188] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6190] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6188] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6190] <... openat resumed>) = 4 [pid 6189] <... mount resumed>) = 0 [pid 6187] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6191] <... write resumed>) = 524288 [pid 6190] ioctl(4, LOOP_SET_FD, 3 [pid 6189] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6188] <... symlink resumed>) = 0 [pid 5078] <... umount2 resumed>) = 0 [pid 6191] munmap(0x7f0356e00000, 138412032 [pid 6189] <... openat resumed>) = 3 [pid 6187] <... write resumed>) = 524288 [pid 5078] umount2("./183/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6189] chdir("./bus" [pid 6188] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6189] <... chdir resumed>) = 0 [pid 6189] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6189] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] newfstatat(AT_FDCWD, "./183/bus", [pid 6189] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6188] <... creat resumed>) = 4 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6191] <... munmap resumed>) = 0 [pid 5078] umount2("./183/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6191] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6188] rename("./bus", "./file2" [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6191] ioctl(4, LOOP_SET_FD, 3 [pid 5078] openat(AT_FDCWD, "./183/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6187] munmap(0x7f0356e00000, 138412032) = 0 [pid 6191] <... ioctl resumed>) = 0 [pid 6190] <... ioctl resumed>) = 0 [pid 6189] <... symlink resumed>) = 0 [pid 6188] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] <... openat resumed>) = 4 [pid 6188] memfd_create("syzkaller", 0 [pid 6189] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6191] close(3 [pid 6188] <... memfd_create resumed>) = 5 [pid 5078] newfstatat(4, "", [pid 6188] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6190] close(3 [pid 6188] <... mmap resumed>) = 0x7f0356e00000 [pid 6191] <... close resumed>) = 0 [pid 6189] <... creat resumed>) = 4 [pid 6187] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(4, [pid 6191] close(4) = 0 [pid 6190] <... close resumed>) = 0 [pid 6188] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6187] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6191] mkdir("./bus", 0777 [pid 6189] rename("./bus", "./file2" [pid 6191] <... mkdir resumed>) = 0 [pid 6190] close(4 [pid 6189] <... rename resumed>) = -1 EEXIST (File exists) [pid 6187] close(5 [pid 5078] getdents64(4, [pid 6189] memfd_create("syzkaller", 0 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6191] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6190] <... close resumed>) = 0 [pid 6189] <... memfd_create resumed>) = 5 [pid 6187] <... close resumed>) = 0 [pid 5078] close(4 [pid 6190] mkdir("./bus", 0777) = 0 [pid 6190] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5078] <... close resumed>) = 0 [pid 5078] rmdir("./183/bus" [pid 6191] <... mount resumed>) = 0 [pid 6189] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... rmdir resumed>) = 0 [pid 6191] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6189] <... mmap resumed>) = 0x7f0356e00000 [pid 6191] <... openat resumed>) = 3 [pid 5078] umount2("./183/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6191] chdir("./bus" [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 186.571355][ T6190] loop1: detected capacity change from 0 to 1024 [ 186.593169][ T6191] loop4: detected capacity change from 0 to 1024 [pid 5078] newfstatat(AT_FDCWD, "./183/binderfs", [pid 6191] <... chdir resumed>) = 0 [pid 6189] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6188] <... write resumed>) = 524288 [pid 6187] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6191] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] unlink("./183/binderfs" [pid 6191] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6190] <... mount resumed>) = 0 [pid 6188] munmap(0x7f0356e00000, 138412032 [pid 5078] <... unlink resumed>) = 0 [pid 6191] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6190] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6188] <... munmap resumed>) = 0 [pid 6187] <... open resumed>) = 5 [pid 5078] getdents64(3, [pid 6190] <... openat resumed>) = 3 [pid 6190] chdir("./bus") = 0 [pid 6190] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6187] ftruncate(5, 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5078] close(3 [pid 6188] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6187] <... ftruncate resumed>) = 0 [pid 6188] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6187] exit_group(0 [pid 5078] <... close resumed>) = 0 [pid 6187] <... exit_group resumed>) = ? [pid 6191] <... symlink resumed>) = 0 [pid 5078] rmdir("./183" [pid 6189] <... write resumed>) = 524288 [pid 6188] close(5 [pid 6187] +++ exited with 0 +++ [pid 5078] <... rmdir resumed>) = 0 [pid 6191] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6190] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6189] munmap(0x7f0356e00000, 138412032 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6187, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6190] <... symlink resumed>) = 0 [pid 6189] <... munmap resumed>) = 0 [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 6190] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6189] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6188] <... close resumed>) = 0 [pid 5078] mkdir("./184", 0777 [pid 5073] <... restart_syscall resumed>) = 0 [pid 6189] close(5 [pid 6191] <... creat resumed>) = 4 [pid 6191] rename("./bus", "./file2" [pid 6189] <... close resumed>) = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 6188] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5073] umount2("./181", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6190] <... creat resumed>) = 4 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6191] <... rename resumed>) = -1 EEXIST (File exists) [pid 6190] rename("./bus", "./file2" [pid 6188] <... open resumed>) = 5 [pid 5073] openat(AT_FDCWD, "./181", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6191] memfd_create("syzkaller", 0 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] <... openat resumed>) = 3 [pid 6191] <... memfd_create resumed>) = 5 [pid 6188] ftruncate(5, 0 [pid 5078] <... openat resumed>) = 3 [pid 5073] newfstatat(3, "", [pid 6191] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6188] <... ftruncate resumed>) = 0 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6188] exit_group(0 [pid 6190] <... rename resumed>) = -1 EEXIST (File exists) [pid 6190] memfd_create("syzkaller", 0 [pid 6188] <... exit_group resumed>) = ? [pid 6190] <... memfd_create resumed>) = 5 [pid 6189] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6188] +++ exited with 0 +++ [pid 5073] getdents64(3, [pid 6190] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6188, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6190] <... mmap resumed>) = 0x7f0356e00000 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6191] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6189] <... open resumed>) = 5 [pid 5073] umount2("./181/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./181", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6189] ftruncate(5, 0 [pid 5075] openat(AT_FDCWD, "./181", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5075] newfstatat(3, "", [pid 6189] <... ftruncate resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] umount2("./181/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6190] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6189] exit_group(0) = ? [pid 5075] <... umount2 resumed>) = 0 [pid 6191] <... write resumed>) = 524288 [pid 6190] <... write resumed>) = 524288 [pid 6189] +++ exited with 0 +++ [pid 5075] umount2("./181/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = 0 [pid 5078] <... ioctl resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6190] munmap(0x7f0356e00000, 138412032 [pid 5073] umount2("./181/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6190] <... munmap resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./181/bus", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] newfstatat(AT_FDCWD, "./181/bus", [pid 5075] umount2("./181/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6190] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6189, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5073] umount2("./181/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6191] munmap(0x7f0356e00000, 138412032 [pid 5078] close(3 [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6190] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... restart_syscall resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./181/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] openat(AT_FDCWD, "./181/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6191] <... munmap resumed>) = 0 [pid 6190] close(5 [pid 5078] <... close resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 5073] <... openat resumed>) = 4 [pid 6191] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6190] <... close resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] newfstatat(4, "", [pid 5073] newfstatat(4, "", [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, [pid 5073] getdents64(4, ./strace-static-x86_64: Process 6192 attached [pid 6191] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] umount2("./184", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6192] set_robust_list(0x55556e32a660, 24 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6192 [pid 6191] close(5 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6192] <... set_robust_list resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./184", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6192] chdir("./184" [pid 5076] <... openat resumed>) = 3 [pid 5075] getdents64(4, [pid 5073] getdents64(4, [pid 5076] newfstatat(3, "", [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6192] <... chdir resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] close(4 [pid 5073] close(4 [pid 6192] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] getdents64(3, [pid 5075] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] rmdir("./181/bus" [pid 5073] <... close resumed>) = 0 [pid 6192] <... prctl resumed>) = 0 [pid 5076] umount2("./184/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... rmdir resumed>) = 0 [pid 5073] rmdir("./181/bus" [pid 6190] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5075] umount2("./181/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... rmdir resumed>) = 0 [pid 6192] setpgid(0, 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6192] <... setpgid resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./181/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./181/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] unlink("./181/binderfs" [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6192] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6191] <... close resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./181/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6192] <... openat resumed>) = 3 [pid 6191] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6190] <... open resumed>) = 5 [pid 5075] getdents64(3, [pid 5073] unlink("./181/binderfs" [pid 6190] ftruncate(5, 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 6192] write(3, "1000", 4 [pid 6190] <... ftruncate resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5075] close(3 [pid 5073] getdents64(3, [pid 6192] <... write resumed>) = 4 [pid 5076] umount2("./184/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... close resumed>) = 0 [pid 6192] close(3 [pid 6191] <... open resumed>) = 5 [pid 6190] exit_group(0 [pid 5075] rmdir("./181" [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6192] <... close resumed>) = 0 [pid 6191] ftruncate(5, 0 [pid 6190] <... exit_group resumed>) = ? [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] close(3 [pid 6192] symlink("/dev/binderfs", "./binderfs" [pid 6191] <... ftruncate resumed>) = 0 [pid 6192] <... symlink resumed>) = 0 [pid 6191] exit_group(0 [pid 5076] newfstatat(AT_FDCWD, "./184/bus", [pid 6191] <... exit_group resumed>) = ? [pid 6190] +++ exited with 0 +++ [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... close resumed>) = 0 [pid 6192] memfd_create("syzkaller", 0 [pid 6191] +++ exited with 0 +++ [pid 5076] umount2("./184/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... rmdir resumed>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6190, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5073] rmdir("./181" [pid 6192] <... memfd_create resumed>) = 3 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6191, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] mkdir("./182", 0777 [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 6192] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 5074] <... restart_syscall resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 6192] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] <... restart_syscall resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./184/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... mkdir resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5073] mkdir("./182", 0777 [pid 5075] <... openat resumed>) = 3 [pid 5074] umount2("./181", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./181", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] <... mkdir resumed>) = 0 [pid 5074] newfstatat(3, "", [pid 5077] umount2("./183", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] newfstatat(4, "", [pid 5074] getdents64(3, [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] openat(AT_FDCWD, "./183", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] getdents64(4, [pid 5074] umount2("./181/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... openat resumed>) = 3 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] newfstatat(3, "", [pid 5076] getdents64(4, [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] getdents64(3, [pid 5076] close(4 [pid 5073] <... openat resumed>) = 3 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] <... close resumed>) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6192] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] umount2("./183/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] rmdir("./184/bus") = 0 [pid 5076] umount2("./184/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6192] <... write resumed>) = 524288 [pid 5077] <... umount2 resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 6192] munmap(0x7f0356e00000, 138412032 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./181/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] newfstatat(AT_FDCWD, "./184/binderfs", [pid 5077] umount2("./183/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6192] <... munmap resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./181/bus", [pid 6192] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] newfstatat(AT_FDCWD, "./183/bus", [pid 6192] <... openat resumed>) = 4 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./184/binderfs" [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6192] ioctl(4, LOOP_SET_FD, 3 [pid 5077] umount2("./183/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./181/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... unlink resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./181/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] getdents64(3, [pid 5074] <... openat resumed>) = 4 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6192] <... ioctl resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... ioctl resumed>) = 0 [pid 5074] newfstatat(4, "", [pid 5077] openat(AT_FDCWD, "./183/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] close(3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6192] close(3 [pid 5076] <... close resumed>) = 0 [pid 6192] <... close resumed>) = 0 [pid 5075] close(3 [pid 6192] close(4 [pid 5075] <... close resumed>) = 0 [pid 6192] <... close resumed>) = 0 [pid 5077] <... openat resumed>) = 4 [pid 5076] rmdir("./184" [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] getdents64(4, [pid 5077] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] getdents64(4, [pid 5074] getdents64(4, [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] getdents64(4, [pid 5076] mkdir("./185", 0777 [pid 5074] close(4 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] <... close resumed>) = 0 [pid 5077] close(4 [pid 5076] <... mkdir resumed>) = 0 [pid 5074] rmdir("./181/bus" [pid 5077] <... close resumed>) = 0 [pid 5077] rmdir("./183/bus") = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 6192] mkdir("./bus", 0777 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5077] umount2("./183/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... openat resumed>) = 3 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./181/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] newfstatat(AT_FDCWD, "./183/binderfs", [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] newfstatat(AT_FDCWD, "./181/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] unlink("./183/binderfs" [pid 5074] unlink("./181/binderfs" [pid 5077] <... unlink resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5077] getdents64(3, [pid 5074] getdents64(3, [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] close(3 [pid 5074] close(3 [pid 5077] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5077] rmdir("./183" [pid 5074] rmdir("./181" [pid 6192] <... mkdir resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5077] mkdir("./184", 0777./strace-static-x86_64: Process 6193 attached [pid 6192] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5074] mkdir("./182", 0777 [pid 5073] <... ioctl resumed>) = 0 [pid 6193] set_robust_list(0x55556e32a660, 24) = 0 [pid 6192] <... mount resumed>) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6193 [pid 5074] <... mkdir resumed>) = 0 [pid 5073] close(3 [pid 6193] chdir("./182" [pid 6192] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] <... close resumed>) = 0 [pid 6193] <... chdir resumed>) = 0 [pid 6192] <... openat resumed>) = 3 [ 186.849414][ T6192] loop5: detected capacity change from 0 to 1024 [pid 5074] <... openat resumed>) = 3 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6193] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6192] chdir("./bus" [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 6194 attached [pid 6193] <... prctl resumed>) = 0 [pid 6192] <... chdir resumed>) = 0 [pid 6194] set_robust_list(0x55556e32a660, 24 [pid 6193] setpgid(0, 0 [pid 6192] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] <... openat resumed>) = 3 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6194 [pid 6194] <... set_robust_list resumed>) = 0 [pid 6193] <... setpgid resumed>) = 0 [pid 6192] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... ioctl resumed>) = 0 [pid 6193] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6192] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5077] ioctl(3, LOOP_CLR_FD [pid 6194] chdir("./182" [pid 6193] <... openat resumed>) = 3 [pid 6192] <... symlink resumed>) = 0 [pid 6194] <... chdir resumed>) = 0 [pid 6192] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6194] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6193] write(3, "1000", 4 [pid 5076] close(3) = 0 [pid 6194] <... prctl resumed>) = 0 [pid 6193] <... write resumed>) = 4 [pid 6193] close(3) = 0 [pid 6193] symlink("/dev/binderfs", "./binderfs" [pid 6194] setpgid(0, 0 [pid 6193] <... symlink resumed>) = 0 [pid 6192] <... creat resumed>) = 4 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6193] memfd_create("syzkaller", 0 [pid 6192] rename("./bus", "./file2" [pid 6193] <... memfd_create resumed>) = 3 [pid 6194] <... setpgid resumed>) = 0 [pid 6193] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6194] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6193] <... mmap resumed>) = 0x7f0356e00000 [pid 6192] <... rename resumed>) = -1 EEXIST (File exists) ./strace-static-x86_64: Process 6195 attached [pid 6193] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6192] memfd_create("syzkaller", 0 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6195 [pid 6192] <... memfd_create resumed>) = 5 [pid 6192] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6194] <... openat resumed>) = 3 [pid 6192] <... mmap resumed>) = 0x7f0356e00000 [pid 6195] set_robust_list(0x55556e32a660, 24 [pid 6194] write(3, "1000", 4 [pid 6192] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... ioctl resumed>) = 0 [pid 6195] <... set_robust_list resumed>) = 0 [pid 6194] <... write resumed>) = 4 [pid 6194] close(3) = 0 [pid 6195] chdir("./185" [pid 6194] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6195] <... chdir resumed>) = 0 [pid 6194] memfd_create("syzkaller", 0 [pid 6195] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6194] <... memfd_create resumed>) = 3 [pid 6195] <... prctl resumed>) = 0 [pid 6195] setpgid(0, 0 [pid 6194] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6194] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6195] <... setpgid resumed>) = 0 [pid 5074] close(3 [pid 6195] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6193] <... write resumed>) = 524288 [pid 5077] <... ioctl resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6195] <... openat resumed>) = 3 [pid 6192] <... write resumed>) = 524288 [pid 6195] write(3, "1000", 4 [pid 6194] <... write resumed>) = 524288 [pid 6193] munmap(0x7f0356e00000, 138412032 [pid 5077] close(3./strace-static-x86_64: Process 6196 attached [pid 6195] <... write resumed>) = 4 [pid 6194] munmap(0x7f0356e00000, 138412032 [pid 6192] munmap(0x7f0356e00000, 138412032 [pid 5077] <... close resumed>) = 0 [pid 6196] set_robust_list(0x55556e32a660, 24 [pid 6195] close(3 [pid 6196] <... set_robust_list resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6196 [pid 6195] <... close resumed>) = 0 [pid 6196] chdir("./182" [pid 6195] symlink("/dev/binderfs", "./binderfs" [pid 6194] <... munmap resumed>) = 0 [pid 6193] <... munmap resumed>) = 0 [pid 6192] <... munmap resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6197 attached [pid 6196] <... chdir resumed>) = 0 [pid 6195] <... symlink resumed>) = 0 [pid 6194] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6193] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6192] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6196] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6195] memfd_create("syzkaller", 0 [pid 6194] <... openat resumed>) = 4 [pid 6193] <... openat resumed>) = 4 [pid 6192] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6197 [pid 6196] <... prctl resumed>) = 0 [pid 6195] <... memfd_create resumed>) = 3 [pid 6194] ioctl(4, LOOP_SET_FD, 3 [pid 6193] ioctl(4, LOOP_SET_FD, 3 [pid 6192] close(5 [pid 6197] set_robust_list(0x55556e32a660, 24 [pid 6196] setpgid(0, 0 [pid 6195] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6197] <... set_robust_list resumed>) = 0 [pid 6196] <... setpgid resumed>) = 0 [pid 6197] chdir("./184" [pid 6196] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6195] <... mmap resumed>) = 0x7f0356e00000 [pid 6192] <... close resumed>) = 0 [pid 6197] <... chdir resumed>) = 0 [pid 6196] <... openat resumed>) = 3 [pid 6195] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6194] <... ioctl resumed>) = 0 [pid 6197] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6196] write(3, "1000", 4 [pid 6197] <... prctl resumed>) = 0 [pid 6196] <... write resumed>) = 4 [pid 6197] setpgid(0, 0 [pid 6196] close(3 [pid 6197] <... setpgid resumed>) = 0 [pid 6196] <... close resumed>) = 0 [pid 6196] symlink("/dev/binderfs", "./binderfs" [pid 6192] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6197] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6196] <... symlink resumed>) = 0 [pid 6196] memfd_create("syzkaller", 0) = 3 [pid 6194] close(3) = 0 [pid 6197] <... openat resumed>) = 3 [pid 6196] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6194] close(4 [pid 6196] <... mmap resumed>) = 0x7f0356e00000 [pid 6193] <... ioctl resumed>) = 0 [pid 6193] close(3 [pid 6192] <... open resumed>) = 5 [pid 6193] <... close resumed>) = 0 [pid 6193] close(4) = 0 [pid 6192] ftruncate(5, 0 [pid 6193] mkdir("./bus", 0777 [pid 6192] <... ftruncate resumed>) = 0 [pid 6197] write(3, "1000", 4 [pid 6196] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6195] <... write resumed>) = 524288 [pid 6194] <... close resumed>) = 0 [pid 6197] <... write resumed>) = 4 [pid 6196] <... write resumed>) = 524288 [pid 6195] munmap(0x7f0356e00000, 138412032 [pid 6194] mkdir("./bus", 0777 [pid 6192] exit_group(0 [pid 6197] close(3 [pid 6196] munmap(0x7f0356e00000, 138412032 [pid 6195] <... munmap resumed>) = 0 [pid 6194] <... mkdir resumed>) = 0 [pid 6192] <... exit_group resumed>) = ? [pid 6197] <... close resumed>) = 0 [ 187.022653][ T6194] loop0: detected capacity change from 0 to 1024 [ 187.035662][ T6193] loop2: detected capacity change from 0 to 1024 [pid 6197] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6196] <... munmap resumed>) = 0 [pid 6192] +++ exited with 0 +++ [pid 6197] memfd_create("syzkaller", 0 [pid 6196] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6195] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6194] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6192, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6193] <... mkdir resumed>) = 0 [pid 6196] <... openat resumed>) = 4 [pid 6195] <... openat resumed>) = 4 [pid 6197] <... memfd_create resumed>) = 3 [pid 6196] ioctl(4, LOOP_SET_FD, 3 [pid 6195] ioctl(4, LOOP_SET_FD, 3 [pid 6193] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6197] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] umount2("./184", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6197] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6197] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] openat(AT_FDCWD, "./184", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5078] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] umount2("./184/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6197] <... write resumed>) = 524288 [pid 6197] munmap(0x7f0356e00000, 138412032 [pid 6196] <... ioctl resumed>) = 0 [pid 6195] <... ioctl resumed>) = 0 [pid 6193] <... mount resumed>) = 0 [pid 5078] <... umount2 resumed>) = 0 [pid 6197] <... munmap resumed>) = 0 [pid 6196] close(3 [pid 6194] <... mount resumed>) = 0 [pid 6193] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] umount2("./184/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6197] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6196] <... close resumed>) = 0 [pid 6195] close(3 [pid 6194] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6193] <... openat resumed>) = 3 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6197] <... openat resumed>) = 4 [pid 6196] close(4 [pid 6195] <... close resumed>) = 0 [pid 6194] <... openat resumed>) = 3 [pid 6193] chdir("./bus" [pid 5078] newfstatat(AT_FDCWD, "./184/bus", [pid 6197] ioctl(4, LOOP_SET_FD, 3 [pid 6196] <... close resumed>) = 0 [ 187.090330][ T6195] loop3: detected capacity change from 0 to 1024 [ 187.100294][ T6196] loop1: detected capacity change from 0 to 1024 [pid 6195] close(4 [pid 6194] chdir("./bus" [pid 6193] <... chdir resumed>) = 0 [pid 6196] mkdir("./bus", 0777 [pid 6194] <... chdir resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] umount2("./184/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6195] <... close resumed>) = 0 [pid 6195] mkdir("./bus", 0777 [pid 5078] openat(AT_FDCWD, "./184/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6195] <... mkdir resumed>) = 0 [pid 5078] <... openat resumed>) = 4 [pid 5078] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(4, [pid 6196] <... mkdir resumed>) = 0 [pid 6195] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6194] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6193] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6194] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6193] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] getdents64(4, [pid 6194] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6193] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6196] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6194] <... symlink resumed>) = 0 [pid 6193] <... symlink resumed>) = 0 [pid 5078] close(4) = 0 [pid 5078] rmdir("./184/bus" [pid 6193] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6194] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] <... rmdir resumed>) = 0 [pid 5078] umount2("./184/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6194] <... creat resumed>) = 4 [pid 6193] <... creat resumed>) = 4 [pid 5078] newfstatat(AT_FDCWD, "./184/binderfs", [pid 6197] <... ioctl resumed>) = 0 [pid 6194] rename("./bus", "./file2" [pid 6193] rename("./bus", "./file2" [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6197] close(3 [pid 6194] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] unlink("./184/binderfs" [pid 6196] <... mount resumed>) = 0 [pid 6193] <... rename resumed>) = -1 EEXIST (File exists) [pid 6197] <... close resumed>) = 0 [pid 6196] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6195] <... mount resumed>) = 0 [pid 6194] memfd_create("syzkaller", 0 [pid 5078] <... unlink resumed>) = 0 [pid 6197] close(4 [pid 6196] <... openat resumed>) = 3 [pid 6195] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6194] <... memfd_create resumed>) = 5 [pid 6193] memfd_create("syzkaller", 0 [pid 5078] getdents64(3, [pid 6197] <... close resumed>) = 0 [pid 6196] chdir("./bus" [pid 6197] mkdir("./bus", 0777 [pid 6196] <... chdir resumed>) = 0 [pid 6194] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6197] <... mkdir resumed>) = 0 [pid 6196] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5078] close(3 [pid 6194] <... mmap resumed>) = 0x7f0356e00000 [pid 6197] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6196] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6195] <... openat resumed>) = 3 [pid 6193] <... memfd_create resumed>) = 5 [pid 6196] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6195] chdir("./bus" [pid 6193] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6195] <... chdir resumed>) = 0 [pid 6194] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6193] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... close resumed>) = 0 [pid 6196] <... symlink resumed>) = 0 [pid 6195] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6193] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] rmdir("./184" [pid 6195] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6196] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6195] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] <... rmdir resumed>) = 0 [pid 6195] <... symlink resumed>) = 0 [ 187.137696][ T6197] loop4: detected capacity change from 0 to 1024 [pid 6195] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] mkdir("./185", 0777 [pid 6194] <... write resumed>) = 524288 [pid 5078] <... mkdir resumed>) = 0 [pid 6196] <... creat resumed>) = 4 [pid 6196] rename("./bus", "./file2" [pid 6195] <... creat resumed>) = 4 [pid 6195] rename("./bus", "./file2" [pid 6197] <... mount resumed>) = 0 [pid 6196] <... rename resumed>) = -1 EEXIST (File exists) [pid 6193] <... write resumed>) = 524288 [pid 6197] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6196] memfd_create("syzkaller", 0 [pid 6195] <... rename resumed>) = -1 EEXIST (File exists) [pid 6197] <... openat resumed>) = 3 [pid 6196] <... memfd_create resumed>) = 5 [pid 6195] memfd_create("syzkaller", 0) = 5 [pid 6197] chdir("./bus" [pid 6196] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6195] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6197] <... chdir resumed>) = 0 [pid 6196] <... mmap resumed>) = 0x7f0356e00000 [pid 6195] <... mmap resumed>) = 0x7f0356e00000 [pid 6195] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6197] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6197] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6194] munmap(0x7f0356e00000, 138412032 [pid 5078] <... openat resumed>) = 3 [pid 6197] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6194] <... munmap resumed>) = 0 [pid 6194] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6197] <... symlink resumed>) = 0 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 6197] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6196] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6194] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6193] munmap(0x7f0356e00000, 138412032 [pid 6196] <... write resumed>) = 524288 [pid 6193] <... munmap resumed>) = 0 [pid 6194] close(5) = 0 [pid 6193] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6193] close(5 [pid 6197] <... creat resumed>) = 4 [pid 6197] rename("./bus", "./file2") = -1 EEXIST (File exists) [pid 6196] munmap(0x7f0356e00000, 138412032 [pid 6195] <... write resumed>) = 524288 [pid 6194] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6193] <... close resumed>) = 0 [pid 6197] memfd_create("syzkaller", 0 [pid 6196] <... munmap resumed>) = 0 [pid 6197] <... memfd_create resumed>) = 5 [pid 6196] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6193] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6197] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6196] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6197] <... mmap resumed>) = 0x7f0356e00000 [pid 6196] close(5 [pid 6195] munmap(0x7f0356e00000, 138412032 [pid 6194] <... open resumed>) = 5 [pid 6194] ftruncate(5, 0 [pid 6195] <... munmap resumed>) = 0 [pid 6194] <... ftruncate resumed>) = 0 [pid 6193] <... open resumed>) = 5 [pid 5078] <... ioctl resumed>) = 0 [pid 6195] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6194] exit_group(0 [pid 6195] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6194] <... exit_group resumed>) = ? [pid 6196] <... close resumed>) = 0 [pid 6197] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6196] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6195] close(5 [pid 6193] ftruncate(5, 0 [pid 6195] <... close resumed>) = 0 [pid 6193] <... ftruncate resumed>) = 0 [pid 6193] exit_group(0) = ? [pid 6194] +++ exited with 0 +++ [pid 6193] +++ exited with 0 +++ [pid 5078] close(3) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6193, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6194, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6196] <... open resumed>) = 5 [pid 5075] umount2("./182", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6196] ftruncate(5, 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./182", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "./182", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6195] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5073] openat(AT_FDCWD, "./182", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6198 attached [pid 6196] <... ftruncate resumed>) = 0 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6198 [pid 5075] <... openat resumed>) = 3 [pid 5075] newfstatat(3, "", [pid 6198] set_robust_list(0x55556e32a660, 24 [pid 6197] <... write resumed>) = 524288 [pid 6196] exit_group(0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5073] newfstatat(3, "", [pid 6198] <... set_robust_list resumed>) = 0 [pid 6196] <... exit_group resumed>) = ? [pid 5075] getdents64(3, [pid 6196] +++ exited with 0 +++ [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6196, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 6198] chdir("./185" [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6195] <... open resumed>) = 5 [pid 5075] umount2("./182/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... restart_syscall resumed>) = 0 [pid 6198] <... chdir resumed>) = 0 [pid 6197] munmap(0x7f0356e00000, 138412032 [pid 6195] ftruncate(5, 0 [pid 5073] getdents64(3, [pid 5074] umount2("./182", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6198] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./182", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6198] <... prctl resumed>) = 0 [pid 6197] <... munmap resumed>) = 0 [pid 5074] newfstatat(3, "", [pid 5073] umount2("./182/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6198] setpgid(0, 0 [pid 6197] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6195] <... ftruncate resumed>) = 0 [pid 5074] getdents64(3, [pid 6198] <... setpgid resumed>) = 0 [pid 6197] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6195] exit_group(0 [pid 5074] umount2("./182/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6198] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6197] close(5 [pid 6195] <... exit_group resumed>) = ? [pid 6198] <... openat resumed>) = 3 [pid 6197] <... close resumed>) = 0 [pid 6198] write(3, "1000", 4) = 4 [pid 6197] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6195] +++ exited with 0 +++ [pid 5075] <... umount2 resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 6198] close(3 [pid 6197] <... open resumed>) = 5 [pid 6198] <... close resumed>) = 0 [pid 6197] ftruncate(5, 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6195, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] umount2("./182/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./182/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6198] symlink("/dev/binderfs", "./binderfs" [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6198] <... symlink resumed>) = 0 [pid 6197] <... ftruncate resumed>) = 0 [pid 5076] <... restart_syscall resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./182/bus", [pid 5074] <... umount2 resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./182/bus", [pid 6198] memfd_create("syzkaller", 0 [pid 6197] exit_group(0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./182/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6198] <... memfd_create resumed>) = 3 [pid 5075] umount2("./182/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./182/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6198] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6197] <... exit_group resumed>) = ? [pid 5076] umount2("./185", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./182/bus", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6198] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./182/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] openat(AT_FDCWD, "./182/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6198] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6197] +++ exited with 0 +++ [pid 5076] openat(AT_FDCWD, "./185", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] umount2("./182/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... openat resumed>) = 4 [pid 5076] <... openat resumed>) = 3 [pid 5075] <... openat resumed>) = 4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(3, "", [pid 5074] openat(AT_FDCWD, "./182/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6197, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, [pid 5074] <... openat resumed>) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] umount2("./184", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] newfstatat(4, "", [pid 5073] getdents64(4, [pid 5076] umount2("./185/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] newfstatat(4, "", [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, [pid 5073] getdents64(4, [pid 5077] openat(AT_FDCWD, "./184", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] getdents64(4, [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] <... openat resumed>) = 3 [pid 5074] getdents64(4, [pid 5077] newfstatat(3, "", [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] close(4 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] getdents64(3, [pid 5074] <... close resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] getdents64(4, [pid 5074] rmdir("./182/bus" [pid 5073] close(4 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] <... close resumed>) = 0 [pid 5075] close(4 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] rmdir("./182/bus" [pid 5075] <... close resumed>) = 0 [pid 5074] umount2("./182/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... rmdir resumed>) = 0 [pid 5077] umount2("./184/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = 0 [pid 5075] rmdir("./182/bus" [pid 5074] newfstatat(AT_FDCWD, "./182/binderfs", [pid 5073] umount2("./182/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./185/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... rmdir resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./182/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] newfstatat(AT_FDCWD, "./182/binderfs", [pid 5076] newfstatat(AT_FDCWD, "./185/bus", [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] newfstatat(AT_FDCWD, "./182/binderfs", [pid 5073] unlink("./182/binderfs" [pid 6198] <... write resumed>) = 524288 [pid 5076] umount2("./185/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./182/binderfs" [pid 5073] <... unlink resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./185/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] unlink("./182/binderfs" [pid 5076] <... openat resumed>) = 4 [pid 5075] <... unlink resumed>) = 0 [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, [pid 5074] <... unlink resumed>) = 0 [pid 5073] getdents64(3, [pid 6198] munmap(0x7f0356e00000, 138412032 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6198] <... munmap resumed>) = 0 [pid 5075] close(3 [pid 5073] close(3 [pid 5075] <... close resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5076] getdents64(4, [pid 5075] rmdir("./182" [pid 5074] getdents64(3, [pid 5073] rmdir("./182" [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] getdents64(4, [pid 5074] close(3 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6198] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] <... umount2 resumed>) = 0 [pid 5076] close(4 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5075] mkdir("./183", 0777 [pid 6198] <... openat resumed>) = 4 [pid 5077] umount2("./184/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... close resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] rmdir("./182" [pid 6198] ioctl(4, LOOP_SET_FD, 3 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] rmdir("./185/bus" [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6198] <... ioctl resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./184/bus", [pid 5076] <... rmdir resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 6198] close(3 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./185/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... openat resumed>) = 3 [pid 5074] mkdir("./183", 0777 [pid 5073] mkdir("./183", 0777 [pid 6198] <... close resumed>) = 0 [pid 5077] umount2("./184/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] <... mkdir resumed>) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 6198] close(4 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./185/binderfs", [pid 6198] <... close resumed>) = 0 [pid 6198] mkdir("./bus", 0777) = 0 [pid 5077] openat(AT_FDCWD, "./184/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5077] <... openat resumed>) = 4 [pid 5076] unlink("./185/binderfs" [pid 6198] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5076] <... unlink resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5073] <... openat resumed>) = 3 [pid 5077] newfstatat(4, "", [pid 5076] getdents64(3, [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] getdents64(4, [pid 5076] close(3 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] <... close resumed>) = 0 [pid 5077] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] close(4 [pid 5076] rmdir("./185" [pid 5077] <... close resumed>) = 0 [pid 5077] rmdir("./184/bus" [pid 5076] <... rmdir resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] mkdir("./186", 0777 [pid 5077] umount2("./184/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... mkdir resumed>) = 0 [pid 6198] <... mount resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6198] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6198] chdir("./bus" [pid 5077] newfstatat(AT_FDCWD, "./184/binderfs", [pid 6198] <... chdir resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6198] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] unlink("./184/binderfs" [pid 6198] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... openat resumed>) = 3 [pid 6198] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5077] <... unlink resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5077] getdents64(3, [pid 6198] <... symlink resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 6198] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] close(3 [pid 5077] close(3 [pid 5075] <... close resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5077] rmdir("./184" [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6198] <... creat resumed>) = 4 [pid 5077] <... rmdir resumed>) = 0 [pid 6198] rename("./bus", "./file2" [pid 5077] mkdir("./185", 0777 [pid 6198] <... rename resumed>) = -1 EEXIST (File exists) [pid 5077] <... mkdir resumed>) = 0 [pid 6198] memfd_create("syzkaller", 0./strace-static-x86_64: Process 6199 attached [pid 6199] set_robust_list(0x55556e32a660, 24 [pid 6198] <... memfd_create resumed>) = 5 [pid 6199] <... set_robust_list resumed>) = 0 [pid 6198] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6199 [ 187.422021][ T6198] loop5: detected capacity change from 0 to 1024 [pid 6199] chdir("./183" [pid 6198] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 6199] <... chdir resumed>) = 0 [pid 6198] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6199] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6198] <... write resumed>) = 524288 [pid 5073] <... ioctl resumed>) = 0 [pid 6199] <... prctl resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 6199] setpgid(0, 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5074] close(3 [pid 5073] close(3 [pid 6199] <... setpgid resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 6199] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] close(3 [pid 5074] <... close resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... close resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6200 ./strace-static-x86_64: Process 6200 attached [pid 6200] set_robust_list(0x55556e32a660, 24 [pid 6199] <... openat resumed>) = 3 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6202 ./strace-static-x86_64: Process 6202 attached [pid 6199] write(3, "1000", 4 [pid 6198] munmap(0x7f0356e00000, 138412032 [pid 6202] set_robust_list(0x55556e32a660, 24./strace-static-x86_64: Process 6201 attached [pid 6200] <... set_robust_list resumed>) = 0 [pid 6199] <... write resumed>) = 4 [pid 6198] <... munmap resumed>) = 0 [pid 5077] <... ioctl resumed>) = 0 [pid 6202] <... set_robust_list resumed>) = 0 [pid 6200] chdir("./183" [pid 6199] close(3 [pid 6200] <... chdir resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6201 [pid 6200] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6200] setpgid(0, 0 [pid 6201] set_robust_list(0x55556e32a660, 24 [pid 6200] <... setpgid resumed>) = 0 [pid 6201] <... set_robust_list resumed>) = 0 [pid 6200] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6201] chdir("./186") = 0 [pid 6201] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6202] chdir("./183" [pid 6200] <... openat resumed>) = 3 [pid 6199] <... close resumed>) = 0 [pid 6198] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6201] <... prctl resumed>) = 0 [pid 6202] <... chdir resumed>) = 0 [pid 6200] write(3, "1000", 4 [pid 6199] symlink("/dev/binderfs", "./binderfs" [pid 6198] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] close(3 [pid 6201] setpgid(0, 0 [pid 6202] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6200] <... write resumed>) = 4 [pid 6199] <... symlink resumed>) = 0 [pid 6198] close(5 [pid 5077] <... close resumed>) = 0 [pid 6201] <... setpgid resumed>) = 0 [pid 6200] close(3 [pid 6199] memfd_create("syzkaller", 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6201] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6202] <... prctl resumed>) = 0 [pid 6200] <... close resumed>) = 0 [pid 6199] <... memfd_create resumed>) = 3 [pid 6198] <... close resumed>) = 0 [pid 6202] setpgid(0, 0 [pid 6200] symlink("/dev/binderfs", "./binderfs" [pid 6199] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6201] <... openat resumed>) = 3 [pid 6202] <... setpgid resumed>) = 0 [pid 6199] <... mmap resumed>) = 0x7f0356e00000 [pid 6201] write(3, "1000", 4 [pid 6200] <... symlink resumed>) = 0 [pid 6198] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6201] <... write resumed>) = 4 [pid 6202] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6200] memfd_create("syzkaller", 0 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6203 ./strace-static-x86_64: Process 6203 attached [pid 6201] close(3 [pid 6202] <... openat resumed>) = 3 [pid 6200] <... memfd_create resumed>) = 3 [pid 6199] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6203] set_robust_list(0x55556e32a660, 24 [pid 6201] <... close resumed>) = 0 [pid 6200] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6202] write(3, "1000", 4 [pid 6203] <... set_robust_list resumed>) = 0 [pid 6201] symlink("/dev/binderfs", "./binderfs" [pid 6203] chdir("./185" [pid 6200] <... mmap resumed>) = 0x7f0356e00000 [pid 6202] <... write resumed>) = 4 [pid 6203] <... chdir resumed>) = 0 [pid 6201] <... symlink resumed>) = 0 [pid 6200] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6202] close(3 [pid 6198] <... open resumed>) = 5 [pid 6203] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6202] <... close resumed>) = 0 [pid 6198] ftruncate(5, 0) = 0 [pid 6202] symlink("/dev/binderfs", "./binderfs" [pid 6203] <... prctl resumed>) = 0 [pid 6202] <... symlink resumed>) = 0 [pid 6198] exit_group(0 [pid 6202] memfd_create("syzkaller", 0 [pid 6203] setpgid(0, 0 [pid 6202] <... memfd_create resumed>) = 3 [pid 6198] <... exit_group resumed>) = ? [pid 6202] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6203] <... setpgid resumed>) = 0 [pid 6201] memfd_create("syzkaller", 0 [pid 6203] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6201] <... memfd_create resumed>) = 3 [pid 6203] write(3, "1000", 4 [pid 6201] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6203] <... write resumed>) = 4 [pid 6201] <... mmap resumed>) = 0x7f0356e00000 [pid 6202] <... mmap resumed>) = 0x7f0356e00000 [pid 6198] +++ exited with 0 +++ [pid 6203] close(3 [pid 6199] <... write resumed>) = 524288 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6198, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6203] <... close resumed>) = 0 [pid 6202] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] restart_syscall(<... resuming interrupted clone ...> [pid 6203] symlink("/dev/binderfs", "./binderfs" [pid 5078] <... restart_syscall resumed>) = 0 [pid 6203] <... symlink resumed>) = 0 [pid 6203] memfd_create("syzkaller", 0 [pid 6201] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6199] munmap(0x7f0356e00000, 138412032 [pid 5078] umount2("./185", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6203] <... memfd_create resumed>) = 3 [pid 6200] <... write resumed>) = 524288 [pid 6199] <... munmap resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6203] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5078] openat(AT_FDCWD, "./185", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6199] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6203] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6202] <... write resumed>) = 524288 [pid 6199] <... openat resumed>) = 4 [pid 5078] getdents64(3, [pid 6202] munmap(0x7f0356e00000, 138412032 [pid 6200] munmap(0x7f0356e00000, 138412032 [pid 6199] ioctl(4, LOOP_SET_FD, 3 [pid 6202] <... munmap resumed>) = 0 [pid 6201] <... write resumed>) = 524288 [pid 6201] munmap(0x7f0356e00000, 138412032 [pid 6200] <... munmap resumed>) = 0 [pid 6201] <... munmap resumed>) = 0 [pid 6202] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6200] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6199] <... ioctl resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6203] <... write resumed>) = 524288 [pid 6201] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6202] <... openat resumed>) = 4 [pid 6200] <... openat resumed>) = 4 [pid 6199] close(3 [pid 5078] umount2("./185/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6203] munmap(0x7f0356e00000, 138412032 [pid 6201] <... openat resumed>) = 4 [pid 6202] ioctl(4, LOOP_SET_FD, 3 [pid 6200] ioctl(4, LOOP_SET_FD, 3 [pid 6199] <... close resumed>) = 0 [pid 6201] ioctl(4, LOOP_SET_FD, 3 [pid 6202] <... ioctl resumed>) = 0 [pid 6201] <... ioctl resumed>) = 0 [pid 6203] <... munmap resumed>) = 0 [pid 6202] close(3 [pid 6200] <... ioctl resumed>) = 0 [pid 6199] close(4 [pid 5078] <... umount2 resumed>) = 0 [pid 6203] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6201] close(3 [pid 6202] <... close resumed>) = 0 [pid 6203] <... openat resumed>) = 4 [pid 6202] close(4 [pid 6201] <... close resumed>) = 0 [pid 6200] close(3 [pid 6203] ioctl(4, LOOP_SET_FD, 3 [pid 6201] close(4 [pid 6202] <... close resumed>) = 0 [pid 6200] <... close resumed>) = 0 [pid 6199] <... close resumed>) = 0 [ 187.644485][ T6199] loop2: detected capacity change from 0 to 1024 [ 187.667205][ T6202] loop0: detected capacity change from 0 to 1024 [ 187.668243][ T6201] loop3: detected capacity change from 0 to 1024 [ 187.673897][ T6200] loop1: detected capacity change from 0 to 1024 [pid 5078] umount2("./185/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6201] <... close resumed>) = 0 [pid 6202] mkdir("./bus", 0777 [pid 6199] mkdir("./bus", 0777 [pid 6201] mkdir("./bus", 0777 [pid 6199] <... mkdir resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6201] <... mkdir resumed>) = 0 [pid 5078] newfstatat(AT_FDCWD, "./185/bus", [pid 6201] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6199] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6203] <... ioctl resumed>) = 0 [pid 6202] <... mkdir resumed>) = 0 [pid 6200] close(4 [pid 5078] umount2("./185/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6203] close(3 [pid 6200] <... close resumed>) = 0 [pid 6199] <... mount resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6203] <... close resumed>) = 0 [pid 6202] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6200] mkdir("./bus", 0777 [pid 6199] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] openat(AT_FDCWD, "./185/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6203] close(4 [pid 6200] <... mkdir resumed>) = 0 [pid 6199] <... openat resumed>) = 3 [pid 6203] <... close resumed>) = 0 [pid 6200] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6199] chdir("./bus" [pid 5078] <... openat resumed>) = 4 [pid 6203] mkdir("./bus", 0777 [pid 6199] <... chdir resumed>) = 0 [pid 5078] newfstatat(4, "", [pid 6203] <... mkdir resumed>) = 0 [pid 6201] <... mount resumed>) = 0 [pid 6199] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6203] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6201] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6199] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6201] <... openat resumed>) = 3 [pid 6199] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6201] chdir("./bus" [pid 5078] getdents64(4, [pid 6201] <... chdir resumed>) = 0 [pid 6202] <... mount resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6201] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6202] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6199] <... symlink resumed>) = 0 [pid 5078] close(4 [pid 6201] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6202] <... openat resumed>) = 3 [pid 5078] <... close resumed>) = 0 [pid 6201] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6202] chdir("./bus" [pid 6200] <... mount resumed>) = 0 [pid 6199] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] rmdir("./185/bus" [pid 6202] <... chdir resumed>) = 0 [pid 6201] <... symlink resumed>) = 0 [pid 6202] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6200] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] <... rmdir resumed>) = 0 [pid 6202] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6200] <... openat resumed>) = 3 [pid 6203] <... mount resumed>) = 0 [pid 6201] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6202] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6200] chdir("./bus" [pid 5078] umount2("./185/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6203] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6200] <... chdir resumed>) = 0 [pid 6199] <... creat resumed>) = 4 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6203] <... openat resumed>) = 3 [pid 6200] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6199] rename("./bus", "./file2" [pid 5078] newfstatat(AT_FDCWD, "./185/binderfs", [pid 6203] chdir("./bus" [pid 6201] <... creat resumed>) = 4 [pid 6202] <... symlink resumed>) = 0 [pid 6200] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6199] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6203] <... chdir resumed>) = 0 [pid 6201] rename("./bus", "./file2" [pid 6200] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6199] memfd_create("syzkaller", 0 [pid 5078] unlink("./185/binderfs" [pid 6203] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6202] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6200] <... symlink resumed>) = 0 [pid 6199] <... memfd_create resumed>) = 5 [pid 5078] <... unlink resumed>) = 0 [pid 6203] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6201] <... rename resumed>) = -1 EEXIST (File exists) [pid 6200] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6199] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6203] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6201] memfd_create("syzkaller", 0 [pid 6199] <... mmap resumed>) = 0x7f0356e00000 [ 187.698731][ T6203] loop4: detected capacity change from 0 to 1024 [pid 5078] getdents64(3, [pid 6201] <... memfd_create resumed>) = 5 [pid 6202] <... creat resumed>) = 4 [pid 6200] <... creat resumed>) = 4 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6203] <... symlink resumed>) = 0 [pid 6201] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6202] rename("./bus", "./file2" [pid 6200] rename("./bus", "./file2" [pid 5078] close(3 [pid 6202] <... rename resumed>) = -1 EEXIST (File exists) [pid 6203] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6201] <... mmap resumed>) = 0x7f0356e00000 [pid 6200] <... rename resumed>) = -1 EEXIST (File exists) [pid 6199] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... close resumed>) = 0 [pid 6202] memfd_create("syzkaller", 0 [pid 6200] memfd_create("syzkaller", 0 [pid 5078] rmdir("./185" [pid 6202] <... memfd_create resumed>) = 5 [pid 5078] <... rmdir resumed>) = 0 [pid 6200] <... memfd_create resumed>) = 5 [pid 5078] mkdir("./186", 0777) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6201] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6202] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6200] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... openat resumed>) = 3 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 6200] <... mmap resumed>) = 0x7f0356e00000 [pid 6203] <... creat resumed>) = 4 [pid 6200] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6202] <... mmap resumed>) = 0x7f0356e00000 [pid 6203] rename("./bus", "./file2" [pid 6202] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6203] <... rename resumed>) = -1 EEXIST (File exists) [pid 6201] <... write resumed>) = 524288 [pid 6199] <... write resumed>) = 524288 [pid 6203] memfd_create("syzkaller", 0 [pid 6199] munmap(0x7f0356e00000, 138412032) = 0 [pid 6199] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6199] close(5 [pid 6203] <... memfd_create resumed>) = 5 [pid 6200] <... write resumed>) = 524288 [pid 5078] <... ioctl resumed>) = 0 [pid 6203] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6201] munmap(0x7f0356e00000, 138412032 [pid 6203] <... mmap resumed>) = 0x7f0356e00000 [pid 6201] <... munmap resumed>) = 0 [pid 6202] <... write resumed>) = 524288 [pid 6201] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6203] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6202] munmap(0x7f0356e00000, 138412032 [pid 6199] <... close resumed>) = 0 [pid 6201] close(5 [pid 6199] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6203] <... write resumed>) = 524288 [pid 6201] <... close resumed>) = 0 [pid 6202] <... munmap resumed>) = 0 [pid 5078] close(3 [pid 6202] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6200] munmap(0x7f0356e00000, 138412032 [pid 6199] <... open resumed>) = 5 [pid 5078] <... close resumed>) = 0 [pid 6202] close(5 [pid 6200] <... munmap resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6199] ftruncate(5, 0 [pid 6202] <... close resumed>) = 0 [pid 6200] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6199] <... ftruncate resumed>) = 0 ./strace-static-x86_64: Process 6204 attached [pid 6201] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6200] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6204] set_robust_list(0x55556e32a660, 24 [pid 6203] munmap(0x7f0356e00000, 138412032 [pid 6202] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6200] close(5 [pid 6199] exit_group(0 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6204 [pid 6204] <... set_robust_list resumed>) = 0 [pid 6203] <... munmap resumed>) = 0 [pid 6201] <... open resumed>) = 5 [pid 6199] <... exit_group resumed>) = ? [pid 6204] chdir("./186" [pid 6201] ftruncate(5, 0 [pid 6200] <... close resumed>) = 0 [pid 6203] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6201] <... ftruncate resumed>) = 0 [pid 6203] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6201] exit_group(0 [pid 6204] <... chdir resumed>) = 0 [pid 6203] close(5 [pid 6201] <... exit_group resumed>) = ? [pid 6202] <... open resumed>) = 5 [pid 6200] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6204] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6203] <... close resumed>) = 0 [pid 6201] +++ exited with 0 +++ [pid 6202] ftruncate(5, 0 [pid 6199] +++ exited with 0 +++ [pid 6204] <... prctl resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6201, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6199, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6204] setpgid(0, 0 [pid 6202] <... ftruncate resumed>) = 0 [pid 6200] <... open resumed>) = 5 [pid 6204] <... setpgid resumed>) = 0 [pid 6203] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6202] exit_group(0 [pid 6200] ftruncate(5, 0 [pid 6204] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6202] <... exit_group resumed>) = ? [pid 6200] <... ftruncate resumed>) = 0 [pid 6204] <... openat resumed>) = 3 [pid 6200] exit_group(0) = ? [pid 6204] write(3, "1000", 4 [pid 5076] umount2("./186", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./183", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6204] <... write resumed>) = 4 [pid 6202] +++ exited with 0 +++ [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6204] close(3 [pid 5076] openat(AT_FDCWD, "./186", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] openat(AT_FDCWD, "./183", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6202, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6204] <... close resumed>) = 0 [pid 6200] +++ exited with 0 +++ [pid 5076] <... openat resumed>) = 3 [pid 5075] <... openat resumed>) = 3 [pid 6204] symlink("/dev/binderfs", "./binderfs" [pid 6203] <... open resumed>) = 5 [pid 5076] newfstatat(3, "", [pid 5075] newfstatat(3, "", [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6200, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6204] <... symlink resumed>) = 0 [pid 6203] ftruncate(5, 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] umount2("./183", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6204] memfd_create("syzkaller", 0 [pid 5076] getdents64(3, [pid 5075] getdents64(3, [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./183", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6204] <... memfd_create resumed>) = 3 [pid 5073] <... openat resumed>) = 3 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6204] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6203] <... ftruncate resumed>) = 0 [pid 5076] umount2("./186/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./183/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] newfstatat(3, "", [pid 6204] <... mmap resumed>) = 0x7f0356e00000 [pid 5074] umount2("./183", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6204] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6203] exit_group(0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] getdents64(3, [pid 6203] <... exit_group resumed>) = ? [pid 5074] openat(AT_FDCWD, "./183", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] <... openat resumed>) = 3 [pid 5073] umount2("./183/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] newfstatat(3, "", [pid 6203] +++ exited with 0 +++ [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6203, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 5074] umount2("./183/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... restart_syscall resumed>) = 0 [pid 5077] umount2("./185", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./185", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5077] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6204] <... write resumed>) = 524288 [pid 5074] <... umount2 resumed>) = 0 [pid 5077] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] umount2("./185/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6204] munmap(0x7f0356e00000, 138412032 [pid 5077] <... umount2 resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5074] umount2("./183/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./186/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./183/bus", [pid 5076] newfstatat(AT_FDCWD, "./186/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./186/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./183/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6204] <... munmap resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = 0 [pid 5077] umount2("./185/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./183/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./185/bus", [pid 5075] newfstatat(AT_FDCWD, "./183/bus", [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] umount2("./185/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./183/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./183/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6204] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6204] <... openat resumed>) = 4 [pid 5077] openat(AT_FDCWD, "./185/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] openat(AT_FDCWD, "./186/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] openat(AT_FDCWD, "./183/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] openat(AT_FDCWD, "./183/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6204] ioctl(4, LOOP_SET_FD, 3 [pid 5077] <... openat resumed>) = 4 [pid 5075] <... openat resumed>) = 4 [pid 5073] newfstatat(AT_FDCWD, "./183/bus", [pid 5074] <... openat resumed>) = 4 [pid 5077] newfstatat(4, "", [pid 5075] newfstatat(4, "", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] newfstatat(4, "", [pid 5073] umount2("./183/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] getdents64(4, [pid 5076] newfstatat(4, "", [pid 5075] getdents64(4, [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, [pid 5073] openat(AT_FDCWD, "./183/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] getdents64(4, [pid 5076] getdents64(4, [pid 5075] getdents64(4, [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] <... openat resumed>) = 4 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] getdents64(4, [pid 5073] newfstatat(4, "", [pid 5077] close(4 [pid 5076] getdents64(4, [pid 5075] close(4 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] <... close resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] rmdir("./185/bus" [pid 5076] close(4 [pid 5075] rmdir("./183/bus" [pid 5074] close(4 [pid 5073] getdents64(4, [pid 5077] <... rmdir resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] umount2("./185/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] rmdir("./186/bus" [pid 5075] umount2("./183/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] getdents64(4, [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] rmdir("./183/bus" [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] newfstatat(AT_FDCWD, "./185/binderfs", [pid 5075] newfstatat(AT_FDCWD, "./183/binderfs", [pid 5073] close(4 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5077] unlink("./185/binderfs" [pid 5075] unlink("./183/binderfs" [pid 5074] umount2("./183/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] rmdir("./183/bus" [pid 6204] <... ioctl resumed>) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 5076] umount2("./186/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... unlink resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... rmdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6204] close(3 [pid 5077] getdents64(3, [pid 5075] getdents64(3, [pid 5073] umount2("./183/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6204] <... close resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6204] close(4 [pid 5077] close(3 [pid 5075] close(3 [pid 5073] newfstatat(AT_FDCWD, "./183/binderfs", [pid 6204] <... close resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6204] mkdir("./bus", 0777 [pid 5077] rmdir("./185" [pid 5075] rmdir("./183" [pid 5073] unlink("./183/binderfs" [pid 6204] <... mkdir resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./186/binderfs", [pid 5075] <... rmdir resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./183/binderfs", [pid 5073] <... unlink resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6204] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5076] unlink("./186/binderfs" [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] getdents64(3, [pid 5075] mkdir("./184", 0777 [pid 5074] unlink("./183/binderfs" [pid 5077] mkdir("./186", 0777 [pid 5076] <... unlink resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5076] getdents64(3, [pid 5074] <... unlink resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] getdents64(3, [pid 5073] close(3) = 0 [ 187.940684][ T6204] loop5: detected capacity change from 0 to 1024 [pid 5077] <... mkdir resumed>) = 0 [pid 6204] <... mount resumed>) = 0 [pid 5076] close(3 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] rmdir("./183" [pid 6204] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5076] <... close resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 6204] <... openat resumed>) = 3 [pid 5076] rmdir("./186" [pid 5074] close(3 [pid 5073] <... rmdir resumed>) = 0 [pid 6204] chdir("./bus" [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5073] mkdir("./184", 0777 [pid 6204] <... chdir resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 6204] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5076] mkdir("./187", 0777 [pid 5074] rmdir("./183" [pid 5073] <... mkdir resumed>) = 0 [pid 6204] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6204] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6204] <... symlink resumed>) = 0 [pid 5077] <... ioctl resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5077] close(3 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5074] mkdir("./184", 0777 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6204] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5077] <... close resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... openat resumed>) = 3 [pid 5074] <... mkdir resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 6205 attached ) = 3 [pid 6205] set_robust_list(0x55556e32a660, 24 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6205] <... set_robust_list resumed>) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6205 [pid 6205] chdir("./186" [pid 6204] <... creat resumed>) = 4 [pid 6205] <... chdir resumed>) = 0 [pid 6205] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6204] rename("./bus", "./file2" [pid 5075] <... ioctl resumed>) = 0 [pid 6205] setpgid(0, 0 [pid 6204] <... rename resumed>) = -1 EEXIST (File exists) [pid 6205] <... setpgid resumed>) = 0 [pid 6205] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6204] memfd_create("syzkaller", 0 [pid 6205] write(3, "1000", 4 [pid 6204] <... memfd_create resumed>) = 5 [pid 6205] <... write resumed>) = 4 [pid 6204] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6205] close(3 [pid 6204] <... mmap resumed>) = 0x7f0356e00000 [pid 6205] <... close resumed>) = 0 [pid 6204] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... ioctl resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 5075] close(3) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6205] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6206 [pid 6205] memfd_create("syzkaller", 0) = 3 [pid 6205] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 ./strace-static-x86_64: Process 6206 attached [pid 5074] close(3 [pid 5073] close(3 [pid 5074] <... close resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 6206] set_robust_list(0x55556e32a660, 24 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6206] <... set_robust_list resumed>) = 0 [pid 6205] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6206] chdir("./184") = 0 [pid 5076] close(3 [pid 6206] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 6208 attached ) = 0 [pid 5076] <... close resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6208 [pid 6206] setpgid(0, 0 [pid 6205] <... write resumed>) = 524288 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6208] set_robust_list(0x55556e32a660, 24) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6207 [pid 6208] chdir("./184"./strace-static-x86_64: Process 6209 attached ./strace-static-x86_64: Process 6207 attached ) = 0 [pid 6206] <... setpgid resumed>) = 0 [pid 6204] <... write resumed>) = 524288 [pid 6209] set_robust_list(0x55556e32a660, 24) = 0 [pid 6207] set_robust_list(0x55556e32a660, 24 [pid 6208] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6206] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6204] munmap(0x7f0356e00000, 138412032 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6209 [pid 6208] <... prctl resumed>) = 0 [pid 6209] chdir("./187") = 0 [pid 6207] <... set_robust_list resumed>) = 0 [pid 6208] setpgid(0, 0 [pid 6209] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6207] chdir("./184" [pid 6208] <... setpgid resumed>) = 0 [pid 6206] <... openat resumed>) = 3 [pid 6204] <... munmap resumed>) = 0 [pid 6209] <... prctl resumed>) = 0 [pid 6207] <... chdir resumed>) = 0 [pid 6207] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6208] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6209] setpgid(0, 0 [pid 6207] <... prctl resumed>) = 0 [pid 6206] write(3, "1000", 4 [pid 6207] setpgid(0, 0 [pid 6209] <... setpgid resumed>) = 0 [pid 6207] <... setpgid resumed>) = 0 [pid 6206] <... write resumed>) = 4 [pid 6205] munmap(0x7f0356e00000, 138412032 [pid 6209] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6207] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6208] <... openat resumed>) = 3 [pid 6206] close(3 [pid 6205] <... munmap resumed>) = 0 [pid 6204] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6209] <... openat resumed>) = 3 [pid 6207] <... openat resumed>) = 3 [pid 6208] write(3, "1000", 4 [pid 6206] <... close resumed>) = 0 [pid 6204] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6209] write(3, "1000", 4 [pid 6207] write(3, "1000", 4 [pid 6208] <... write resumed>) = 4 [pid 6206] symlink("/dev/binderfs", "./binderfs" [pid 6205] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6204] close(5 [pid 6207] <... write resumed>) = 4 [pid 6206] <... symlink resumed>) = 0 [pid 6205] <... openat resumed>) = 4 [pid 6207] close(3 [pid 6205] ioctl(4, LOOP_SET_FD, 3 [pid 6209] <... write resumed>) = 4 [pid 6207] <... close resumed>) = 0 [pid 6208] close(3 [pid 6206] memfd_create("syzkaller", 0 [pid 6204] <... close resumed>) = 0 [pid 6209] close(3 [pid 6207] symlink("/dev/binderfs", "./binderfs" [pid 6208] <... close resumed>) = 0 [pid 6206] <... memfd_create resumed>) = 3 [pid 6209] <... close resumed>) = 0 [pid 6207] <... symlink resumed>) = 0 [pid 6208] symlink("/dev/binderfs", "./binderfs" [pid 6206] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6209] symlink("/dev/binderfs", "./binderfs" [pid 6207] memfd_create("syzkaller", 0 [pid 6208] <... symlink resumed>) = 0 [pid 6206] <... mmap resumed>) = 0x7f0356e00000 [pid 6204] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6209] <... symlink resumed>) = 0 [pid 6207] <... memfd_create resumed>) = 3 [pid 6207] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6209] memfd_create("syzkaller", 0 [pid 6207] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6208] memfd_create("syzkaller", 0 [pid 6206] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6209] <... memfd_create resumed>) = 3 [pid 6208] <... memfd_create resumed>) = 3 [pid 6209] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6208] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6209] <... mmap resumed>) = 0x7f0356e00000 [pid 6208] <... mmap resumed>) = 0x7f0356e00000 [pid 6204] <... open resumed>) = 5 [pid 6205] <... ioctl resumed>) = 0 [pid 6209] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6208] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6205] close(3) = 0 [pid 6205] close(4) = 0 [pid 6205] mkdir("./bus", 0777) = 0 [pid 6205] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6204] ftruncate(5, 0) = 0 [ 188.159997][ T6205] loop4: detected capacity change from 0 to 1024 [pid 6208] <... write resumed>) = 524288 [pid 6204] exit_group(0 [pid 6209] <... write resumed>) = 524288 [pid 6207] <... write resumed>) = 524288 [pid 6206] <... write resumed>) = 524288 [pid 6204] <... exit_group resumed>) = ? [pid 6205] <... mount resumed>) = 0 [pid 6207] munmap(0x7f0356e00000, 138412032 [pid 6205] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6209] munmap(0x7f0356e00000, 138412032 [pid 6207] <... munmap resumed>) = 0 [pid 6208] munmap(0x7f0356e00000, 138412032 [pid 6206] munmap(0x7f0356e00000, 138412032 [pid 6205] <... openat resumed>) = 3 [pid 6204] +++ exited with 0 +++ [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6204, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6206] <... munmap resumed>) = 0 [pid 5078] umount2("./186", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6206] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6205] chdir("./bus" [pid 6209] <... munmap resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6205] <... chdir resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./186", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6205] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] <... openat resumed>) = 3 [pid 6209] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6208] <... munmap resumed>) = 0 [pid 6206] ioctl(4, LOOP_SET_FD, 3 [pid 6205] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] newfstatat(3, "", [pid 6209] <... openat resumed>) = 4 [pid 6205] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6209] ioctl(4, LOOP_SET_FD, 3 [pid 6207] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6208] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6205] <... symlink resumed>) = 0 [pid 6207] <... openat resumed>) = 4 [pid 5078] getdents64(3, [pid 6207] ioctl(4, LOOP_SET_FD, 3 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6208] <... openat resumed>) = 4 [pid 6205] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] umount2("./186/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6205] <... creat resumed>) = 4 [pid 6205] rename("./bus", "./file2") = -1 EEXIST (File exists) [pid 6207] <... ioctl resumed>) = 0 [pid 6207] close(3 [pid 6205] memfd_create("syzkaller", 0 [pid 6207] <... close resumed>) = 0 [pid 6205] <... memfd_create resumed>) = 5 [pid 6207] close(4 [pid 6205] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6207] <... close resumed>) = 0 [pid 6205] <... mmap resumed>) = 0x7f0356e00000 [pid 6207] mkdir("./bus", 0777) = 0 [pid 6207] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6208] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6206] <... ioctl resumed>) = 0 [pid 6207] <... mount resumed>) = 0 [pid 6206] close(3 [pid 6205] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6207] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6207] chdir("./bus") = 0 [pid 6206] <... close resumed>) = 0 [pid 6207] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6206] close(4 [pid 6208] close(3 [pid 6207] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6208] <... close resumed>) = 0 [pid 6206] <... close resumed>) = 0 [pid 6207] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6206] mkdir("./bus", 0777 [pid 6208] close(4 [pid 6207] <... symlink resumed>) = 0 [pid 6208] <... close resumed>) = 0 [pid 6206] <... mkdir resumed>) = 0 [pid 6206] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6208] mkdir("./bus", 0777 [pid 6207] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6208] <... mkdir resumed>) = 0 [pid 6208] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6209] <... ioctl resumed>) = 0 [pid 5078] <... umount2 resumed>) = 0 [pid 6209] close(3) = 0 [pid 6209] close(4) = 0 [pid 6207] <... creat resumed>) = 4 [pid 5078] umount2("./186/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6209] mkdir("./bus", 0777 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6207] rename("./bus", "./file2" [pid 5078] newfstatat(AT_FDCWD, "./186/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6209] <... mkdir resumed>) = 0 [pid 6207] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] umount2("./186/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6207] memfd_create("syzkaller", 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6207] <... memfd_create resumed>) = 5 [pid 6207] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] openat(AT_FDCWD, "./186/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6209] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6207] <... mmap resumed>) = 0x7f0356e00000 [pid 6205] <... write resumed>) = 524288 [pid 5078] <... openat resumed>) = 4 [pid 5078] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(4, [pid 6205] munmap(0x7f0356e00000, 138412032 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6205] <... munmap resumed>) = 0 [pid 5078] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6207] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6206] <... mount resumed>) = 0 [pid 5078] close(4) = 0 [pid 5078] rmdir("./186/bus" [pid 6205] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] <... rmdir resumed>) = 0 [pid 6206] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6205] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] umount2("./186/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6206] <... openat resumed>) = 3 [ 188.250230][ T6206] loop2: detected capacity change from 0 to 1024 [ 188.253282][ T6207] loop0: detected capacity change from 0 to 1024 [ 188.257508][ T6209] loop3: detected capacity change from 0 to 1024 [ 188.278370][ T6208] loop1: detected capacity change from 0 to 1024 [pid 6205] close(5 [pid 6208] <... mount resumed>) = 0 [pid 6206] chdir("./bus" [pid 6205] <... close resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6208] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] newfstatat(AT_FDCWD, "./186/binderfs", [pid 6208] <... openat resumed>) = 3 [pid 6206] <... chdir resumed>) = 0 [pid 6208] chdir("./bus" [pid 6206] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6209] <... mount resumed>) = 0 [pid 6207] <... write resumed>) = 524288 [pid 6208] <... chdir resumed>) = 0 [pid 6206] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6209] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6208] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6206] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] unlink("./186/binderfs" [pid 6209] <... openat resumed>) = 3 [pid 6208] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6205] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6209] chdir("./bus" [pid 6208] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6206] <... symlink resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 6209] <... chdir resumed>) = 0 [pid 6209] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6207] munmap(0x7f0356e00000, 138412032 [pid 6205] <... open resumed>) = 5 [pid 6209] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6207] <... munmap resumed>) = 0 [pid 6208] <... symlink resumed>) = 0 [pid 6206] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6205] ftruncate(5, 0 [pid 5078] getdents64(3, [pid 6209] <... symlink resumed>) = 0 [pid 6208] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6205] <... ftruncate resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6206] <... creat resumed>) = 4 [pid 6207] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6206] rename("./bus", "./file2" [pid 6205] exit_group(0 [pid 6207] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6205] <... exit_group resumed>) = ? [pid 5078] close(3 [pid 6209] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6207] close(5 [pid 6205] +++ exited with 0 +++ [pid 5078] <... close resumed>) = 0 [pid 6207] <... close resumed>) = 0 [pid 6208] <... creat resumed>) = 4 [pid 6206] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] rmdir("./186" [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6205, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 6209] <... creat resumed>) = 4 [pid 6208] rename("./bus", "./file2" [pid 6206] memfd_create("syzkaller", 0 [pid 5078] <... rmdir resumed>) = 0 [pid 6206] <... memfd_create resumed>) = 5 [pid 5077] umount2("./186", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./186", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6206] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] umount2("./186/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6207] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6209] rename("./bus", "./file2" [pid 6206] <... mmap resumed>) = 0x7f0356e00000 [pid 6207] <... open resumed>) = 5 [pid 6208] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] mkdir("./187", 0777 [pid 5077] <... umount2 resumed>) = 0 [pid 6207] ftruncate(5, 0 [pid 6208] memfd_create("syzkaller", 0 [pid 5078] <... mkdir resumed>) = 0 [pid 5077] umount2("./186/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6209] <... rename resumed>) = -1 EEXIST (File exists) [pid 6207] <... ftruncate resumed>) = 0 [pid 6206] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6207] exit_group(0 [pid 6208] <... memfd_create resumed>) = 5 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] newfstatat(AT_FDCWD, "./186/bus", [pid 6209] memfd_create("syzkaller", 0 [pid 6207] <... exit_group resumed>) = ? [pid 6208] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... openat resumed>) = 3 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6209] <... memfd_create resumed>) = 5 [pid 6207] +++ exited with 0 +++ [pid 6208] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5077] umount2("./186/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6209] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6207, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6209] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] openat(AT_FDCWD, "./186/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6206] <... write resumed>) = 524288 [pid 5077] <... openat resumed>) = 4 [pid 6209] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6206] munmap(0x7f0356e00000, 138412032 [pid 5077] newfstatat(4, "", [pid 5073] umount2("./184", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6208] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6206] <... munmap resumed>) = 0 [pid 5077] getdents64(4, [pid 5073] openat(AT_FDCWD, "./184", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6206] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] <... openat resumed>) = 3 [pid 5077] getdents64(4, [pid 5073] newfstatat(3, "", [pid 6206] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6206] close(5 [pid 5077] close(4 [pid 6209] <... write resumed>) = 524288 [pid 6206] <... close resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5073] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] umount2("./184/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] rmdir("./186/bus") = 0 [pid 5078] <... ioctl resumed>) = 0 [pid 5077] umount2("./186/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./186/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] unlink("./186/binderfs") = 0 [pid 5077] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] close(3) = 0 [pid 6208] <... write resumed>) = 524288 [pid 5077] rmdir("./186" [pid 6209] munmap(0x7f0356e00000, 138412032 [pid 5077] <... rmdir resumed>) = 0 [pid 6209] <... munmap resumed>) = 0 [pid 6208] munmap(0x7f0356e00000, 138412032) = 0 [pid 5077] mkdir("./187", 0777) = 0 [pid 6209] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5078] close(3 [pid 6209] close(5 [pid 6208] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6206] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] <... close resumed>) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6208] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6210 attached [pid 6209] <... close resumed>) = 0 [pid 6208] close(5 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5073] <... umount2 resumed>) = 0 [pid 6208] <... close resumed>) = 0 [pid 6210] set_robust_list(0x55556e32a660, 24) = 0 [pid 6210] chdir("./187") = 0 [pid 6206] <... open resumed>) = 5 [pid 5073] umount2("./184/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6206] ftruncate(5, 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6210] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6206] <... ftruncate resumed>) = 0 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6210 [pid 6210] <... prctl resumed>) = 0 [pid 6210] setpgid(0, 0 [pid 6206] exit_group(0 [pid 6210] <... setpgid resumed>) = 0 [pid 6209] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6210] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6206] <... exit_group resumed>) = ? [pid 5073] newfstatat(AT_FDCWD, "./184/bus", [pid 6210] <... openat resumed>) = 3 [pid 6208] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6210] write(3, "1000", 4 [pid 6209] <... open resumed>) = 5 [pid 5073] umount2("./184/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6210] <... write resumed>) = 4 [pid 6209] ftruncate(5, 0 [pid 6208] <... open resumed>) = 5 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6210] close(3 [pid 6209] <... ftruncate resumed>) = 0 [pid 6208] ftruncate(5, 0 [pid 5073] openat(AT_FDCWD, "./184/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6210] <... close resumed>) = 0 [pid 6206] +++ exited with 0 +++ [pid 5073] <... openat resumed>) = 4 [pid 5073] newfstatat(4, "", [pid 6210] symlink("/dev/binderfs", "./binderfs" [pid 6209] exit_group(0 [pid 6208] <... ftruncate resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6210] <... symlink resumed>) = 0 [pid 6209] <... exit_group resumed>) = ? [pid 6208] exit_group(0 [pid 5073] getdents64(4, [pid 6210] memfd_create("syzkaller", 0 [pid 6208] <... exit_group resumed>) = ? [pid 5077] <... ioctl resumed>) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6206, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6210] <... memfd_create resumed>) = 3 [pid 6209] +++ exited with 0 +++ [pid 6208] +++ exited with 0 +++ [pid 5075] umount2("./184", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6208, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6209, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] openat(AT_FDCWD, "./184", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5073] getdents64(4, [pid 6210] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... restart_syscall resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5074] <... restart_syscall resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] newfstatat(3, "", [pid 5073] close(4 [pid 6210] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... close resumed>) = 0 [pid 5074] umount2("./184", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] rmdir("./184/bus" [pid 5075] getdents64(3, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] close(3 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] openat(AT_FDCWD, "./184", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... rmdir resumed>) = 0 [pid 5076] umount2("./187", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./184/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... openat resumed>) = 3 [pid 5073] umount2("./184/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] openat(AT_FDCWD, "./187", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] newfstatat(3, "", [pid 6210] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... openat resumed>) = 3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, [pid 5073] newfstatat(AT_FDCWD, "./184/binderfs", [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] newfstatat(3, "", [pid 5074] umount2("./184/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] unlink("./184/binderfs"./strace-static-x86_64: Process 6211 attached [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 6211] set_robust_list(0x55556e32a660, 24 [pid 5076] getdents64(3, [pid 5075] <... umount2 resumed>) = 0 [pid 5073] getdents64(3, [pid 6211] <... set_robust_list resumed>) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6211 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] close(3 [pid 6211] chdir("./187" [pid 5076] umount2("./187/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... close resumed>) = 0 [pid 6211] <... chdir resumed>) = 0 [pid 5073] rmdir("./184" [pid 6211] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6211] setpgid(0, 0 [pid 5073] <... rmdir resumed>) = 0 [pid 6211] <... setpgid resumed>) = 0 [pid 6211] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5074] <... umount2 resumed>) = 0 [pid 5073] mkdir("./185", 0777 [pid 6211] write(3, "1000", 4 [pid 5075] umount2("./184/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6211] <... write resumed>) = 4 [pid 6211] close(3 [pid 5073] <... mkdir resumed>) = 0 [pid 6211] <... close resumed>) = 0 [pid 6211] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6211] memfd_create("syzkaller", 0) = 3 [pid 5076] <... umount2 resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./184/bus", [pid 6211] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6210] <... write resumed>) = 524288 [pid 5074] umount2("./184/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... openat resumed>) = 3 [pid 6211] <... mmap resumed>) = 0x7f0356e00000 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./184/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./184/bus", [pid 6210] munmap(0x7f0356e00000, 138412032) = 0 [pid 6210] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] openat(AT_FDCWD, "./184/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6210] <... openat resumed>) = 4 [pid 5074] umount2("./184/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... openat resumed>) = 4 [pid 6210] ioctl(4, LOOP_SET_FD, 3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./187/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] newfstatat(4, "", [pid 5074] openat(AT_FDCWD, "./184/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6211] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6210] <... ioctl resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./187/bus", [pid 5075] getdents64(4, [pid 5074] <... openat resumed>) = 4 [pid 6210] close(3 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] newfstatat(4, "", [pid 6210] <... close resumed>) = 0 [pid 5076] umount2("./187/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] getdents64(4, [pid 6210] close(4 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6210] <... close resumed>) = 0 [pid 5075] close(4 [pid 6211] <... write resumed>) = 524288 [pid 6210] mkdir("./bus", 0777 [pid 5076] openat(AT_FDCWD, "./187/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] getdents64(4, [pid 5075] <... close resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 6211] munmap(0x7f0356e00000, 138412032 [pid 6210] <... mkdir resumed>) = 0 [pid 5075] rmdir("./184/bus" [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6211] <... munmap resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] getdents64(4, [pid 5073] close(3 [pid 6210] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5075] umount2("./184/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] close(4 [pid 5075] newfstatat(AT_FDCWD, "./184/binderfs", [pid 5074] <... close resumed>) = 0 [pid 6211] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] newfstatat(4, "", [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] rmdir("./184/bus" [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6211] <... openat resumed>) = 4 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] unlink("./184/binderfs" [pid 5074] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6212 attached [pid 6211] ioctl(4, LOOP_SET_FD, 3 [pid 5076] getdents64(4, [pid 6212] set_robust_list(0x55556e32a660, 24 [pid 6210] <... mount resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] <... unlink resumed>) = 0 [pid 5074] umount2("./184/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6212] <... set_robust_list resumed>) = 0 [pid 6210] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6212 [pid 6212] chdir("./185" [pid 6210] <... openat resumed>) = 3 [pid 5075] getdents64(3, [pid 5074] newfstatat(AT_FDCWD, "./184/binderfs", [pid 6212] <... chdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6212] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6211] <... ioctl resumed>) = 0 [pid 6210] chdir("./bus" [pid 5076] getdents64(4, [pid 5075] close(3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6212] <... prctl resumed>) = 0 [pid 6210] <... chdir resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] <... close resumed>) = 0 [pid 5074] unlink("./184/binderfs" [pid 6212] setpgid(0, 0 [pid 6211] close(3 [pid 6210] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5076] close(4 [pid 5075] rmdir("./184" [pid 5074] <... unlink resumed>) = 0 [pid 6212] <... setpgid resumed>) = 0 [pid 6211] <... close resumed>) = 0 [pid 6210] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... close resumed>) = 0 [pid 6212] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6211] close(4 [pid 6210] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5076] rmdir("./187/bus" [pid 5075] <... rmdir resumed>) = 0 [pid 5074] getdents64(3, [pid 6212] <... openat resumed>) = 3 [pid 6211] <... close resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 6211] mkdir("./bus", 0777 [pid 6210] <... symlink resumed>) = 0 [pid 5076] umount2("./187/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6212] write(3, "1000", 4 [pid 6211] <... mkdir resumed>) = 0 [pid 6210] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6212] <... write resumed>) = 4 [ 188.575119][ T6210] loop5: detected capacity change from 0 to 1024 [ 188.613834][ T6211] loop4: detected capacity change from 0 to 1024 [pid 5076] newfstatat(AT_FDCWD, "./187/binderfs", [pid 5075] mkdir("./185", 0777 [pid 5074] close(3 [pid 6212] close(3 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6212] <... close resumed>) = 0 [pid 6211] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5076] unlink("./187/binderfs" [pid 5075] <... mkdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 6212] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5074] rmdir("./184" [pid 5076] getdents64(3, [pid 6212] memfd_create("syzkaller", 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3) = 0 [pid 6210] <... creat resumed>) = 4 [pid 5076] rmdir("./187" [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] <... rmdir resumed>) = 0 [pid 6212] <... memfd_create resumed>) = 3 [pid 5076] <... rmdir resumed>) = 0 [pid 6212] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6210] rename("./bus", "./file2" [pid 5075] <... openat resumed>) = 3 [pid 5074] mkdir("./185", 0777 [pid 6212] <... mmap resumed>) = 0x7f0356e00000 [pid 6210] <... rename resumed>) = -1 EEXIST (File exists) [pid 5076] mkdir("./188", 0777 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] <... mkdir resumed>) = 0 [pid 6210] memfd_create("syzkaller", 0 [pid 5076] <... mkdir resumed>) = 0 [pid 6210] <... memfd_create resumed>) = 5 [pid 6210] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6212] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6211] <... mount resumed>) = 0 [pid 6211] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6211] chdir("./bus") = 0 [pid 6211] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6211] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6210] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6211] <... symlink resumed>) = 0 [pid 6211] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6212] <... write resumed>) = 524288 [pid 6210] <... write resumed>) = 524288 [pid 6212] munmap(0x7f0356e00000, 138412032 [pid 6211] <... creat resumed>) = 4 [pid 6210] munmap(0x7f0356e00000, 138412032) = 0 [pid 6212] <... munmap resumed>) = 0 [pid 6212] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] <... ioctl resumed>) = 0 [pid 6212] <... openat resumed>) = 4 [pid 6210] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6212] ioctl(4, LOOP_SET_FD, 3 [pid 5075] close(3 [pid 6211] rename("./bus", "./file2" [pid 6210] close(5) = 0 [pid 5075] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... ioctl resumed>) = 0 [pid 6211] <... rename resumed>) = -1 EEXIST (File exists) [pid 6210] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6211] memfd_create("syzkaller", 0) = 5 [pid 6211] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 ./strace-static-x86_64: Process 6213 attached [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6213 [pid 6210] <... open resumed>) = 5 [pid 6213] set_robust_list(0x55556e32a660, 24 [pid 6211] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6210] ftruncate(5, 0 [pid 5076] close(3) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6213] <... set_robust_list resumed>) = 0 [pid 6210] <... ftruncate resumed>) = 0 [pid 6213] chdir("./185" [pid 6210] exit_group(0./strace-static-x86_64: Process 6214 attached ) = ? [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6214 [pid 6214] set_robust_list(0x55556e32a660, 24 [pid 6210] +++ exited with 0 +++ [pid 6214] <... set_robust_list resumed>) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6210, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6213] <... chdir resumed>) = 0 [pid 6212] <... ioctl resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 6213] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6212] close(3 [pid 5074] close(3 [pid 6213] <... prctl resumed>) = 0 [pid 6212] <... close resumed>) = 0 [pid 6213] setpgid(0, 0 [pid 5078] umount2("./187", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... close resumed>) = 0 [pid 6214] chdir("./188" [pid 6213] <... setpgid resumed>) = 0 [pid 6212] close(4 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6214] <... chdir resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./187", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6213] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6214] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5078] <... openat resumed>) = 3 [pid 6214] <... prctl resumed>) = 0 [pid 5078] newfstatat(3, "", [pid 6214] setpgid(0, 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6214] <... setpgid resumed>) = 0 [pid 6213] <... openat resumed>) = 3 [pid 5078] getdents64(3, [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6215 ./strace-static-x86_64: Process 6215 attached [pid 6214] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6212] <... close resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6215] set_robust_list(0x55556e32a660, 24 [pid 6214] <... openat resumed>) = 3 [pid 6213] write(3, "1000", 4 [pid 6212] mkdir("./bus", 0777 [pid 5078] umount2("./187/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6215] <... set_robust_list resumed>) = 0 [pid 6214] write(3, "1000", 4 [pid 6215] chdir("./185" [pid 6214] <... write resumed>) = 4 [pid 6213] <... write resumed>) = 4 [pid 6212] <... mkdir resumed>) = 0 [pid 6215] <... chdir resumed>) = 0 [pid 6214] close(3 [ 188.717314][ T6212] loop0: detected capacity change from 0 to 1024 [pid 6213] close(3 [pid 6215] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6214] <... close resumed>) = 0 [pid 6213] <... close resumed>) = 0 [pid 6212] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6215] <... prctl resumed>) = 0 [pid 6214] symlink("/dev/binderfs", "./binderfs" [pid 6213] symlink("/dev/binderfs", "./binderfs" [pid 6215] setpgid(0, 0 [pid 6214] <... symlink resumed>) = 0 [pid 6211] <... write resumed>) = 524288 [pid 5078] <... umount2 resumed>) = 0 [pid 6215] <... setpgid resumed>) = 0 [pid 6214] memfd_create("syzkaller", 0 [pid 6215] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6214] <... memfd_create resumed>) = 3 [pid 6214] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6214] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6213] <... symlink resumed>) = 0 [pid 6211] munmap(0x7f0356e00000, 138412032 [pid 5078] umount2("./187/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6215] <... openat resumed>) = 3 [pid 6213] memfd_create("syzkaller", 0 [pid 6211] <... munmap resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6213] <... memfd_create resumed>) = 3 [pid 5078] newfstatat(AT_FDCWD, "./187/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6213] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] umount2("./187/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./187/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6213] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... openat resumed>) = 4 [pid 5078] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(4, [pid 6215] write(3, "1000", 4 [pid 6213] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6215] <... write resumed>) = 4 [pid 6211] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5078] getdents64(4, [pid 6215] close(3 [pid 6211] close(5 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6215] <... close resumed>) = 0 [pid 6211] <... close resumed>) = 0 [pid 5078] close(4 [pid 6215] symlink("/dev/binderfs", "./binderfs" [pid 5078] <... close resumed>) = 0 [pid 6215] <... symlink resumed>) = 0 [pid 5078] rmdir("./187/bus" [pid 6215] memfd_create("syzkaller", 0 [pid 6214] <... write resumed>) = 524288 [pid 5078] <... rmdir resumed>) = 0 [pid 6215] <... memfd_create resumed>) = 3 [pid 6213] <... write resumed>) = 524288 [pid 6211] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] umount2("./187/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6215] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6212] <... mount resumed>) = 0 [pid 6215] <... mmap resumed>) = 0x7f0356e00000 [pid 6213] munmap(0x7f0356e00000, 138412032 [pid 6212] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] newfstatat(AT_FDCWD, "./187/binderfs", [pid 6212] <... openat resumed>) = 3 [pid 6212] chdir("./bus" [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6212] <... chdir resumed>) = 0 [pid 5078] unlink("./187/binderfs" [pid 6214] munmap(0x7f0356e00000, 138412032 [pid 6213] <... munmap resumed>) = 0 [pid 6212] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6211] <... open resumed>) = 5 [pid 5078] <... unlink resumed>) = 0 [pid 6214] <... munmap resumed>) = 0 [pid 6212] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6211] ftruncate(5, 0 [pid 5078] getdents64(3, [pid 6213] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6212] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6211] <... ftruncate resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6215] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6214] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6213] <... openat resumed>) = 4 [pid 6212] <... symlink resumed>) = 0 [pid 6211] exit_group(0 [pid 5078] close(3 [pid 6213] ioctl(4, LOOP_SET_FD, 3 [pid 6212] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6214] <... openat resumed>) = 4 [pid 6211] <... exit_group resumed>) = ? [pid 5078] <... close resumed>) = 0 [pid 5078] rmdir("./187") = 0 [pid 6214] ioctl(4, LOOP_SET_FD, 3 [pid 6215] <... write resumed>) = 524288 [pid 6213] <... ioctl resumed>) = 0 [pid 6212] <... creat resumed>) = 4 [pid 6211] +++ exited with 0 +++ [pid 5078] mkdir("./188", 0777 [pid 6213] close(3 [pid 6212] rename("./bus", "./file2" [pid 5078] <... mkdir resumed>) = 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6211, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6212] <... rename resumed>) = -1 EEXIST (File exists) [pid 6212] memfd_create("syzkaller", 0 [pid 6213] <... close resumed>) = 0 [pid 6212] <... memfd_create resumed>) = 5 [pid 5078] <... openat resumed>) = 3 [pid 5077] umount2("./187", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6213] close(4 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6213] <... close resumed>) = 0 [pid 6212] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 6212] <... mmap resumed>) = 0x7f0356e00000 [pid 6213] mkdir("./bus", 0777 [pid 6212] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] openat(AT_FDCWD, "./187", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5077] newfstatat(3, "", [pid 6214] <... ioctl resumed>) = 0 [pid 6213] <... mkdir resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6215] munmap(0x7f0356e00000, 138412032 [pid 6213] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5077] umount2("./187/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6214] close(3) = 0 [pid 6214] close(4 [pid 6215] <... munmap resumed>) = 0 [pid 6214] <... close resumed>) = 0 [pid 6214] mkdir("./bus", 0777 [pid 6215] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6214] <... mkdir resumed>) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 6214] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6215] <... openat resumed>) = 4 [pid 6212] <... write resumed>) = 524288 [pid 6215] ioctl(4, LOOP_SET_FD, 3 [ 188.860006][ T6213] loop2: detected capacity change from 0 to 1024 [ 188.870236][ T6214] loop3: detected capacity change from 0 to 1024 [pid 5077] umount2("./187/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./187/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6214] <... mount resumed>) = 0 [pid 5077] umount2("./187/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./187/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5077] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6214] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5077] getdents64(4, [pid 6214] <... openat resumed>) = 3 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6214] chdir("./bus" [pid 5077] close(4 [pid 6214] <... chdir resumed>) = 0 [pid 6213] <... mount resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 6214] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5077] rmdir("./187/bus" [pid 6214] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6213] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6212] munmap(0x7f0356e00000, 138412032 [pid 5077] <... rmdir resumed>) = 0 [pid 6214] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6213] <... openat resumed>) = 3 [pid 6212] <... munmap resumed>) = 0 [pid 6215] <... ioctl resumed>) = 0 [pid 6214] <... symlink resumed>) = 0 [pid 6213] chdir("./bus" [pid 5077] umount2("./187/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6215] close(3 [pid 6214] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6213] <... chdir resumed>) = 0 [pid 6212] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5078] <... ioctl resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6215] <... close resumed>) = 0 [pid 6212] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6215] close(4 [pid 6213] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] close(3 [pid 5077] newfstatat(AT_FDCWD, "./187/binderfs", [pid 6215] <... close resumed>) = 0 [pid 6213] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6212] close(5 [pid 5078] <... close resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6214] <... creat resumed>) = 4 [pid 6212] <... close resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] unlink("./187/binderfs" [pid 6214] rename("./bus", "./file2" [pid 6215] mkdir("./bus", 0777 [pid 6213] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6215] <... mkdir resumed>) = 0 [pid 6214] <... rename resumed>) = -1 EEXIST (File exists) ./strace-static-x86_64: Process 6216 attached [pid 6212] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] <... unlink resumed>) = 0 [pid 6213] <... symlink resumed>) = 0 [pid 6215] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6213] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6216] set_robust_list(0x55556e32a660, 24 [pid 6214] memfd_create("syzkaller", 0 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6216 [pid 5077] getdents64(3, [pid 6214] <... memfd_create resumed>) = 5 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6216] <... set_robust_list resumed>) = 0 [pid 6214] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] close(3 [pid 6216] chdir("./188" [pid 6214] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] <... close resumed>) = 0 [ 188.913887][ T6215] loop1: detected capacity change from 0 to 1024 [pid 6216] <... chdir resumed>) = 0 [pid 6215] <... mount resumed>) = 0 [pid 6214] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6213] <... creat resumed>) = 4 [pid 5077] rmdir("./187" [pid 6216] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6215] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6213] rename("./bus", "./file2" [pid 6212] <... open resumed>) = 5 [pid 6216] <... prctl resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 6216] setpgid(0, 0 [pid 6212] ftruncate(5, 0 [pid 6215] <... openat resumed>) = 3 [pid 6213] <... rename resumed>) = -1 EEXIST (File exists) [pid 6216] <... setpgid resumed>) = 0 [pid 6215] chdir("./bus" [pid 6212] <... ftruncate resumed>) = 0 [pid 5077] mkdir("./188", 0777 [pid 6216] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6215] <... chdir resumed>) = 0 [pid 6213] memfd_create("syzkaller", 0 [pid 5077] <... mkdir resumed>) = 0 [pid 6215] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6216] <... openat resumed>) = 3 [pid 6215] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6212] exit_group(0 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6215] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6213] <... memfd_create resumed>) = 5 [pid 6213] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6215] <... symlink resumed>) = 0 [pid 6214] <... write resumed>) = 524288 [pid 6213] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... openat resumed>) = 3 [pid 6216] write(3, "1000", 4 [pid 6212] <... exit_group resumed>) = ? [pid 6215] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6216] <... write resumed>) = 4 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 6216] close(3) = 0 [pid 6215] <... creat resumed>) = 4 [pid 6214] munmap(0x7f0356e00000, 138412032 [pid 6212] +++ exited with 0 +++ [pid 6216] symlink("/dev/binderfs", "./binderfs" [pid 6215] rename("./bus", "./file2" [pid 6214] <... munmap resumed>) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6212, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6216] <... symlink resumed>) = 0 [pid 6214] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6216] memfd_create("syzkaller", 0 [pid 6214] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6215] <... rename resumed>) = -1 EEXIST (File exists) [pid 6216] <... memfd_create resumed>) = 3 [pid 6216] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6215] memfd_create("syzkaller", 0 [pid 6214] close(5 [pid 6216] <... mmap resumed>) = 0x7f0356e00000 [pid 6215] <... memfd_create resumed>) = 5 [pid 5073] umount2("./185", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6216] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6215] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6215] <... mmap resumed>) = 0x7f0356e00000 [pid 5073] openat(AT_FDCWD, "./185", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6213] <... write resumed>) = 524288 [pid 5073] <... openat resumed>) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6215] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6214] <... close resumed>) = 0 [pid 5073] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6213] munmap(0x7f0356e00000, 138412032 [pid 5073] umount2("./185/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6213] <... munmap resumed>) = 0 [pid 6214] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6213] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6213] close(5) = 0 [pid 6216] <... write resumed>) = 524288 [pid 6214] <... open resumed>) = 5 [pid 6214] ftruncate(5, 0) = 0 [pid 6214] exit_group(0) = ? [pid 6214] +++ exited with 0 +++ [pid 6216] munmap(0x7f0356e00000, 138412032) = 0 [pid 6215] <... write resumed>) = 524288 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6214, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5073] <... umount2 resumed>) = 0 [pid 6216] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6213] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6216] <... openat resumed>) = 4 [pid 5077] <... ioctl resumed>) = 0 [pid 6215] munmap(0x7f0356e00000, 138412032 [pid 6216] ioctl(4, LOOP_SET_FD, 3 [pid 5073] umount2("./185/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./188", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6215] <... munmap resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6215] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6213] <... open resumed>) = 5 [pid 5076] openat(AT_FDCWD, "./188", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6213] ftruncate(5, 0 [pid 5077] close(3 [pid 5073] newfstatat(AT_FDCWD, "./185/bus", [pid 6213] <... ftruncate resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6215] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6213] exit_group(0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] umount2("./185/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6215] close(5 [pid 6213] <... exit_group resumed>) = ? [pid 6213] +++ exited with 0 +++ [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6213, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5073] openat(AT_FDCWD, "./185/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 ./strace-static-x86_64: Process 6217 attached [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6217 [pid 5076] <... openat resumed>) = 3 [pid 6217] set_robust_list(0x55556e32a660, 24 [pid 5073] newfstatat(4, "", [pid 5076] newfstatat(3, "", [pid 6217] <... set_robust_list resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, [pid 6217] chdir("./188" [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] getdents64(4, [pid 6217] <... chdir resumed>) = 0 [pid 6215] <... close resumed>) = 0 [pid 6217] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6217] <... prctl resumed>) = 0 [pid 6217] setpgid(0, 0 [pid 5075] umount2("./185", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./188/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] getdents64(4, [pid 6215] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6217] <... setpgid resumed>) = 0 [pid 6216] <... ioctl resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6217] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6216] close(3 [pid 5075] openat(AT_FDCWD, "./185", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] close(4 [pid 6217] <... openat resumed>) = 3 [pid 6215] <... open resumed>) = 5 [pid 5075] <... openat resumed>) = 3 [pid 6217] write(3, "1000", 4 [pid 6216] <... close resumed>) = 0 [pid 6215] ftruncate(5, 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 6217] <... write resumed>) = 4 [pid 6216] close(4 [pid 6215] <... ftruncate resumed>) = 0 [pid 5076] umount2("./188/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] newfstatat(3, "", [pid 5073] rmdir("./185/bus" [pid 6217] close(3 [pid 6216] <... close resumed>) = 0 [pid 6215] exit_group(0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 6217] <... close resumed>) = 0 [pid 6216] mkdir("./bus", 0777 [pid 5076] newfstatat(AT_FDCWD, "./188/bus", [pid 5075] getdents64(3, [pid 5073] umount2("./185/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6217] symlink("/dev/binderfs", "./binderfs" [pid 6216] <... mkdir resumed>) = 0 [pid 6215] <... exit_group resumed>) = ? [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6217] <... symlink resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [ 189.074616][ T6216] loop5: detected capacity change from 0 to 1024 [pid 5073] newfstatat(AT_FDCWD, "./185/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6217] memfd_create("syzkaller", 0 [pid 5076] umount2("./188/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./185/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] unlink("./185/binderfs" [pid 6217] <... memfd_create resumed>) = 3 [pid 6216] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... unlink resumed>) = 0 [pid 6217] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] openat(AT_FDCWD, "./188/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6217] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] <... openat resumed>) = 4 [pid 5073] getdents64(3, [pid 5076] newfstatat(4, "", [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] close(3 [pid 6215] +++ exited with 0 +++ [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./185" [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6215, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5076] getdents64(4, [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 5073] <... rmdir resumed>) = 0 [pid 6217] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] <... restart_syscall resumed>) = 0 [pid 5073] mkdir("./186", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] getdents64(4, [pid 5075] <... umount2 resumed>) = 0 [pid 5074] umount2("./185", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... openat resumed>) = 3 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5076] close(4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... close resumed>) = 0 [pid 5075] umount2("./185/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] openat(AT_FDCWD, "./185", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6216] <... mount resumed>) = 0 [pid 5076] rmdir("./188/bus" [pid 6216] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... openat resumed>) = 3 [pid 6216] <... openat resumed>) = 3 [pid 5075] newfstatat(AT_FDCWD, "./185/bus", [pid 5074] newfstatat(3, "", [pid 6216] chdir("./bus" [pid 5076] umount2("./188/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] getdents64(3, [pid 6216] <... chdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./185/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6216] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./185/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6216] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] newfstatat(AT_FDCWD, "./188/binderfs", [pid 5075] openat(AT_FDCWD, "./185/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6217] <... write resumed>) = 524288 [pid 6216] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./188/binderfs" [pid 5075] <... openat resumed>) = 4 [pid 5076] <... unlink resumed>) = 0 [pid 5075] newfstatat(4, "", [pid 5076] getdents64(3, [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] getdents64(4, [pid 5076] close(3) = 0 [pid 5076] rmdir("./188" [pid 6216] <... symlink resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6216] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6217] munmap(0x7f0356e00000, 138412032 [pid 5076] mkdir("./189", 0777 [pid 5075] getdents64(4, [pid 5074] <... umount2 resumed>) = 0 [pid 6217] <... munmap resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] umount2("./185/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] close(4) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6217] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5075] rmdir("./185/bus" [pid 5074] newfstatat(AT_FDCWD, "./185/bus", [pid 5073] <... ioctl resumed>) = 0 [pid 6217] ioctl(4, LOOP_SET_FD, 3 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6217] <... ioctl resumed>) = 0 [pid 6216] <... creat resumed>) = 4 [pid 5075] umount2("./185/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./185/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] close(3 [pid 6217] close(3 [pid 6216] rename("./bus", "./file2" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6217] <... close resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./185/binderfs", [pid 5073] <... close resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6217] close(4 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] openat(AT_FDCWD, "./185/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6217] <... close resumed>) = 0 [pid 6217] mkdir("./bus", 0777./strace-static-x86_64: Process 6218 attached ) = 0 [pid 5075] unlink("./185/binderfs" [pid 5074] <... openat resumed>) = 4 [pid 5074] newfstatat(4, "", [pid 6218] set_robust_list(0x55556e32a660, 24 [pid 6216] <... rename resumed>) = -1 EEXIST (File exists) [pid 5075] <... unlink resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6218 [pid 6218] <... set_robust_list resumed>) = 0 [pid 6216] memfd_create("syzkaller", 0 [pid 5074] getdents64(4, [pid 6218] chdir("./186" [pid 6217] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6216] <... memfd_create resumed>) = 5 [pid 5075] getdents64(3, [pid 6218] <... chdir resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6218] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6218] <... prctl resumed>) = 0 [pid 5075] close(3 [pid 5074] getdents64(4, [pid 6218] setpgid(0, 0 [pid 6216] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6218] <... setpgid resumed>) = 0 [pid 5075] rmdir("./185" [pid 5074] close(4 [pid 6216] <... mmap resumed>) = 0x7f0356e00000 [pid 5074] <... close resumed>) = 0 [pid 6218] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6216] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] rmdir("./185/bus" [pid 6218] <... openat resumed>) = 3 [pid 6216] <... write resumed>) = 524288 [pid 5075] mkdir("./186", 0777 [pid 5074] <... rmdir resumed>) = 0 [pid 6218] write(3, "1000", 4 [pid 6216] munmap(0x7f0356e00000, 138412032 [pid 5076] <... ioctl resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 6218] <... write resumed>) = 4 [pid 6218] close(3 [pid 5074] umount2("./185/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6218] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6218] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] newfstatat(AT_FDCWD, "./185/binderfs", [pid 6217] <... mount resumed>) = 0 [pid 5076] close(3 [pid 5075] <... openat resumed>) = 3 [pid 6217] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5076] <... close resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6217] chdir("./bus" [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] unlink("./185/binderfs" [pid 6216] <... munmap resumed>) = 0 [pid 6217] <... chdir resumed>) = 0 [ 189.187723][ T6217] loop4: detected capacity change from 0 to 1024 [pid 6218] memfd_create("syzkaller", 0 [pid 6217] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6216] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 6219 attached [pid 6218] <... memfd_create resumed>) = 3 [pid 6217] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6216] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6219] set_robust_list(0x55556e32a660, 24 [pid 6218] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6217] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6219 [pid 6219] <... set_robust_list resumed>) = 0 [pid 6217] <... symlink resumed>) = 0 [pid 6219] chdir("./189" [pid 6217] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6219] <... chdir resumed>) = 0 [pid 6218] <... mmap resumed>) = 0x7f0356e00000 [pid 6217] <... creat resumed>) = 4 [pid 5074] getdents64(3, [pid 6219] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6217] rename("./bus", "./file2" [pid 6219] <... prctl resumed>) = 0 [pid 6216] close(5 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6219] setpgid(0, 0) = 0 [pid 6217] <... rename resumed>) = -1 EEXIST (File exists) [pid 5074] close(3 [pid 6219] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6217] memfd_create("syzkaller", 0 [pid 5074] <... close resumed>) = 0 [pid 6217] <... memfd_create resumed>) = 5 [pid 6217] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6219] <... openat resumed>) = 3 [pid 6217] <... mmap resumed>) = 0x7f0356e00000 [pid 6219] write(3, "1000", 4 [pid 6217] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] rmdir("./185" [pid 6219] <... write resumed>) = 4 [pid 6219] close(3) = 0 [pid 6219] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 6219] memfd_create("syzkaller", 0) = 3 [pid 6219] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6218] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6217] <... write resumed>) = 524288 [pid 6216] <... close resumed>) = 0 [pid 5074] mkdir("./186", 0777 [pid 6219] <... mmap resumed>) = 0x7f0356e00000 [pid 6217] munmap(0x7f0356e00000, 138412032 [pid 6219] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6217] <... munmap resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 6217] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6219] <... write resumed>) = 524288 [pid 6216] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5075] <... ioctl resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6219] munmap(0x7f0356e00000, 138412032 [pid 6218] <... write resumed>) = 524288 [pid 6217] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] close(3 [pid 6219] <... munmap resumed>) = 0 [pid 6216] <... open resumed>) = 5 [pid 5075] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6219] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6218] munmap(0x7f0356e00000, 138412032 [pid 6217] close(5 [pid 6219] <... openat resumed>) = 4 [pid 6218] <... munmap resumed>) = 0 [pid 6216] ftruncate(5, 0./strace-static-x86_64: Process 6220 attached [pid 6219] ioctl(4, LOOP_SET_FD, 3 [pid 6218] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6216] <... ftruncate resumed>) = 0 [pid 6216] exit_group(0 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6220 [pid 6220] set_robust_list(0x55556e32a660, 24 [pid 6216] <... exit_group resumed>) = ? [pid 6218] <... openat resumed>) = 4 [pid 6220] <... set_robust_list resumed>) = 0 [pid 6219] <... ioctl resumed>) = 0 [pid 6218] ioctl(4, LOOP_SET_FD, 3 [pid 6216] +++ exited with 0 +++ [pid 6220] chdir("./186" [pid 6217] <... close resumed>) = 0 [pid 6220] <... chdir resumed>) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6216, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5074] <... ioctl resumed>) = 0 [pid 6220] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6217] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] restart_syscall(<... resuming interrupted clone ...> [pid 6220] <... prctl resumed>) = 0 [pid 6218] <... ioctl resumed>) = 0 [pid 5078] <... restart_syscall resumed>) = 0 [pid 6218] close(3) = 0 [pid 6219] close(3 [pid 6218] close(4 [pid 5078] umount2("./188", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6219] <... close resumed>) = 0 [pid 6218] <... close resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6219] close(4 [pid 6218] mkdir("./bus", 0777 [pid 6219] <... close resumed>) = 0 [pid 6218] <... mkdir resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./188", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6219] mkdir("./bus", 0777 [pid 6218] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5078] <... openat resumed>) = 3 [pid 5078] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6219] <... mkdir resumed>) = 0 [pid 5078] umount2("./188/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6219] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6220] setpgid(0, 0) = 0 [pid 6220] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6218] <... mount resumed>) = 0 [pid 6217] <... open resumed>) = 5 [pid 6218] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6217] ftruncate(5, 0 [pid 6218] <... openat resumed>) = 3 [pid 6220] <... openat resumed>) = 3 [pid 6217] <... ftruncate resumed>) = 0 [pid 6218] chdir("./bus" [pid 6220] write(3, "1000", 4 [pid 6217] exit_group(0 [pid 5074] close(3 [pid 6220] <... write resumed>) = 4 [pid 6218] <... chdir resumed>) = 0 [pid 6217] <... exit_group resumed>) = ? [ 189.318484][ T6219] loop3: detected capacity change from 0 to 1024 [ 189.328755][ T6218] loop0: detected capacity change from 0 to 1024 [pid 5074] <... close resumed>) = 0 [pid 6220] close(3 [pid 6219] <... mount resumed>) = 0 [pid 6218] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6217] +++ exited with 0 +++ [pid 5078] <... umount2 resumed>) = 0 [pid 6220] <... close resumed>) = 0 [pid 6219] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6218] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6217, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6220] symlink("/dev/binderfs", "./binderfs" [pid 6219] <... openat resumed>) = 3 [pid 6218] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] umount2("./188/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6219] chdir("./bus" [pid 6218] <... symlink resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6219] <... chdir resumed>) = 0 [pid 6218] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] newfstatat(AT_FDCWD, "./188/bus", [pid 5077] umount2("./188", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6220] <... symlink resumed>) = 0 [pid 6219] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6218] <... creat resumed>) = 4 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6220] memfd_create("syzkaller", 0 [pid 6219] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6218] rename("./bus", "./file2" [pid 5078] umount2("./188/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] openat(AT_FDCWD, "./188", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6221 ./strace-static-x86_64: Process 6221 attached [pid 6220] <... memfd_create resumed>) = 3 [pid 6219] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6218] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... openat resumed>) = 3 [pid 6221] set_robust_list(0x55556e32a660, 24 [pid 6220] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6219] <... symlink resumed>) = 0 [pid 6218] memfd_create("syzkaller", 0 [pid 6220] <... mmap resumed>) = 0x7f0356e00000 [pid 6218] <... memfd_create resumed>) = 5 [pid 5077] newfstatat(3, "", [pid 6218] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6218] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] openat(AT_FDCWD, "./188/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] getdents64(3, [pid 6221] <... set_robust_list resumed>) = 0 [pid 6220] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6219] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] <... openat resumed>) = 4 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6221] chdir("./186" [pid 5078] newfstatat(4, "", [pid 5077] umount2("./188/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6221] <... chdir resumed>) = 0 [pid 6221] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6221] <... prctl resumed>) = 0 [pid 6219] <... creat resumed>) = 4 [pid 6218] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] getdents64(4, [pid 6221] setpgid(0, 0 [pid 6219] rename("./bus", "./file2" [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6221] <... setpgid resumed>) = 0 [pid 6219] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5078] close(4 [pid 6221] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5078] <... close resumed>) = 0 [pid 6220] <... write resumed>) = 524288 [pid 5078] rmdir("./188/bus" [pid 5077] <... umount2 resumed>) = 0 [pid 6221] <... openat resumed>) = 3 [pid 6219] memfd_create("syzkaller", 0 [pid 6218] <... write resumed>) = 524288 [pid 5078] <... rmdir resumed>) = 0 [pid 6219] <... memfd_create resumed>) = 5 [pid 6219] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6221] write(3, "1000", 4 [pid 6220] munmap(0x7f0356e00000, 138412032 [pid 6219] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] umount2("./188/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] umount2("./188/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] newfstatat(AT_FDCWD, "./188/binderfs", [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6221] <... write resumed>) = 4 [pid 6220] <... munmap resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] newfstatat(AT_FDCWD, "./188/bus", [pid 6221] close(3 [pid 6220] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6221] <... close resumed>) = 0 [pid 6221] symlink("/dev/binderfs", "./binderfs" [pid 6220] <... openat resumed>) = 4 [pid 5078] unlink("./188/binderfs" [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6221] <... symlink resumed>) = 0 [pid 6220] ioctl(4, LOOP_SET_FD, 3 [pid 5078] <... unlink resumed>) = 0 [pid 5077] umount2("./188/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] getdents64(3, [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6218] munmap(0x7f0356e00000, 138412032 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] openat(AT_FDCWD, "./188/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] close(3 [pid 5077] <... openat resumed>) = 4 [pid 5078] <... close resumed>) = 0 [pid 5077] newfstatat(4, "", [pid 6218] <... munmap resumed>) = 0 [pid 5078] rmdir("./188" [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5077] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6221] memfd_create("syzkaller", 0 [pid 6220] <... ioctl resumed>) = 0 [pid 5078] mkdir("./189", 0777 [pid 5077] getdents64(4, [pid 6221] <... memfd_create resumed>) = 3 [pid 6220] close(3 [pid 6218] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5078] <... mkdir resumed>) = 0 [pid 6221] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6220] <... close resumed>) = 0 [pid 6218] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6221] <... mmap resumed>) = 0x7f0356e00000 [pid 6220] close(4 [pid 5078] <... openat resumed>) = 3 [pid 5077] close(4 [pid 6218] close(5 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5077] <... close resumed>) = 0 [pid 6220] <... close resumed>) = 0 [pid 6218] <... close resumed>) = 0 [pid 5077] rmdir("./188/bus" [pid 6220] mkdir("./bus", 0777 [pid 5077] <... rmdir resumed>) = 0 [pid 6220] <... mkdir resumed>) = 0 [pid 6219] <... write resumed>) = 524288 [pid 5077] umount2("./188/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6220] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6219] munmap(0x7f0356e00000, 138412032 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6219] <... munmap resumed>) = 0 [pid 6218] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] newfstatat(AT_FDCWD, "./188/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] unlink("./188/binderfs") = 0 [pid 5077] getdents64(3, [pid 6219] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6219] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] close(3 [pid 6221] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6220] <... mount resumed>) = 0 [pid 6219] close(5 [pid 6220] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6219] <... close resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5077] rmdir("./188") = 0 [pid 5077] mkdir("./189", 0777) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 6219] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6218] <... open resumed>) = 5 [pid 6218] ftruncate(5, 0 [pid 6220] chdir("./bus" [pid 6218] <... ftruncate resumed>) = 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 6220] <... chdir resumed>) = 0 [pid 6218] exit_group(0 [pid 6220] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6218] <... exit_group resumed>) = ? [pid 6220] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6221] <... write resumed>) = 524288 [pid 6220] <... symlink resumed>) = 0 [pid 6218] +++ exited with 0 +++ [pid 6220] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6221] munmap(0x7f0356e00000, 138412032 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6218, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [ 189.462233][ T6220] loop2: detected capacity change from 0 to 1024 [pid 6221] <... munmap resumed>) = 0 [pid 6220] <... creat resumed>) = 4 [pid 6219] <... open resumed>) = 5 [pid 6219] ftruncate(5, 0) = 0 [pid 5073] umount2("./186", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6219] exit_group(0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6221] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6220] rename("./bus", "./file2" [pid 6219] <... exit_group resumed>) = ? [pid 5073] openat(AT_FDCWD, "./186", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6221] <... openat resumed>) = 4 [pid 6219] +++ exited with 0 +++ [pid 6221] ioctl(4, LOOP_SET_FD, 3 [pid 6220] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] <... ioctl resumed>) = 0 [pid 5077] <... ioctl resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6219, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5073] newfstatat(3, "", [pid 6220] memfd_create("syzkaller", 0 [pid 5076] umount2("./189", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6220] <... memfd_create resumed>) = 5 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6220] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] openat(AT_FDCWD, "./189", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6220] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] <... openat resumed>) = 3 [pid 6220] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] newfstatat(3, "", [pid 6221] <... ioctl resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] close(3 [pid 5073] getdents64(3, [pid 5078] <... close resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] getdents64(3, [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] close(3 [pid 5073] umount2("./186/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] <... close resumed>) = 0 [pid 5076] umount2("./189/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6222 ./strace-static-x86_64: Process 6223 attached [pid 6223] set_robust_list(0x55556e32a660, 24./strace-static-x86_64: Process 6222 attached [pid 6222] set_robust_list(0x55556e32a660, 24) = 0 [pid 6223] <... set_robust_list resumed>) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6223 [pid 6223] chdir("./189" [pid 6221] close(3 [pid 6220] <... write resumed>) = 524288 [pid 6222] chdir("./189") = 0 [pid 6221] <... close resumed>) = 0 [pid 6222] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6223] <... chdir resumed>) = 0 [pid 6221] close(4 [pid 5076] <... umount2 resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 6222] setpgid(0, 0 [pid 6223] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6221] <... close resumed>) = 0 [pid 5076] umount2("./189/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6222] <... setpgid resumed>) = 0 [pid 6221] mkdir("./bus", 0777 [pid 6223] <... prctl resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6222] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6223] setpgid(0, 0 [pid 6221] <... mkdir resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./189/bus", [pid 6222] write(3, "1000", 4 [pid 6223] <... setpgid resumed>) = 0 [pid 6220] munmap(0x7f0356e00000, 138412032 [pid 5073] umount2("./186/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6222] <... write resumed>) = 4 [pid 6223] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6220] <... munmap resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6222] close(3 [pid 6223] <... openat resumed>) = 3 [pid 6220] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] umount2("./189/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6222] <... close resumed>) = 0 [pid 6223] write(3, "1000", 4 [pid 6220] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./186/bus", [pid 6222] symlink("/dev/binderfs", "./binderfs" [pid 6221] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [ 189.547529][ T6221] loop1: detected capacity change from 0 to 1024 [pid 6220] close(5 [pid 5076] openat(AT_FDCWD, "./189/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6222] <... symlink resumed>) = 0 [pid 6223] <... write resumed>) = 4 [pid 6220] <... close resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6222] memfd_create("syzkaller", 0) = 3 [pid 6222] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6222] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... openat resumed>) = 4 [pid 5073] umount2("./186/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6223] close(3 [pid 6221] <... mount resumed>) = 0 [pid 5076] newfstatat(4, "", [pid 5073] openat(AT_FDCWD, "./186/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6223] <... close resumed>) = 0 [pid 6221] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] newfstatat(4, "", [pid 5076] getdents64(4, [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6221] <... openat resumed>) = 3 [pid 5073] getdents64(4, [pid 6223] symlink("/dev/binderfs", "./binderfs" [pid 6221] chdir("./bus" [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6223] <... symlink resumed>) = 0 [pid 5076] getdents64(4, [pid 6221] <... chdir resumed>) = 0 [pid 5073] getdents64(4, [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] close(4 [pid 6221] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] close(4 [pid 5073] <... close resumed>) = 0 [pid 6221] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6220] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5073] rmdir("./186/bus" [pid 6221] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5076] <... close resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5076] rmdir("./189/bus" [pid 6223] memfd_create("syzkaller", 0 [pid 6220] <... open resumed>) = 5 [pid 5076] <... rmdir resumed>) = 0 [pid 5073] umount2("./186/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6221] <... symlink resumed>) = 0 [pid 6220] ftruncate(5, 0 [pid 5076] umount2("./189/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6223] <... memfd_create resumed>) = 3 [pid 6221] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6220] <... ftruncate resumed>) = 0 [pid 6223] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6220] exit_group(0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./186/binderfs", [pid 6223] <... mmap resumed>) = 0x7f0356e00000 [pid 6220] <... exit_group resumed>) = ? [pid 5076] newfstatat(AT_FDCWD, "./189/binderfs", [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6222] <... write resumed>) = 524288 [pid 6223] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6220] +++ exited with 0 +++ [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./186/binderfs" [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6220, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6221] <... creat resumed>) = 4 [pid 5076] unlink("./189/binderfs" [pid 5073] <... unlink resumed>) = 0 [pid 6222] munmap(0x7f0356e00000, 138412032 [pid 6223] <... write resumed>) = 524288 [pid 6221] rename("./bus", "./file2" [pid 5076] <... unlink resumed>) = 0 [pid 5073] getdents64(3, [pid 5076] getdents64(3, [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6222] <... munmap resumed>) = 0 [pid 5076] close(3 [pid 5073] close(3 [pid 5075] umount2("./186", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] rmdir("./186" [pid 5076] <... close resumed>) = 0 [pid 6222] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5073] <... rmdir resumed>) = 0 [pid 5076] rmdir("./189" [pid 5075] openat(AT_FDCWD, "./186", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6222] ioctl(4, LOOP_SET_FD, 3 [pid 6223] munmap(0x7f0356e00000, 138412032 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5073] mkdir("./187", 0777 [pid 6221] <... rename resumed>) = -1 EEXIST (File exists) [pid 6223] <... munmap resumed>) = 0 [pid 6222] <... ioctl resumed>) = 0 [pid 6223] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6221] memfd_create("syzkaller", 0 [pid 5076] mkdir("./190", 0777 [pid 5075] newfstatat(3, "", [pid 5073] <... mkdir resumed>) = 0 [pid 6222] close(3 [pid 6221] <... memfd_create resumed>) = 5 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6222] <... close resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6222] close(4 [pid 6221] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6222] <... close resumed>) = 0 [pid 6223] <... openat resumed>) = 4 [pid 5075] getdents64(3, [pid 5073] <... openat resumed>) = 3 [pid 6222] mkdir("./bus", 0777 [pid 6221] <... mmap resumed>) = 0x7f0356e00000 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6222] <... mkdir resumed>) = 0 [pid 6222] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6223] ioctl(4, LOOP_SET_FD, 3 [pid 6221] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] umount2("./186/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6221] <... write resumed>) = 524288 [pid 5076] <... openat resumed>) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6221] munmap(0x7f0356e00000, 138412032 [pid 6222] <... mount resumed>) = 0 [pid 6223] <... ioctl resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 6222] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6223] close(3 [pid 5073] <... ioctl resumed>) = 0 [pid 6223] <... close resumed>) = 0 [pid 6222] <... openat resumed>) = 3 [pid 6223] close(4 [pid 6222] chdir("./bus" [pid 6223] <... close resumed>) = 0 [pid 6222] <... chdir resumed>) = 0 [pid 6223] mkdir("./bus", 0777 [pid 6222] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6223] <... mkdir resumed>) = 0 [pid 6221] <... munmap resumed>) = 0 [pid 5075] umount2("./186/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] close(3 [pid 6223] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./186/bus", [pid 6222] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6221] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... close resumed>) = 0 [pid 6221] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] umount2("./186/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6221] close(5 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./186/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 189.667523][ T6222] loop5: detected capacity change from 0 to 1024 [ 189.702697][ T6223] loop4: detected capacity change from 0 to 1024 [pid 5075] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6221] <... close resumed>) = 0 [pid 5075] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, [pid 5076] <... ioctl resumed>) = 0 [pid 6222] <... symlink resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] close(4) = 0 [pid 5075] rmdir("./186/bus" [pid 6222] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5075] <... rmdir resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6224 ./strace-static-x86_64: Process 6224 attached [pid 6221] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6224] set_robust_list(0x55556e32a660, 24) = 0 [pid 5076] close(3 [pid 5075] umount2("./186/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6224] chdir("./187" [pid 5076] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6224] <... chdir resumed>) = 0 [pid 6223] <... mount resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./186/binderfs", [pid 6224] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 6225 attached [pid 6224] <... prctl resumed>) = 0 [pid 6222] <... creat resumed>) = 4 [pid 6223] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6225] set_robust_list(0x55556e32a660, 24) = 0 [pid 6224] setpgid(0, 0 [pid 6222] rename("./bus", "./file2" [pid 6223] <... openat resumed>) = 3 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6225 [pid 5075] unlink("./186/binderfs" [pid 6225] chdir("./190" [pid 6224] <... setpgid resumed>) = 0 [pid 6223] chdir("./bus" [pid 5075] <... unlink resumed>) = 0 [pid 6225] <... chdir resumed>) = 0 [pid 6224] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6222] <... rename resumed>) = -1 EEXIST (File exists) [pid 6223] <... chdir resumed>) = 0 [pid 6221] <... open resumed>) = 5 [pid 5075] getdents64(3, [pid 6225] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6224] <... openat resumed>) = 3 [pid 6222] memfd_create("syzkaller", 0 [pid 6223] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6221] ftruncate(5, 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6223] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] close(3 [pid 6225] <... prctl resumed>) = 0 [pid 6222] <... memfd_create resumed>) = 5 [pid 6223] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5075] <... close resumed>) = 0 [pid 6225] setpgid(0, 0 [pid 6222] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] rmdir("./186" [pid 6222] <... mmap resumed>) = 0x7f0356e00000 [pid 6225] <... setpgid resumed>) = 0 [pid 6224] write(3, "1000", 4 [pid 6221] <... ftruncate resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 6224] <... write resumed>) = 4 [pid 6221] exit_group(0 [pid 6224] close(3 [pid 6221] <... exit_group resumed>) = ? [pid 5075] mkdir("./187", 0777 [pid 6225] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6224] <... close resumed>) = 0 [pid 6221] +++ exited with 0 +++ [pid 5075] <... mkdir resumed>) = 0 [pid 6224] symlink("/dev/binderfs", "./binderfs" [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6221, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6224] <... symlink resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 6222] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6225] <... openat resumed>) = 3 [pid 6224] memfd_create("syzkaller", 0 [pid 5074] umount2("./186", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6224] <... memfd_create resumed>) = 3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6225] write(3, "1000", 4 [pid 6223] <... symlink resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./186", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6225] <... write resumed>) = 4 [pid 6225] close(3 [pid 6224] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6223] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5074] <... openat resumed>) = 3 [pid 6225] <... close resumed>) = 0 [pid 6224] <... mmap resumed>) = 0x7f0356e00000 [pid 5074] newfstatat(3, "", [pid 6225] symlink("/dev/binderfs", "./binderfs" [pid 6224] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6225] <... symlink resumed>) = 0 [pid 5074] getdents64(3, [pid 6225] memfd_create("syzkaller", 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6223] <... creat resumed>) = 4 [pid 6225] <... memfd_create resumed>) = 3 [pid 6223] rename("./bus", "./file2" [pid 5074] umount2("./186/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6225] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6222] <... write resumed>) = 524288 [pid 6223] <... rename resumed>) = -1 EEXIST (File exists) [pid 5075] <... ioctl resumed>) = 0 [pid 6224] <... write resumed>) = 524288 [pid 6225] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6222] munmap(0x7f0356e00000, 138412032 [pid 6223] memfd_create("syzkaller", 0 [pid 5075] close(3 [pid 5074] <... umount2 resumed>) = 0 [pid 6224] munmap(0x7f0356e00000, 138412032 [pid 5075] <... close resumed>) = 0 [pid 6224] <... munmap resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6223] <... memfd_create resumed>) = 5 [pid 6222] <... munmap resumed>) = 0 [pid 5074] umount2("./186/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6223] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6222] openat(AT_FDCWD, "/dev/loop5", O_RDWR./strace-static-x86_64: Process 6226 attached [pid 6224] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6222] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6223] <... mmap resumed>) = 0x7f0356e00000 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6226] set_robust_list(0x55556e32a660, 24 [pid 6224] <... openat resumed>) = 4 [pid 6222] close(5 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6226 [pid 6226] <... set_robust_list resumed>) = 0 [pid 6224] ioctl(4, LOOP_SET_FD, 3 [pid 5074] newfstatat(AT_FDCWD, "./186/bus", [pid 6226] chdir("./187" [pid 6222] <... close resumed>) = 0 [pid 6226] <... chdir resumed>) = 0 [pid 6223] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6226] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] umount2("./186/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6226] <... prctl resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6226] setpgid(0, 0 [pid 5074] openat(AT_FDCWD, "./186/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6226] <... setpgid resumed>) = 0 [pid 5074] <... openat resumed>) = 4 [pid 6226] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] newfstatat(4, "", [pid 6226] <... openat resumed>) = 3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6226] write(3, "1000", 4 [pid 5074] getdents64(4, [pid 6226] <... write resumed>) = 4 [pid 6222] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6226] close(3 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6226] <... close resumed>) = 0 [pid 6226] symlink("/dev/binderfs", "./binderfs" [pid 5074] getdents64(4, [pid 6226] <... symlink resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6226] memfd_create("syzkaller", 0 [pid 5074] close(4 [pid 6226] <... memfd_create resumed>) = 3 [pid 6224] <... ioctl resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./186/bus" [pid 6226] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6224] close(3 [pid 5074] <... rmdir resumed>) = 0 [pid 6226] <... mmap resumed>) = 0x7f0356e00000 [pid 6224] <... close resumed>) = 0 [pid 5074] umount2("./186/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6226] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6224] close(4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./186/binderfs", [pid 6222] <... open resumed>) = 5 [pid 6224] <... close resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6224] mkdir("./bus", 0777 [pid 5074] unlink("./186/binderfs" [pid 6224] <... mkdir resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5074] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 5074] rmdir("./186" [pid 6225] <... write resumed>) = 524288 [pid 6224] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6222] ftruncate(5, 0 [pid 5074] <... rmdir resumed>) = 0 [pid 6222] <... ftruncate resumed>) = 0 [pid 6225] munmap(0x7f0356e00000, 138412032 [pid 5074] mkdir("./187", 0777 [pid 6225] <... munmap resumed>) = 0 [pid 6222] exit_group(0 [pid 6223] <... write resumed>) = 524288 [pid 5074] <... mkdir resumed>) = 0 [pid 6222] <... exit_group resumed>) = ? [pid 6225] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6222] +++ exited with 0 +++ [pid 6223] munmap(0x7f0356e00000, 138412032 [ 189.871741][ T6224] loop0: detected capacity change from 0 to 1024 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6225] <... openat resumed>) = 4 [pid 6223] <... munmap resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 6224] <... mount resumed>) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6222, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6225] ioctl(4, LOOP_SET_FD, 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6224] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6223] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] umount2("./189", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6224] <... openat resumed>) = 3 [pid 6224] chdir("./bus") = 0 [pid 6224] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6226] <... write resumed>) = 524288 [pid 6224] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6226] munmap(0x7f0356e00000, 138412032 [pid 6224] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6226] <... munmap resumed>) = 0 [pid 6224] <... symlink resumed>) = 0 [pid 6224] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6223] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6223] close(5 [pid 6226] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6226] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6223] <... close resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./189", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6225] <... ioctl resumed>) = 0 [pid 6223] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] <... openat resumed>) = 3 [pid 6225] close(3) = 0 [pid 6225] close(4) = 0 [ 189.934373][ T6225] loop3: detected capacity change from 0 to 1024 [ 189.946766][ T6226] loop2: detected capacity change from 0 to 1024 [ 189.972326][ T28] kauditd_printk_skb: 40 callbacks suppressed [pid 6225] mkdir("./bus", 0777 [pid 5078] newfstatat(3, "", [pid 5074] <... ioctl resumed>) = 0 [pid 6223] <... open resumed>) = 5 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6226] close(3 [pid 6225] <... mkdir resumed>) = 0 [pid 6224] <... creat resumed>) = 4 [pid 6223] ftruncate(5, 0 [pid 5078] getdents64(3, [pid 5074] close(3 [pid 6226] <... close resumed>) = 0 [pid 6225] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6224] rename("./bus", "./file2" [pid 6223] <... ftruncate resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] <... close resumed>) = 0 [pid 6226] close(4) = 0 [pid 5078] umount2("./189/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6226] mkdir("./bus", 0777 [pid 6223] exit_group(0 [pid 6226] <... mkdir resumed>) = 0 [pid 6223] <... exit_group resumed>) = ? [pid 6226] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6223] +++ exited with 0 +++ [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6227 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6223, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- ./strace-static-x86_64: Process 6227 attached [pid 5078] <... umount2 resumed>) = 0 [pid 6227] set_robust_list(0x55556e32a660, 24 [pid 6224] <... rename resumed>) = -1 EEXIST (File exists) [ 189.972346][ T28] audit: type=1800 audit(1710613072.074:1132): pid=6223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop4" ino=20 res=0 errno=0 [pid 5078] umount2("./189/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6227] <... set_robust_list resumed>) = 0 [pid 6224] memfd_create("syzkaller", 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6227] chdir("./187" [pid 5078] newfstatat(AT_FDCWD, "./189/bus", [pid 6227] <... chdir resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] umount2("./189", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6227] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5078] umount2("./189/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6227] <... prctl resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./189", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6227] setpgid(0, 0 [pid 5078] openat(AT_FDCWD, "./189/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... openat resumed>) = 3 [pid 6227] <... setpgid resumed>) = 0 [pid 6227] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6226] <... mount resumed>) = 0 [pid 6224] <... memfd_create resumed>) = 5 [pid 5078] <... openat resumed>) = 4 [pid 5077] newfstatat(3, "", [pid 6227] <... openat resumed>) = 3 [pid 6226] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6224] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] newfstatat(4, "", [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6227] write(3, "1000", 4 [pid 6226] <... openat resumed>) = 3 [pid 6224] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] getdents64(3, [pid 6227] <... write resumed>) = 4 [pid 6226] chdir("./bus" [pid 6224] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] getdents64(4, [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6226] <... chdir resumed>) = 0 [pid 5077] umount2("./189/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6226] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6226] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6226] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] getdents64(4, [pid 6227] close(3) = 0 [pid 6226] <... symlink resumed>) = 0 [pid 6225] <... mount resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 6227] symlink("/dev/binderfs", "./binderfs" [pid 6225] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] close(4 [pid 6227] <... symlink resumed>) = 0 [pid 6225] <... openat resumed>) = 3 [pid 6227] memfd_create("syzkaller", 0 [pid 6225] chdir("./bus" [pid 5078] <... close resumed>) = 0 [pid 6227] <... memfd_create resumed>) = 3 [pid 6226] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6225] <... chdir resumed>) = 0 [pid 5078] rmdir("./189/bus" [pid 5077] umount2("./189/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6227] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6225] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6224] <... write resumed>) = 524288 [pid 5078] <... rmdir resumed>) = 0 [pid 6227] <... mmap resumed>) = 0x7f0356e00000 [pid 6226] <... creat resumed>) = 4 [pid 6224] munmap(0x7f0356e00000, 138412032 [pid 6225] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] umount2("./189/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6226] rename("./bus", "./file2" [pid 6225] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./189/bus", [pid 6227] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6226] <... rename resumed>) = -1 EEXIST (File exists) [pid 6224] <... munmap resumed>) = 0 [pid 5078] newfstatat(AT_FDCWD, "./189/binderfs", [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] umount2("./189/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6226] memfd_create("syzkaller", 0 [pid 5078] unlink("./189/binderfs") = 0 [pid 5078] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6224] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5078] close(3 [pid 6224] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... close resumed>) = 0 [pid 6224] close(5 [pid 5078] rmdir("./189" [pid 6224] <... close resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5078] mkdir("./190", 0777 [pid 6226] <... memfd_create resumed>) = 5 [pid 6225] <... symlink resumed>) = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6226] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] openat(AT_FDCWD, "./189/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6225] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6226] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] <... openat resumed>) = 4 [pid 5078] <... openat resumed>) = 3 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 6227] <... write resumed>) = 524288 [pid 5077] newfstatat(4, "", [pid 6224] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6227] munmap(0x7f0356e00000, 138412032 [pid 6226] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6225] <... creat resumed>) = 4 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6225] rename("./bus", "./file2" [pid 5077] getdents64(4, [pid 6227] <... munmap resumed>) = 0 [pid 6225] <... rename resumed>) = -1 EEXIST (File exists) [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6225] memfd_create("syzkaller", 0 [pid 5077] getdents64(4, [pid 6225] <... memfd_create resumed>) = 5 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6225] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] close(4 [pid 6225] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] <... close resumed>) = 0 [pid 6226] <... write resumed>) = 524288 [pid 6225] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6224] <... open resumed>) = 5 [pid 5077] rmdir("./189/bus") = 0 [pid 5077] umount2("./189/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./189/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] unlink("./189/binderfs") = 0 [pid 5077] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] close(3) = 0 [pid 5077] rmdir("./189" [pid 6227] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6226] munmap(0x7f0356e00000, 138412032 [pid 6224] ftruncate(5, 0 [pid 6227] <... openat resumed>) = 4 [pid 6224] <... ftruncate resumed>) = 0 [pid 6227] ioctl(4, LOOP_SET_FD, 3 [pid 5077] <... rmdir resumed>) = 0 [pid 6227] <... ioctl resumed>) = 0 [pid 6226] <... munmap resumed>) = 0 [pid 6225] <... write resumed>) = 524288 [pid 6224] exit_group(0 [pid 5078] <... ioctl resumed>) = 0 [pid 5077] mkdir("./190", 0777 [pid 6227] close(3 [pid 6226] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] close(3 [pid 6226] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6225] munmap(0x7f0356e00000, 138412032 [pid 6224] <... exit_group resumed>) = ? [pid 5078] <... close resumed>) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 6227] <... close resumed>) = 0 [pid 6226] close(5 [pid 6225] <... munmap resumed>) = 0 [pid 6224] +++ exited with 0 +++ [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6227] close(4 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6224, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 6227] <... close resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5073] <... restart_syscall resumed>) = 0 [pid 6227] mkdir("./bus", 0777 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 6225] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 6228 attached [pid 6227] <... mkdir resumed>) = 0 [pid 6225] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6228 [pid 6228] set_robust_list(0x55556e32a660, 24 [pid 6227] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6225] close(5 [pid 5073] umount2("./187", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6228] <... set_robust_list resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./187", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6225] <... close resumed>) = 0 [pid 6228] chdir("./190" [pid 5073] umount2("./187/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6228] <... chdir resumed>) = 0 [pid 6226] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 6228] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6225] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6228] <... prctl resumed>) = 0 [pid 6226] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6228] setpgid(0, 0 [pid 5073] umount2("./187/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6228] <... setpgid resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 190.142255][ T28] audit: type=1800 audit(1710613072.244:1133): pid=6224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 190.165232][ T6227] loop1: detected capacity change from 0 to 1024 [pid 6228] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5073] newfstatat(AT_FDCWD, "./187/bus", [pid 6228] <... openat resumed>) = 3 [pid 6227] <... mount resumed>) = 0 [pid 6226] <... open resumed>) = 5 [pid 6225] <... open resumed>) = 5 [pid 6228] write(3, "1000", 4 [pid 6227] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6226] ftruncate(5, 0 [pid 6225] ftruncate(5, 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6228] <... write resumed>) = 4 [pid 6227] <... openat resumed>) = 3 [pid 6227] chdir("./bus" [pid 6225] <... ftruncate resumed>) = 0 [pid 5073] umount2("./187/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6227] <... chdir resumed>) = 0 [pid 6226] <... ftruncate resumed>) = 0 [pid 6227] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6228] close(3 [pid 6226] exit_group(0 [pid 6225] exit_group(0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6227] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6226] <... exit_group resumed>) = ? [pid 6225] <... exit_group resumed>) = ? [pid 6228] <... close resumed>) = 0 [pid 6227] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5073] openat(AT_FDCWD, "./187/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6228] symlink("/dev/binderfs", "./binderfs" [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, [pid 6228] <... symlink resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./187/bus" [pid 6225] +++ exited with 0 +++ [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6225, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6228] memfd_create("syzkaller", 0 [pid 6227] <... symlink resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5073] umount2("./187/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6226] +++ exited with 0 +++ [pid 6227] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6228] <... memfd_create resumed>) = 3 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6226, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6228] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 5073] newfstatat(AT_FDCWD, "./187/binderfs", [pid 6228] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] <... restart_syscall resumed>) = 0 [pid 6228] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] umount2("./190", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] unlink("./187/binderfs" [pid 5076] openat(AT_FDCWD, "./190", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... unlink resumed>) = 0 [pid 5073] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./187" [pid 6227] <... creat resumed>) = 4 [pid 5076] <... openat resumed>) = 3 [pid 5075] umount2("./187", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... rmdir resumed>) = 0 [pid 6227] rename("./bus", "./file2" [pid 5076] newfstatat(3, "", [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] openat(AT_FDCWD, "./187", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] mkdir("./188", 0777 [pid 5076] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] <... openat resumed>) = 3 [pid 5073] <... mkdir resumed>) = 0 [pid 5076] umount2("./190/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] getdents64(3, [pid 5077] <... ioctl resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] <... openat resumed>) = 3 [pid 5075] umount2("./187/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] close(3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5077] <... close resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6229 attached [ 190.209550][ T28] audit: type=1800 audit(1710613072.314:1134): pid=6226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop2" ino=20 res=0 errno=0 [pid 6229] set_robust_list(0x55556e32a660, 24 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6229 [pid 6229] <... set_robust_list resumed>) = 0 [pid 6229] chdir("./190") = 0 [pid 6229] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6229] setpgid(0, 0) = 0 [pid 6229] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6227] <... rename resumed>) = -1 EEXIST (File exists) [pid 5076] <... umount2 resumed>) = 0 [pid 6229] write(3, "1000", 4 [pid 6227] memfd_create("syzkaller", 0 [pid 6229] <... write resumed>) = 4 [pid 6227] <... memfd_create resumed>) = 5 [pid 5076] umount2("./190/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = 0 [pid 6229] close(3 [pid 6227] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6229] <... close resumed>) = 0 [pid 6227] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] newfstatat(AT_FDCWD, "./190/bus", [pid 5075] umount2("./187/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6229] symlink("/dev/binderfs", "./binderfs" [pid 6228] <... write resumed>) = 524288 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6229] <... symlink resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./187/bus", [pid 6229] memfd_create("syzkaller", 0 [pid 5076] umount2("./190/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6229] <... memfd_create resumed>) = 3 [pid 6228] munmap(0x7f0356e00000, 138412032 [pid 6227] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6229] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6229] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6227] <... write resumed>) = 524288 [pid 5076] openat(AT_FDCWD, "./190/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] umount2("./187/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6229] <... write resumed>) = 524288 [pid 6228] <... munmap resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5073] <... ioctl resumed>) = 0 [pid 6229] munmap(0x7f0356e00000, 138412032 [pid 6228] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6229] <... munmap resumed>) = 0 [pid 6228] <... openat resumed>) = 4 [pid 5076] newfstatat(4, "", [pid 5075] openat(AT_FDCWD, "./187/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6229] openat(AT_FDCWD, "/dev/loop4", O_RDWR [ 190.285810][ T28] audit: type=1800 audit(1710613072.314:1135): pid=6225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop3" ino=20 res=0 errno=0 [pid 6228] ioctl(4, LOOP_SET_FD, 3 [pid 6227] munmap(0x7f0356e00000, 138412032 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6229] <... openat resumed>) = 4 [pid 6228] <... ioctl resumed>) = 0 [pid 5076] getdents64(4, [pid 5075] <... openat resumed>) = 4 [pid 5073] close(3 [pid 6229] ioctl(4, LOOP_SET_FD, 3 [pid 6228] close(3 [pid 6227] <... munmap resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] newfstatat(4, "", [pid 6228] <... close resumed>) = 0 [pid 6227] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] getdents64(4, [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6228] close(4 [pid 6227] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] getdents64(4, [pid 6228] <... close resumed>) = 0 [pid 5076] close(4 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6229] <... ioctl resumed>) = 0 [pid 6228] mkdir("./bus", 0777 [pid 5073] <... close resumed>) = 0 [pid 6229] close(3 [pid 6228] <... mkdir resumed>) = 0 [pid 6227] close(5 [pid 5076] <... close resumed>) = 0 [pid 5075] getdents64(4, [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6229] <... close resumed>) = 0 [pid 6227] <... close resumed>) = 0 [pid 5076] rmdir("./190/bus" [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6229] close(4) = 0 [pid 6228] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5076] <... rmdir resumed>) = 0 [pid 5075] close(4 [pid 6229] mkdir("./bus", 0777 [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./187/bus" [pid 6229] <... mkdir resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5076] umount2("./190/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./187/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6230 attached [pid 6229] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6228] <... mount resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./190/binderfs", [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6228] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] newfstatat(AT_FDCWD, "./187/binderfs", [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6230 [pid 6228] <... openat resumed>) = 3 [ 190.338796][ T6228] loop5: detected capacity change from 0 to 1024 [ 190.352322][ T6229] loop4: detected capacity change from 0 to 1024 [pid 6227] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5076] unlink("./190/binderfs" [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6230] set_robust_list(0x55556e32a660, 24 [pid 6228] chdir("./bus" [pid 6227] <... open resumed>) = 5 [pid 5076] <... unlink resumed>) = 0 [pid 5075] unlink("./187/binderfs" [pid 6228] <... chdir resumed>) = 0 [pid 6227] ftruncate(5, 0 [pid 5076] getdents64(3, [pid 5075] <... unlink resumed>) = 0 [pid 6228] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6227] <... ftruncate resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] getdents64(3, [pid 6228] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6227] exit_group(0 [pid 5076] close(3 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6228] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6227] <... exit_group resumed>) = ? [pid 5076] <... close resumed>) = 0 [pid 5075] close(3 [pid 6228] <... symlink resumed>) = 0 [pid 6227] +++ exited with 0 +++ [pid 5076] rmdir("./190" [pid 5075] <... close resumed>) = 0 [pid 6228] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] rmdir("./187" [pid 6228] <... creat resumed>) = 4 [pid 6228] rename("./bus", "./file2") = -1 EEXIST (File exists) [pid 6228] memfd_create("syzkaller", 0) = 5 [pid 6228] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] mkdir("./191", 0777 [pid 5075] <... rmdir resumed>) = 0 [pid 6228] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] <... mkdir resumed>) = 0 [pid 6228] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] mkdir("./188", 0777 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6227, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] <... mkdir resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6230] <... set_robust_list resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6230] chdir("./188") = 0 [pid 6229] <... mount resumed>) = 0 [pid 6228] <... write resumed>) = 524288 [pid 6230] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6229] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6229] chdir("./bus") = 0 [pid 6230] <... prctl resumed>) = 0 [pid 6229] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6230] setpgid(0, 0 [pid 6229] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5074] umount2("./187", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6230] <... setpgid resumed>) = 0 [pid 6230] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6229] <... symlink resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6230] <... openat resumed>) = 3 [pid 5074] openat(AT_FDCWD, "./187", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6229] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6230] write(3, "1000", 4 [pid 5074] <... openat resumed>) = 3 [ 190.380247][ T28] audit: type=1800 audit(1710613072.484:1136): pid=6227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop1" ino=20 res=0 errno=0 [pid 6230] <... write resumed>) = 4 [pid 6229] <... creat resumed>) = 4 [pid 6228] munmap(0x7f0356e00000, 138412032 [pid 5074] newfstatat(3, "", [pid 6230] close(3 [pid 6229] rename("./bus", "./file2" [pid 6228] <... munmap resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6230] <... close resumed>) = 0 [pid 6228] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6230] symlink("/dev/binderfs", "./binderfs" [pid 5074] getdents64(3, [pid 6230] <... symlink resumed>) = 0 [pid 6228] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6230] memfd_create("syzkaller", 0 [pid 6229] <... rename resumed>) = -1 EEXIST (File exists) [pid 6228] close(5 [pid 5074] umount2("./187/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6229] memfd_create("syzkaller", 0) = 5 [pid 6229] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6230] <... memfd_create resumed>) = 3 [pid 6229] <... mmap resumed>) = 0x7f0356e00000 [pid 6230] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6228] <... close resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 6230] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] close(3) = 0 [pid 6230] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6228] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 6231 attached [pid 6229] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6228] <... open resumed>) = 5 [pid 5074] umount2("./187/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6229] <... write resumed>) = 524288 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6231 [pid 5075] close(3) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6231] set_robust_list(0x55556e32a660, 24 [pid 5074] newfstatat(AT_FDCWD, "./187/bus", [pid 6228] ftruncate(5, 0./strace-static-x86_64: Process 6232 attached [pid 6232] set_robust_list(0x55556e32a660, 24 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6232 [pid 6232] <... set_robust_list resumed>) = 0 [pid 6232] chdir("./188") = 0 [pid 6232] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6228] <... ftruncate resumed>) = 0 [pid 6232] <... prctl resumed>) = 0 [pid 6231] <... set_robust_list resumed>) = 0 [pid 6230] <... write resumed>) = 524288 [pid 6228] exit_group(0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6232] setpgid(0, 0 [pid 6229] munmap(0x7f0356e00000, 138412032 [pid 5074] umount2("./187/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6232] <... setpgid resumed>) = 0 [pid 6231] chdir("./191" [pid 6230] munmap(0x7f0356e00000, 138412032 [pid 6228] <... exit_group resumed>) = ? [pid 6232] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6232] write(3, "1000", 4 [pid 6231] <... chdir resumed>) = 0 [pid 6229] <... munmap resumed>) = 0 [pid 6228] +++ exited with 0 +++ [pid 6232] <... write resumed>) = 4 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6228, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6232] close(3 [pid 6231] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6230] <... munmap resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6232] <... close resumed>) = 0 [pid 6232] symlink("/dev/binderfs", "./binderfs" [pid 5078] umount2("./190", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] openat(AT_FDCWD, "./187/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6231] <... prctl resumed>) = 0 [pid 6232] <... symlink resumed>) = 0 [pid 6230] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6232] memfd_create("syzkaller", 0 [pid 5078] openat(AT_FDCWD, "./190", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6232] <... memfd_create resumed>) = 3 [pid 6231] setpgid(0, 0 [pid 6230] <... openat resumed>) = 4 [pid 5078] <... openat resumed>) = 3 [pid 5074] <... openat resumed>) = 4 [pid 6232] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] newfstatat(3, "", [pid 6232] <... mmap resumed>) = 0x7f0356e00000 [ 190.481438][ T28] audit: type=1800 audit(1710613072.584:1137): pid=6228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop5" ino=20 res=0 errno=0 [pid 6231] <... setpgid resumed>) = 0 [pid 6230] ioctl(4, LOOP_SET_FD, 3 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] newfstatat(4, "", [pid 6232] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6229] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] getdents64(3, [pid 6231] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6229] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6229] close(5 [pid 5078] umount2("./190/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6229] <... close resumed>) = 0 [pid 6231] <... openat resumed>) = 3 [pid 6230] <... ioctl resumed>) = 0 [pid 5074] getdents64(4, [pid 6231] write(3, "1000", 4 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6231] <... write resumed>) = 4 [pid 5074] getdents64(4, [pid 6230] close(3 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6231] close(3 [pid 6230] <... close resumed>) = 0 [pid 5074] close(4 [pid 6231] <... close resumed>) = 0 [pid 6230] close(4 [pid 5078] <... umount2 resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 6231] symlink("/dev/binderfs", "./binderfs" [pid 6230] <... close resumed>) = 0 [pid 5074] rmdir("./187/bus" [pid 6229] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6231] <... symlink resumed>) = 0 [pid 6230] mkdir("./bus", 0777 [pid 5074] <... rmdir resumed>) = 0 [pid 5074] umount2("./187/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./190/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6230] <... mkdir resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./187/binderfs", [pid 6230] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6229] <... open resumed>) = 5 [ 190.540748][ T6230] loop0: detected capacity change from 0 to 1024 [pid 5078] newfstatat(AT_FDCWD, "./190/bus", [pid 6231] memfd_create("syzkaller", 0 [pid 6229] ftruncate(5, 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./187/binderfs" [pid 6229] <... ftruncate resumed>) = 0 [pid 5078] umount2("./190/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./190/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5078] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6231] <... memfd_create resumed>) = 3 [pid 6229] exit_group(0 [pid 5078] getdents64(4, [pid 6231] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6229] <... exit_group resumed>) = ? [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6231] <... mmap resumed>) = 0x7f0356e00000 [pid 6229] +++ exited with 0 +++ [pid 5078] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5078] close(4) = 0 [pid 5078] rmdir("./190/bus" [pid 6231] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... rmdir resumed>) = 0 [pid 5078] umount2("./190/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... unlink resumed>) = 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6229, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] newfstatat(AT_FDCWD, "./190/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] unlink("./190/binderfs") = 0 [pid 5077] umount2("./190", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6230] <... mount resumed>) = 0 [pid 5078] getdents64(3, [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6230] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5074] getdents64(3, [pid 6230] <... openat resumed>) = 3 [pid 5077] openat(AT_FDCWD, "./190", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6232] <... write resumed>) = 524288 [pid 6230] chdir("./bus" [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5074] close(3 [pid 6230] <... chdir resumed>) = 0 [pid 5078] close(3 [pid 5077] newfstatat(3, "", [pid 6230] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5078] <... close resumed>) = 0 [pid 6230] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] rmdir("./190" [pid 6230] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] <... rmdir resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... close resumed>) = 0 [pid 6232] munmap(0x7f0356e00000, 138412032 [pid 6231] <... write resumed>) = 524288 [pid 6230] <... symlink resumed>) = 0 [pid 5078] mkdir("./191", 0777 [pid 5077] getdents64(3, [pid 5074] rmdir("./187" [pid 6232] <... munmap resumed>) = 0 [pid 6231] munmap(0x7f0356e00000, 138412032 [pid 6230] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] <... mkdir resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] <... rmdir resumed>) = 0 [pid 6232] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6231] <... munmap resumed>) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [ 190.571462][ T28] audit: type=1800 audit(1710613072.674:1138): pid=6229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop4" ino=20 res=0 errno=0 [pid 5077] umount2("./190/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] mkdir("./188", 0777 [pid 6232] <... openat resumed>) = 4 [pid 5078] <... openat resumed>) = 3 [pid 5074] <... mkdir resumed>) = 0 [pid 6232] ioctl(4, LOOP_SET_FD, 3 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6231] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5074] <... openat resumed>) = 3 [pid 6230] <... creat resumed>) = 4 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6231] <... openat resumed>) = 4 [pid 6230] rename("./bus", "./file2" [pid 6232] <... ioctl resumed>) = 0 [pid 6231] ioctl(4, LOOP_SET_FD, 3 [pid 6232] close(3 [pid 6230] <... rename resumed>) = -1 EEXIST (File exists) [pid 6232] <... close resumed>) = 0 [pid 6230] memfd_create("syzkaller", 0 [pid 6232] close(4 [pid 5077] <... umount2 resumed>) = 0 [pid 6230] <... memfd_create resumed>) = 5 [pid 5077] umount2("./190/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6230] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6232] <... close resumed>) = 0 [pid 6230] <... mmap resumed>) = 0x7f0356e00000 [pid 6232] mkdir("./bus", 0777) = 0 [pid 6232] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6230] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] newfstatat(AT_FDCWD, "./190/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6232] <... mount resumed>) = 0 [pid 6232] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6232] chdir("./bus" [pid 5077] umount2("./190/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6232] <... chdir resumed>) = 0 [pid 6232] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6232] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6232] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6230] <... write resumed>) = 524288 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6231] <... ioctl resumed>) = 0 [pid 6230] munmap(0x7f0356e00000, 138412032 [pid 5078] <... ioctl resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./190/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... ioctl resumed>) = 0 [pid 6231] close(3 [pid 5077] <... openat resumed>) = 4 [pid 5074] close(3 [pid 5077] newfstatat(4, "", [pid 5074] <... close resumed>) = 0 [pid 6231] <... close resumed>) = 0 [pid 5078] close(3 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6231] close(4 [pid 6230] <... munmap resumed>) = 0 [pid 5077] getdents64(4, [pid 6232] <... creat resumed>) = 4 [pid 6231] <... close resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6230] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6231] mkdir("./bus", 0777 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6231] <... mkdir resumed>) = 0 [pid 6230] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] getdents64(4, [ 190.635103][ T6232] loop2: detected capacity change from 0 to 1024 [ 190.647372][ T6231] loop3: detected capacity change from 0 to 1024 [pid 6232] rename("./bus", "./file2" [pid 6230] close(5 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6233 attached [pid 5077] close(4 [pid 6233] set_robust_list(0x55556e32a660, 24 [pid 6231] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6234 [pid 5077] <... close resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6233 [pid 6233] <... set_robust_list resumed>) = 0 [pid 5077] rmdir("./190/bus" [pid 6233] chdir("./188" [pid 6232] <... rename resumed>) = -1 EEXIST (File exists) [pid 6233] <... chdir resumed>) = 0 [pid 6232] memfd_create("syzkaller", 0./strace-static-x86_64: Process 6234 attached [pid 6233] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6232] <... memfd_create resumed>) = 5 [pid 5077] <... rmdir resumed>) = 0 [pid 6234] set_robust_list(0x55556e32a660, 24 [pid 6233] <... prctl resumed>) = 0 [pid 6232] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6234] <... set_robust_list resumed>) = 0 [pid 6233] setpgid(0, 0 [pid 6230] <... close resumed>) = 0 [pid 5077] umount2("./190/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6233] <... setpgid resumed>) = 0 [pid 6234] chdir("./191" [pid 6233] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6234] <... chdir resumed>) = 0 [pid 6233] <... openat resumed>) = 3 [pid 6232] <... mmap resumed>) = 0x7f0356e00000 [pid 6231] <... mount resumed>) = 0 [pid 6234] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6231] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6231] <... openat resumed>) = 3 [pid 5077] newfstatat(AT_FDCWD, "./190/binderfs", [pid 6234] setpgid(0, 0 [pid 6231] chdir("./bus" [pid 6230] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6234] <... setpgid resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6231] <... chdir resumed>) = 0 [pid 6233] write(3, "1000", 4 [pid 6231] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5077] unlink("./190/binderfs" [pid 6233] <... write resumed>) = 4 [pid 6231] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6233] close(3) = 0 [pid 6231] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5077] <... unlink resumed>) = 0 [pid 6233] symlink("/dev/binderfs", "./binderfs" [pid 6234] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6233] <... symlink resumed>) = 0 [pid 6231] <... symlink resumed>) = 0 [pid 6230] <... open resumed>) = 5 [pid 5077] getdents64(3, [pid 6231] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6230] ftruncate(5, 0 [pid 6232] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6234] <... openat resumed>) = 3 [pid 6230] <... ftruncate resumed>) = 0 [pid 6234] write(3, "1000", 4 [pid 6231] <... creat resumed>) = 4 [pid 6230] exit_group(0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6233] memfd_create("syzkaller", 0) = 3 [pid 6231] rename("./bus", "./file2" [pid 6230] <... exit_group resumed>) = ? [pid 5077] close(3 [pid 6234] <... write resumed>) = 4 [pid 6234] close(3 [pid 6233] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6230] +++ exited with 0 +++ [pid 5077] <... close resumed>) = 0 [pid 6234] <... close resumed>) = 0 [pid 6233] <... mmap resumed>) = 0x7f0356e00000 [pid 6231] <... rename resumed>) = -1 EEXIST (File exists) [pid 5077] rmdir("./190" [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6230, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6234] symlink("/dev/binderfs", "./binderfs" [pid 6233] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6231] memfd_create("syzkaller", 0 [pid 6234] <... symlink resumed>) = 0 [pid 6232] <... write resumed>) = 524288 [pid 6231] <... memfd_create resumed>) = 5 [pid 6234] memfd_create("syzkaller", 0 [pid 6232] munmap(0x7f0356e00000, 138412032 [pid 6231] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] <... rmdir resumed>) = 0 [pid 6232] <... munmap resumed>) = 0 [pid 6231] <... mmap resumed>) = 0x7f0356e00000 [pid 5073] umount2("./188", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6232] openat(AT_FDCWD, "/dev/loop2", O_RDWR [ 190.727710][ T28] audit: type=1800 audit(1710613072.834:1139): pid=6230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop0" ino=20 res=0 errno=0 [pid 5073] openat(AT_FDCWD, "./188", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6232] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... openat resumed>) = 3 [pid 6234] <... memfd_create resumed>) = 3 [pid 6233] <... write resumed>) = 524288 [pid 6232] close(5 [pid 6231] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] mkdir("./191", 0777 [pid 5073] newfstatat(3, "", [pid 6234] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, [pid 6234] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] <... mkdir resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] umount2("./188/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6234] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 6232] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5073] umount2("./188/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./188/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./188/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6231] <... write resumed>) = 524288 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6232] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6233] munmap(0x7f0356e00000, 138412032 [pid 5073] openat(AT_FDCWD, "./188/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6233] <... munmap resumed>) = 0 [pid 5073] <... openat resumed>) = 4 [pid 6234] <... write resumed>) = 524288 [pid 6234] munmap(0x7f0356e00000, 138412032 [pid 5073] newfstatat(4, "", [pid 6233] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6233] <... openat resumed>) = 4 [pid 5073] getdents64(4, [pid 6234] <... munmap resumed>) = 0 [pid 6234] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6232] <... open resumed>) = 5 [pid 6231] munmap(0x7f0356e00000, 138412032 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6232] ftruncate(5, 0) = 0 [pid 5073] getdents64(4, [pid 6232] exit_group(0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6232] <... exit_group resumed>) = ? [pid 5073] close(4 [pid 6232] +++ exited with 0 +++ [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./188/bus" [pid 6233] ioctl(4, LOOP_SET_FD, 3 [pid 5073] <... rmdir resumed>) = 0 [pid 6234] <... openat resumed>) = 4 [pid 6231] <... munmap resumed>) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6232, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6234] ioctl(4, LOOP_SET_FD, 3 [pid 5073] umount2("./188/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./188/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./188/binderfs") = 0 [pid 5073] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 6234] <... ioctl resumed>) = 0 [pid 6231] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] rmdir("./188" [pid 6234] close(3 [pid 6231] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... rmdir resumed>) = 0 [pid 6231] close(5 [pid 5073] mkdir("./189", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 6231] <... close resumed>) = 0 [pid 5075] umount2("./188", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6234] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6234] close(4 [pid 5075] openat(AT_FDCWD, "./188", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6233] <... ioctl resumed>) = 0 [pid 6234] <... close resumed>) = 0 [pid 6231] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] <... ioctl resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 6234] mkdir("./bus", 0777 [pid 5077] close(3 [pid 5075] newfstatat(3, "", [pid 6233] close(3 [pid 6234] <... mkdir resumed>) = 0 [pid 6233] <... close resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 6234] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6233] close(4 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6233] <... close resumed>) = 0 [ 190.846021][ T28] audit: type=1800 audit(1710613072.944:1140): pid=6232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 190.853890][ T6233] loop1: detected capacity change from 0 to 1024 [ 190.876088][ T6234] loop5: detected capacity change from 0 to 1024 [pid 5075] getdents64(3, [pid 5073] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 6235 attached [pid 6233] mkdir("./bus", 0777 [pid 6231] <... open resumed>) = 5 [pid 6234] <... mount resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6234] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6235 [pid 6231] ftruncate(5, 0 [pid 6235] set_robust_list(0x55556e32a660, 24 [pid 5075] umount2("./188/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6235] <... set_robust_list resumed>) = 0 [pid 6234] <... openat resumed>) = 3 [pid 6233] <... mkdir resumed>) = 0 [pid 6231] <... ftruncate resumed>) = 0 [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6234] chdir("./bus" [pid 6235] chdir("./191" [pid 6231] exit_group(0 [pid 6235] <... chdir resumed>) = 0 [pid 6234] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 6236 attached [pid 6235] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6234] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6236] set_robust_list(0x55556e32a660, 24) = 0 [pid 6235] <... prctl resumed>) = 0 [pid 6234] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6231] <... exit_group resumed>) = ? [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6236 [pid 6236] chdir("./189" [pid 6235] setpgid(0, 0 [pid 6234] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6231] +++ exited with 0 +++ [pid 6233] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5075] <... umount2 resumed>) = 0 [pid 6236] <... chdir resumed>) = 0 [pid 6235] <... setpgid resumed>) = 0 [pid 6234] <... symlink resumed>) = 0 [pid 6233] <... mount resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6231, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5075] umount2("./188/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6236] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6235] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [ 190.919060][ T28] audit: type=1800 audit(1710613073.014:1141): pid=6231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop3" ino=20 res=0 errno=0 [pid 6234] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6233] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6236] <... prctl resumed>) = 0 [pid 6235] <... openat resumed>) = 3 [pid 6234] <... creat resumed>) = 4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6236] setpgid(0, 0 [pid 6235] write(3, "1000", 4 [pid 6234] rename("./bus", "./file2" [pid 6233] <... openat resumed>) = 3 [pid 5075] newfstatat(AT_FDCWD, "./188/bus", [pid 6236] <... setpgid resumed>) = 0 [pid 6235] <... write resumed>) = 4 [pid 6234] <... rename resumed>) = -1 EEXIST (File exists) [pid 6236] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6235] close(3 [pid 6234] memfd_create("syzkaller", 0 [pid 6233] chdir("./bus" [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6236] <... openat resumed>) = 3 [pid 6235] <... close resumed>) = 0 [pid 6234] <... memfd_create resumed>) = 5 [pid 6233] <... chdir resumed>) = 0 [pid 5075] umount2("./188/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6236] write(3, "1000", 4 [pid 6235] symlink("/dev/binderfs", "./binderfs" [pid 6234] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6233] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] umount2("./191", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6236] <... write resumed>) = 4 [pid 6235] <... symlink resumed>) = 0 [pid 6234] <... mmap resumed>) = 0x7f0356e00000 [pid 6233] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./191", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6234] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6233] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5076] <... openat resumed>) = 3 [pid 5075] openat(AT_FDCWD, "./188/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6236] close(3 [pid 6235] memfd_create("syzkaller", 0 [pid 5076] newfstatat(3, "", [pid 5075] <... openat resumed>) = 4 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] newfstatat(4, "", [pid 5076] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6236] <... close resumed>) = 0 [pid 5076] umount2("./191/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] getdents64(4, [pid 6236] symlink("/dev/binderfs", "./binderfs" [pid 6235] <... memfd_create resumed>) = 3 [pid 6236] <... symlink resumed>) = 0 [pid 6233] <... symlink resumed>) = 0 [pid 6236] memfd_create("syzkaller", 0 [pid 6235] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6233] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5076] <... umount2 resumed>) = 0 [pid 6236] <... memfd_create resumed>) = 3 [pid 6235] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] umount2("./191/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6235] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6234] <... write resumed>) = 524288 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6236] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] newfstatat(AT_FDCWD, "./191/bus", [pid 6236] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6236] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6233] <... creat resumed>) = 4 [pid 5076] umount2("./191/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] getdents64(4, [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] openat(AT_FDCWD, "./191/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] close(4 [pid 6233] rename("./bus", "./file2" [pid 5076] <... openat resumed>) = 4 [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./188/bus" [pid 5076] newfstatat(4, "", [pid 6235] <... write resumed>) = 524288 [pid 6233] <... rename resumed>) = -1 EEXIST (File exists) [pid 5075] <... rmdir resumed>) = 0 [pid 6233] memfd_create("syzkaller", 0) = 5 [pid 6233] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] umount2("./188/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6236] <... write resumed>) = 524288 [pid 6234] munmap(0x7f0356e00000, 138412032 [pid 6233] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] getdents64(4, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6234] <... munmap resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] newfstatat(AT_FDCWD, "./188/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./188/binderfs" [pid 6234] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5075] <... unlink resumed>) = 0 [pid 6234] close(5) = 0 [pid 5076] getdents64(4, [pid 5075] getdents64(3, [pid 6235] munmap(0x7f0356e00000, 138412032) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] close(4 [pid 5075] close(3 [pid 6235] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 6235] <... openat resumed>) = 4 [pid 5076] rmdir("./191/bus" [pid 5075] rmdir("./188" [pid 6235] ioctl(4, LOOP_SET_FD, 3 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5076] umount2("./191/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6236] munmap(0x7f0356e00000, 138412032 [pid 6234] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6235] <... ioctl resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] mkdir("./189", 0777 [pid 6236] <... munmap resumed>) = 0 [pid 6233] <... write resumed>) = 524288 [pid 6234] <... open resumed>) = 5 [pid 6236] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6235] close(3 [pid 6234] ftruncate(5, 0 [pid 6233] munmap(0x7f0356e00000, 138412032 [pid 5076] newfstatat(AT_FDCWD, "./191/binderfs", [pid 5075] <... mkdir resumed>) = 0 [pid 6236] <... openat resumed>) = 4 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6235] <... close resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6235] close(4 [pid 6236] ioctl(4, LOOP_SET_FD, 3 [pid 6233] <... munmap resumed>) = 0 [pid 5076] unlink("./191/binderfs" [pid 6236] <... ioctl resumed>) = 0 [pid 6235] <... close resumed>) = 0 [pid 6234] <... ftruncate resumed>) = 0 [pid 6233] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] <... unlink resumed>) = 0 [pid 6236] close(3 [pid 6235] mkdir("./bus", 0777 [pid 6234] exit_group(0 [pid 6233] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] getdents64(3, [pid 6236] <... close resumed>) = 0 [pid 6235] <... mkdir resumed>) = 0 [pid 6234] <... exit_group resumed>) = ? [pid 6233] close(5 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6236] close(4 [pid 6235] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6234] +++ exited with 0 +++ [pid 6233] <... close resumed>) = 0 [pid 5076] close(3 [pid 6236] <... close resumed>) = 0 [pid 6236] mkdir("./bus", 0777 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6234, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5076] <... close resumed>) = 0 [pid 6236] <... mkdir resumed>) = 0 [pid 5078] restart_syscall(<... resuming interrupted clone ...> [pid 5076] rmdir("./191") = 0 [pid 6235] <... mount resumed>) = 0 [pid 5078] <... restart_syscall resumed>) = 0 [pid 5076] mkdir("./192", 0777) = 0 [pid 5078] umount2("./191", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5078] openat(AT_FDCWD, "./191", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... openat resumed>) = 3 [pid 5078] <... openat resumed>) = 3 [pid 6235] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] newfstatat(3, "", [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6236] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6235] <... openat resumed>) = 3 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(3, [pid 6235] chdir("./bus" [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6235] <... chdir resumed>) = 0 [pid 6233] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] umount2("./191/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6235] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6235] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6236] <... mount resumed>) = 0 [pid 6233] <... open resumed>) = 5 [pid 6236] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [ 191.068035][ T6235] loop4: detected capacity change from 0 to 1024 [ 191.087939][ T6236] loop0: detected capacity change from 0 to 1024 [pid 6235] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6236] <... openat resumed>) = 3 [pid 6233] ftruncate(5, 0) = 0 [pid 6236] chdir("./bus" [pid 5075] <... ioctl resumed>) = 0 [pid 6236] <... chdir resumed>) = 0 [pid 6233] exit_group(0 [pid 6236] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6233] <... exit_group resumed>) = ? [pid 5075] close(3 [pid 6236] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... close resumed>) = 0 [pid 6236] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6233] +++ exited with 0 +++ [pid 5078] <... umount2 resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6236] <... symlink resumed>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6233, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6236] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5074] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 6237 attached [pid 6237] set_robust_list(0x55556e32a660, 24 [pid 5074] <... restart_syscall resumed>) = 0 [pid 6237] <... set_robust_list resumed>) = 0 [pid 6237] chdir("./189" [pid 5074] umount2("./188", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6237] <... chdir resumed>) = 0 [pid 6235] <... creat resumed>) = 4 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6237 [pid 5074] openat(AT_FDCWD, "./188", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6236] <... creat resumed>) = 4 [pid 6235] rename("./bus", "./file2" [pid 5078] umount2("./191/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... openat resumed>) = 3 [pid 6237] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5074] newfstatat(3, "", [pid 6236] rename("./bus", "./file2" [pid 6235] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6237] setpgid(0, 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6237] <... setpgid resumed>) = 0 [pid 6236] <... rename resumed>) = -1 EEXIST (File exists) [pid 6235] memfd_create("syzkaller", 0 [pid 5078] newfstatat(AT_FDCWD, "./191/bus", [pid 5074] getdents64(3, [pid 6236] memfd_create("syzkaller", 0 [pid 6235] <... memfd_create resumed>) = 5 [pid 6236] <... memfd_create resumed>) = 5 [pid 6235] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6237] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6236] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6235] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] umount2("./191/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./188/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./191/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6236] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... openat resumed>) = 4 [pid 5078] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, [pid 6237] <... openat resumed>) = 3 [pid 6235] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] close(3 [pid 6236] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] <... close resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6237] write(3, "1000", 4 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6238 [pid 6237] <... write resumed>) = 4 [pid 5078] close(4 [pid 5074] <... umount2 resumed>) = 0 [pid 6237] close(3 [pid 5078] <... close resumed>) = 0 [pid 6237] <... close resumed>) = 0 [pid 6237] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 6238 attached ) = 0 [pid 5078] rmdir("./191/bus" [pid 6238] set_robust_list(0x55556e32a660, 24 [pid 6237] memfd_create("syzkaller", 0) = 3 [pid 5078] <... rmdir resumed>) = 0 [pid 6238] <... set_robust_list resumed>) = 0 [pid 5078] umount2("./191/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6238] chdir("./192" [pid 6237] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6238] <... chdir resumed>) = 0 [pid 6237] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] newfstatat(AT_FDCWD, "./191/binderfs", [pid 6238] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6237] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6235] <... write resumed>) = 524288 [pid 5074] umount2("./188/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6238] <... prctl resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6238] setpgid(0, 0 [pid 5074] newfstatat(AT_FDCWD, "./188/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./188/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./188/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6238] <... setpgid resumed>) = 0 [pid 5074] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, [pid 6238] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6238] <... openat resumed>) = 3 [pid 6236] <... write resumed>) = 524288 [pid 5078] unlink("./191/binderfs" [pid 5074] getdents64(4, [pid 6238] write(3, "1000", 4 [pid 6236] munmap(0x7f0356e00000, 138412032 [pid 6235] munmap(0x7f0356e00000, 138412032 [pid 5078] <... unlink resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] close(4) = 0 [pid 6236] <... munmap resumed>) = 0 [pid 5074] rmdir("./188/bus" [pid 6238] <... write resumed>) = 4 [pid 5078] getdents64(3, [pid 6238] close(3 [pid 6235] <... munmap resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 6238] <... close resumed>) = 0 [pid 6235] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] close(3) = 0 [pid 6238] symlink("/dev/binderfs", "./binderfs" [pid 5074] umount2("./188/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6235] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6238] <... symlink resumed>) = 0 [pid 6235] close(5 [pid 5078] rmdir("./191" [pid 5074] newfstatat(AT_FDCWD, "./188/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./188/binderfs") = 0 [pid 5074] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 5074] rmdir("./188") = 0 [pid 6235] <... close resumed>) = 0 [pid 5074] mkdir("./189", 0777 [pid 6237] <... write resumed>) = 524288 [pid 5078] <... rmdir resumed>) = 0 [pid 6236] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] <... mkdir resumed>) = 0 [pid 6238] memfd_create("syzkaller", 0 [pid 6237] munmap(0x7f0356e00000, 138412032) = 0 [pid 6238] <... memfd_create resumed>) = 3 [pid 5078] mkdir("./192", 0777 [pid 6236] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6237] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5078] <... mkdir resumed>) = 0 [pid 6238] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6236] close(5 [pid 6237] <... openat resumed>) = 4 [pid 5074] <... openat resumed>) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6237] ioctl(4, LOOP_SET_FD, 3 [pid 6238] <... mmap resumed>) = 0x7f0356e00000 [pid 6236] <... close resumed>) = 0 [pid 6235] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 6238] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6235] <... open resumed>) = 5 [pid 6237] <... ioctl resumed>) = 0 [pid 6236] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 6235] ftruncate(5, 0 [pid 6236] ftruncate(5, 0) = 0 [pid 6237] close(3 [pid 6236] exit_group(0 [pid 6235] <... ftruncate resumed>) = 0 [pid 6237] <... close resumed>) = 0 [pid 6236] <... exit_group resumed>) = ? [pid 6237] close(4) = 0 [pid 6236] +++ exited with 0 +++ [pid 6237] mkdir("./bus", 0777) = 0 [pid 6237] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6238] <... write resumed>) = 524288 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6236, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 6235] exit_group(0 [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 6235] <... exit_group resumed>) = ? [pid 5073] <... restart_syscall resumed>) = 0 [pid 6235] +++ exited with 0 +++ [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6235, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 5073] umount2("./189", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 191.242718][ T6237] loop2: detected capacity change from 0 to 1024 [pid 5078] <... ioctl resumed>) = 0 [pid 5077] <... restart_syscall resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./189", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6238] munmap(0x7f0356e00000, 138412032) = 0 [pid 5073] <... openat resumed>) = 3 [pid 6238] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] newfstatat(3, "", [pid 5077] umount2("./191", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6238] <... openat resumed>) = 4 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6238] ioctl(4, LOOP_SET_FD, 3 [pid 5077] openat(AT_FDCWD, "./191", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] getdents64(3, [pid 5078] close(3 [pid 5077] <... openat resumed>) = 3 [pid 5078] <... close resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] newfstatat(3, "", [pid 5074] close(3 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... close resumed>) = 0 [pid 6237] <... mount resumed>) = 0 [pid 5077] getdents64(3, [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6237] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 ./strace-static-x86_64: Process 6240 attached ./strace-static-x86_64: Process 6239 attached [pid 6237] <... openat resumed>) = 3 [pid 5077] umount2("./191/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6240 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6240] set_robust_list(0x55556e32a660, 24 [pid 6239] set_robust_list(0x55556e32a660, 24 [pid 6238] <... ioctl resumed>) = 0 [pid 6237] chdir("./bus" [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6239 [pid 5077] <... umount2 resumed>) = 0 [pid 5073] umount2("./189/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6240] <... set_robust_list resumed>) = 0 [pid 6239] <... set_robust_list resumed>) = 0 [pid 6238] close(3 [pid 6237] <... chdir resumed>) = 0 [pid 6240] chdir("./189" [pid 6239] chdir("./192" [pid 6238] <... close resumed>) = 0 [pid 6237] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6239] <... chdir resumed>) = 0 [pid 6238] close(4 [pid 6237] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6239] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6237] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6240] <... chdir resumed>) = 0 [pid 6239] <... prctl resumed>) = 0 [pid 6238] <... close resumed>) = 0 [pid 6239] setpgid(0, 0 [pid 6238] mkdir("./bus", 0777 [pid 5077] umount2("./191/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = 0 [pid 6239] <... setpgid resumed>) = 0 [pid 6238] <... mkdir resumed>) = 0 [pid 6240] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6237] <... symlink resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6237] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6240] <... prctl resumed>) = 0 [pid 6239] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6238] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5077] newfstatat(AT_FDCWD, "./191/bus", [pid 5073] umount2("./189/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6237] <... creat resumed>) = 4 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6240] setpgid(0, 0 [pid 6237] rename("./bus", "./file2" [pid 5077] umount2("./191/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6240] <... setpgid resumed>) = 0 [pid 6239] <... openat resumed>) = 3 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./191/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] newfstatat(AT_FDCWD, "./189/bus", [pid 6240] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6239] write(3, "1000", 4 [pid 5077] <... openat resumed>) = 4 [pid 6239] <... write resumed>) = 4 [pid 5077] newfstatat(4, "", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6240] <... openat resumed>) = 3 [pid 6239] close(3 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6239] <... close resumed>) = 0 [pid 5077] getdents64(4, [pid 5073] umount2("./189/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6239] symlink("/dev/binderfs", "./binderfs" [pid 6237] <... rename resumed>) = -1 EEXIST (File exists) [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6237] memfd_create("syzkaller", 0 [pid 5077] getdents64(4, [pid 6240] write(3, "1000", 4 [pid 6239] <... symlink resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] close(4 [pid 5073] openat(AT_FDCWD, "./189/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6240] <... write resumed>) = 4 [pid 6239] memfd_create("syzkaller", 0 [pid 6237] <... memfd_create resumed>) = 5 [pid 5077] <... close resumed>) = 0 [pid 6240] close(3 [pid 6237] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [ 191.325007][ T6238] loop3: detected capacity change from 0 to 1024 [pid 5077] rmdir("./191/bus" [pid 5073] <... openat resumed>) = 4 [pid 6237] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] <... rmdir resumed>) = 0 [pid 6240] <... close resumed>) = 0 [pid 6239] <... memfd_create resumed>) = 3 [pid 5073] newfstatat(4, "", [pid 6240] symlink("/dev/binderfs", "./binderfs" [pid 6239] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] umount2("./191/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6239] <... mmap resumed>) = 0x7f0356e00000 [pid 6237] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./191/binderfs", [pid 6240] <... symlink resumed>) = 0 [pid 6239] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] unlink("./191/binderfs" [pid 5073] getdents64(4, [pid 6240] memfd_create("syzkaller", 0 [pid 5077] <... unlink resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] getdents64(3, [pid 5073] getdents64(4, [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6240] <... memfd_create resumed>) = 3 [pid 5073] close(4 [pid 5077] close(3 [pid 5073] <... close resumed>) = 0 [pid 6240] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6238] <... mount resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5073] rmdir("./189/bus" [pid 6240] <... mmap resumed>) = 0x7f0356e00000 [pid 6238] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5077] rmdir("./191" [pid 6238] <... openat resumed>) = 3 [pid 5077] <... rmdir resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5077] mkdir("./192", 0777) = 0 [pid 6240] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6238] chdir("./bus" [pid 6237] <... write resumed>) = 524288 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] umount2("./189/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... openat resumed>) = 3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] ioctl(3, LOOP_CLR_FD [pid 6237] munmap(0x7f0356e00000, 138412032 [pid 5073] newfstatat(AT_FDCWD, "./189/binderfs", [pid 6238] <... chdir resumed>) = 0 [pid 6237] <... munmap resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6238] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6237] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5073] unlink("./189/binderfs" [pid 6238] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6237] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... unlink resumed>) = 0 [pid 5073] getdents64(3, [pid 6237] close(5 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6238] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5073] close(3 [pid 6238] <... symlink resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 6238] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5073] rmdir("./189" [pid 6238] <... creat resumed>) = 4 [pid 5073] <... rmdir resumed>) = 0 [pid 6238] rename("./bus", "./file2" [pid 6237] <... close resumed>) = 0 [pid 6238] <... rename resumed>) = -1 EEXIST (File exists) [pid 6238] memfd_create("syzkaller", 0 [pid 5073] mkdir("./190", 0777 [pid 6238] <... memfd_create resumed>) = 5 [pid 6238] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6238] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... mkdir resumed>) = 0 [pid 6237] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 6240] <... write resumed>) = 524288 [pid 6239] <... write resumed>) = 524288 [pid 6237] <... open resumed>) = 5 [pid 5077] <... ioctl resumed>) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6240] munmap(0x7f0356e00000, 138412032 [pid 6239] munmap(0x7f0356e00000, 138412032 [pid 6237] ftruncate(5, 0) = 0 [pid 6239] <... munmap resumed>) = 0 [pid 6237] exit_group(0) = ? [pid 6240] <... munmap resumed>) = 0 [pid 6239] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6239] ioctl(4, LOOP_SET_FD, 3 [pid 6237] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6237, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5077] close(3 [pid 5075] umount2("./189", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] openat(AT_FDCWD, "./189", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5075] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] umount2("./189/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6241 attached [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6241 [pid 6241] set_robust_list(0x55556e32a660, 24) = 0 [pid 6241] chdir("./192" [pid 6240] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6238] <... write resumed>) = 524288 [pid 6240] <... openat resumed>) = 4 [pid 6241] <... chdir resumed>) = 0 [pid 6241] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6241] setpgid(0, 0 [pid 6240] ioctl(4, LOOP_SET_FD, 3 [pid 6241] <... setpgid resumed>) = 0 [pid 6241] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6240] <... ioctl resumed>) = 0 [pid 6238] munmap(0x7f0356e00000, 138412032 [pid 6241] write(3, "1000", 4 [pid 6239] <... ioctl resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 6238] <... munmap resumed>) = 0 [pid 6238] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6241] <... write resumed>) = 4 [pid 6241] close(3) = 0 [pid 6241] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6239] close(3 [pid 6238] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... ioctl resumed>) = 0 [pid 5075] umount2("./189/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6240] close(3 [pid 6239] <... close resumed>) = 0 [pid 6238] close(5 [pid 6240] <... close resumed>) = 0 [pid 6239] close(4 [pid 6240] close(4 [pid 6239] <... close resumed>) = 0 [ 191.474202][ T6239] loop5: detected capacity change from 0 to 1024 [ 191.489314][ T6240] loop1: detected capacity change from 0 to 1024 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6241] memfd_create("syzkaller", 0 [pid 6240] <... close resumed>) = 0 [pid 6239] mkdir("./bus", 0777 [pid 6238] <... close resumed>) = 0 [pid 6241] <... memfd_create resumed>) = 3 [pid 6239] <... mkdir resumed>) = 0 [pid 6240] mkdir("./bus", 0777 [pid 6238] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6239] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6241] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] newfstatat(AT_FDCWD, "./189/bus", [pid 5073] close(3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... close resumed>) = 0 [pid 5075] umount2("./189/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6240] <... mkdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./189/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6241] <... mmap resumed>) = 0x7f0356e00000 [pid 6240] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5075] newfstatat(4, "", [pid 6241] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6242 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 6242 attached [pid 5075] getdents64(4, [pid 6242] set_robust_list(0x55556e32a660, 24 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6242] <... set_robust_list resumed>) = 0 [pid 5075] close(4 [pid 6242] chdir("./190" [pid 5075] <... close resumed>) = 0 [pid 6242] <... chdir resumed>) = 0 [pid 5075] rmdir("./189/bus" [pid 6242] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] <... rmdir resumed>) = 0 [pid 6242] <... prctl resumed>) = 0 [pid 6240] <... mount resumed>) = 0 [pid 6242] setpgid(0, 0) = 0 [pid 6242] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6240] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6239] <... mount resumed>) = 0 [pid 6238] <... open resumed>) = 5 [pid 5075] umount2("./189/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6240] <... openat resumed>) = 3 [pid 6240] chdir("./bus" [pid 6239] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6238] ftruncate(5, 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6240] <... chdir resumed>) = 0 [pid 6239] <... openat resumed>) = 3 [pid 5075] newfstatat(AT_FDCWD, "./189/binderfs", [pid 6240] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6238] <... ftruncate resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6240] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6240] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6239] chdir("./bus" [pid 6238] exit_group(0 [pid 6242] <... openat resumed>) = 3 [pid 6239] <... chdir resumed>) = 0 [pid 6238] <... exit_group resumed>) = ? [pid 5075] unlink("./189/binderfs" [pid 6240] <... symlink resumed>) = 0 [pid 6239] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... unlink resumed>) = 0 [pid 6242] write(3, "1000", 4) = 4 [pid 5075] getdents64(3, [pid 6242] close(3 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6242] <... close resumed>) = 0 [pid 6238] +++ exited with 0 +++ [pid 5075] close(3 [pid 6242] symlink("/dev/binderfs", "./binderfs" [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6238, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5075] <... close resumed>) = 0 [pid 6242] <... symlink resumed>) = 0 [pid 6241] <... write resumed>) = 524288 [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5075] rmdir("./189" [pid 6242] memfd_create("syzkaller", 0 [pid 5076] <... restart_syscall resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 6242] <... memfd_create resumed>) = 3 [pid 6241] munmap(0x7f0356e00000, 138412032 [pid 5075] mkdir("./190", 0777 [pid 6242] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6239] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] umount2("./192", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6240] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6239] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6242] <... mmap resumed>) = 0x7f0356e00000 [pid 6241] <... munmap resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./192", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... mkdir resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6241] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6239] <... symlink resumed>) = 0 [pid 5076] umount2("./192/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6239] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6241] <... openat resumed>) = 4 [pid 5075] <... openat resumed>) = 3 [pid 6242] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6241] ioctl(4, LOOP_SET_FD, 3 [pid 6240] <... creat resumed>) = 4 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6240] rename("./bus", "./file2" [pid 6239] <... creat resumed>) = 4 [pid 6239] rename("./bus", "./file2" [pid 6240] <... rename resumed>) = -1 EEXIST (File exists) [pid 5076] <... umount2 resumed>) = 0 [pid 6242] <... write resumed>) = 524288 [pid 6240] memfd_create("syzkaller", 0 [pid 6239] <... rename resumed>) = -1 EEXIST (File exists) [pid 6240] <... memfd_create resumed>) = 5 [pid 6239] memfd_create("syzkaller", 0) = 5 [pid 6240] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6239] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5076] umount2("./192/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./192/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./192/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./192/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6239] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] close(4) = 0 [pid 5076] rmdir("./192/bus" [pid 6240] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... rmdir resumed>) = 0 [pid 5076] umount2("./192/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6241] <... ioctl resumed>) = 0 [pid 6241] close(3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6242] munmap(0x7f0356e00000, 138412032 [pid 6241] <... close resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./192/binderfs", [pid 5075] <... ioctl resumed>) = 0 [pid 6241] close(4 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 191.592895][ T6241] loop4: detected capacity change from 0 to 1024 [pid 6242] <... munmap resumed>) = 0 [pid 6241] <... close resumed>) = 0 [pid 5076] unlink("./192/binderfs" [pid 6242] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] <... unlink resumed>) = 0 [pid 6242] <... openat resumed>) = 4 [pid 5076] getdents64(3, [pid 6242] ioctl(4, LOOP_SET_FD, 3 [pid 6241] mkdir("./bus", 0777 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6241] <... mkdir resumed>) = 0 [pid 5076] close(3) = 0 [pid 5075] close(3 [pid 5076] rmdir("./192" [pid 5075] <... close resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] mkdir("./193", 0777) = 0 [pid 6241] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6240] <... write resumed>) = 524288 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6243 [pid 5076] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 6243 attached [pid 6239] <... write resumed>) = 524288 [pid 6243] set_robust_list(0x55556e32a660, 24 [pid 6240] munmap(0x7f0356e00000, 138412032 [pid 6239] munmap(0x7f0356e00000, 138412032 [pid 6243] <... set_robust_list resumed>) = 0 [pid 6243] chdir("./190") = 0 [pid 6243] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6239] <... munmap resumed>) = 0 [pid 6243] setpgid(0, 0) = 0 [pid 6242] <... ioctl resumed>) = 0 [pid 6241] <... mount resumed>) = 0 [pid 6240] <... munmap resumed>) = 0 [pid 6239] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6243] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6242] close(3 [pid 6241] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6240] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6243] <... openat resumed>) = 3 [pid 6242] <... close resumed>) = 0 [pid 6241] <... openat resumed>) = 3 [pid 6240] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6239] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6243] write(3, "1000", 4 [ 191.642720][ T6242] loop0: detected capacity change from 0 to 1024 [pid 6242] close(4 [pid 6241] chdir("./bus" [pid 6240] close(5 [pid 6239] close(5 [pid 6243] <... write resumed>) = 4 [pid 6242] <... close resumed>) = 0 [pid 6241] <... chdir resumed>) = 0 [pid 6243] close(3 [pid 6242] mkdir("./bus", 0777 [pid 6241] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6243] <... close resumed>) = 0 [pid 6242] <... mkdir resumed>) = 0 [pid 6243] symlink("/dev/binderfs", "./binderfs" [pid 6241] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6243] <... symlink resumed>) = 0 [pid 6241] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6239] <... close resumed>) = 0 [pid 6243] memfd_create("syzkaller", 0 [pid 6242] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6243] <... memfd_create resumed>) = 3 [pid 6243] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6243] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6240] <... close resumed>) = 0 [pid 6241] <... symlink resumed>) = 0 [pid 6240] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6239] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6241] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6239] <... open resumed>) = 5 [pid 6240] <... open resumed>) = 5 [pid 6239] ftruncate(5, 0) = 0 [pid 6240] ftruncate(5, 0) = 0 [pid 6239] exit_group(0 [pid 5076] <... ioctl resumed>) = 0 [pid 6241] <... creat resumed>) = 4 [pid 6239] <... exit_group resumed>) = ? [pid 6240] exit_group(0 [pid 5076] close(3) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6240] <... exit_group resumed>) = ? [pid 6239] +++ exited with 0 +++ [pid 6241] rename("./bus", "./file2" [pid 6240] +++ exited with 0 +++ [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6240, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6239, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6244 [pid 5074] <... restart_syscall resumed>) = 0 [pid 6243] <... write resumed>) = 524288 [pid 6242] <... mount resumed>) = 0 [pid 6241] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] restart_syscall(<... resuming interrupted clone ...> [pid 6242] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6241] memfd_create("syzkaller", 0 [pid 5078] <... restart_syscall resumed>) = 0 ./strace-static-x86_64: Process 6244 attached [pid 6243] munmap(0x7f0356e00000, 138412032 [pid 6242] <... openat resumed>) = 3 [pid 6241] <... memfd_create resumed>) = 5 [pid 5074] umount2("./189", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6243] <... munmap resumed>) = 0 [pid 6242] chdir("./bus" [pid 6244] set_robust_list(0x55556e32a660, 24 [pid 6241] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./189", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6242] <... chdir resumed>) = 0 [pid 6241] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] umount2("./192", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6244] <... set_robust_list resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 6242] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6241] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(3, "", [pid 6243] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6242] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6242] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6243] <... openat resumed>) = 4 [pid 6244] chdir("./193" [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] openat(AT_FDCWD, "./192", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] getdents64(3, [pid 5078] <... openat resumed>) = 3 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6244] <... chdir resumed>) = 0 [pid 5074] umount2("./189/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] newfstatat(3, "", [pid 6244] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6243] ioctl(4, LOOP_SET_FD, 3 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6244] setpgid(0, 0 [pid 6242] <... symlink resumed>) = 0 [pid 6242] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6244] <... setpgid resumed>) = 0 [pid 5078] getdents64(3, [pid 6244] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] umount2("./192/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6244] <... openat resumed>) = 3 [pid 6244] write(3, "1000", 4) = 4 [pid 6241] <... write resumed>) = 524288 [pid 6244] close(3) = 0 [pid 6243] <... ioctl resumed>) = 0 [pid 6244] symlink("/dev/binderfs", "./binderfs" [pid 6243] close(3 [pid 6244] <... symlink resumed>) = 0 [pid 6243] <... close resumed>) = 0 [pid 6241] munmap(0x7f0356e00000, 138412032 [pid 5074] <... umount2 resumed>) = 0 [pid 6244] memfd_create("syzkaller", 0 [pid 6243] close(4 [pid 5078] <... umount2 resumed>) = 0 [pid 6243] <... close resumed>) = 0 [pid 6243] mkdir("./bus", 0777 [pid 6244] <... memfd_create resumed>) = 3 [pid 6243] <... mkdir resumed>) = 0 [pid 5078] umount2("./192/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6242] <... creat resumed>) = 4 [pid 5074] umount2("./189/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6244] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6243] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6242] rename("./bus", "./file2" [pid 6241] <... munmap resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./189/bus", [pid 6241] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6241] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] umount2("./189/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6241] close(5 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6244] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] newfstatat(AT_FDCWD, "./192/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] openat(AT_FDCWD, "./189/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6242] <... rename resumed>) = -1 EEXIST (File exists) [pid 5074] <... openat resumed>) = 4 [pid 6242] memfd_create("syzkaller", 0 [pid 5074] newfstatat(4, "", [pid 6244] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6242] <... memfd_create resumed>) = 5 [pid 6241] <... close resumed>) = 0 [pid 5078] umount2("./192/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6242] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5074] getdents64(4, [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5078] openat(AT_FDCWD, "./192/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5074] getdents64(4, [pid 5078] newfstatat(4, "", [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [ 191.752969][ T6243] loop2: detected capacity change from 0 to 1024 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] close(4 [pid 6242] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6241] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] getdents64(4, [pid 5074] <... close resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] rmdir("./189/bus" [pid 5078] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5078] close(4 [pid 6243] <... mount resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5074] umount2("./189/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6243] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6243] chdir("./bus") = 0 [pid 6243] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6244] <... write resumed>) = 524288 [pid 6242] <... write resumed>) = 524288 [pid 6241] <... open resumed>) = 5 [pid 5078] rmdir("./192/bus" [pid 5074] newfstatat(AT_FDCWD, "./189/binderfs", [pid 6243] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6243] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./189/binderfs" [pid 6241] ftruncate(5, 0 [pid 5074] <... unlink resumed>) = 0 [pid 6241] <... ftruncate resumed>) = 0 [pid 5074] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 6241] exit_group(0 [pid 5074] rmdir("./189" [pid 6244] munmap(0x7f0356e00000, 138412032 [pid 6243] <... symlink resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 6243] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5074] mkdir("./190", 0777 [pid 6244] <... munmap resumed>) = 0 [pid 5078] umount2("./192/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... mkdir resumed>) = 0 [pid 6244] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6241] <... exit_group resumed>) = ? [pid 6244] <... openat resumed>) = 4 [pid 6241] +++ exited with 0 +++ [pid 5078] newfstatat(AT_FDCWD, "./192/binderfs", [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6241, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5074] <... openat resumed>) = 3 [pid 6244] ioctl(4, LOOP_SET_FD, 3 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] umount2("./192", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./192", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6243] <... creat resumed>) = 4 [pid 6242] munmap(0x7f0356e00000, 138412032 [pid 5077] <... openat resumed>) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6243] rename("./bus", "./file2" [pid 6242] <... munmap resumed>) = 0 [pid 6242] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5077] newfstatat(3, "", [pid 6242] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6242] close(5 [pid 5077] getdents64(3, [pid 5078] unlink("./192/binderfs" [pid 6243] <... rename resumed>) = -1 EEXIST (File exists) [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] <... unlink resumed>) = 0 [pid 6243] memfd_create("syzkaller", 0 [pid 5077] umount2("./192/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6243] <... memfd_create resumed>) = 5 [pid 6243] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] getdents64(3, [pid 6243] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6244] <... ioctl resumed>) = 0 [pid 6243] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] close(3 [pid 6244] close(3 [pid 5078] <... close resumed>) = 0 [pid 6244] <... close resumed>) = 0 [pid 6242] <... close resumed>) = 0 [pid 5078] rmdir("./192" [pid 6244] close(4 [pid 6242] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6244] <... close resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 6244] mkdir("./bus", 0777 [pid 5078] mkdir("./193", 0777 [pid 6244] <... mkdir resumed>) = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 6242] <... open resumed>) = 5 [pid 6244] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5077] <... umount2 resumed>) = 0 [pid 6243] <... write resumed>) = 524288 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 6242] ftruncate(5, 0) = 0 [pid 6242] exit_group(0) = ? [pid 5077] umount2("./192/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6242] +++ exited with 0 +++ [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... ioctl resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./192/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6242, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5077] umount2("./192/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./190", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./192/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] openat(AT_FDCWD, "./190", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... openat resumed>) = 4 [pid 5073] <... openat resumed>) = 3 [pid 5077] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] newfstatat(3, "", [ 191.857049][ T6244] loop3: detected capacity change from 0 to 1024 [pid 5077] getdents64(4, [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6244] <... mount resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] getdents64(4, [pid 5074] close(3 [pid 5073] getdents64(3, [pid 5074] <... close resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6243] munmap(0x7f0356e00000, 138412032 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] umount2("./190/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6244] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6243] <... munmap resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6244] <... openat resumed>) = 3 [pid 5077] close(4) = 0 [pid 6243] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5077] rmdir("./192/bus" [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6245 [pid 6244] chdir("./bus" [pid 5077] <... rmdir resumed>) = 0 [pid 6244] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 6245 attached [pid 6244] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6243] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] umount2("./192/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6244] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./192/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] unlink("./192/binderfs") = 0 [pid 6245] set_robust_list(0x55556e32a660, 24 [pid 6243] close(5 [pid 5077] getdents64(3, [pid 5073] <... umount2 resumed>) = 0 [pid 6244] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6245] <... set_robust_list resumed>) = 0 [pid 6243] <... close resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6245] chdir("./190" [pid 5077] close(3 [pid 5078] <... ioctl resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5077] rmdir("./192") = 0 [pid 6245] <... chdir resumed>) = 0 [pid 6245] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5077] mkdir("./193", 0777 [pid 6245] setpgid(0, 0) = 0 [pid 6243] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] <... mkdir resumed>) = 0 [pid 6244] <... symlink resumed>) = 0 [pid 6245] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6243] <... open resumed>) = 5 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 6245] <... openat resumed>) = 3 [pid 6245] write(3, "1000", 4) = 4 [pid 6243] ftruncate(5, 0 [pid 6245] close(3 [pid 6243] <... ftruncate resumed>) = 0 [pid 6245] <... close resumed>) = 0 [pid 6243] exit_group(0 [pid 6245] symlink("/dev/binderfs", "./binderfs" [pid 6243] <... exit_group resumed>) = ? [pid 6245] <... symlink resumed>) = 0 [pid 6244] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6243] +++ exited with 0 +++ [pid 5078] close(3 [pid 5073] umount2("./190/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6245] memfd_create("syzkaller", 0 [pid 5078] <... close resumed>) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6243, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6245] <... memfd_create resumed>) = 3 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6245] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] umount2("./190", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6245] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./190/bus", [pid 5075] openat(AT_FDCWD, "./190", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6245] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... openat resumed>) = 3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 6246 attached [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6246 [pid 5075] newfstatat(3, "", [pid 5073] umount2("./190/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6246] set_robust_list(0x55556e32a660, 24 [pid 6244] <... creat resumed>) = 4 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(3, [pid 5073] openat(AT_FDCWD, "./190/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6244] rename("./bus", "./file2" [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] <... openat resumed>) = 4 [pid 6246] <... set_robust_list resumed>) = 0 [pid 5075] umount2("./190/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] newfstatat(4, "", [pid 6246] chdir("./193") = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6246] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6244] <... rename resumed>) = -1 EEXIST (File exists) [pid 5077] <... ioctl resumed>) = 0 [pid 5073] getdents64(4, [pid 6246] <... prctl resumed>) = 0 [pid 6246] setpgid(0, 0) = 0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6246] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6244] memfd_create("syzkaller", 0 [pid 5073] getdents64(4, [pid 6246] <... openat resumed>) = 3 [pid 6244] <... memfd_create resumed>) = 5 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6246] write(3, "1000", 4 [pid 6244] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] close(4 [pid 6246] <... write resumed>) = 4 [pid 6244] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] <... umount2 resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 6246] close(3) = 0 [pid 6246] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6246] memfd_create("syzkaller", 0 [pid 6244] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] rmdir("./190/bus" [pid 6246] <... memfd_create resumed>) = 3 [pid 6246] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] umount2("./190/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6246] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] close(3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6246] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6245] <... write resumed>) = 524288 [pid 5077] <... close resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./190/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./190/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./190/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./190/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... openat resumed>) = 4 [pid 5075] newfstatat(4, "", [pid 6244] <... write resumed>) = 524288 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 6247 attached [pid 5075] getdents64(4, [pid 6247] set_robust_list(0x55556e32a660, 24 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6247] <... set_robust_list resumed>) = 0 [pid 6245] munmap(0x7f0356e00000, 138412032 [pid 5075] close(4 [pid 5073] newfstatat(AT_FDCWD, "./190/binderfs", [pid 6247] chdir("./193" [pid 6245] <... munmap resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 6247] <... chdir resumed>) = 0 [pid 6246] <... write resumed>) = 524288 [pid 6244] munmap(0x7f0356e00000, 138412032 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6245] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6244] <... munmap resumed>) = 0 [pid 5073] unlink("./190/binderfs" [pid 6245] ioctl(4, LOOP_SET_FD, 3 [pid 6244] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] rmdir("./190/bus" [pid 5073] <... unlink resumed>) = 0 [pid 6247] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6247 [pid 5075] <... rmdir resumed>) = 0 [pid 6247] <... prctl resumed>) = 0 [pid 5075] umount2("./190/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6247] setpgid(0, 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6247] <... setpgid resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./190/binderfs", [pid 6247] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6247] <... openat resumed>) = 3 [pid 5075] unlink("./190/binderfs") = 0 [pid 6247] write(3, "1000", 4 [pid 5075] getdents64(3, [pid 6247] <... write resumed>) = 4 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] getdents64(3, [pid 6244] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6247] close(3 [pid 6244] close(5 [pid 5075] close(3 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6247] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 6247] symlink("/dev/binderfs", "./binderfs" [pid 5075] rmdir("./190" [pid 6247] <... symlink resumed>) = 0 [pid 5073] close(3 [pid 6247] memfd_create("syzkaller", 0 [pid 5075] <... rmdir resumed>) = 0 [pid 6247] <... memfd_create resumed>) = 3 [pid 6246] munmap(0x7f0356e00000, 138412032 [pid 5075] mkdir("./191", 0777 [pid 5073] <... close resumed>) = 0 [pid 6244] <... close resumed>) = 0 [pid 6247] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6246] <... munmap resumed>) = 0 [pid 6245] <... ioctl resumed>) = 0 [pid 6244] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5075] <... mkdir resumed>) = 0 [pid 5073] rmdir("./190" [pid 6247] <... mmap resumed>) = 0x7f0356e00000 [pid 6245] close(3 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6246] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6245] <... close resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 6246] <... openat resumed>) = 4 [pid 6245] close(4 [pid 5075] <... openat resumed>) = 3 [pid 6246] ioctl(4, LOOP_SET_FD, 3 [pid 6245] <... close resumed>) = 0 [pid 6244] <... open resumed>) = 5 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5073] mkdir("./191", 0777 [pid 6245] mkdir("./bus", 0777 [pid 6244] ftruncate(5, 0 [pid 6247] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... mkdir resumed>) = 0 [pid 6244] <... ftruncate resumed>) = 0 [pid 6245] <... mkdir resumed>) = 0 [pid 6244] exit_group(0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6245] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6244] <... exit_group resumed>) = ? [pid 5073] <... openat resumed>) = 3 [pid 6247] <... write resumed>) = 524288 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6246] <... ioctl resumed>) = 0 [pid 6246] close(3) = 0 [pid 6246] close(4) = 0 [pid 6246] mkdir("./bus", 0777) = 0 [pid 6246] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6244] +++ exited with 0 +++ [pid 6245] <... mount resumed>) = 0 [pid 6246] <... mount resumed>) = 0 [pid 6245] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6247] munmap(0x7f0356e00000, 138412032 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6244, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6245] <... openat resumed>) = 3 [pid 6247] <... munmap resumed>) = 0 [pid 6246] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6245] chdir("./bus" [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 6245] <... chdir resumed>) = 0 [pid 6246] <... openat resumed>) = 3 [pid 5076] <... restart_syscall resumed>) = 0 [ 192.045711][ T6245] loop1: detected capacity change from 0 to 1024 [ 192.069163][ T6246] loop5: detected capacity change from 0 to 1024 [pid 6246] chdir("./bus" [pid 6247] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6246] <... chdir resumed>) = 0 [pid 6245] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6247] <... openat resumed>) = 4 [pid 6246] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6247] ioctl(4, LOOP_SET_FD, 3 [pid 6246] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6245] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] umount2("./193", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6246] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6245] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./193", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6246] <... symlink resumed>) = 0 [pid 6245] <... symlink resumed>) = 0 [pid 5076] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] umount2("./193/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6246] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6245] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5075] <... ioctl resumed>) = 0 [pid 6247] <... ioctl resumed>) = 0 [pid 6246] <... creat resumed>) = 4 [pid 5076] <... umount2 resumed>) = 0 [pid 5075] close(3 [pid 6247] close(3 [pid 5075] <... close resumed>) = 0 [pid 6247] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6247] close(4) = 0 [pid 5076] umount2("./193/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6247] mkdir("./bus", 0777 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6247] <... mkdir resumed>) = 0 [pid 6246] rename("./bus", "./file2" [pid 5076] newfstatat(AT_FDCWD, "./193/bus", [pid 5073] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 6248 attached [pid 6247] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6248] set_robust_list(0x55556e32a660, 24 [pid 5076] umount2("./193/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6248] <... set_robust_list resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6248] chdir("./191" [pid 6245] <... creat resumed>) = 4 [pid 5076] openat(AT_FDCWD, "./193/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6248 [ 192.102898][ T6247] loop4: detected capacity change from 0 to 1024 [pid 6246] <... rename resumed>) = -1 EEXIST (File exists) [pid 6245] rename("./bus", "./file2" [pid 5076] <... openat resumed>) = 4 [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, [pid 6248] <... chdir resumed>) = 0 [pid 6246] memfd_create("syzkaller", 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6246] <... memfd_create resumed>) = 5 [pid 5076] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] close(4) = 0 [pid 6248] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] rmdir("./193/bus" [pid 6248] <... prctl resumed>) = 0 [pid 6246] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... rmdir resumed>) = 0 [pid 6246] <... mmap resumed>) = 0x7f0356e00000 [pid 6245] <... rename resumed>) = -1 EEXIST (File exists) [pid 5076] umount2("./193/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./193/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6248] setpgid(0, 0 [pid 6246] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] unlink("./193/binderfs" [pid 6248] <... setpgid resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 6248] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6248] <... openat resumed>) = 3 [pid 5076] close(3 [pid 6245] memfd_create("syzkaller", 0 [pid 5076] <... close resumed>) = 0 [pid 5073] close(3 [pid 6248] write(3, "1000", 4 [pid 5076] rmdir("./193" [pid 5073] <... close resumed>) = 0 [pid 6248] <... write resumed>) = 4 [pid 6245] <... memfd_create resumed>) = 5 [pid 5076] <... rmdir resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6248] close(3 [pid 6247] <... mount resumed>) = 0 [pid 6245] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] mkdir("./194", 0777 [pid 6247] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6245] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 6249 attached [pid 6248] <... close resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6248] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... openat resumed>) = 3 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6249 [pid 6249] set_robust_list(0x55556e32a660, 24 [pid 6248] <... symlink resumed>) = 0 [pid 6247] <... openat resumed>) = 3 [pid 6245] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6247] chdir("./bus") = 0 [pid 6249] <... set_robust_list resumed>) = 0 [pid 6248] memfd_create("syzkaller", 0 [pid 6247] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6249] chdir("./191" [pid 6248] <... memfd_create resumed>) = 3 [pid 6247] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6248] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6249] <... chdir resumed>) = 0 [pid 6248] <... mmap resumed>) = 0x7f0356e00000 [pid 6249] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6247] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6249] <... prctl resumed>) = 0 [pid 6246] <... write resumed>) = 524288 [pid 6249] setpgid(0, 0) = 0 [pid 6249] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6248] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6247] <... symlink resumed>) = 0 [pid 6249] <... openat resumed>) = 3 [pid 6247] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6249] write(3, "1000", 4) = 4 [pid 6246] munmap(0x7f0356e00000, 138412032 [pid 6249] close(3) = 0 [pid 6246] <... munmap resumed>) = 0 [pid 6245] <... write resumed>) = 524288 [pid 6249] symlink("/dev/binderfs", "./binderfs" [pid 6247] <... creat resumed>) = 4 [pid 6246] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6249] <... symlink resumed>) = 0 [pid 6247] rename("./bus", "./file2" [pid 6246] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6249] memfd_create("syzkaller", 0 [pid 6246] close(5 [pid 6247] <... rename resumed>) = -1 EEXIST (File exists) [pid 6246] <... close resumed>) = 0 [pid 6249] <... memfd_create resumed>) = 3 [pid 6249] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6247] memfd_create("syzkaller", 0 [pid 6249] <... mmap resumed>) = 0x7f0356e00000 [pid 6247] <... memfd_create resumed>) = 5 [pid 5076] <... ioctl resumed>) = 0 [pid 6245] munmap(0x7f0356e00000, 138412032 [pid 6249] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6247] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6245] <... munmap resumed>) = 0 [pid 6248] <... write resumed>) = 524288 [pid 6248] munmap(0x7f0356e00000, 138412032) = 0 [pid 6246] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6249] <... write resumed>) = 524288 [pid 6248] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6247] <... mmap resumed>) = 0x7f0356e00000 [pid 6246] <... open resumed>) = 5 [pid 6245] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] close(3) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6248] <... openat resumed>) = 4 [pid 6246] ftruncate(5, 0 [pid 6248] ioctl(4, LOOP_SET_FD, 3 [pid 6246] <... ftruncate resumed>) = 0 [pid 6246] exit_group(0 [pid 6245] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6250 [pid 6246] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 6250 attached [pid 6247] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6245] close(5 [pid 6250] set_robust_list(0x55556e32a660, 24) = 0 [pid 6250] chdir("./194") = 0 [pid 6250] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6246] +++ exited with 0 +++ [pid 6250] <... prctl resumed>) = 0 [pid 6250] setpgid(0, 0) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6246, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5078] restart_syscall(<... resuming interrupted clone ...> [pid 6245] <... close resumed>) = 0 [pid 5078] <... restart_syscall resumed>) = 0 [pid 6250] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6249] munmap(0x7f0356e00000, 138412032 [pid 6250] <... openat resumed>) = 3 [pid 6249] <... munmap resumed>) = 0 [pid 6245] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] umount2("./193", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6250] write(3, "1000", 4 [pid 6249] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6248] <... ioctl resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6250] <... write resumed>) = 4 [pid 6249] <... openat resumed>) = 4 [pid 6248] close(3 [pid 5078] openat(AT_FDCWD, "./193", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6250] close(3 [pid 6249] ioctl(4, LOOP_SET_FD, 3 [pid 6248] <... close resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 6250] <... close resumed>) = 0 [pid 5078] newfstatat(3, "", [pid 6247] <... write resumed>) = 524288 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6250] symlink("/dev/binderfs", "./binderfs" [pid 6248] close(4 [pid 5078] getdents64(3, [pid 6248] <... close resumed>) = 0 [pid 6248] mkdir("./bus", 0777 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6248] <... mkdir resumed>) = 0 [pid 6245] <... open resumed>) = 5 [pid 5078] umount2("./193/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6250] <... symlink resumed>) = 0 [pid 6248] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6250] memfd_create("syzkaller", 0) = 3 [pid 6250] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6247] munmap(0x7f0356e00000, 138412032 [pid 6245] ftruncate(5, 0) = 0 [pid 6247] <... munmap resumed>) = 0 [pid 6245] exit_group(0 [pid 6248] <... mount resumed>) = 0 [pid 6245] <... exit_group resumed>) = ? [pid 6248] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6248] chdir("./bus") = 0 [pid 6250] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6248] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6247] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6248] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6248] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6247] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6247] close(5 [pid 6245] +++ exited with 0 +++ [pid 6249] <... ioctl resumed>) = 0 [pid 6248] <... symlink resumed>) = 0 [pid 6247] <... close resumed>) = 0 [pid 5078] <... umount2 resumed>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6245, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6249] close(3 [pid 6248] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 6249] <... close resumed>) = 0 [pid 5074] <... restart_syscall resumed>) = 0 [pid 6249] close(4) = 0 [pid 6249] mkdir("./bus", 0777) = 0 [ 192.261054][ T6248] loop2: detected capacity change from 0 to 1024 [ 192.289023][ T6249] loop0: detected capacity change from 0 to 1024 [pid 5078] umount2("./193/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6250] <... write resumed>) = 524288 [pid 6249] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6248] <... creat resumed>) = 4 [pid 6247] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5074] umount2("./190", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6248] rename("./bus", "./file2" [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6250] munmap(0x7f0356e00000, 138412032 [pid 5078] newfstatat(AT_FDCWD, "./193/bus", [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6250] <... munmap resumed>) = 0 [pid 6248] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] openat(AT_FDCWD, "./190", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6250] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6249] <... mount resumed>) = 0 [pid 6248] memfd_create("syzkaller", 0 [pid 5078] umount2("./193/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... openat resumed>) = 3 [pid 6250] <... openat resumed>) = 4 [pid 6248] <... memfd_create resumed>) = 5 [pid 6247] <... open resumed>) = 5 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(3, "", [pid 6250] ioctl(4, LOOP_SET_FD, 3 [pid 6249] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6248] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] openat(AT_FDCWD, "./193/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6247] ftruncate(5, 0) = 0 [pid 5078] <... openat resumed>) = 4 [pid 5074] getdents64(3, [pid 5078] newfstatat(4, "", [pid 6247] exit_group(0 [pid 6249] <... openat resumed>) = 3 [pid 6248] <... mmap resumed>) = 0x7f0356e00000 [pid 6247] <... exit_group resumed>) = ? [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6249] chdir("./bus") = 0 [pid 6249] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6249] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6247] +++ exited with 0 +++ [pid 5078] getdents64(4, [pid 5074] umount2("./190/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6247, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=1 /* 0.01 s */} --- [pid 6249] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6248] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] getdents64(4, [pid 5077] umount2("./193", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./193", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5077] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] umount2("./193/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6250] <... ioctl resumed>) = 0 [pid 6250] close(3) = 0 [pid 6250] close(4 [pid 6249] <... creat resumed>) = 4 [pid 6248] <... write resumed>) = 524288 [pid 5078] close(4 [pid 6250] <... close resumed>) = 0 [pid 6249] rename("./bus", "./file2" [pid 5078] <... close resumed>) = 0 [pid 6250] mkdir("./bus", 0777 [pid 6248] munmap(0x7f0356e00000, 138412032 [pid 5078] rmdir("./193/bus" [pid 6249] <... rename resumed>) = -1 EEXIST (File exists) [pid 6248] <... munmap resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 6249] memfd_create("syzkaller", 0 [pid 6250] <... mkdir resumed>) = 0 [pid 6249] <... memfd_create resumed>) = 5 [pid 6249] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6250] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6249] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] umount2("./193/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = 0 [pid 6248] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5077] <... umount2 resumed>) = 0 [pid 6248] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6248] close(5 [ 192.360949][ T6250] loop3: detected capacity change from 0 to 1024 [pid 5078] newfstatat(AT_FDCWD, "./193/binderfs", [pid 6248] <... close resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] umount2("./193/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] unlink("./193/binderfs" [pid 5074] umount2("./190/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... unlink resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] getdents64(3, [pid 5074] newfstatat(AT_FDCWD, "./190/bus", [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5078] close(3 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] <... close resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./193/bus", [pid 5074] umount2("./190/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] rmdir("./193" [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] umount2("./193/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] openat(AT_FDCWD, "./190/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... openat resumed>) = 4 [pid 5078] <... rmdir resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./193/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] newfstatat(4, "", [pid 5078] mkdir("./194", 0777 [pid 5077] <... openat resumed>) = 4 [pid 5077] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] getdents64(4, [pid 5078] <... mkdir resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] getdents64(4, [pid 5078] <... openat resumed>) = 3 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6248] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5077] close(4 [pid 5074] getdents64(4, [pid 5077] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] rmdir("./193/bus" [pid 5074] getdents64(4, [pid 5077] <... rmdir resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6248] <... open resumed>) = 5 [pid 5074] close(4 [pid 6248] ftruncate(5, 0 [pid 5077] umount2("./193/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... close resumed>) = 0 [pid 6248] <... ftruncate resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] rmdir("./190/bus" [pid 6250] <... mount resumed>) = 0 [pid 6249] <... write resumed>) = 524288 [pid 6248] exit_group(0 [pid 5077] newfstatat(AT_FDCWD, "./193/binderfs", [pid 5074] <... rmdir resumed>) = 0 [pid 6250] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6249] munmap(0x7f0356e00000, 138412032 [pid 6248] <... exit_group resumed>) = ? [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./190/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6250] <... openat resumed>) = 3 [pid 6249] <... munmap resumed>) = 0 [pid 6248] +++ exited with 0 +++ [pid 5077] unlink("./193/binderfs" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6250] chdir("./bus" [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6248, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=2 /* 0.02 s */} --- [pid 6250] <... chdir resumed>) = 0 [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 5074] newfstatat(AT_FDCWD, "./190/binderfs", [pid 6250] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] <... restart_syscall resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6250] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6249] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5077] <... unlink resumed>) = 0 [pid 5074] unlink("./190/binderfs" [pid 6250] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6249] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] getdents64(3, [pid 5074] <... unlink resumed>) = 0 [pid 6249] close(5 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] umount2("./191", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] getdents64(3, [pid 6249] <... close resumed>) = 0 [pid 5077] close(3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] openat(AT_FDCWD, "./191", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5075] newfstatat(3, "", [pid 5074] close(3) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] umount2("./191/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] rmdir("./190") = 0 [pid 6250] <... symlink resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5074] mkdir("./191", 0777) = 0 [pid 5077] rmdir("./193") = 0 [pid 6250] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5077] mkdir("./194", 0777 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5077] <... mkdir resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6249] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 6250] <... creat resumed>) = 4 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 6250] rename("./bus", "./file2") = -1 EEXIST (File exists) [pid 6250] memfd_create("syzkaller", 0) = 5 [pid 6249] <... open resumed>) = 5 [pid 6250] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6249] ftruncate(5, 0 [pid 6250] <... mmap resumed>) = 0x7f0356e00000 [pid 6249] <... ftruncate resumed>) = 0 [pid 6250] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... umount2 resumed>) = 0 [pid 6249] exit_group(0) = ? [pid 6249] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6249, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5073] umount2("./191", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./191", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] umount2("./191/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./191/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] <... ioctl resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./191/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./191/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] close(3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./191/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... openat resumed>) = 4 [pid 5073] umount2("./191/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] newfstatat(4, "", [pid 6250] <... write resumed>) = 524288 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] newfstatat(AT_FDCWD, "./191/bus", [pid 5075] getdents64(4, [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./191/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] close(4 [pid 5073] openat(AT_FDCWD, "./191/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./191/bus" [pid 5073] <... openat resumed>) = 4 ./strace-static-x86_64: Process 6251 attached [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6251 [pid 6251] set_robust_list(0x55556e32a660, 24 [pid 5073] newfstatat(4, "", [pid 6250] munmap(0x7f0356e00000, 138412032 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6251] <... set_robust_list resumed>) = 0 [pid 6250] <... munmap resumed>) = 0 [pid 5075] umount2("./191/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./191/bus") = 0 [pid 6250] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6250] close(5 [pid 6251] chdir("./194" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./191/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... ioctl resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] close(3 [pid 5073] newfstatat(AT_FDCWD, "./191/binderfs", [pid 5077] <... close resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] newfstatat(AT_FDCWD, "./191/binderfs", [pid 6251] <... chdir resumed>) = 0 [pid 6251] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./191/binderfs" [pid 6251] setpgid(0, 0 [pid 6250] <... close resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] unlink("./191/binderfs" [pid 5074] close(3 [pid 5073] <... unlink resumed>) = 0 [pid 6251] <... setpgid resumed>) = 0 [pid 6251] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] <... unlink resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5073] getdents64(3, [pid 6251] <... openat resumed>) = 3 [pid 5075] getdents64(3, [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6251] write(3, "1000", 4 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6251] <... write resumed>) = 4 [pid 5075] close(3 [pid 5073] close(3 [pid 6251] close(3 [pid 5075] <... close resumed>) = 0 [pid 6251] <... close resumed>) = 0 [pid 5075] rmdir("./191" [pid 6251] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 6252 attached [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6252 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6253 [pid 5073] <... close resumed>) = 0 [pid 6252] set_robust_list(0x55556e32a660, 24 [pid 5075] <... rmdir resumed>) = 0 [pid 5073] rmdir("./191" [pid 6252] <... set_robust_list resumed>) = 0 [pid 6251] <... symlink resumed>) = 0 [pid 5075] mkdir("./192", 0777./strace-static-x86_64: Process 6253 attached [pid 6252] chdir("./194" [pid 6251] memfd_create("syzkaller", 0 [pid 5073] <... rmdir resumed>) = 0 [pid 6252] <... chdir resumed>) = 0 [pid 5073] mkdir("./192", 0777 [pid 6253] set_robust_list(0x55556e32a660, 24 [pid 6252] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6251] <... memfd_create resumed>) = 3 [pid 5075] <... mkdir resumed>) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 6252] <... prctl resumed>) = 0 [pid 6250] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6253] <... set_robust_list resumed>) = 0 [pid 6252] setpgid(0, 0 [pid 6251] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6252] <... setpgid resumed>) = 0 [pid 6253] chdir("./191" [pid 6252] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6251] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] <... openat resumed>) = 3 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6253] <... chdir resumed>) = 0 [pid 6252] <... openat resumed>) = 3 [pid 6252] write(3, "1000", 4 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5073] <... openat resumed>) = 3 [pid 6252] <... write resumed>) = 4 [pid 6250] <... open resumed>) = 5 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6252] close(3 [pid 6253] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6253] setpgid(0, 0) = 0 [pid 6252] <... close resumed>) = 0 [pid 6250] ftruncate(5, 0 [pid 6252] symlink("/dev/binderfs", "./binderfs" [pid 6253] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6252] <... symlink resumed>) = 0 [pid 6250] <... ftruncate resumed>) = 0 [pid 6252] memfd_create("syzkaller", 0 [pid 6250] exit_group(0) = ? [pid 6253] <... openat resumed>) = 3 [pid 6252] <... memfd_create resumed>) = 3 [pid 6250] +++ exited with 0 +++ [pid 6252] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6250, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6252] <... mmap resumed>) = 0x7f0356e00000 [pid 6253] write(3, "1000", 4 [pid 6251] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6253] <... write resumed>) = 4 [pid 6253] close(3 [pid 6252] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] umount2("./194", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./194", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] umount2("./194/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6253] <... close resumed>) = 0 [pid 6253] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6253] memfd_create("syzkaller", 0 [pid 6251] <... write resumed>) = 524288 [pid 5076] <... umount2 resumed>) = 0 [pid 6253] <... memfd_create resumed>) = 3 [pid 6251] munmap(0x7f0356e00000, 138412032 [pid 5073] <... ioctl resumed>) = 0 [pid 6253] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6251] <... munmap resumed>) = 0 [pid 5076] umount2("./194/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./194/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./194/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./194/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] close(3 [pid 5076] getdents64(4, [pid 5075] <... ioctl resumed>) = 0 [pid 6253] <... mmap resumed>) = 0x7f0356e00000 [pid 6251] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] <... close resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6251] <... openat resumed>) = 4 [pid 5076] getdents64(4, [pid 5075] close(3 [pid 6252] <... write resumed>) = 524288 [pid 6251] ioctl(4, LOOP_SET_FD, 3 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6253] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] close(4) = 0 [pid 5076] rmdir("./194/bus" [pid 6252] munmap(0x7f0356e00000, 138412032 [pid 5076] <... rmdir resumed>) = 0 [pid 5076] umount2("./194/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6254 ./strace-static-x86_64: Process 6254 attached [pid 6252] <... munmap resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6254] set_robust_list(0x55556e32a660, 24 [pid 5076] newfstatat(AT_FDCWD, "./194/binderfs", [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6255 [pid 6254] <... set_robust_list resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 6255 attached [pid 6254] chdir("./192" [pid 6253] <... write resumed>) = 524288 [pid 6252] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6255] set_robust_list(0x55556e32a660, 24 [pid 6251] <... ioctl resumed>) = 0 [pid 5076] unlink("./194/binderfs" [pid 6255] <... set_robust_list resumed>) = 0 [pid 6254] <... chdir resumed>) = 0 [pid 6251] close(3 [pid 5076] <... unlink resumed>) = 0 [pid 6252] <... openat resumed>) = 4 [pid 6255] chdir("./192" [pid 6254] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6252] ioctl(4, LOOP_SET_FD, 3 [pid 6251] <... close resumed>) = 0 [pid 5076] getdents64(3, [pid 6251] close(4 [pid 6254] <... prctl resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3) = 0 [pid 5076] rmdir("./194") = 0 [pid 5076] mkdir("./195", 0777 [pid 6254] setpgid(0, 0 [pid 5076] <... mkdir resumed>) = 0 [pid 6254] <... setpgid resumed>) = 0 [pid 6254] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6255] <... chdir resumed>) = 0 [pid 6254] write(3, "1000", 4 [pid 6252] <... ioctl resumed>) = 0 [pid 6251] <... close resumed>) = 0 [pid 6254] <... write resumed>) = 4 [pid 6254] close(3) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6254] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5076] <... openat resumed>) = 3 [pid 6254] memfd_create("syzkaller", 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6254] <... memfd_create resumed>) = 3 [pid 6254] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6255] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6253] munmap(0x7f0356e00000, 138412032 [pid 6252] close(3 [pid 6251] mkdir("./bus", 0777 [pid 6255] <... prctl resumed>) = 0 [pid 6251] <... mkdir resumed>) = 0 [pid 6255] setpgid(0, 0 [pid 6253] <... munmap resumed>) = 0 [pid 6251] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6255] <... setpgid resumed>) = 0 [pid 6254] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6255] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6253] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6252] <... close resumed>) = 0 [ 192.642965][ T6251] loop5: detected capacity change from 0 to 1024 [ 192.679443][ T6252] loop4: detected capacity change from 0 to 1024 [pid 6252] close(4 [pid 6255] <... openat resumed>) = 3 [pid 6253] <... openat resumed>) = 4 [pid 6252] <... close resumed>) = 0 [pid 6255] write(3, "1000", 4 [pid 6253] ioctl(4, LOOP_SET_FD, 3 [pid 6252] mkdir("./bus", 0777 [pid 6254] <... write resumed>) = 524288 [pid 6255] <... write resumed>) = 4 [pid 6253] <... ioctl resumed>) = 0 [pid 6252] <... mkdir resumed>) = 0 [pid 6251] <... mount resumed>) = 0 [pid 6255] close(3 [pid 6253] close(3 [pid 6252] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6251] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6255] <... close resumed>) = 0 [pid 6255] symlink("/dev/binderfs", "./binderfs" [pid 6253] <... close resumed>) = 0 [pid 6251] <... openat resumed>) = 3 [pid 5076] <... ioctl resumed>) = 0 [pid 6254] munmap(0x7f0356e00000, 138412032 [pid 6255] <... symlink resumed>) = 0 [pid 6254] <... munmap resumed>) = 0 [pid 6253] close(4 [pid 6251] chdir("./bus" [pid 6254] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6255] memfd_create("syzkaller", 0 [pid 6253] <... close resumed>) = 0 [pid 6251] <... chdir resumed>) = 0 [pid 6254] <... openat resumed>) = 4 [pid 6253] mkdir("./bus", 0777 [pid 6251] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6254] ioctl(4, LOOP_SET_FD, 3 [pid 6253] <... mkdir resumed>) = 0 [pid 6251] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6255] <... memfd_create resumed>) = 3 [pid 5076] close(3 [pid 6251] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6252] <... mount resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6251] <... symlink resumed>) = 0 [pid 6253] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6252] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6255] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [ 192.701585][ T6253] loop1: detected capacity change from 0 to 1024 [pid 6251] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6255] <... mmap resumed>) = 0x7f0356e00000 [pid 6252] <... openat resumed>) = 3 [pid 6251] <... creat resumed>) = 4 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6256 ./strace-static-x86_64: Process 6256 attached [pid 6255] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6253] <... mount resumed>) = 0 [pid 6252] chdir("./bus" [pid 6251] rename("./bus", "./file2" [pid 6256] set_robust_list(0x55556e32a660, 24 [pid 6254] <... ioctl resumed>) = 0 [pid 6256] <... set_robust_list resumed>) = 0 [pid 6254] close(3 [pid 6256] chdir("./195" [pid 6254] <... close resumed>) = 0 [pid 6254] close(4) = 0 [pid 6254] mkdir("./bus", 0777) = 0 [pid 6254] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6252] <... chdir resumed>) = 0 [pid 6254] <... mount resumed>) = 0 [pid 6253] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6252] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6251] <... rename resumed>) = -1 EEXIST (File exists) [pid 6254] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6252] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6251] memfd_create("syzkaller", 0 [pid 6254] <... openat resumed>) = 3 [pid 6253] <... openat resumed>) = 3 [pid 6252] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6251] <... memfd_create resumed>) = 5 [pid 6254] chdir("./bus" [pid 6253] chdir("./bus" [pid 6254] <... chdir resumed>) = 0 [pid 6253] <... chdir resumed>) = 0 [pid 6251] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6254] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6253] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6251] <... mmap resumed>) = 0x7f0356e00000 [pid 6254] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6254] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6256] <... chdir resumed>) = 0 [pid 6254] <... symlink resumed>) = 0 [pid 6256] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6254] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6256] <... prctl resumed>) = 0 [pid 6253] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6256] setpgid(0, 0 [pid 6254] <... creat resumed>) = 4 [pid 6253] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6256] <... setpgid resumed>) = 0 [pid 6254] rename("./bus", "./file2" [pid 6252] <... symlink resumed>) = 0 [pid 6256] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6255] <... write resumed>) = 524288 [pid 6254] <... rename resumed>) = -1 EEXIST (File exists) [pid 6252] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6251] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6256] <... openat resumed>) = 3 [ 192.745583][ T6254] loop0: detected capacity change from 0 to 1024 [pid 6254] memfd_create("syzkaller", 0 [pid 6253] <... symlink resumed>) = 0 [pid 6256] write(3, "1000", 4 [pid 6254] <... memfd_create resumed>) = 5 [pid 6253] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6256] <... write resumed>) = 4 [pid 6254] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6256] close(3 [pid 6254] <... mmap resumed>) = 0x7f0356e00000 [pid 6251] <... write resumed>) = 524288 [pid 6255] munmap(0x7f0356e00000, 138412032 [pid 6254] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6252] <... creat resumed>) = 4 [pid 6251] munmap(0x7f0356e00000, 138412032 [pid 6252] rename("./bus", "./file2" [pid 6256] <... close resumed>) = 0 [pid 6256] symlink("/dev/binderfs", "./binderfs" [pid 6255] <... munmap resumed>) = 0 [pid 6256] <... symlink resumed>) = 0 [pid 6253] <... creat resumed>) = 4 [pid 6251] <... munmap resumed>) = 0 [pid 6255] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6256] memfd_create("syzkaller", 0 [pid 6255] <... openat resumed>) = 4 [pid 6254] <... write resumed>) = 524288 [pid 6253] rename("./bus", "./file2" [pid 6252] <... rename resumed>) = -1 EEXIST (File exists) [pid 6251] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6256] <... memfd_create resumed>) = 3 [pid 6255] ioctl(4, LOOP_SET_FD, 3 [pid 6253] <... rename resumed>) = -1 EEXIST (File exists) [pid 6253] memfd_create("syzkaller", 0) = 5 [pid 6253] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6256] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6253] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6252] memfd_create("syzkaller", 0 [pid 6256] <... mmap resumed>) = 0x7f0356e00000 [pid 6252] <... memfd_create resumed>) = 5 [pid 6251] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6252] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6251] close(5 [pid 6252] <... mmap resumed>) = 0x7f0356e00000 [pid 6252] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6251] <... close resumed>) = 0 [pid 6256] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6255] <... ioctl resumed>) = 0 [pid 6255] close(3) = 0 [pid 6252] <... write resumed>) = 524288 [pid 6251] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6255] close(4) = 0 [pid 6255] mkdir("./bus", 0777) = 0 [pid 6254] munmap(0x7f0356e00000, 138412032 [pid 6253] <... write resumed>) = 524288 [pid 6254] <... munmap resumed>) = 0 [pid 6251] <... open resumed>) = 5 [pid 6256] <... write resumed>) = 524288 [pid 6254] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6255] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6254] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6254] close(5 [pid 6251] ftruncate(5, 0 [pid 6254] <... close resumed>) = 0 [pid 6256] munmap(0x7f0356e00000, 138412032) = 0 [pid 6251] <... ftruncate resumed>) = 0 [ 192.824139][ T6255] loop2: detected capacity change from 0 to 1024 [pid 6256] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6252] munmap(0x7f0356e00000, 138412032 [pid 6251] exit_group(0 [pid 6256] <... openat resumed>) = 4 [pid 6252] <... munmap resumed>) = 0 [pid 6256] ioctl(4, LOOP_SET_FD, 3 [pid 6251] <... exit_group resumed>) = ? [pid 6256] <... ioctl resumed>) = 0 [pid 6254] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6253] munmap(0x7f0356e00000, 138412032 [pid 6252] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6251] +++ exited with 0 +++ [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6251, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5078] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5078] umount2("./194", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./194", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5078] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] umount2("./194/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6252] close(5 [pid 6253] <... munmap resumed>) = 0 [pid 6253] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6255] <... mount resumed>) = 0 [pid 6253] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6253] close(5 [pid 6254] <... open resumed>) = 5 [pid 6254] ftruncate(5, 0 [pid 6252] <... close resumed>) = 0 [pid 6254] <... ftruncate resumed>) = 0 [pid 6254] exit_group(0) = ? [pid 6255] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6254] +++ exited with 0 +++ [pid 6255] <... openat resumed>) = 3 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6254, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6255] chdir("./bus" [pid 6253] <... close resumed>) = 0 [pid 6252] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6255] <... chdir resumed>) = 0 [pid 5078] <... umount2 resumed>) = 0 [pid 5073] umount2("./192", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6256] close(3 [pid 6255] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6253] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6252] <... open resumed>) = 5 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6256] <... close resumed>) = 0 [pid 6255] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] umount2("./194/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] openat(AT_FDCWD, "./192", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6256] close(4 [pid 6253] <... open resumed>) = 5 [pid 6252] ftruncate(5, 0 [pid 5073] <... openat resumed>) = 3 [pid 6256] <... close resumed>) = 0 [pid 6255] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6253] ftruncate(5, 0 [pid 6252] <... ftruncate resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(3, "", [pid 6256] mkdir("./bus", 0777 [pid 6253] <... ftruncate resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6256] <... mkdir resumed>) = 0 [pid 6253] exit_group(0 [pid 6252] exit_group(0 [pid 5078] newfstatat(AT_FDCWD, "./194/bus", [pid 5073] getdents64(3, [pid 6253] <... exit_group resumed>) = ? [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 192.878894][ T6256] loop3: detected capacity change from 0 to 1024 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6255] <... symlink resumed>) = 0 [pid 6253] +++ exited with 0 +++ [pid 6252] <... exit_group resumed>) = ? [pid 5078] umount2("./194/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./192/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6256] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6255] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6252] +++ exited with 0 +++ [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./194/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6253, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5074] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5078] <... openat resumed>) = 4 [pid 5078] newfstatat(4, "", [pid 5074] umount2("./191", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6252, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 5074] openat(AT_FDCWD, "./191", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... restart_syscall resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5074] newfstatat(3, "", [pid 6256] <... mount resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6256] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5077] umount2("./194", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] getdents64(3, [pid 5078] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] <... umount2 resumed>) = 0 [pid 6256] <... openat resumed>) = 3 [pid 6255] <... creat resumed>) = 4 [pid 5078] close(4 [pid 5077] openat(AT_FDCWD, "./194", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] umount2("./191/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./192/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6255] rename("./bus", "./file2" [pid 5078] <... close resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] rmdir("./194/bus") = 0 [pid 5077] newfstatat(3, "", [pid 5073] newfstatat(AT_FDCWD, "./192/bus", [pid 5078] umount2("./194/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6256] chdir("./bus" [pid 6255] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] getdents64(3, [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6255] memfd_create("syzkaller", 0 [pid 5078] newfstatat(AT_FDCWD, "./194/binderfs", [pid 6256] <... chdir resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] umount2("./192/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] unlink("./194/binderfs" [pid 6256] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6255] <... memfd_create resumed>) = 5 [pid 5078] <... unlink resumed>) = 0 [pid 5077] umount2("./194/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6256] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6255] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] getdents64(3, [pid 5073] openat(AT_FDCWD, "./192/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6255] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] close(3 [pid 5073] <... openat resumed>) = 4 [pid 5078] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5073] newfstatat(4, "", [pid 6256] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6255] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] rmdir("./194" [pid 5077] <... umount2 resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] mkdir("./195", 0777 [pid 5073] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] close(4 [pid 5078] <... mkdir resumed>) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] <... close resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5073] rmdir("./192/bus" [pid 6256] <... symlink resumed>) = 0 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5077] umount2("./194/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./191/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... rmdir resumed>) = 0 [pid 6256] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./192/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] newfstatat(AT_FDCWD, "./194/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] newfstatat(AT_FDCWD, "./191/bus", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] umount2("./194/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] newfstatat(AT_FDCWD, "./192/binderfs", [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./191/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] openat(AT_FDCWD, "./194/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] unlink("./192/binderfs" [pid 5077] <... openat resumed>) = 4 [pid 5074] openat(AT_FDCWD, "./191/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... unlink resumed>) = 0 [pid 6256] <... creat resumed>) = 4 [pid 5077] newfstatat(4, "", [pid 5074] <... openat resumed>) = 4 [pid 5073] getdents64(3, [pid 6256] rename("./bus", "./file2" [pid 6255] <... write resumed>) = 524288 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] newfstatat(4, "", [pid 5077] getdents64(4, [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6256] <... rename resumed>) = -1 EEXIST (File exists) [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] close(3 [pid 6256] memfd_create("syzkaller", 0 [pid 6255] munmap(0x7f0356e00000, 138412032 [pid 5077] getdents64(4, [pid 5074] getdents64(4, [pid 6256] <... memfd_create resumed>) = 5 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] <... close resumed>) = 0 [pid 6256] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] close(4 [pid 5073] rmdir("./192" [pid 5077] <... close resumed>) = 0 [pid 6256] <... mmap resumed>) = 0x7f0356e00000 [pid 6255] <... munmap resumed>) = 0 [pid 5077] rmdir("./194/bus" [pid 5074] getdents64(4, [pid 5073] <... rmdir resumed>) = 0 [pid 6255] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6256] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... rmdir resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] mkdir("./193", 0777 [pid 5074] close(4 [pid 6255] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6255] close(5 [pid 5074] <... close resumed>) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 5074] rmdir("./191/bus") = 0 [pid 6255] <... close resumed>) = 0 [pid 5077] umount2("./194/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./191/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./194/binderfs", [pid 5074] newfstatat(AT_FDCWD, "./191/binderfs", [pid 5073] <... openat resumed>) = 3 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6256] <... write resumed>) = 524288 [pid 5077] unlink("./194/binderfs" [pid 5074] unlink("./191/binderfs" [pid 6256] munmap(0x7f0356e00000, 138412032 [pid 6255] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6256] <... munmap resumed>) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 5077] getdents64(3, [pid 6256] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6255] <... open resumed>) = 5 [pid 5074] <... unlink resumed>) = 0 [pid 5074] getdents64(3, [pid 6255] ftruncate(5, 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 6256] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] close(3 [pid 6256] close(5 [pid 5074] close(3 [pid 6255] <... ftruncate resumed>) = 0 [pid 5078] <... ioctl resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5073] close(3 [pid 6255] exit_group(0 [pid 5074] rmdir("./191" [pid 5073] <... close resumed>) = 0 [pid 5077] rmdir("./194" [pid 6255] <... exit_group resumed>) = ? [pid 5077] <... rmdir resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] mkdir("./195", 0777) = 0 [pid 6256] <... close resumed>) = 0 [pid 6255] +++ exited with 0 +++ [pid 5078] close(3 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] mkdir("./192", 0777 [pid 5078] <... close resumed>) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6255, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- ./strace-static-x86_64: Process 6257 attached [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] <... openat resumed>) = 3 [pid 5074] <... mkdir resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6257 [pid 6257] set_robust_list(0x55556e32a660, 24./strace-static-x86_64: Process 6258 attached ) = 0 [pid 6256] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6258] set_robust_list(0x55556e32a660, 24 [pid 6257] chdir("./193" [pid 6256] <... open resumed>) = 5 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6258 [pid 5075] umount2("./192", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... openat resumed>) = 3 [pid 6258] <... set_robust_list resumed>) = 0 [pid 6257] <... chdir resumed>) = 0 [pid 6256] ftruncate(5, 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6258] chdir("./195" [pid 6257] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6256] <... ftruncate resumed>) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6258] <... chdir resumed>) = 0 [pid 6257] <... prctl resumed>) = 0 [pid 6256] exit_group(0 [pid 5075] openat(AT_FDCWD, "./192", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6258] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6257] setpgid(0, 0 [pid 6256] <... exit_group resumed>) = ? [pid 6258] <... prctl resumed>) = 0 [pid 6257] <... setpgid resumed>) = 0 [pid 6256] +++ exited with 0 +++ [pid 5075] <... openat resumed>) = 3 [pid 6258] setpgid(0, 0) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6256, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6258] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6257] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] umount2("./195", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] newfstatat(3, "", [pid 6258] <... openat resumed>) = 3 [pid 6257] <... openat resumed>) = 3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6258] write(3, "1000", 4 [pid 6257] write(3, "1000", 4 [pid 5076] openat(AT_FDCWD, "./195", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6258] <... write resumed>) = 4 [pid 6257] <... write resumed>) = 4 [pid 5076] <... openat resumed>) = 3 [pid 6258] close(3 [pid 6257] close(3 [pid 5076] newfstatat(3, "", [pid 5075] getdents64(3, [pid 6258] <... close resumed>) = 0 [pid 6257] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6258] symlink("/dev/binderfs", "./binderfs" [pid 6257] symlink("/dev/binderfs", "./binderfs" [pid 5076] getdents64(3, [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6258] <... symlink resumed>) = 0 [pid 6257] <... symlink resumed>) = 0 [pid 5077] <... ioctl resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6258] memfd_create("syzkaller", 0 [pid 5075] umount2("./192/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./195/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6258] <... memfd_create resumed>) = 3 [pid 6257] memfd_create("syzkaller", 0) = 3 [pid 6257] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 6258] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6258] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6257] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] umount2("./195/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./195/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./195/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./195/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5075] umount2("./192/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] newfstatat(4, "", [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] newfstatat(AT_FDCWD, "./192/bus", [pid 5076] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] getdents64(4, [pid 5075] umount2("./192/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] close(4 [pid 5075] openat(AT_FDCWD, "./192/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... close resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 5076] rmdir("./195/bus" [pid 5075] newfstatat(4, "", [pid 5076] <... rmdir resumed>) = 0 [pid 5076] umount2("./195/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(4, [pid 5076] newfstatat(AT_FDCWD, "./195/binderfs", [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6258] <... write resumed>) = 524288 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6257] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] close(3 [pid 5075] close(4 [pid 5074] <... ioctl resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./192/bus") = 0 [pid 5074] close(3 [pid 5076] unlink("./195/binderfs" [pid 5074] <... close resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 6258] munmap(0x7f0356e00000, 138412032 [pid 5077] <... close resumed>) = 0 [pid 5075] umount2("./192/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6258] <... munmap resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] getdents64(3, [pid 5075] newfstatat(AT_FDCWD, "./192/binderfs", ./strace-static-x86_64: Process 6260 attached [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6260] set_robust_list(0x55556e32a660, 24) = 0 [pid 6260] chdir("./195" [pid 5076] close(3 [pid 5075] unlink("./192/binderfs" [pid 6260] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 6259 attached [pid 6259] set_robust_list(0x55556e32a660, 24 [pid 6260] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6258] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6257] <... write resumed>) = 524288 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6260 [pid 5076] <... close resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6259 [pid 6259] <... set_robust_list resumed>) = 0 [pid 6260] <... prctl resumed>) = 0 [pid 6259] chdir("./192" [pid 6260] setpgid(0, 0 [pid 6258] <... openat resumed>) = 4 [pid 6257] munmap(0x7f0356e00000, 138412032 [pid 5076] rmdir("./195" [pid 5075] getdents64(3, [pid 6259] <... chdir resumed>) = 0 [pid 6260] <... setpgid resumed>) = 0 [pid 6259] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6260] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6259] <... prctl resumed>) = 0 [pid 6260] <... openat resumed>) = 3 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] close(3 [pid 6259] setpgid(0, 0 [pid 6260] write(3, "1000", 4 [pid 5076] mkdir("./196", 0777 [pid 5075] <... close resumed>) = 0 [pid 6259] <... setpgid resumed>) = 0 [pid 6260] <... write resumed>) = 4 [pid 6259] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6260] close(3 [pid 6257] <... munmap resumed>) = 0 [pid 5075] rmdir("./192" [pid 6260] <... close resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 6260] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6258] ioctl(4, LOOP_SET_FD, 3 [pid 6257] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] <... rmdir resumed>) = 0 [pid 6259] <... openat resumed>) = 3 [pid 6260] memfd_create("syzkaller", 0 [pid 6259] write(3, "1000", 4) = 4 [pid 6260] <... memfd_create resumed>) = 3 [pid 6259] close(3) = 0 [pid 6260] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6259] symlink("/dev/binderfs", "./binderfs" [pid 6260] <... mmap resumed>) = 0x7f0356e00000 [pid 6259] <... symlink resumed>) = 0 [pid 6258] <... ioctl resumed>) = 0 [pid 6257] <... openat resumed>) = 4 [pid 5076] <... openat resumed>) = 3 [pid 5075] mkdir("./193", 0777 [pid 6259] memfd_create("syzkaller", 0 [pid 6258] close(3 [pid 6257] ioctl(4, LOOP_SET_FD, 3 [pid 6259] <... memfd_create resumed>) = 3 [pid 6260] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6258] <... close resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] <... mkdir resumed>) = 0 [pid 6259] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6258] close(4 [pid 6257] <... ioctl resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6259] <... mmap resumed>) = 0x7f0356e00000 [pid 6258] <... close resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 6259] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6258] mkdir("./bus", 0777 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6260] <... write resumed>) = 524288 [pid 6258] <... mkdir resumed>) = 0 [pid 6260] munmap(0x7f0356e00000, 138412032 [pid 6259] <... write resumed>) = 524288 [pid 6258] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6257] close(3 [pid 6259] munmap(0x7f0356e00000, 138412032 [pid 6260] <... munmap resumed>) = 0 [pid 6257] <... close resumed>) = 0 [pid 6259] <... munmap resumed>) = 0 [pid 6260] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6257] close(4 [pid 6259] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6260] <... openat resumed>) = 4 [pid 6257] <... close resumed>) = 0 [ 193.250935][ T6258] loop5: detected capacity change from 0 to 1024 [ 193.267813][ T6257] loop0: detected capacity change from 0 to 1024 [pid 6257] mkdir("./bus", 0777 [pid 6259] ioctl(4, LOOP_SET_FD, 3 [pid 6260] ioctl(4, LOOP_SET_FD, 3 [pid 6258] <... mount resumed>) = 0 [pid 6257] <... mkdir resumed>) = 0 [pid 6258] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6257] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6258] <... openat resumed>) = 3 [pid 6258] chdir("./bus") = 0 [pid 6258] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6258] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6259] <... ioctl resumed>) = 0 [pid 6260] <... ioctl resumed>) = 0 [pid 6258] <... symlink resumed>) = 0 [pid 6258] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6259] close(3 [pid 6260] close(3 [pid 6259] <... close resumed>) = 0 [pid 6260] <... close resumed>) = 0 [pid 6258] <... creat resumed>) = 4 [pid 6259] close(4 [pid 6260] close(4 [pid 6258] rename("./bus", "./file2" [pid 5076] <... ioctl resumed>) = 0 [pid 6259] <... close resumed>) = 0 [pid 6260] <... close resumed>) = 0 [pid 6259] mkdir("./bus", 0777 [pid 5075] <... ioctl resumed>) = 0 [pid 6259] <... mkdir resumed>) = 0 [pid 6260] mkdir("./bus", 0777) = 0 [pid 6259] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6260] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [ 193.309124][ T6260] loop4: detected capacity change from 0 to 1024 [ 193.316001][ T6259] loop1: detected capacity change from 0 to 1024 [pid 5076] close(3) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6259] <... mount resumed>) = 0 [pid 6258] <... rename resumed>) = -1 EEXIST (File exists) [pid 6257] <... mount resumed>) = 0 [pid 5075] close(3 [pid 6259] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6260] <... mount resumed>) = 0 [pid 6258] memfd_create("syzkaller", 0 [pid 6257] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5075] <... close resumed>) = 0 [pid 6259] <... openat resumed>) = 3 [pid 6260] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6258] <... memfd_create resumed>) = 5 [pid 6257] <... openat resumed>) = 3 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6261 attached [pid 6259] chdir("./bus" [pid 6260] <... openat resumed>) = 3 [pid 6258] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6261] set_robust_list(0x55556e32a660, 24 [pid 6260] chdir("./bus" [pid 6257] chdir("./bus" [pid 6261] <... set_robust_list resumed>) = 0 [pid 6260] <... chdir resumed>) = 0 [pid 6257] <... chdir resumed>) = 0 [pid 6259] <... chdir resumed>) = 0 [pid 6258] <... mmap resumed>) = 0x7f0356e00000 ./strace-static-x86_64: Process 6262 attached [pid 6261] chdir("./196" [pid 6260] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6262] set_robust_list(0x55556e32a660, 24 [pid 6261] <... chdir resumed>) = 0 [pid 6260] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6257] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6261] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6257] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6262] <... set_robust_list resumed>) = 0 [pid 6261] setpgid(0, 0 [pid 6258] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6257] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6262] chdir("./193" [pid 6261] <... setpgid resumed>) = 0 [pid 6259] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6260] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6257] <... symlink resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6261 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6262 [pid 6262] <... chdir resumed>) = 0 [pid 6261] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6259] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6260] <... symlink resumed>) = 0 [pid 6257] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6262] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6261] <... openat resumed>) = 3 [pid 6259] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6260] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6262] <... prctl resumed>) = 0 [pid 6261] write(3, "1000", 4 [pid 6257] <... creat resumed>) = 4 [pid 6262] setpgid(0, 0 [pid 6261] <... write resumed>) = 4 [pid 6259] <... symlink resumed>) = 0 [pid 6258] <... write resumed>) = 524288 [pid 6257] rename("./bus", "./file2" [pid 6262] <... setpgid resumed>) = 0 [pid 6261] close(3 [pid 6259] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6260] <... creat resumed>) = 4 [pid 6258] munmap(0x7f0356e00000, 138412032 [pid 6257] <... rename resumed>) = -1 EEXIST (File exists) [pid 6260] rename("./bus", "./file2" [pid 6261] <... close resumed>) = 0 [pid 6258] <... munmap resumed>) = 0 [pid 6257] memfd_create("syzkaller", 0 [pid 6258] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6257] <... memfd_create resumed>) = 5 [pid 6257] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6261] symlink("/dev/binderfs", "./binderfs" [pid 6258] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6257] <... mmap resumed>) = 0x7f0356e00000 [pid 6261] <... symlink resumed>) = 0 [pid 6261] memfd_create("syzkaller", 0 [pid 6259] <... creat resumed>) = 4 [pid 6260] <... rename resumed>) = -1 EEXIST (File exists) [pid 6261] <... memfd_create resumed>) = 3 [pid 6259] rename("./bus", "./file2" [pid 6260] memfd_create("syzkaller", 0 [pid 6257] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6262] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6260] <... memfd_create resumed>) = 5 [pid 6258] close(5 [pid 6260] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6261] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6259] <... rename resumed>) = -1 EEXIST (File exists) [pid 6260] <... mmap resumed>) = 0x7f0356e00000 [pid 6262] <... openat resumed>) = 3 [pid 6261] <... mmap resumed>) = 0x7f0356e00000 [pid 6259] memfd_create("syzkaller", 0 [pid 6260] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6258] <... close resumed>) = 0 [pid 6262] write(3, "1000", 4 [pid 6259] <... memfd_create resumed>) = 5 [pid 6262] <... write resumed>) = 4 [pid 6259] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6262] close(3 [pid 6259] <... mmap resumed>) = 0x7f0356e00000 [pid 6262] <... close resumed>) = 0 [pid 6259] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6258] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6262] symlink("/dev/binderfs", "./binderfs" [pid 6261] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6262] <... symlink resumed>) = 0 [pid 6258] <... open resumed>) = 5 [pid 6262] memfd_create("syzkaller", 0) = 3 [pid 6258] ftruncate(5, 0 [pid 6262] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6259] <... write resumed>) = 524288 [pid 6260] <... write resumed>) = 524288 [pid 6258] <... ftruncate resumed>) = 0 [pid 6257] <... write resumed>) = 524288 [pid 6258] exit_group(0 [pid 6262] <... mmap resumed>) = 0x7f0356e00000 [pid 6258] <... exit_group resumed>) = ? [pid 6260] munmap(0x7f0356e00000, 138412032 [pid 6262] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6261] <... write resumed>) = 524288 [pid 6259] munmap(0x7f0356e00000, 138412032 [pid 6260] <... munmap resumed>) = 0 [pid 6258] +++ exited with 0 +++ [pid 6257] munmap(0x7f0356e00000, 138412032 [pid 6261] munmap(0x7f0356e00000, 138412032 [pid 6259] <... munmap resumed>) = 0 [pid 6260] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6261] <... munmap resumed>) = 0 [pid 6260] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6257] <... munmap resumed>) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6258, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6261] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6259] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6260] close(5 [pid 6257] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5078] umount2("./195", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6262] <... write resumed>) = 524288 [pid 6257] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6262] munmap(0x7f0356e00000, 138412032 [pid 6259] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6257] close(5 [pid 5078] openat(AT_FDCWD, "./195", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6261] <... openat resumed>) = 4 [pid 6261] ioctl(4, LOOP_SET_FD, 3 [pid 6259] close(5 [pid 6260] <... close resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 6257] <... close resumed>) = 0 [pid 6262] <... munmap resumed>) = 0 [pid 6261] <... ioctl resumed>) = 0 [pid 6259] <... close resumed>) = 0 [pid 6260] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] newfstatat(3, "", [pid 6262] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6261] close(3 [pid 6259] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6257] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6262] <... openat resumed>) = 4 [pid 6261] <... close resumed>) = 0 [pid 6261] close(4 [pid 6262] ioctl(4, LOOP_SET_FD, 3 [pid 6261] <... close resumed>) = 0 [pid 5078] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6261] mkdir("./bus", 0777) = 0 [pid 6261] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5078] umount2("./195/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6260] <... open resumed>) = 5 [pid 6259] <... open resumed>) = 5 [pid 6262] <... ioctl resumed>) = 0 [pid 6261] <... mount resumed>) = 0 [pid 6260] ftruncate(5, 0 [pid 6257] <... open resumed>) = 5 [pid 6262] close(3) = 0 [pid 6261] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6260] <... ftruncate resumed>) = 0 [pid 6257] ftruncate(5, 0 [pid 6262] close(4 [pid 6261] <... openat resumed>) = 3 [pid 6259] ftruncate(5, 0 [pid 6260] exit_group(0 [pid 6257] <... ftruncate resumed>) = 0 [pid 6261] chdir("./bus" [pid 6259] <... ftruncate resumed>) = 0 [pid 6260] <... exit_group resumed>) = ? [pid 6262] <... close resumed>) = 0 [pid 6261] <... chdir resumed>) = 0 [pid 6257] exit_group(0 [pid 6261] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [ 193.526910][ T6261] loop3: detected capacity change from 0 to 1024 [ 193.545617][ T6262] loop2: detected capacity change from 0 to 1024 [pid 6261] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6262] mkdir("./bus", 0777 [pid 6259] exit_group(0 [pid 6260] +++ exited with 0 +++ [pid 6257] <... exit_group resumed>) = ? [pid 5078] <... umount2 resumed>) = 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6260, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6262] <... mkdir resumed>) = 0 [pid 5077] umount2("./195", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./195", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6257] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6257, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6259] <... exit_group resumed>) = ? [pid 6262] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5078] umount2("./195/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(3, "", [pid 5078] newfstatat(AT_FDCWD, "./195/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] umount2("./193", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6259] +++ exited with 0 +++ [pid 5078] umount2("./195/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] getdents64(3, [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6259, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] openat(AT_FDCWD, "./193", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] openat(AT_FDCWD, "./195/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] umount2("./195/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... openat resumed>) = 3 [pid 5074] umount2("./192", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... openat resumed>) = 4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] newfstatat(4, "", [pid 5074] openat(AT_FDCWD, "./192", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6261] <... symlink resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5073] newfstatat(3, "", [pid 5074] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, [pid 6261] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] getdents64(3, [pid 5078] getdents64(4, [pid 5074] umount2("./192/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] umount2("./193/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6262] <... mount resumed>) = 0 [pid 5078] getdents64(4, [pid 5077] <... umount2 resumed>) = 0 [pid 6262] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6261] <... creat resumed>) = 4 [pid 5078] close(4 [pid 5077] umount2("./195/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 6262] <... openat resumed>) = 3 [pid 5078] <... close resumed>) = 0 [pid 5074] umount2("./192/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6262] chdir("./bus" [pid 5078] rmdir("./195/bus" [pid 6261] rename("./bus", "./file2" [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./193/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6262] <... chdir resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./195/bus", [pid 5074] newfstatat(AT_FDCWD, "./192/bus", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6262] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6261] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] umount2("./195/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] newfstatat(AT_FDCWD, "./193/bus", [pid 6262] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6261] memfd_create("syzkaller", 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] umount2("./195/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./192/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6262] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6261] <... memfd_create resumed>) = 5 [pid 5078] newfstatat(AT_FDCWD, "./195/binderfs", [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6261] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] openat(AT_FDCWD, "./195/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] umount2("./193/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6261] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] <... openat resumed>) = 4 [pid 5074] openat(AT_FDCWD, "./192/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6262] <... symlink resumed>) = 0 [pid 5078] unlink("./195/binderfs" [pid 5077] newfstatat(4, "", [pid 5074] <... openat resumed>) = 4 [pid 5073] openat(AT_FDCWD, "./193/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6262] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] <... unlink resumed>) = 0 [pid 5074] newfstatat(4, "", [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] getdents64(4, [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... openat resumed>) = 4 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] newfstatat(4, "", [pid 6261] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] getdents64(3, [pid 5077] getdents64(4, [pid 5074] getdents64(4, [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] close(3 [pid 5077] close(4 [pid 5074] getdents64(4, [pid 5073] getdents64(4, [pid 5078] <... close resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5078] rmdir("./195" [pid 5077] rmdir("./195/bus" [pid 5074] close(4 [pid 5073] getdents64(4, [pid 6262] <... creat resumed>) = 4 [pid 5078] <... rmdir resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./192/bus" [pid 6262] rename("./bus", "./file2" [pid 5077] umount2("./195/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5078] mkdir("./196", 0777 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... rmdir resumed>) = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./195/binderfs", [pid 6262] <... rename resumed>) = -1 EEXIST (File exists) [pid 5073] close(4 [pid 6262] memfd_create("syzkaller", 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./192/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... close resumed>) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] unlink("./195/binderfs" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6262] <... memfd_create resumed>) = 5 [pid 6261] <... write resumed>) = 524288 [pid 5078] <... openat resumed>) = 3 [pid 5077] <... unlink resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./192/binderfs", [pid 5073] rmdir("./193/bus" [pid 6262] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] getdents64(3, [pid 5074] unlink("./192/binderfs" [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5077] close(3) = 0 [pid 5074] getdents64(3, [pid 5077] rmdir("./195" [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5074] close(3) = 0 [pid 5074] rmdir("./192" [pid 6262] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6261] munmap(0x7f0356e00000, 138412032 [pid 5073] umount2("./193/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] mkdir("./196", 0777 [pid 6262] <... write resumed>) = 524288 [pid 6261] <... munmap resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6262] munmap(0x7f0356e00000, 138412032 [pid 6261] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5077] <... mkdir resumed>) = 0 [pid 5074] mkdir("./193", 0777 [pid 5073] newfstatat(AT_FDCWD, "./193/binderfs", [pid 6262] <... munmap resumed>) = 0 [pid 6261] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] <... mkdir resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6262] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5077] <... openat resumed>) = 3 [pid 5073] unlink("./193/binderfs" [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6262] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... unlink resumed>) = 0 [pid 6261] close(5 [pid 5073] getdents64(3, [pid 6262] close(5 [pid 6261] <... close resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./193" [pid 6261] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5073] <... rmdir resumed>) = 0 [pid 5073] mkdir("./194", 0777 [pid 6262] <... close resumed>) = 0 [pid 6261] <... open resumed>) = 5 [pid 6262] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6261] ftruncate(5, 0 [pid 5073] <... mkdir resumed>) = 0 [pid 5078] <... ioctl resumed>) = 0 [pid 6261] <... ftruncate resumed>) = 0 [pid 5078] close(3 [pid 6261] exit_group(0 [pid 5078] <... close resumed>) = 0 [pid 6261] <... exit_group resumed>) = ? [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6263 attached [pid 6262] <... open resumed>) = 5 [pid 6261] +++ exited with 0 +++ [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 6263] set_robust_list(0x55556e32a660, 24 [pid 6262] ftruncate(5, 0 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6263 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6262] <... ftruncate resumed>) = 0 [pid 6263] <... set_robust_list resumed>) = 0 [pid 5077] <... ioctl resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6261, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6263] chdir("./196") = 0 [pid 6262] exit_group(0 [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 6263] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6262] <... exit_group resumed>) = ? [pid 5077] close(3 [pid 5076] <... restart_syscall resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5076] umount2("./196", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6263] <... prctl resumed>) = 0 [pid 6262] +++ exited with 0 +++ [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... ioctl resumed>) = 0 [pid 6263] setpgid(0, 0 [pid 5076] openat(AT_FDCWD, "./196", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6262, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5076] <... openat resumed>) = 3 [pid 5073] <... ioctl resumed>) = 0 [pid 6263] <... setpgid resumed>) = 0 [pid 6263] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6264 ./strace-static-x86_64: Process 6264 attached [pid 6263] <... openat resumed>) = 3 [pid 5075] umount2("./193", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6264] set_robust_list(0x55556e32a660, 24 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6263] write(3, "1000", 4 [pid 5075] openat(AT_FDCWD, "./193", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6263] <... write resumed>) = 4 [pid 5076] newfstatat(3, "", [pid 5075] <... openat resumed>) = 3 [pid 6264] <... set_robust_list resumed>) = 0 [pid 6263] close(3 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] newfstatat(3, "", [pid 5076] getdents64(3, [pid 6263] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6264] chdir("./196" [pid 6263] symlink("/dev/binderfs", "./binderfs" [pid 5076] umount2("./196/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6263] <... symlink resumed>) = 0 [pid 5075] getdents64(3, [pid 6264] <... chdir resumed>) = 0 [pid 6263] memfd_create("syzkaller", 0 [pid 5074] close(3 [pid 6263] <... memfd_create resumed>) = 3 [pid 5074] <... close resumed>) = 0 [pid 6264] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6263] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] close(3 [pid 6264] <... prctl resumed>) = 0 [pid 6263] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] umount2("./193/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6264] setpgid(0, 0 [pid 6263] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... umount2 resumed>) = 0 [pid 6264] <... setpgid resumed>) = 0 [pid 6264] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... close resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6264] <... openat resumed>) = 3 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6265 ./strace-static-x86_64: Process 6265 attached ./strace-static-x86_64: Process 6266 attached [pid 6266] set_robust_list(0x55556e32a660, 24 [pid 6265] set_robust_list(0x55556e32a660, 24 [pid 6263] <... write resumed>) = 524288 [pid 5075] <... umount2 resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6266 [pid 6266] <... set_robust_list resumed>) = 0 [pid 6265] <... set_robust_list resumed>) = 0 [pid 6266] chdir("./194" [pid 6265] chdir("./193" [pid 6266] <... chdir resumed>) = 0 [pid 6265] <... chdir resumed>) = 0 [pid 6264] write(3, "1000", 4 [pid 5076] umount2("./196/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./193/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6264] <... write resumed>) = 4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./196/bus", [pid 6265] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6264] close(3 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] newfstatat(AT_FDCWD, "./193/bus", [pid 6266] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6265] <... prctl resumed>) = 0 [pid 6264] <... close resumed>) = 0 [pid 5076] umount2("./196/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6266] <... prctl resumed>) = 0 [pid 6265] setpgid(0, 0 [pid 6264] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6266] setpgid(0, 0 [pid 6265] <... setpgid resumed>) = 0 [pid 6263] munmap(0x7f0356e00000, 138412032 [pid 6266] <... setpgid resumed>) = 0 [pid 6265] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6264] <... symlink resumed>) = 0 [pid 6263] <... munmap resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./196/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] umount2("./193/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6266] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6265] <... openat resumed>) = 3 [pid 6264] memfd_create("syzkaller", 0 [pid 5076] <... openat resumed>) = 4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6266] <... openat resumed>) = 3 [pid 6265] write(3, "1000", 4 [pid 6263] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5076] newfstatat(4, "", [pid 5075] openat(AT_FDCWD, "./193/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6266] write(3, "1000", 4 [pid 6265] <... write resumed>) = 4 [pid 6264] <... memfd_create resumed>) = 3 [pid 6263] <... openat resumed>) = 4 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6266] <... write resumed>) = 4 [pid 6265] close(3 [pid 6263] ioctl(4, LOOP_SET_FD, 3 [pid 5076] getdents64(4, [pid 5075] <... openat resumed>) = 4 [pid 6266] close(3 [pid 6265] <... close resumed>) = 0 [pid 6264] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6266] <... close resumed>) = 0 [pid 6265] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6266] symlink("/dev/binderfs", "./binderfs" [pid 6265] memfd_create("syzkaller", 0 [pid 6266] <... symlink resumed>) = 0 [pid 6265] <... memfd_create resumed>) = 3 [pid 5075] newfstatat(4, "", [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6264] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] getdents64(4, [pid 5075] getdents64(4, [pid 6266] memfd_create("syzkaller", 0 [pid 6265] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] close(4 [pid 5075] getdents64(4, [pid 5076] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] rmdir("./196/bus" [pid 5075] close(4 [pid 6265] <... mmap resumed>) = 0x7f0356e00000 [pid 6266] <... memfd_create resumed>) = 3 [pid 6264] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6263] <... ioctl resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./193/bus") = 0 [pid 5075] umount2("./193/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6266] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6266] <... mmap resumed>) = 0x7f0356e00000 [pid 6263] close(3 [pid 5075] newfstatat(AT_FDCWD, "./193/binderfs", [pid 6265] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6263] <... close resumed>) = 0 [pid 5075] unlink("./193/binderfs" [pid 6263] close(4 [pid 5076] umount2("./196/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... unlink resumed>) = 0 [pid 6263] <... close resumed>) = 0 [pid 5075] getdents64(3, [pid 6263] mkdir("./bus", 0777 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6265] <... write resumed>) = 524288 [pid 6263] <... mkdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] close(3 [pid 5076] newfstatat(AT_FDCWD, "./196/binderfs", [pid 6266] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6263] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5075] <... close resumed>) = 0 [pid 6264] <... write resumed>) = 524288 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] rmdir("./193" [pid 5076] unlink("./196/binderfs" [pid 5075] <... rmdir resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5075] mkdir("./194", 0777 [pid 5076] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5076] close(3 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] <... close resumed>) = 0 [pid 5076] rmdir("./196" [pid 5075] <... openat resumed>) = 3 [pid 6263] <... mount resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6263] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5076] mkdir("./197", 0777) = 0 [pid 6264] munmap(0x7f0356e00000, 138412032 [pid 6265] munmap(0x7f0356e00000, 138412032 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6265] <... munmap resumed>) = 0 [pid 6264] <... munmap resumed>) = 0 [pid 6263] chdir("./bus" [pid 5076] <... openat resumed>) = 3 [pid 6265] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6264] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6265] <... openat resumed>) = 4 [pid 6264] <... openat resumed>) = 4 [ 193.841251][ T6263] loop5: detected capacity change from 0 to 1024 [pid 6265] ioctl(4, LOOP_SET_FD, 3 [pid 6266] <... write resumed>) = 524288 [pid 6264] ioctl(4, LOOP_SET_FD, 3 [pid 6263] <... chdir resumed>) = 0 [pid 6266] munmap(0x7f0356e00000, 138412032 [pid 6265] <... ioctl resumed>) = 0 [pid 6263] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6265] close(3 [pid 6266] <... munmap resumed>) = 0 [pid 6263] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... ioctl resumed>) = 0 [pid 6265] <... close resumed>) = 0 [pid 6264] <... ioctl resumed>) = 0 [pid 6266] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6265] close(4 [pid 6263] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5075] close(3 [pid 6266] <... openat resumed>) = 4 [pid 6265] <... close resumed>) = 0 [pid 6266] ioctl(4, LOOP_SET_FD, 3 [pid 6265] mkdir("./bus", 0777) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 6264] close(3 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6263] <... symlink resumed>) = 0 [pid 6263] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6265] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6264] <... close resumed>) = 0 [pid 6263] <... creat resumed>) = 4 [pid 5076] close(3./strace-static-x86_64: Process 6267 attached [pid 6264] close(4 [pid 5076] <... close resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6267 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6267] set_robust_list(0x55556e32a660, 24 [pid 6264] <... close resumed>) = 0 [pid 6263] rename("./bus", "./file2" [pid 6267] <... set_robust_list resumed>) = 0 [pid 6265] <... mount resumed>) = 0 [pid 6264] mkdir("./bus", 0777 [pid 6263] <... rename resumed>) = -1 EEXIST (File exists) [pid 6265] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6268 ./strace-static-x86_64: Process 6268 attached [pid 6265] <... openat resumed>) = 3 [pid 6263] memfd_create("syzkaller", 0 [pid 6268] set_robust_list(0x55556e32a660, 24 [pid 6267] chdir("./194" [pid 6265] chdir("./bus" [pid 6264] <... mkdir resumed>) = 0 [pid 6263] <... memfd_create resumed>) = 5 [pid 6267] <... chdir resumed>) = 0 [pid 6266] <... ioctl resumed>) = 0 [pid 6264] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6266] close(3) = 0 [ 193.909578][ T6265] loop1: detected capacity change from 0 to 1024 [ 193.916323][ T6264] loop4: detected capacity change from 0 to 1024 [ 193.940293][ T6266] loop0: detected capacity change from 0 to 1024 [pid 6266] close(4) = 0 [pid 6266] mkdir("./bus", 0777 [pid 6267] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6266] <... mkdir resumed>) = 0 [pid 6267] <... prctl resumed>) = 0 [pid 6268] <... set_robust_list resumed>) = 0 [pid 6267] setpgid(0, 0 [pid 6263] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6267] <... setpgid resumed>) = 0 [pid 6265] <... chdir resumed>) = 0 [pid 6263] <... mmap resumed>) = 0x7f0356e00000 [pid 6268] chdir("./197" [pid 6266] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6265] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6268] <... chdir resumed>) = 0 [pid 6267] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6265] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6264] <... mount resumed>) = 0 [pid 6268] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6267] <... openat resumed>) = 3 [pid 6265] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6264] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6263] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6268] <... prctl resumed>) = 0 [pid 6268] setpgid(0, 0 [pid 6264] <... openat resumed>) = 3 [pid 6268] <... setpgid resumed>) = 0 [pid 6265] <... symlink resumed>) = 0 [pid 6268] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6265] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6268] write(3, "1000", 4) = 4 [pid 6267] write(3, "1000", 4 [pid 6264] chdir("./bus" [pid 6268] close(3) = 0 [pid 6267] <... write resumed>) = 4 [pid 6264] <... chdir resumed>) = 0 [pid 6267] close(3 [pid 6264] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6268] symlink("/dev/binderfs", "./binderfs" [pid 6267] <... close resumed>) = 0 [pid 6265] <... creat resumed>) = 4 [pid 6264] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6268] <... symlink resumed>) = 0 [pid 6267] symlink("/dev/binderfs", "./binderfs" [pid 6264] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6268] memfd_create("syzkaller", 0 [pid 6267] <... symlink resumed>) = 0 [pid 6265] rename("./bus", "./file2" [pid 6264] <... symlink resumed>) = 0 [pid 6268] <... memfd_create resumed>) = 3 [pid 6267] memfd_create("syzkaller", 0 [pid 6264] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6268] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6267] <... memfd_create resumed>) = 3 [pid 6268] <... mmap resumed>) = 0x7f0356e00000 [pid 6267] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6268] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6267] <... mmap resumed>) = 0x7f0356e00000 [pid 6266] <... mount resumed>) = 0 [pid 6264] <... creat resumed>) = 4 [pid 6266] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6265] <... rename resumed>) = -1 EEXIST (File exists) [pid 6266] <... openat resumed>) = 3 [pid 6265] memfd_create("syzkaller", 0 [pid 6266] chdir("./bus" [pid 6265] <... memfd_create resumed>) = 5 [pid 6264] rename("./bus", "./file2" [pid 6266] <... chdir resumed>) = 0 [pid 6265] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6266] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6265] <... mmap resumed>) = 0x7f0356e00000 [pid 6264] <... rename resumed>) = -1 EEXIST (File exists) [pid 6267] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6266] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6265] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6264] memfd_create("syzkaller", 0 [pid 6263] <... write resumed>) = 524288 [pid 6266] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6264] <... memfd_create resumed>) = 5 [pid 6268] <... write resumed>) = 524288 [pid 6264] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6266] <... symlink resumed>) = 0 [pid 6263] munmap(0x7f0356e00000, 138412032) = 0 [pid 6266] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6263] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6266] <... creat resumed>) = 4 [pid 6264] <... mmap resumed>) = 0x7f0356e00000 [pid 6263] close(5 [pid 6266] rename("./bus", "./file2") = -1 EEXIST (File exists) [pid 6264] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6263] <... close resumed>) = 0 [pid 6266] memfd_create("syzkaller", 0 [pid 6267] <... write resumed>) = 524288 [pid 6268] munmap(0x7f0356e00000, 138412032) = 0 [pid 6267] munmap(0x7f0356e00000, 138412032 [pid 6266] <... memfd_create resumed>) = 5 [pid 6268] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6268] ioctl(4, LOOP_SET_FD, 3 [pid 6267] <... munmap resumed>) = 0 [pid 6266] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6268] <... ioctl resumed>) = 0 [pid 6265] <... write resumed>) = 524288 [pid 6263] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6266] <... mmap resumed>) = 0x7f0356e00000 [pid 6267] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6265] munmap(0x7f0356e00000, 138412032) = 0 [pid 6267] ioctl(4, LOOP_SET_FD, 3 [pid 6266] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6265] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6265] close(5) = 0 [pid 6263] <... open resumed>) = 5 [pid 6263] ftruncate(5, 0 [pid 6268] close(3 [pid 6267] <... ioctl resumed>) = 0 [pid 6265] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6263] <... ftruncate resumed>) = 0 [pid 6268] <... close resumed>) = 0 [pid 6267] close(3 [pid 6263] exit_group(0 [pid 6268] close(4 [pid 6266] <... write resumed>) = 524288 [pid 6264] <... write resumed>) = 524288 [pid 6263] <... exit_group resumed>) = ? [pid 6268] <... close resumed>) = 0 [pid 6267] <... close resumed>) = 0 [pid 6268] mkdir("./bus", 0777 [pid 6267] close(4 [pid 6266] munmap(0x7f0356e00000, 138412032 [pid 6264] munmap(0x7f0356e00000, 138412032 [pid 6268] <... mkdir resumed>) = 0 [pid 6267] <... close resumed>) = 0 [pid 6266] <... munmap resumed>) = 0 [pid 6265] <... open resumed>) = 5 [pid 6264] <... munmap resumed>) = 0 [pid 6268] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6267] mkdir("./bus", 0777 [pid 6263] +++ exited with 0 +++ [pid 6267] <... mkdir resumed>) = 0 [pid 6266] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6265] ftruncate(5, 0 [pid 6264] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6266] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6265] <... ftruncate resumed>) = 0 [pid 6264] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6263, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6267] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6266] close(5 [pid 6265] exit_group(0 [ 194.078913][ T6268] loop3: detected capacity change from 0 to 1024 [ 194.093652][ T6267] loop2: detected capacity change from 0 to 1024 [pid 5078] restart_syscall(<... resuming interrupted clone ...> [pid 6266] <... close resumed>) = 0 [pid 6265] <... exit_group resumed>) = ? [pid 5078] <... restart_syscall resumed>) = 0 [pid 6264] close(5 [pid 5078] umount2("./196", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./196", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5078] newfstatat(3, "", [pid 6265] +++ exited with 0 +++ [pid 6264] <... close resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6265, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5078] umount2("./196/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 6268] <... mount resumed>) = 0 [pid 6267] <... mount resumed>) = 0 [pid 5074] umount2("./193", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6268] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6267] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6266] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6264] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6268] <... openat resumed>) = 3 [pid 6267] <... openat resumed>) = 3 [pid 5078] <... umount2 resumed>) = 0 [pid 6268] chdir("./bus" [pid 6267] chdir("./bus") = 0 [pid 6268] <... chdir resumed>) = 0 [pid 6267] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6268] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6267] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] openat(AT_FDCWD, "./193", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6268] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6267] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5074] <... openat resumed>) = 3 [pid 6268] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6266] <... open resumed>) = 5 [pid 5074] newfstatat(3, "", [pid 6267] <... symlink resumed>) = 0 [pid 6266] ftruncate(5, 0 [pid 5078] umount2("./196/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6268] <... symlink resumed>) = 0 [pid 6267] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6266] <... ftruncate resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] getdents64(3, [pid 6264] <... open resumed>) = 5 [pid 5078] newfstatat(AT_FDCWD, "./196/bus", [pid 6268] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6266] exit_group(0 [pid 6264] ftruncate(5, 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6264] <... ftruncate resumed>) = 0 [pid 6266] <... exit_group resumed>) = ? [pid 6264] exit_group(0 [pid 5078] umount2("./196/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./193/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6267] <... creat resumed>) = 4 [pid 6266] +++ exited with 0 +++ [pid 6264] <... exit_group resumed>) = ? [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6267] rename("./bus", "./file2" [pid 5078] openat(AT_FDCWD, "./196/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6268] <... creat resumed>) = 4 [pid 5078] <... openat resumed>) = 4 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6266, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6264] +++ exited with 0 +++ [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 6268] rename("./bus", "./file2" [pid 6267] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] newfstatat(4, "", [pid 5073] <... restart_syscall resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6264, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6267] memfd_create("syzkaller", 0 [pid 5078] getdents64(4, [pid 5077] umount2("./196", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6268] <... rename resumed>) = -1 EEXIST (File exists) [pid 6267] <... memfd_create resumed>) = 5 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./194", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6268] memfd_create("syzkaller", 0 [pid 6267] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] getdents64(4, [pid 5077] openat(AT_FDCWD, "./196", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6268] <... memfd_create resumed>) = 5 [pid 6267] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5073] openat(AT_FDCWD, "./194", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6268] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6267] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] close(4 [pid 6268] <... mmap resumed>) = 0x7f0356e00000 [pid 5073] <... openat resumed>) = 3 [pid 6268] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... close resumed>) = 0 [pid 5077] newfstatat(3, "", [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, [pid 5078] rmdir("./196/bus" [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] <... rmdir resumed>) = 0 [pid 5077] getdents64(3, [pid 5073] umount2("./194/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] umount2("./196/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./196/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] newfstatat(AT_FDCWD, "./196/binderfs", [pid 5074] <... umount2 resumed>) = 0 [pid 6268] <... write resumed>) = 524288 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5078] unlink("./196/binderfs") = 0 [pid 5078] getdents64(3, [pid 5073] umount2("./194/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./194/bus", [pid 5078] close(3 [pid 5074] umount2("./193/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./194/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] rmdir("./196" [pid 5074] newfstatat(AT_FDCWD, "./193/bus", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./194/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6267] <... write resumed>) = 524288 [pid 5078] <... rmdir resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... openat resumed>) = 4 [pid 6267] munmap(0x7f0356e00000, 138412032 [pid 5078] mkdir("./197", 0777 [pid 5074] umount2("./193/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] newfstatat(4, "", [pid 6267] <... munmap resumed>) = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... umount2 resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./193/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... openat resumed>) = 4 [pid 5073] getdents64(4, [pid 6267] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] newfstatat(4, "", [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6267] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... openat resumed>) = 3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, [pid 6268] munmap(0x7f0356e00000, 138412032 [pid 6267] close(5 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5074] getdents64(4, [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6268] <... munmap resumed>) = 0 [pid 5077] umount2("./196/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] close(4 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] <... close resumed>) = 0 [pid 6268] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5077] newfstatat(AT_FDCWD, "./196/bus", [pid 5074] getdents64(4, [pid 5073] rmdir("./194/bus" [pid 6268] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5077] umount2("./196/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] close(4 [pid 5073] umount2("./194/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6268] close(5 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./196/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] rmdir("./193/bus" [pid 5073] newfstatat(AT_FDCWD, "./194/binderfs", [pid 5077] <... openat resumed>) = 4 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] newfstatat(4, "", [pid 5073] unlink("./194/binderfs" [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5077] getdents64(4, [pid 5073] getdents64(3, [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] getdents64(4, [pid 5073] close(3 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] <... close resumed>) = 0 [pid 5077] close(4 [pid 5073] rmdir("./194" [pid 6267] <... close resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5077] rmdir("./196/bus" [pid 5073] mkdir("./195", 0777 [pid 6267] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] <... rmdir resumed>) = 0 [pid 5074] umount2("./193/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] umount2("./196/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... mkdir resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6268] <... close resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./193/binderfs", [pid 5077] newfstatat(AT_FDCWD, "./196/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6268] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5074] unlink("./193/binderfs" [pid 5077] unlink("./196/binderfs") = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5077] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5074] getdents64(3, [pid 5077] close(3 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5077] <... close resumed>) = 0 [pid 5074] close(3 [pid 5077] rmdir("./196" [pid 6267] <... open resumed>) = 5 [pid 5077] <... rmdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 6267] ftruncate(5, 0 [pid 5074] rmdir("./193" [pid 5077] mkdir("./197", 0777 [pid 6268] <... open resumed>) = 5 [pid 6267] <... ftruncate resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 6267] exit_group(0 [pid 6268] ftruncate(5, 0 [pid 6267] <... exit_group resumed>) = ? [pid 5077] <... mkdir resumed>) = 0 [pid 5074] mkdir("./194", 0777 [pid 6268] <... ftruncate resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6268] exit_group(0 [pid 6267] +++ exited with 0 +++ [pid 5078] <... ioctl resumed>) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6268] <... exit_group resumed>) = ? [pid 6268] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6267, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5074] <... openat resumed>) = 3 [pid 5075] umount2("./194", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... openat resumed>) = 3 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6268, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5075] openat(AT_FDCWD, "./194", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5075] <... openat resumed>) = 3 [pid 5075] newfstatat(3, "", [pid 5078] close(3 [pid 5076] umount2("./197", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] openat(AT_FDCWD, "./197", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] getdents64(3, [pid 5073] <... ioctl resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] umount2("./197/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./194/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6269 ./strace-static-x86_64: Process 6269 attached [pid 5073] close(3 [pid 6269] set_robust_list(0x55556e32a660, 24 [pid 5076] <... umount2 resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 6269] <... set_robust_list resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] umount2("./197/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./197/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./197/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6269] chdir("./197" [pid 5076] openat(AT_FDCWD, "./197/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] umount2("./194/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6269] <... chdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6269] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] newfstatat(AT_FDCWD, "./194/bus", [pid 6269] <... prctl resumed>) = 0 [pid 6269] setpgid(0, 0 [pid 5076] <... openat resumed>) = 4 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 6270 attached [pid 6269] <... setpgid resumed>) = 0 [pid 5076] newfstatat(4, "", [pid 5075] umount2("./194/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6270 [pid 6270] set_robust_list(0x55556e32a660, 24 [pid 6269] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5077] <... ioctl resumed>) = 0 [pid 5076] getdents64(4, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... ioctl resumed>) = 0 [pid 6270] <... set_robust_list resumed>) = 0 [pid 6269] <... openat resumed>) = 3 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] openat(AT_FDCWD, "./194/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] close(3 [pid 6270] chdir("./195" [pid 5076] getdents64(4, [pid 6269] write(3, "1000", 4 [pid 5075] <... openat resumed>) = 4 [pid 5074] <... close resumed>) = 0 [pid 6270] <... chdir resumed>) = 0 [pid 6269] <... write resumed>) = 4 [pid 5075] newfstatat(4, "", [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6270] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6269] close(3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] close(4) = 0 [pid 5076] rmdir("./197/bus"./strace-static-x86_64: Process 6271 attached [pid 6270] <... prctl resumed>) = 0 [pid 6269] <... close resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] getdents64(4, [pid 6269] symlink("/dev/binderfs", "./binderfs" [pid 6270] setpgid(0, 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6270] <... setpgid resumed>) = 0 [pid 6269] <... symlink resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6271 [pid 5075] getdents64(4, [pid 6270] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5077] close(3 [pid 5076] umount2("./197/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6269] memfd_create("syzkaller", 0 [pid 5077] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] close(4 [pid 6271] set_robust_list(0x55556e32a660, 24 [pid 6270] <... openat resumed>) = 3 [pid 6269] <... memfd_create resumed>) = 3 [pid 5076] newfstatat(AT_FDCWD, "./197/binderfs", [pid 5075] <... close resumed>) = 0 [pid 6271] <... set_robust_list resumed>) = 0 [pid 6270] write(3, "1000", 4 [pid 6269] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] rmdir("./194/bus" [pid 6270] <... write resumed>) = 4 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6269] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] unlink("./197/binderfs" [pid 5075] <... rmdir resumed>) = 0 [pid 6271] chdir("./194" [pid 6270] close(3 [pid 5076] <... unlink resumed>) = 0 [pid 5076] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6272 [pid 5076] rmdir("./197"./strace-static-x86_64: Process 6272 attached [pid 6271] <... chdir resumed>) = 0 [pid 6270] <... close resumed>) = 0 [pid 6269] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] umount2("./194/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6272] set_robust_list(0x55556e32a660, 24 [pid 6271] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6270] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... rmdir resumed>) = 0 [pid 5076] mkdir("./198", 0777 [pid 6272] <... set_robust_list resumed>) = 0 [pid 6272] chdir("./197" [pid 6271] <... prctl resumed>) = 0 [pid 6270] <... symlink resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6272] <... chdir resumed>) = 0 [pid 6271] setpgid(0, 0 [pid 6270] memfd_create("syzkaller", 0 [pid 6269] <... write resumed>) = 524288 [pid 5075] newfstatat(AT_FDCWD, "./194/binderfs", [pid 6272] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6271] <... setpgid resumed>) = 0 [pid 6270] <... memfd_create resumed>) = 3 [pid 6271] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6270] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6272] <... prctl resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6272] setpgid(0, 0 [pid 6270] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] unlink("./194/binderfs" [pid 6269] munmap(0x7f0356e00000, 138412032 [pid 6272] <... setpgid resumed>) = 0 [pid 6271] <... openat resumed>) = 3 [pid 6270] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... unlink resumed>) = 0 [pid 6272] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6271] write(3, "1000", 4 [pid 6269] <... munmap resumed>) = 0 [pid 5075] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 6272] <... openat resumed>) = 3 [pid 6271] <... write resumed>) = 4 [pid 6270] <... write resumed>) = 524288 [pid 6269] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5076] <... ioctl resumed>) = 0 [pid 5075] rmdir("./194" [pid 6272] write(3, "1000", 4 [pid 6271] close(3 [pid 6270] munmap(0x7f0356e00000, 138412032 [pid 6269] <... openat resumed>) = 4 [pid 5075] <... rmdir resumed>) = 0 [pid 6272] <... write resumed>) = 4 [pid 6269] ioctl(4, LOOP_SET_FD, 3 [pid 6271] <... close resumed>) = 0 [pid 6270] <... munmap resumed>) = 0 [pid 5076] close(3 [pid 6271] symlink("/dev/binderfs", "./binderfs" [pid 6270] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] <... close resumed>) = 0 [pid 6270] <... openat resumed>) = 4 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6270] ioctl(4, LOOP_SET_FD, 3 [pid 6272] close(3 [pid 5075] mkdir("./195", 0777 [pid 6272] <... close resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 6272] symlink("/dev/binderfs", "./binderfs" [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6272] <... symlink resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6272] memfd_create("syzkaller", 0) = 3 [pid 6272] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6272] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6269] <... ioctl resumed>) = 0 [pid 6269] close(3) = 0 [pid 6269] close(4) = 0 [pid 6269] mkdir("./bus", 0777 [pid 6271] <... symlink resumed>) = 0 [pid 6269] <... mkdir resumed>) = 0 [pid 6269] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, ""./strace-static-x86_64: Process 6273 attached [pid 6271] memfd_create("syzkaller", 0 [pid 6270] <... ioctl resumed>) = 0 [pid 6271] <... memfd_create resumed>) = 3 [pid 6270] close(3 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6273 [pid 6273] set_robust_list(0x55556e32a660, 24 [pid 6271] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6270] <... close resumed>) = 0 [pid 6269] <... mount resumed>) = 0 [pid 6273] <... set_robust_list resumed>) = 0 [pid 6271] <... mmap resumed>) = 0x7f0356e00000 [pid 6270] close(4 [pid 6269] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6273] chdir("./198" [pid 6272] <... write resumed>) = 524288 [pid 6269] <... openat resumed>) = 3 [pid 6273] <... chdir resumed>) = 0 [pid 6269] chdir("./bus" [pid 6273] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6270] <... close resumed>) = 0 [pid 6269] <... chdir resumed>) = 0 [pid 6273] <... prctl resumed>) = 0 [pid 6272] munmap(0x7f0356e00000, 138412032 [pid 6270] mkdir("./bus", 0777 [pid 6269] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6273] setpgid(0, 0 [pid 6272] <... munmap resumed>) = 0 [pid 6271] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6270] <... mkdir resumed>) = 0 [pid 6269] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6273] <... setpgid resumed>) = 0 [pid 6272] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6269] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6273] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6272] <... openat resumed>) = 4 [pid 6270] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5075] <... ioctl resumed>) = 0 [pid 6272] ioctl(4, LOOP_SET_FD, 3 [pid 6273] <... openat resumed>) = 3 [ 194.458035][ T6269] loop5: detected capacity change from 0 to 1024 [ 194.468439][ T6270] loop0: detected capacity change from 0 to 1024 [pid 6273] write(3, "1000", 4 [pid 6269] <... symlink resumed>) = 0 [pid 6270] <... mount resumed>) = 0 [pid 6269] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6273] <... write resumed>) = 4 [pid 6272] <... ioctl resumed>) = 0 [pid 6270] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6273] close(3 [pid 6272] close(3 [pid 6271] <... write resumed>) = 524288 [pid 6270] <... openat resumed>) = 3 [pid 6269] <... creat resumed>) = 4 [pid 6273] <... close resumed>) = 0 [pid 6272] <... close resumed>) = 0 [pid 5075] close(3 [pid 6270] chdir("./bus") = 0 [pid 6270] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6270] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6273] symlink("/dev/binderfs", "./binderfs" [pid 6272] close(4 [pid 5075] <... close resumed>) = 0 [pid 6273] <... symlink resumed>) = 0 [pid 6272] <... close resumed>) = 0 [pid 6269] rename("./bus", "./file2" [pid 6271] munmap(0x7f0356e00000, 138412032 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6273] memfd_create("syzkaller", 0 [pid 6272] mkdir("./bus", 0777 [pid 6271] <... munmap resumed>) = 0 [pid 6270] <... symlink resumed>) = 0 [pid 6269] <... rename resumed>) = -1 EEXIST (File exists) [pid 6272] <... mkdir resumed>) = 0 [pid 6273] <... memfd_create resumed>) = 3 [pid 6270] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6269] memfd_create("syzkaller", 0 [pid 6272] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6271] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6269] <... memfd_create resumed>) = 5 [pid 6273] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6271] <... openat resumed>) = 4 [pid 6269] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6273] <... mmap resumed>) = 0x7f0356e00000 [pid 6271] ioctl(4, LOOP_SET_FD, 3 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6274 ./strace-static-x86_64: Process 6274 attached [ 194.518219][ T6272] loop4: detected capacity change from 0 to 1024 [pid 6274] set_robust_list(0x55556e32a660, 24 [pid 6273] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6269] <... mmap resumed>) = 0x7f0356e00000 [pid 6274] <... set_robust_list resumed>) = 0 [pid 6269] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6274] chdir("./195") = 0 [pid 6274] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6270] <... creat resumed>) = 4 [pid 6270] rename("./bus", "./file2") = -1 EEXIST (File exists) [pid 6270] memfd_create("syzkaller", 0) = 5 [pid 6270] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6270] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6274] <... prctl resumed>) = 0 [pid 6274] setpgid(0, 0) = 0 [pid 6274] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6269] <... write resumed>) = 524288 [pid 6273] <... write resumed>) = 524288 [pid 6274] <... openat resumed>) = 3 [pid 6272] <... mount resumed>) = 0 [pid 6273] munmap(0x7f0356e00000, 138412032 [pid 6274] write(3, "1000", 4 [pid 6271] <... ioctl resumed>) = 0 [pid 6274] <... write resumed>) = 4 [pid 6273] <... munmap resumed>) = 0 [pid 6272] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6271] close(3 [pid 6274] close(3) = 0 [pid 6272] <... openat resumed>) = 3 [pid 6274] symlink("/dev/binderfs", "./binderfs" [pid 6271] <... close resumed>) = 0 [pid 6271] close(4) = 0 [pid 6274] <... symlink resumed>) = 0 [pid 6271] mkdir("./bus", 0777) = 0 [pid 6274] memfd_create("syzkaller", 0 [pid 6271] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6272] chdir("./bus" [pid 6273] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6274] <... memfd_create resumed>) = 3 [pid 6273] <... openat resumed>) = 4 [pid 6272] <... chdir resumed>) = 0 [ 194.558752][ T6271] loop1: detected capacity change from 0 to 1024 [pid 6274] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6273] ioctl(4, LOOP_SET_FD, 3 [pid 6272] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6270] <... write resumed>) = 524288 [pid 6269] munmap(0x7f0356e00000, 138412032 [pid 6271] <... mount resumed>) = 0 [pid 6271] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6271] chdir("./bus") = 0 [pid 6271] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6269] <... munmap resumed>) = 0 [pid 6271] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6270] munmap(0x7f0356e00000, 138412032 [pid 6271] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6274] <... mmap resumed>) = 0x7f0356e00000 [pid 6272] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6271] <... symlink resumed>) = 0 [pid 6270] <... munmap resumed>) = 0 [pid 6269] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6272] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6271] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6269] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6270] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6269] close(5 [pid 6270] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6272] <... symlink resumed>) = 0 [pid 6270] close(5 [pid 6269] <... close resumed>) = 0 [pid 6274] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6272] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6271] <... creat resumed>) = 4 [pid 6271] rename("./bus", "./file2") = -1 EEXIST (File exists) [pid 6273] <... ioctl resumed>) = 0 [pid 6270] <... close resumed>) = 0 [pid 6273] close(3 [pid 6271] memfd_create("syzkaller", 0 [pid 6273] <... close resumed>) = 0 [pid 6272] <... creat resumed>) = 4 [pid 6271] <... memfd_create resumed>) = 5 [pid 6270] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6269] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6274] <... write resumed>) = 524288 [pid 6273] close(4 [pid 6272] rename("./bus", "./file2" [pid 6271] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6270] <... open resumed>) = 5 [ 194.621055][ T6273] loop3: detected capacity change from 0 to 1024 [pid 6273] <... close resumed>) = 0 [pid 6271] <... mmap resumed>) = 0x7f0356e00000 [pid 6270] ftruncate(5, 0 [pid 6274] munmap(0x7f0356e00000, 138412032 [pid 6273] mkdir("./bus", 0777 [pid 6272] <... rename resumed>) = -1 EEXIST (File exists) [pid 6271] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6270] <... ftruncate resumed>) = 0 [pid 6269] <... open resumed>) = 5 [pid 6269] ftruncate(5, 0 [pid 6273] <... mkdir resumed>) = 0 [pid 6272] memfd_create("syzkaller", 0 [pid 6270] exit_group(0 [pid 6269] <... ftruncate resumed>) = 0 [pid 6274] <... munmap resumed>) = 0 [pid 6273] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6272] <... memfd_create resumed>) = 5 [pid 6270] <... exit_group resumed>) = ? [pid 6269] exit_group(0 [pid 6274] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6273] <... mount resumed>) = 0 [pid 6272] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6270] +++ exited with 0 +++ [pid 6273] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6272] <... mmap resumed>) = 0x7f0356e00000 [pid 6274] <... openat resumed>) = 4 [pid 6273] <... openat resumed>) = 3 [pid 6272] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6271] <... write resumed>) = 524288 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6270, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6269] <... exit_group resumed>) = ? [pid 6274] ioctl(4, LOOP_SET_FD, 3 [pid 6273] chdir("./bus" [pid 6269] +++ exited with 0 +++ [pid 6273] <... chdir resumed>) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6269, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5073] umount2("./195", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./195", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] umount2("./195/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6273] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6271] munmap(0x7f0356e00000, 138412032 [pid 6273] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6271] <... munmap resumed>) = 0 [pid 5078] umount2("./197", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6273] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./197", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5078] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6271] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5078] getdents64(3, [pid 6273] <... symlink resumed>) = 0 [pid 6271] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6273] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6271] close(5 [pid 5078] umount2("./197/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6271] <... close resumed>) = 0 [pid 6273] <... creat resumed>) = 4 [pid 6272] <... write resumed>) = 524288 [pid 6273] rename("./bus", "./file2" [pid 6272] munmap(0x7f0356e00000, 138412032 [pid 6273] <... rename resumed>) = -1 EEXIST (File exists) [pid 6272] <... munmap resumed>) = 0 [pid 6273] memfd_create("syzkaller", 0 [pid 6272] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] <... umount2 resumed>) = 0 [pid 6273] <... memfd_create resumed>) = 5 [pid 6272] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... umount2 resumed>) = 0 [pid 6274] <... ioctl resumed>) = 0 [pid 5073] umount2("./195/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6274] close(3 [pid 6273] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6272] close(5 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6274] <... close resumed>) = 0 [pid 6273] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] umount2("./197/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] newfstatat(AT_FDCWD, "./195/bus", [pid 6274] close(4 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6274] <... close resumed>) = 0 [pid 5078] newfstatat(AT_FDCWD, "./197/bus", [pid 6274] mkdir("./bus", 0777 [pid 6271] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] umount2("./197/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./197/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5078] newfstatat(4, "", [pid 6272] <... close resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] umount2("./195/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] getdents64(4, [pid 6274] <... mkdir resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] getdents64(4, [pid 5073] openat(AT_FDCWD, "./195/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6274] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6273] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] close(4 [pid 6272] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5073] <... openat resumed>) = 4 [pid 6271] <... open resumed>) = 5 [pid 5078] <... close resumed>) = 0 [ 194.719429][ T6274] loop2: detected capacity change from 0 to 1024 [pid 6271] ftruncate(5, 0 [pid 5073] newfstatat(4, "", [pid 6271] <... ftruncate resumed>) = 0 [pid 5078] rmdir("./197/bus") = 0 [pid 6271] exit_group(0) = ? [pid 5078] umount2("./197/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6273] <... write resumed>) = 524288 [pid 5078] newfstatat(AT_FDCWD, "./197/binderfs", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6271] +++ exited with 0 +++ [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] getdents64(4, [pid 6272] <... open resumed>) = 5 [pid 5078] unlink("./197/binderfs" [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6271, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6274] <... mount resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 6274] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6272] ftruncate(5, 0 [pid 5073] getdents64(4, [pid 6274] <... openat resumed>) = 3 [pid 5078] getdents64(3, [pid 5074] umount2("./194", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6272] <... ftruncate resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6272] exit_group(0 [pid 5074] openat(AT_FDCWD, "./194", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] close(4 [pid 6274] chdir("./bus" [pid 6272] <... exit_group resumed>) = ? [pid 5074] <... openat resumed>) = 3 [pid 6274] <... chdir resumed>) = 0 [pid 5074] newfstatat(3, "", [pid 5073] <... close resumed>) = 0 [pid 6274] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] close(3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6274] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... close resumed>) = 0 [pid 5074] getdents64(3, [pid 6274] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6272] +++ exited with 0 +++ [pid 5078] rmdir("./197" [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] rmdir("./195/bus" [pid 5078] <... rmdir resumed>) = 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6272, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5074] umount2("./194/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 5073] <... rmdir resumed>) = 0 [pid 5077] <... restart_syscall resumed>) = 0 [pid 6274] <... symlink resumed>) = 0 [pid 5078] mkdir("./198", 0777 [pid 5073] umount2("./195/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6273] munmap(0x7f0356e00000, 138412032 [pid 5077] umount2("./197", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./197", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] newfstatat(AT_FDCWD, "./195/binderfs", [pid 5077] <... openat resumed>) = 3 [pid 6273] <... munmap resumed>) = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 5077] newfstatat(3, "", [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6273] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] unlink("./195/binderfs" [pid 6274] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6273] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] getdents64(3, [pid 5073] <... unlink resumed>) = 0 [pid 6273] close(5 [pid 5078] <... openat resumed>) = 3 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] getdents64(3, [pid 6273] <... close resumed>) = 0 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5077] umount2("./197/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6274] <... creat resumed>) = 4 [pid 5074] umount2("./194/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6274] rename("./bus", "./file2" [pid 6273] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] <... umount2 resumed>) = 0 [pid 5073] close(3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... close resumed>) = 0 [pid 6274] <... rename resumed>) = -1 EEXIST (File exists) [pid 5077] umount2("./197/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] newfstatat(AT_FDCWD, "./194/bus", [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./197/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] rmdir("./195" [pid 6274] memfd_create("syzkaller", 0 [pid 5077] umount2("./197/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./194/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... rmdir resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6274] <... memfd_create resumed>) = 5 [pid 5074] openat(AT_FDCWD, "./194/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] openat(AT_FDCWD, "./197/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6273] <... open resumed>) = 5 [pid 5077] <... openat resumed>) = 4 [pid 5074] <... openat resumed>) = 4 [pid 5073] mkdir("./196", 0777 [pid 6274] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6273] ftruncate(5, 0 [pid 5077] newfstatat(4, "", [pid 5074] newfstatat(4, "", [pid 5073] <... mkdir resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] getdents64(4, [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6274] <... mmap resumed>) = 0x7f0356e00000 [pid 6273] <... ftruncate resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, [pid 5077] getdents64(4, [pid 6273] exit_group(0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] <... openat resumed>) = 3 [pid 5074] getdents64(4, [pid 5077] close(4 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] close(4 [pid 6274] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6273] <... exit_group resumed>) = ? [pid 5078] <... ioctl resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6273] +++ exited with 0 +++ [pid 5078] close(3 [pid 5074] rmdir("./194/bus") = 0 [pid 5078] <... close resumed>) = 0 [pid 5077] rmdir("./197/bus") = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6273, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- ./strace-static-x86_64: Process 6275 attached [pid 5077] umount2("./197/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./194/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6275] set_robust_list(0x55556e32a660, 24 [pid 5076] umount2("./198", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6275] <... set_robust_list resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./194/binderfs", [pid 5077] newfstatat(AT_FDCWD, "./197/binderfs", [pid 5076] openat(AT_FDCWD, "./198", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6275] chdir("./198" [pid 5076] <... openat resumed>) = 3 [pid 6275] <... chdir resumed>) = 0 [pid 5077] unlink("./197/binderfs" [pid 5076] newfstatat(3, "", [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] unlink("./194/binderfs" [pid 6274] <... write resumed>) = 524288 [pid 6275] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6275 [pid 5077] <... unlink resumed>) = 0 [pid 5076] getdents64(3, [pid 5074] <... unlink resumed>) = 0 [pid 6275] <... prctl resumed>) = 0 [pid 6274] munmap(0x7f0356e00000, 138412032 [pid 5077] getdents64(3, [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] getdents64(3, [pid 6275] setpgid(0, 0 [pid 6274] <... munmap resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6275] <... setpgid resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] umount2("./198/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] close(3 [pid 6275] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5077] <... close resumed>) = 0 [pid 5074] close(3) = 0 [pid 6275] <... openat resumed>) = 3 [pid 5074] rmdir("./194") = 0 [pid 6274] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6275] write(3, "1000", 4 [pid 6274] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] mkdir("./195", 0777 [pid 6275] <... write resumed>) = 4 [pid 6275] close(3 [pid 6274] close(5 [pid 5074] <... mkdir resumed>) = 0 [pid 6275] <... close resumed>) = 0 [pid 5077] rmdir("./197" [pid 6275] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5077] mkdir("./198", 0777 [pid 6275] memfd_create("syzkaller", 0 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5077] <... mkdir resumed>) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6275] <... memfd_create resumed>) = 3 [pid 6275] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5077] <... openat resumed>) = 3 [pid 6275] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6274] <... close resumed>) = 0 [pid 6274] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5076] <... umount2 resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 6274] <... open resumed>) = 5 [pid 5076] umount2("./198/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6274] ftruncate(5, 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6275] <... write resumed>) = 524288 [pid 5076] newfstatat(AT_FDCWD, "./198/bus", [pid 6274] <... ftruncate resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6274] exit_group(0) = ? [pid 6274] +++ exited with 0 +++ [pid 5076] umount2("./198/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] close(3 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6274, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5075] umount2("./195", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./195", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... close resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./198/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... openat resumed>) = 4 [pid 5075] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6276 attached [pid 6275] munmap(0x7f0356e00000, 138412032 [pid 5076] newfstatat(4, "", [pid 5075] newfstatat(3, "", [pid 6276] set_robust_list(0x55556e32a660, 24 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6276 [pid 5076] getdents64(4, [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] close(4 [pid 5075] getdents64(3, [pid 5076] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] umount2("./195/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6276] <... set_robust_list resumed>) = 0 [pid 6275] <... munmap resumed>) = 0 [pid 5076] rmdir("./198/bus" [pid 6276] chdir("./196" [pid 5075] <... umount2 resumed>) = 0 [pid 5075] umount2("./195/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6276] <... chdir resumed>) = 0 [pid 6275] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] <... ioctl resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./195/bus", [pid 6275] <... openat resumed>) = 4 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./195/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6275] ioctl(4, LOOP_SET_FD, 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6276] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5077] close(3 [pid 5076] umount2("./198/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6276] <... prctl resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6276] setpgid(0, 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] newfstatat(AT_FDCWD, "./198/binderfs", [pid 5075] openat(AT_FDCWD, "./195/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... ioctl resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 5074] close(3 [pid 5075] newfstatat(4, "", [pid 5074] <... close resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] unlink("./198/binderfs"./strace-static-x86_64: Process 6277 attached ) = 0 [pid 5075] close(4 [pid 6276] <... setpgid resumed>) = 0 [pid 5076] getdents64(3, ./strace-static-x86_64: Process 6278 attached [pid 6278] set_robust_list(0x55556e32a660, 24 [pid 6277] set_robust_list(0x55556e32a660, 24 [pid 6276] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6275] <... ioctl resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] <... close resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6277 [pid 5076] close(3 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6278 [pid 5076] <... close resumed>) = 0 [pid 6277] <... set_robust_list resumed>) = 0 [pid 6275] close(3 [pid 5075] rmdir("./195/bus" [pid 6276] <... openat resumed>) = 3 [pid 6278] <... set_robust_list resumed>) = 0 [pid 5076] rmdir("./198" [pid 6278] chdir("./198" [pid 6277] chdir("./195" [pid 6276] write(3, "1000", 4 [pid 6275] <... close resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 6277] <... chdir resumed>) = 0 [pid 6275] close(4 [pid 5076] mkdir("./199", 0777 [pid 6277] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6275] <... close resumed>) = 0 [pid 5075] umount2("./195/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6277] <... prctl resumed>) = 0 [pid 6275] mkdir("./bus", 0777 [pid 6277] setpgid(0, 0 [pid 6275] <... mkdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6277] <... setpgid resumed>) = 0 [pid 6275] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5075] newfstatat(AT_FDCWD, "./195/binderfs", [pid 6277] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./195/binderfs" [pid 6277] <... openat resumed>) = 3 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 6278] <... chdir resumed>) = 0 [pid 6276] <... write resumed>) = 4 [pid 6278] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6276] close(3) = 0 [pid 6278] <... prctl resumed>) = 0 [pid 6278] setpgid(0, 0 [pid 6277] write(3, "1000", 4 [pid 6276] symlink("/dev/binderfs", "./binderfs" [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] getdents64(3, [pid 6278] <... setpgid resumed>) = 0 [pid 6277] <... write resumed>) = 4 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6276] <... symlink resumed>) = 0 [pid 6277] close(3 [pid 5075] close(3 [pid 6278] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6277] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 6277] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... openat resumed>) = 3 [pid 6278] <... openat resumed>) = 3 [pid 6277] <... symlink resumed>) = 0 [pid 6276] memfd_create("syzkaller", 0 [pid 5075] rmdir("./195" [pid 6278] write(3, "1000", 4 [pid 6277] memfd_create("syzkaller", 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6277] <... memfd_create resumed>) = 3 [pid 5075] <... rmdir resumed>) = 0 [pid 6278] <... write resumed>) = 4 [pid 6277] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6276] <... memfd_create resumed>) = 3 [pid 6275] <... mount resumed>) = 0 [pid 6278] close(3) = 0 [pid 6277] <... mmap resumed>) = 0x7f0356e00000 [pid 6275] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5075] mkdir("./196", 0777 [pid 6278] symlink("/dev/binderfs", "./binderfs" [pid 6276] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6275] <... openat resumed>) = 3 [pid 5075] <... mkdir resumed>) = 0 [ 194.957064][ T6275] loop5: detected capacity change from 0 to 1024 [pid 6275] chdir("./bus" [pid 6278] <... symlink resumed>) = 0 [pid 6277] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6276] <... mmap resumed>) = 0x7f0356e00000 [pid 6275] <... chdir resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6275] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... openat resumed>) = 3 [pid 6275] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6275] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6278] memfd_create("syzkaller", 0) = 3 [pid 6275] <... symlink resumed>) = 0 [pid 6278] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6276] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6275] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6278] <... mmap resumed>) = 0x7f0356e00000 [pid 6278] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6277] <... write resumed>) = 524288 [pid 6275] <... creat resumed>) = 4 [pid 6275] rename("./bus", "./file2") = -1 EEXIST (File exists) [pid 6275] memfd_create("syzkaller", 0) = 5 [pid 6275] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6275] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6277] munmap(0x7f0356e00000, 138412032) = 0 [pid 6277] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6277] ioctl(4, LOOP_SET_FD, 3 [pid 6278] <... write resumed>) = 524288 [pid 6276] <... write resumed>) = 524288 [pid 6276] munmap(0x7f0356e00000, 138412032 [pid 6277] <... ioctl resumed>) = 0 [pid 6278] munmap(0x7f0356e00000, 138412032 [pid 6276] <... munmap resumed>) = 0 [pid 6275] <... write resumed>) = 524288 [pid 5075] <... ioctl resumed>) = 0 [pid 5075] close(3 [pid 6278] <... munmap resumed>) = 0 [pid 6277] close(3 [pid 6276] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6275] munmap(0x7f0356e00000, 138412032 [pid 5075] <... close resumed>) = 0 [pid 6278] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6277] <... close resumed>) = 0 [pid 6278] <... openat resumed>) = 4 [pid 6277] close(4 [pid 6276] <... openat resumed>) = 4 [pid 6275] <... munmap resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6279 attached [ 195.058312][ T6277] loop1: detected capacity change from 0 to 1024 [pid 6278] ioctl(4, LOOP_SET_FD, 3 [pid 6277] <... close resumed>) = 0 [pid 6276] ioctl(4, LOOP_SET_FD, 3 [pid 6275] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6277] mkdir("./bus", 0777 [pid 5076] close(3) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6280 attached [pid 6280] set_robust_list(0x55556e32a660, 24) = 0 [pid 6280] chdir("./199") = 0 [pid 6277] <... mkdir resumed>) = 0 [pid 6275] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6280 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6279 [pid 6280] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6275] close(5 [pid 6279] set_robust_list(0x55556e32a660, 24 [pid 6280] <... prctl resumed>) = 0 [pid 6280] setpgid(0, 0) = 0 [pid 6280] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6279] <... set_robust_list resumed>) = 0 [pid 6275] <... close resumed>) = 0 [pid 6277] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6280] <... openat resumed>) = 3 [pid 6279] chdir("./196" [pid 6280] write(3, "1000", 4 [pid 6279] <... chdir resumed>) = 0 [pid 6280] <... write resumed>) = 4 [pid 6279] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6278] <... ioctl resumed>) = 0 [pid 6277] <... mount resumed>) = 0 [pid 6276] <... ioctl resumed>) = 0 [pid 6275] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6280] close(3 [pid 6279] <... prctl resumed>) = 0 [pid 6278] close(3 [pid 6277] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6276] close(3 [pid 6280] <... close resumed>) = 0 [pid 6279] setpgid(0, 0 [pid 6278] <... close resumed>) = 0 [pid 6277] <... openat resumed>) = 3 [pid 6276] <... close resumed>) = 0 [pid 6280] symlink("/dev/binderfs", "./binderfs" [pid 6279] <... setpgid resumed>) = 0 [pid 6278] close(4 [pid 6277] chdir("./bus" [pid 6276] close(4 [pid 6275] <... open resumed>) = 5 [pid 6279] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6278] <... close resumed>) = 0 [pid 6277] <... chdir resumed>) = 0 [pid 6276] <... close resumed>) = 0 [pid 6275] ftruncate(5, 0 [pid 6279] <... openat resumed>) = 3 [pid 6278] mkdir("./bus", 0777 [pid 6277] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6276] mkdir("./bus", 0777 [pid 6275] <... ftruncate resumed>) = 0 [pid 6279] write(3, "1000", 4 [pid 6278] <... mkdir resumed>) = 0 [pid 6277] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6276] <... mkdir resumed>) = 0 [pid 6275] exit_group(0 [pid 6279] <... write resumed>) = 4 [pid 6277] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6279] close(3) = 0 [ 195.101886][ T6276] loop0: detected capacity change from 0 to 1024 [ 195.110073][ T6278] loop4: detected capacity change from 0 to 1024 [ 195.139334][ T28] kauditd_printk_skb: 42 callbacks suppressed [pid 6277] <... symlink resumed>) = 0 [pid 6279] symlink("/dev/binderfs", "./binderfs" [pid 6277] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6275] <... exit_group resumed>) = ? [pid 6279] <... symlink resumed>) = 0 [pid 6278] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6276] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6275] +++ exited with 0 +++ [pid 6279] memfd_create("syzkaller", 0 [pid 6277] <... creat resumed>) = 4 [pid 6279] <... memfd_create resumed>) = 3 [pid 6277] rename("./bus", "./file2" [pid 6280] <... symlink resumed>) = 0 [pid 6280] memfd_create("syzkaller", 0 [pid 6279] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6277] <... rename resumed>) = -1 EEXIST (File exists) [pid 6276] <... mount resumed>) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6275, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6280] <... memfd_create resumed>) = 3 [pid 6279] <... mmap resumed>) = 0x7f0356e00000 [pid 6278] <... mount resumed>) = 0 [pid 6277] memfd_create("syzkaller", 0 [pid 6276] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] umount2("./198", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6280] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6279] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6278] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6277] <... memfd_create resumed>) = 5 [pid 6276] <... openat resumed>) = 3 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./198", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6280] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... openat resumed>) = 3 [pid 5078] newfstatat(3, "", [pid 6278] <... openat resumed>) = 3 [pid 6277] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6276] chdir("./bus" [pid 6277] <... mmap resumed>) = 0x7f0356e00000 [pid 6276] <... chdir resumed>) = 0 [pid 6276] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6280] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6276] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6276] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] getdents64(3, [pid 6278] chdir("./bus" [pid 6277] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6278] <... chdir resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6278] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6278] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] umount2("./198/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6276] <... symlink resumed>) = 0 [pid 6278] <... symlink resumed>) = 0 [ 195.139354][ T28] audit: type=1800 audit(1710613077.244:1184): pid=6275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop5" ino=20 res=0 errno=0 [pid 6276] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6280] <... write resumed>) = 524288 [pid 6278] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6277] <... write resumed>) = 524288 [pid 6280] munmap(0x7f0356e00000, 138412032) = 0 [pid 6278] <... creat resumed>) = 4 [pid 6278] rename("./bus", "./file2" [pid 6280] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6278] <... rename resumed>) = -1 EEXIST (File exists) [pid 6276] <... creat resumed>) = 4 [pid 6280] ioctl(4, LOOP_SET_FD, 3 [pid 6278] memfd_create("syzkaller", 0 [pid 6276] rename("./bus", "./file2" [pid 6278] <... memfd_create resumed>) = 5 [pid 6278] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6279] <... write resumed>) = 524288 [pid 6279] munmap(0x7f0356e00000, 138412032) = 0 [pid 6276] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] <... umount2 resumed>) = 0 [pid 6278] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6277] munmap(0x7f0356e00000, 138412032 [pid 6276] memfd_create("syzkaller", 0 [pid 6279] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6276] <... memfd_create resumed>) = 5 [pid 6279] ioctl(4, LOOP_SET_FD, 3 [pid 6276] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6277] <... munmap resumed>) = 0 [pid 5078] umount2("./198/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6280] <... ioctl resumed>) = 0 [pid 6276] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] newfstatat(AT_FDCWD, "./198/bus", [pid 6280] close(3) = 0 [pid 6277] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6276] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6280] close(4 [pid 6277] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6280] <... close resumed>) = 0 [pid 6277] close(5 [pid 5078] umount2("./198/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6280] mkdir("./bus", 0777 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6280] <... mkdir resumed>) = 0 [pid 6279] <... ioctl resumed>) = 0 [pid 6278] <... write resumed>) = 524288 [pid 6277] <... close resumed>) = 0 [pid 6277] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] openat(AT_FDCWD, "./198/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6279] close(3 [pid 5078] <... openat resumed>) = 4 [ 195.226179][ T6280] loop3: detected capacity change from 0 to 1024 [ 195.244325][ T6279] loop2: detected capacity change from 0 to 1024 [pid 6280] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6279] <... close resumed>) = 0 [pid 6278] munmap(0x7f0356e00000, 138412032 [pid 6277] <... open resumed>) = 5 [pid 6279] close(4 [pid 6278] <... munmap resumed>) = 0 [pid 6277] ftruncate(5, 0 [pid 6279] <... close resumed>) = 0 [pid 6277] <... ftruncate resumed>) = 0 [pid 6279] mkdir("./bus", 0777 [pid 6278] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6277] exit_group(0 [pid 6276] <... write resumed>) = 524288 [pid 6279] <... mkdir resumed>) = 0 [pid 6278] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6277] <... exit_group resumed>) = ? [pid 6278] close(5 [pid 6277] +++ exited with 0 +++ [pid 6279] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6278] <... close resumed>) = 0 [pid 6276] munmap(0x7f0356e00000, 138412032 [pid 5078] newfstatat(4, "", [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6277, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(4, [pid 6280] <... mount resumed>) = 0 [pid 6276] <... munmap resumed>) = 0 [pid 6280] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6280] chdir("./bus" [pid 5074] umount2("./195", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6280] <... chdir resumed>) = 0 [pid 6276] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6280] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6279] <... mount resumed>) = 0 [pid 6276] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] getdents64(4, [pid 5074] openat(AT_FDCWD, "./195", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6280] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 195.280422][ T28] audit: type=1800 audit(1710613077.384:1185): pid=6277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop1" ino=20 res=0 errno=0 [pid 6279] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6276] close(5 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6280] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6279] <... openat resumed>) = 3 [pid 6278] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] close(4 [pid 5074] <... openat resumed>) = 3 [pid 5074] newfstatat(3, "", [pid 5078] <... close resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] rmdir("./198/bus" [pid 5074] getdents64(3, [pid 5078] <... rmdir resumed>) = 0 [pid 6279] chdir("./bus" [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] umount2("./198/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./195/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6279] <... chdir resumed>) = 0 [pid 5078] newfstatat(AT_FDCWD, "./198/binderfs", [pid 6279] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6279] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] unlink("./198/binderfs" [pid 6280] <... symlink resumed>) = 0 [pid 6279] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6280] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6278] <... open resumed>) = 5 [pid 5078] <... unlink resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 6278] ftruncate(5, 0 [pid 5078] getdents64(3, [pid 6278] <... ftruncate resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6278] exit_group(0 [pid 5078] close(3 [pid 6278] <... exit_group resumed>) = ? [pid 6278] +++ exited with 0 +++ [pid 5078] <... close resumed>) = 0 [pid 5074] umount2("./195/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6280] <... creat resumed>) = 4 [pid 6279] <... symlink resumed>) = 0 [pid 5078] rmdir("./198" [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6278, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6280] rename("./bus", "./file2" [pid 6279] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5077] umount2("./198", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6280] <... rename resumed>) = -1 EEXIST (File exists) [pid 6279] <... creat resumed>) = 4 [pid 6276] <... close resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6280] memfd_create("syzkaller", 0 [pid 6279] rename("./bus", "./file2" [pid 6276] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] openat(AT_FDCWD, "./198", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6280] <... memfd_create resumed>) = 5 [pid 6279] <... rename resumed>) = -1 EEXIST (File exists) [pid 5077] <... openat resumed>) = 3 [pid 6280] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6279] memfd_create("syzkaller", 0 [pid 6276] <... open resumed>) = 5 [pid 5077] newfstatat(3, "", [pid 6280] <... mmap resumed>) = 0x7f0356e00000 [pid 6279] <... memfd_create resumed>) = 5 [pid 6276] ftruncate(5, 0 [pid 6279] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6276] <... ftruncate resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6279] <... mmap resumed>) = 0x7f0356e00000 [pid 6276] exit_group(0 [pid 5077] getdents64(3, [pid 6276] <... exit_group resumed>) = ? [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6279] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6276] +++ exited with 0 +++ [pid 5077] umount2("./198/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6276, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5073] umount2("./196", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] newfstatat(AT_FDCWD, "./195/bus", [pid 5078] mkdir("./199", 0777 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./196", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... mkdir resumed>) = 0 [pid 5074] umount2("./195/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./195/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6280] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... openat resumed>) = 3 [pid 5074] <... openat resumed>) = 4 [pid 5073] <... openat resumed>) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [ 195.360747][ T28] audit: type=1800 audit(1710613077.454:1186): pid=6278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop4" ino=20 res=0 errno=0 [pid 5073] umount2("./196/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6280] <... write resumed>) = 524288 [pid 6279] <... write resumed>) = 524288 [pid 6280] munmap(0x7f0356e00000, 138412032 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5077] <... umount2 resumed>) = 0 [pid 5074] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6280] <... munmap resumed>) = 0 [pid 5074] getdents64(4, [pid 6280] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6279] munmap(0x7f0356e00000, 138412032 [pid 5077] umount2("./198/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] <... umount2 resumed>) = 0 [pid 6280] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] getdents64(4, [pid 5073] umount2("./196/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6280] close(5 [pid 5077] newfstatat(AT_FDCWD, "./198/bus", [pid 5073] newfstatat(AT_FDCWD, "./196/bus", [pid 5074] close(4 [pid 6279] <... munmap resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... close resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6279] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5077] umount2("./198/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] rmdir("./195/bus" [pid 5073] umount2("./196/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6280] <... close resumed>) = 0 [pid 6279] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6280] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6279] close(5 [pid 5077] openat(AT_FDCWD, "./198/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] umount2("./195/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] openat(AT_FDCWD, "./196/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... openat resumed>) = 4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 195.400325][ T28] audit: type=1800 audit(1710613077.474:1187): pid=6276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop0" ino=20 res=0 errno=0 [pid 5077] newfstatat(4, "", [pid 5074] newfstatat(AT_FDCWD, "./195/binderfs", [pid 5073] <... openat resumed>) = 4 [pid 6280] <... open resumed>) = 5 [pid 6279] <... close resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6280] ftruncate(5, 0 [pid 5077] getdents64(4, [pid 6280] <... ftruncate resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6280] exit_group(0 [pid 5077] close(4) = 0 [pid 6280] <... exit_group resumed>) = ? [pid 5077] rmdir("./198/bus" [pid 6279] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] <... rmdir resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] newfstatat(4, "", [pid 6280] +++ exited with 0 +++ [pid 5074] unlink("./195/binderfs" [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6280, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] umount2("./199", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] umount2("./198/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] openat(AT_FDCWD, "./199", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5076] newfstatat(3, "", [pid 5074] <... unlink resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, [pid 5076] getdents64(3, [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] close(3 [pid 5073] getdents64(4, [pid 5076] umount2("./199/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... close resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] rmdir("./195" [pid 5073] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./196/bus") = 0 [pid 5073] umount2("./196/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./196/binderfs", [pid 6279] <... open resumed>) = 5 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6279] ftruncate(5, 0 [pid 5073] unlink("./196/binderfs" [pid 6279] <... ftruncate resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./198/binderfs", [pid 5073] <... unlink resumed>) = 0 [pid 5073] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./196") = 0 [pid 5073] mkdir("./197", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6279] exit_group(0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] mkdir("./196", 0777 [pid 6279] <... exit_group resumed>) = ? [pid 5077] unlink("./198/binderfs" [pid 5076] <... umount2 resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 5076] umount2("./199/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./199/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./199/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] getdents64(3, [pid 5076] openat(AT_FDCWD, "./199/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] close(4) = 0 [pid 5077] close(3 [pid 5076] rmdir("./199/bus" [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5078] <... ioctl resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5077] rmdir("./198" [pid 5076] umount2("./199/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./199/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] unlink("./199/binderfs" [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5077] mkdir("./199", 0777 [pid 6279] +++ exited with 0 +++ [pid 5076] <... unlink resumed>) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6279, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5075] umount2("./196", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./196", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... mkdir resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5078] close(3 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5075] newfstatat(3, "", [pid 5078] <... close resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, [pid 5075] getdents64(3, [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] close(3 [pid 5075] umount2("./196/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... close resumed>) = 0 [ 195.445973][ T28] audit: type=1800 audit(1710613077.544:1188): pid=6280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 195.482800][ T28] audit: type=1800 audit(1710613077.584:1189): pid=6279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop2" ino=20 res=0 errno=0 [pid 5076] rmdir("./199" [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 6281 attached [pid 5076] mkdir("./200", 0777 [pid 5075] umount2("./196/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... ioctl resumed>) = 0 [pid 5073] close(3 [pid 6281] set_robust_list(0x55556e32a660, 24 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6281 [pid 6281] <... set_robust_list resumed>) = 0 [pid 6281] chdir("./199") = 0 [pid 6281] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6281] setpgid(0, 0) = 0 [pid 6281] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6281] write(3, "1000", 4) = 4 [pid 6281] close(3) = 0 [pid 5074] close(3 [pid 6281] symlink("/dev/binderfs", "./binderfs" [pid 5074] <... close resumed>) = 0 [pid 6281] <... symlink resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6281] memfd_create("syzkaller", 0./strace-static-x86_64: Process 6282 attached [pid 6282] set_robust_list(0x55556e32a660, 24 [pid 6281] <... memfd_create resumed>) = 3 [pid 6282] <... set_robust_list resumed>) = 0 [pid 6281] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6282] chdir("./196" [pid 6281] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] <... ioctl resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./196/bus", [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6282] <... chdir resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6282] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6282 [pid 6282] <... prctl resumed>) = 0 [pid 6282] setpgid(0, 0 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] umount2("./196/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6282] <... setpgid resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6283 [pid 6282] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6281] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6282] <... openat resumed>) = 3 [pid 6282] write(3, "1000", 4) = 4 [pid 6282] close(3) = 0 [pid 6282] symlink("/dev/binderfs", "./binderfs") = 0 ./strace-static-x86_64: Process 6283 attached [pid 6282] memfd_create("syzkaller", 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] openat(AT_FDCWD, "./196/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6283] set_robust_list(0x55556e32a660, 24) = 0 [pid 6282] <... memfd_create resumed>) = 3 [pid 5077] close(3 [pid 5075] <... openat resumed>) = 4 [pid 5077] <... close resumed>) = 0 [pid 6282] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6283] chdir("./197" [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] newfstatat(4, "", [pid 6283] <... chdir resumed>) = 0 [pid 6283] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6282] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6283] <... prctl resumed>) = 0 [pid 5075] getdents64(4, ./strace-static-x86_64: Process 6284 attached [pid 6283] setpgid(0, 0 [pid 6282] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6281] <... write resumed>) = 524288 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6284] set_robust_list(0x55556e32a660, 24 [pid 6283] <... setpgid resumed>) = 0 [pid 5075] getdents64(4, [pid 6283] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6284 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] close(4 [pid 6283] <... openat resumed>) = 3 [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./196/bus") = 0 [pid 5075] umount2("./196/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6284] <... set_robust_list resumed>) = 0 [pid 6284] chdir("./199" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6283] write(3, "1000", 4 [pid 6284] <... chdir resumed>) = 0 [pid 6283] <... write resumed>) = 4 [pid 5075] newfstatat(AT_FDCWD, "./196/binderfs", [pid 6284] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6283] close(3 [pid 6284] <... prctl resumed>) = 0 [pid 6283] <... close resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6284] setpgid(0, 0 [pid 6283] symlink("/dev/binderfs", "./binderfs" [pid 6281] munmap(0x7f0356e00000, 138412032 [pid 5075] unlink("./196/binderfs" [pid 6284] <... setpgid resumed>) = 0 [pid 6283] <... symlink resumed>) = 0 [pid 6281] <... munmap resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 6283] memfd_create("syzkaller", 0 [pid 5075] getdents64(3, [pid 6284] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6281] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6283] <... memfd_create resumed>) = 3 [pid 6282] <... write resumed>) = 524288 [pid 6281] <... openat resumed>) = 4 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6281] ioctl(4, LOOP_SET_FD, 3 [pid 6283] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6282] munmap(0x7f0356e00000, 138412032 [pid 5075] close(3 [pid 6283] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] <... close resumed>) = 0 [pid 6282] <... munmap resumed>) = 0 [pid 6282] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6282] ioctl(4, LOOP_SET_FD, 3 [pid 6284] <... openat resumed>) = 3 [pid 5075] rmdir("./196" [pid 6284] write(3, "1000", 4 [pid 6283] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... ioctl resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 6284] <... write resumed>) = 4 [pid 5076] close(3 [pid 5075] mkdir("./197", 0777 [pid 6284] close(3 [pid 6281] <... ioctl resumed>) = 0 [pid 6284] <... close resumed>) = 0 [pid 6281] close(3 [pid 5075] <... mkdir resumed>) = 0 [pid 6284] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... close resumed>) = 0 [pid 6281] <... close resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6284] <... symlink resumed>) = 0 [pid 6281] close(4) = 0 [pid 6281] mkdir("./bus", 0777 [pid 6284] memfd_create("syzkaller", 0 [pid 6281] <... mkdir resumed>) = 0 [pid 6281] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 6284] <... memfd_create resumed>) = 3 [pid 6284] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6284] <... mmap resumed>) = 0x7f0356e00000 ./strace-static-x86_64: Process 6285 attached [pid 6281] <... mount resumed>) = 0 [pid 6285] set_robust_list(0x55556e32a660, 24 [pid 6281] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6285] <... set_robust_list resumed>) = 0 [pid 6281] <... openat resumed>) = 3 [pid 6285] chdir("./200" [pid 6281] chdir("./bus" [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6285 [pid 6285] <... chdir resumed>) = 0 [pid 6282] <... ioctl resumed>) = 0 [pid 6281] <... chdir resumed>) = 0 [pid 6285] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6282] close(3 [pid 6281] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6285] <... prctl resumed>) = 0 [pid 6282] <... close resumed>) = 0 [pid 6281] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6285] setpgid(0, 0 [pid 6282] close(4 [pid 6281] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6285] <... setpgid resumed>) = 0 [pid 6282] <... close resumed>) = 0 [pid 6281] <... symlink resumed>) = 0 [pid 6285] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6282] mkdir("./bus", 0777 [pid 6281] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6284] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6283] <... write resumed>) = 524288 [ 195.643672][ T6281] loop5: detected capacity change from 0 to 1024 [ 195.657027][ T6282] loop1: detected capacity change from 0 to 1024 [pid 6285] <... openat resumed>) = 3 [pid 6282] <... mkdir resumed>) = 0 [pid 6281] <... creat resumed>) = 4 [pid 6285] write(3, "1000", 4 [pid 6282] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6281] rename("./bus", "./file2" [pid 6285] <... write resumed>) = 4 [pid 6283] munmap(0x7f0356e00000, 138412032 [pid 6285] close(3) = 0 [pid 6281] <... rename resumed>) = -1 EEXIST (File exists) [pid 6285] symlink("/dev/binderfs", "./binderfs" [pid 6284] <... write resumed>) = 524288 [pid 6283] <... munmap resumed>) = 0 [pid 6281] memfd_create("syzkaller", 0 [pid 6285] <... symlink resumed>) = 0 [pid 6282] <... mount resumed>) = 0 [pid 6281] <... memfd_create resumed>) = 5 [pid 5075] <... ioctl resumed>) = 0 [pid 6282] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6281] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6284] munmap(0x7f0356e00000, 138412032 [pid 6283] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6282] <... openat resumed>) = 3 [pid 6281] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] close(3 [pid 6285] memfd_create("syzkaller", 0 [pid 6283] <... openat resumed>) = 4 [pid 6282] chdir("./bus" [pid 6281] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6284] <... munmap resumed>) = 0 [pid 6285] <... memfd_create resumed>) = 3 [pid 6282] <... chdir resumed>) = 0 [pid 6285] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6282] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6285] <... mmap resumed>) = 0x7f0356e00000 [pid 6282] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6285] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6284] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6283] ioctl(4, LOOP_SET_FD, 3 [pid 6282] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5075] <... close resumed>) = 0 [pid 6284] <... openat resumed>) = 4 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6282] <... symlink resumed>) = 0 [pid 6282] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6284] ioctl(4, LOOP_SET_FD, 3 [pid 6281] <... write resumed>) = 524288 [pid 6282] <... creat resumed>) = 4 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6286 [pid 6282] rename("./bus", "./file2") = -1 EEXIST (File exists) [pid 6282] memfd_create("syzkaller", 0./strace-static-x86_64: Process 6286 attached ) = 5 [pid 6282] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6286] set_robust_list(0x55556e32a660, 24 [pid 6282] <... mmap resumed>) = 0x7f0356e00000 [pid 6286] <... set_robust_list resumed>) = 0 [pid 6282] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6281] munmap(0x7f0356e00000, 138412032 [pid 6286] chdir("./197" [pid 6285] <... write resumed>) = 524288 [pid 6283] <... ioctl resumed>) = 0 [pid 6284] <... ioctl resumed>) = 0 [pid 6286] <... chdir resumed>) = 0 [pid 6284] close(3 [pid 6283] close(3 [pid 6286] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6284] <... close resumed>) = 0 [pid 6284] close(4 [pid 6286] <... prctl resumed>) = 0 [pid 6283] <... close resumed>) = 0 [pid 6284] <... close resumed>) = 0 [pid 6286] setpgid(0, 0 [pid 6285] munmap(0x7f0356e00000, 138412032 [pid 6283] close(4 [pid 6281] <... munmap resumed>) = 0 [pid 6286] <... setpgid resumed>) = 0 [pid 6285] <... munmap resumed>) = 0 [pid 6283] <... close resumed>) = 0 [pid 6281] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6284] mkdir("./bus", 0777 [pid 6286] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6284] <... mkdir resumed>) = 0 [pid 6283] mkdir("./bus", 0777 [pid 6286] <... openat resumed>) = 3 [pid 6284] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6283] <... mkdir resumed>) = 0 [pid 6281] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6286] write(3, "1000", 4 [ 195.731331][ T6283] loop0: detected capacity change from 0 to 1024 [ 195.745331][ T6284] loop4: detected capacity change from 0 to 1024 [pid 6283] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6285] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6281] close(5 [pid 6286] <... write resumed>) = 4 [pid 6285] <... openat resumed>) = 4 [pid 6283] <... mount resumed>) = 0 [pid 6286] close(3 [pid 6285] ioctl(4, LOOP_SET_FD, 3 [pid 6283] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6286] <... close resumed>) = 0 [pid 6284] <... mount resumed>) = 0 [pid 6283] <... openat resumed>) = 3 [pid 6282] <... write resumed>) = 524288 [pid 6286] symlink("/dev/binderfs", "./binderfs" [pid 6284] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6283] chdir("./bus" [pid 6286] <... symlink resumed>) = 0 [pid 6284] <... openat resumed>) = 3 [pid 6283] <... chdir resumed>) = 0 [pid 6281] <... close resumed>) = 0 [pid 6283] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6286] memfd_create("syzkaller", 0) = 3 [pid 6284] chdir("./bus" [pid 6283] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6286] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6283] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6286] <... mmap resumed>) = 0x7f0356e00000 [pid 6284] <... chdir resumed>) = 0 [pid 6283] <... symlink resumed>) = 0 [pid 6282] munmap(0x7f0356e00000, 138412032 [pid 6281] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6282] <... munmap resumed>) = 0 [pid 6284] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6282] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6284] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6283] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6282] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6286] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6285] <... ioctl resumed>) = 0 [pid 6282] close(5 [pid 6285] close(3 [pid 6282] <... close resumed>) = 0 [pid 6285] <... close resumed>) = 0 [pid 6285] close(4) = 0 [pid 6285] mkdir("./bus", 0777) = 0 [pid 6281] <... open resumed>) = 5 [ 195.792930][ T6285] loop3: detected capacity change from 0 to 1024 [pid 6281] ftruncate(5, 0 [pid 6286] <... write resumed>) = 524288 [pid 6285] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6284] <... symlink resumed>) = 0 [pid 6283] <... creat resumed>) = 4 [pid 6283] rename("./bus", "./file2" [pid 6282] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6286] munmap(0x7f0356e00000, 138412032 [pid 6284] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6283] <... rename resumed>) = -1 EEXIST (File exists) [pid 6286] <... munmap resumed>) = 0 [pid 6283] memfd_create("syzkaller", 0 [pid 6281] <... ftruncate resumed>) = 0 [pid 6283] <... memfd_create resumed>) = 5 [pid 6283] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6282] <... open resumed>) = 5 [ 195.836813][ T28] audit: type=1800 audit(1710613077.934:1190): pid=6281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop5" ino=20 res=0 errno=0 [pid 6283] <... mmap resumed>) = 0x7f0356e00000 [pid 6286] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6284] <... creat resumed>) = 4 [pid 6282] ftruncate(5, 0 [pid 6281] exit_group(0 [pid 6284] rename("./bus", "./file2" [pid 6282] <... ftruncate resumed>) = 0 [pid 6281] <... exit_group resumed>) = ? [pid 6282] exit_group(0 [pid 6281] +++ exited with 0 +++ [pid 6282] <... exit_group resumed>) = ? [pid 6284] <... rename resumed>) = -1 EEXIST (File exists) [pid 6282] +++ exited with 0 +++ [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6281, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6286] <... openat resumed>) = 4 [pid 5078] restart_syscall(<... resuming interrupted clone ...> [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6282, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6284] memfd_create("syzkaller", 0 [pid 5078] <... restart_syscall resumed>) = 0 [pid 6284] <... memfd_create resumed>) = 5 [pid 6284] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5074] umount2("./196", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6286] ioctl(4, LOOP_SET_FD, 3 [ 195.871385][ T28] audit: type=1800 audit(1710613077.974:1191): pid=6282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop1" ino=20 res=0 errno=0 [pid 5078] umount2("./199", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./199", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] openat(AT_FDCWD, "./196", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... openat resumed>) = 3 [pid 5074] <... openat resumed>) = 3 [pid 5078] newfstatat(3, "", [pid 5074] newfstatat(3, "", [pid 6285] <... mount resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6285] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] getdents64(3, [pid 5074] getdents64(3, [pid 6285] <... openat resumed>) = 3 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6285] chdir("./bus" [pid 5078] umount2("./199/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./196/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6285] <... chdir resumed>) = 0 [pid 6285] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6283] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6285] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6285] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6285] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6286] <... ioctl resumed>) = 0 [pid 6285] <... creat resumed>) = 4 [pid 6284] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6283] <... write resumed>) = 524288 [pid 5074] <... umount2 resumed>) = 0 [pid 6285] rename("./bus", "./file2" [pid 5078] <... umount2 resumed>) = 0 [pid 5074] umount2("./196/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./196/bus", [pid 6286] close(3 [pid 6283] munmap(0x7f0356e00000, 138412032 [pid 5078] umount2("./199/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6286] <... close resumed>) = 0 [pid 6285] <... rename resumed>) = -1 EEXIST (File exists) [pid 6284] <... write resumed>) = 524288 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6286] close(4 [pid 5078] newfstatat(AT_FDCWD, "./199/bus", [pid 5074] umount2("./196/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6286] <... close resumed>) = 0 [pid 6286] mkdir("./bus", 0777 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 195.909439][ T6286] loop2: detected capacity change from 0 to 1024 [pid 6286] <... mkdir resumed>) = 0 [pid 6285] memfd_create("syzkaller", 0 [pid 6284] munmap(0x7f0356e00000, 138412032 [pid 5078] umount2("./199/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] openat(AT_FDCWD, "./196/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6284] <... munmap resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... openat resumed>) = 4 [pid 5078] openat(AT_FDCWD, "./199/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] newfstatat(4, "", [pid 6285] <... memfd_create resumed>) = 5 [pid 5078] <... openat resumed>) = 4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, [pid 6285] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6283] <... munmap resumed>) = 0 [pid 6285] <... mmap resumed>) = 0x7f0356e00000 [pid 5074] getdents64(4, [pid 6283] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5078] newfstatat(4, "", [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6286] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] close(4 [pid 5078] getdents64(4, [pid 6284] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] <... close resumed>) = 0 [pid 6284] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6283] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6283] close(5 [pid 5078] getdents64(4, [pid 6284] close(5 [pid 5074] rmdir("./196/bus" [pid 6284] <... close resumed>) = 0 [pid 6283] <... close resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6285] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... rmdir resumed>) = 0 [pid 6285] <... write resumed>) = 524288 [pid 5078] close(4 [pid 6284] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6283] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6286] <... mount resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5074] umount2("./196/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6286] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] rmdir("./199/bus" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6286] <... openat resumed>) = 3 [pid 5074] newfstatat(AT_FDCWD, "./196/binderfs", [pid 6285] munmap(0x7f0356e00000, 138412032 [pid 6286] chdir("./bus" [pid 6284] <... open resumed>) = 5 [pid 6283] <... open resumed>) = 5 [pid 5078] <... rmdir resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6286] <... chdir resumed>) = 0 [pid 6283] ftruncate(5, 0 [pid 5074] unlink("./196/binderfs" [pid 6286] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6284] ftruncate(5, 0 [pid 5078] umount2("./199/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6283] <... ftruncate resumed>) = 0 [pid 6284] <... ftruncate resumed>) = 0 [pid 6283] exit_group(0 [pid 6286] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... unlink resumed>) = 0 [pid 6283] <... exit_group resumed>) = ? [pid 6284] exit_group(0 [pid 6285] <... munmap resumed>) = 0 [pid 6286] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6284] <... exit_group resumed>) = ? [pid 6283] +++ exited with 0 +++ [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] getdents64(3, [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6283, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6285] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6285] close(5 [pid 6284] +++ exited with 0 +++ [pid 5074] close(3) = 0 [pid 5073] umount2("./197", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] newfstatat(AT_FDCWD, "./199/binderfs", [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6284, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5074] rmdir("./196" [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6286] <... symlink resumed>) = 0 [pid 6285] <... close resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./197", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6286] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] unlink("./199/binderfs" [pid 6285] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5073] <... openat resumed>) = 3 [pid 5073] newfstatat(3, "", [pid 5078] <... unlink resumed>) = 0 [pid 5074] mkdir("./197", 0777 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, [pid 6285] <... open resumed>) = 5 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6285] ftruncate(5, 0) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5073] umount2("./197/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6286] <... creat resumed>) = 4 [pid 6285] exit_group(0) = ? [pid 5077] umount2("./199", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6286] rename("./bus", "./file2" [pid 5078] getdents64(3, [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6286] <... rename resumed>) = -1 EEXIST (File exists) [pid 6285] +++ exited with 0 +++ [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] openat(AT_FDCWD, "./199", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... openat resumed>) = 3 [pid 6286] memfd_create("syzkaller", 0 [pid 5078] close(3 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6285, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=3 /* 0.03 s */} --- [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5078] <... close resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5078] rmdir("./199" [ 196.002794][ T28] audit: type=1800 audit(1710613078.104:1192): pid=6284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 196.031156][ T28] audit: type=1800 audit(1710613078.104:1193): pid=6283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop0" ino=20 res=0 errno=0 [pid 5077] newfstatat(3, "", [pid 6286] <... memfd_create resumed>) = 5 [pid 5078] <... rmdir resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5076] umount2("./200", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] getdents64(3, [pid 5073] umount2("./197/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6286] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] mkdir("./200", 0777 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] openat(AT_FDCWD, "./200", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6286] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] umount2("./199/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... openat resumed>) = 3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(3, "", [pid 5073] newfstatat(AT_FDCWD, "./197/bus", [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] getdents64(3, [pid 5073] umount2("./197/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... mkdir resumed>) = 0 [pid 6286] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./200/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] openat(AT_FDCWD, "./197/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6286] <... write resumed>) = 524288 [pid 5078] <... openat resumed>) = 3 [pid 6286] munmap(0x7f0356e00000, 138412032 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5077] <... umount2 resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5073] newfstatat(4, "", [pid 6286] <... munmap resumed>) = 0 [pid 5077] umount2("./199/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] close(3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./199/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6286] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5077] umount2("./199/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6286] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./199/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6286] close(5 [pid 5077] <... openat resumed>) = 4 [pid 6286] <... close resumed>) = 0 [pid 5077] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] close(4) = 0 [pid 5077] rmdir("./199/bus") = 0 [pid 5076] umount2("./200/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... close resumed>) = 0 [pid 5073] getdents64(4, [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] umount2("./199/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./199/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] unlink("./199/binderfs" [pid 5073] getdents64(4, [pid 5077] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 6287 attached [pid 6286] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] getdents64(3, [pid 6287] set_robust_list(0x55556e32a660, 24 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] newfstatat(AT_FDCWD, "./200/bus", [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6287 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] close(3 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] close(4 [pid 5076] umount2("./200/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./197/bus" [pid 6287] <... set_robust_list resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... rmdir resumed>) = 0 [pid 6287] chdir("./197" [pid 6286] <... open resumed>) = 5 [pid 5077] rmdir("./199" [pid 5073] umount2("./197/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... rmdir resumed>) = 0 [pid 6287] <... chdir resumed>) = 0 [pid 6286] ftruncate(5, 0 [pid 5078] <... ioctl resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./200/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./197/binderfs", [pid 5076] <... openat resumed>) = 4 [pid 6287] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6286] <... ftruncate resumed>) = 0 [pid 5077] mkdir("./200", 0777 [pid 5076] newfstatat(4, "", [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6287] <... prctl resumed>) = 0 [pid 6286] exit_group(0 [pid 5077] <... mkdir resumed>) = 0 [pid 5073] unlink("./197/binderfs" [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6287] setpgid(0, 0 [pid 6286] <... exit_group resumed>) = ? [pid 5078] close(3 [pid 6287] <... setpgid resumed>) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] getdents64(4, [pid 5073] <... unlink resumed>) = 0 [pid 6287] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6286] +++ exited with 0 +++ [pid 5078] <... close resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5073] getdents64(3, [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6286, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5073] close(3 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6287] <... openat resumed>) = 3 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5076] close(4 [pid 5073] <... close resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5073] rmdir("./197"./strace-static-x86_64: Process 6288 attached [pid 6287] write(3, "1000", 4 [pid 6288] set_robust_list(0x55556e32a660, 24 [pid 6287] <... write resumed>) = 4 [pid 5076] rmdir("./200/bus" [pid 5075] umount2("./197", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... rmdir resumed>) = 0 [pid 6287] close(3 [pid 6288] <... set_robust_list resumed>) = 0 [pid 6287] <... close resumed>) = 0 [pid 6288] chdir("./200" [pid 6287] symlink("/dev/binderfs", "./binderfs" [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6288 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] mkdir("./198", 0777 [pid 6288] <... chdir resumed>) = 0 [pid 6287] <... symlink resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./197", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6288] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6287] memfd_create("syzkaller", 0 [pid 5075] <... openat resumed>) = 3 [pid 5073] <... mkdir resumed>) = 0 [pid 5075] newfstatat(3, "", [pid 6288] <... prctl resumed>) = 0 [pid 6287] <... memfd_create resumed>) = 3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6288] setpgid(0, 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6288] <... setpgid resumed>) = 0 [pid 6287] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] getdents64(3, [pid 6287] <... mmap resumed>) = 0x7f0356e00000 [pid 5073] <... openat resumed>) = 3 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] umount2("./200/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5075] umount2("./197/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6288] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6287] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = 0 [pid 5075] umount2("./197/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6288] write(3, "1000", 4) = 4 [pid 5076] newfstatat(AT_FDCWD, "./200/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6288] close(3) = 0 [pid 5077] <... ioctl resumed>) = 0 [pid 6288] symlink("/dev/binderfs", "./binderfs" [pid 5076] unlink("./200/binderfs" [pid 5075] newfstatat(AT_FDCWD, "./197/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./197/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./197/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6288] <... symlink resumed>) = 0 [pid 6287] <... write resumed>) = 524288 [pid 5076] <... unlink resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 5073] <... ioctl resumed>) = 0 [pid 6288] memfd_create("syzkaller", 0 [pid 5075] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, [pid 5076] getdents64(3, [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6288] <... memfd_create resumed>) = 3 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6288] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] close(3 [pid 6288] <... mmap resumed>) = 0x7f0356e00000 [pid 6287] munmap(0x7f0356e00000, 138412032 [pid 5077] close(3 [pid 5076] <... close resumed>) = 0 [pid 5075] getdents64(4, [pid 5073] close(3 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] <... close resumed>) = 0 [pid 6287] <... munmap resumed>) = 0 [pid 5076] rmdir("./200" [pid 5075] close(4 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... rmdir resumed>) = 0 [pid 5076] mkdir("./201", 0777 [pid 5077] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] rmdir("./197/bus" [pid 6287] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] <... mkdir resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] umount2("./197/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6289 [pid 5075] newfstatat(AT_FDCWD, "./197/binderfs", [pid 6288] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6287] <... openat resumed>) = 4 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6290 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 6289 attached [pid 6287] ioctl(4, LOOP_SET_FD, 3 [pid 5075] unlink("./197/binderfs" [pid 6289] set_robust_list(0x55556e32a660, 24 [pid 5075] <... unlink resumed>) = 0 [pid 5075] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 5075] rmdir("./197") = 0 [pid 6289] <... set_robust_list resumed>) = 0 [pid 5075] mkdir("./198", 0777 [pid 6289] chdir("./198") = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 6289] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6289] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 6290 attached [pid 6289] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6287] <... ioctl resumed>) = 0 [pid 6290] set_robust_list(0x55556e32a660, 24 [pid 6289] <... openat resumed>) = 3 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6290] <... set_robust_list resumed>) = 0 [pid 6289] write(3, "1000", 4 [pid 5075] <... openat resumed>) = 3 [pid 6289] <... write resumed>) = 4 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6289] close(3 [pid 6290] chdir("./200") = 0 [pid 6289] <... close resumed>) = 0 [pid 6289] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6290] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6290] setpgid(0, 0 [pid 6289] memfd_create("syzkaller", 0) = 3 [pid 6290] <... setpgid resumed>) = 0 [pid 6289] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6288] <... write resumed>) = 524288 [pid 6290] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6288] munmap(0x7f0356e00000, 138412032 [pid 6287] close(3 [pid 6290] <... openat resumed>) = 3 [pid 6289] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6290] write(3, "1000", 4 [pid 6288] <... munmap resumed>) = 0 [pid 6287] <... close resumed>) = 0 [pid 6290] <... write resumed>) = 4 [pid 6288] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6287] close(4 [pid 6290] close(3 [pid 6288] <... openat resumed>) = 4 [pid 6290] <... close resumed>) = 0 [pid 6288] ioctl(4, LOOP_SET_FD, 3 [pid 6287] <... close resumed>) = 0 [pid 6290] symlink("/dev/binderfs", "./binderfs" [pid 6288] <... ioctl resumed>) = 0 [pid 6287] mkdir("./bus", 0777 [pid 6290] <... symlink resumed>) = 0 [pid 6289] <... write resumed>) = 524288 [pid 6288] close(3 [pid 6287] <... mkdir resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 6290] memfd_create("syzkaller", 0 [pid 6289] munmap(0x7f0356e00000, 138412032 [pid 6288] <... close resumed>) = 0 [pid 6287] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5076] close(3 [pid 6290] <... memfd_create resumed>) = 3 [pid 6289] <... munmap resumed>) = 0 [pid 6288] close(4 [pid 5076] <... close resumed>) = 0 [pid 6290] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6288] <... close resumed>) = 0 [pid 6290] <... mmap resumed>) = 0x7f0356e00000 [pid 6288] mkdir("./bus", 0777 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6289] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6288] <... mkdir resumed>) = 0 [ 196.229339][ T6287] loop1: detected capacity change from 0 to 1024 [ 196.267799][ T6288] loop5: detected capacity change from 0 to 1024 [pid 6289] ioctl(4, LOOP_SET_FD, 3 [pid 6288] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6290] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288./strace-static-x86_64: Process 6291 attached [pid 6289] <... ioctl resumed>) = 0 [pid 6287] <... mount resumed>) = 0 [pid 5075] close(3 [pid 6291] set_robust_list(0x55556e32a660, 24 [pid 6289] close(3 [pid 6288] <... mount resumed>) = 0 [pid 6287] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6291 [pid 6289] <... close resumed>) = 0 [pid 6288] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6287] <... openat resumed>) = 3 [pid 6289] close(4 [pid 6288] <... openat resumed>) = 3 [pid 6287] chdir("./bus" [pid 6291] <... set_robust_list resumed>) = 0 [pid 6289] <... close resumed>) = 0 [pid 6288] chdir("./bus" [pid 6287] <... chdir resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 6291] chdir("./201" [pid 6289] mkdir("./bus", 0777 [pid 6288] <... chdir resumed>) = 0 [pid 6291] <... chdir resumed>) = 0 [pid 6288] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6287] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6291] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6289] <... mkdir resumed>) = 0 [pid 6288] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6287] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6291] <... prctl resumed>) = 0 [pid 6288] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6287] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6291] setpgid(0, 0 [pid 6290] <... write resumed>) = 524288 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6292 [pid 6291] <... setpgid resumed>) = 0 [pid 6291] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6291] write(3, "1000", 4) = 4 ./strace-static-x86_64: Process 6292 attached [pid 6291] close(3 [pid 6289] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6288] <... symlink resumed>) = 0 [pid 6287] <... symlink resumed>) = 0 [pid 6292] set_robust_list(0x55556e32a660, 24 [pid 6291] <... close resumed>) = 0 [pid 6292] <... set_robust_list resumed>) = 0 [pid 6291] symlink("/dev/binderfs", "./binderfs" [pid 6288] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6287] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6292] chdir("./198" [pid 6291] <... symlink resumed>) = 0 [pid 6290] munmap(0x7f0356e00000, 138412032 [pid 6292] <... chdir resumed>) = 0 [pid 6292] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6291] memfd_create("syzkaller", 0 [pid 6288] <... creat resumed>) = 4 [pid 6292] <... prctl resumed>) = 0 [pid 6291] <... memfd_create resumed>) = 3 [pid 6290] <... munmap resumed>) = 0 [pid 6289] <... mount resumed>) = 0 [pid 6288] rename("./bus", "./file2" [pid 6292] setpgid(0, 0 [pid 6291] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6289] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6287] <... creat resumed>) = 4 [pid 6292] <... setpgid resumed>) = 0 [pid 6291] <... mmap resumed>) = 0x7f0356e00000 [pid 6290] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6289] <... openat resumed>) = 3 [pid 6288] <... rename resumed>) = -1 EEXIST (File exists) [ 196.299022][ T6289] loop0: detected capacity change from 0 to 1024 [pid 6287] rename("./bus", "./file2" [pid 6292] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6290] <... openat resumed>) = 4 [pid 6289] chdir("./bus" [pid 6288] memfd_create("syzkaller", 0 [pid 6287] <... rename resumed>) = -1 EEXIST (File exists) [pid 6289] <... chdir resumed>) = 0 [pid 6292] <... openat resumed>) = 3 [pid 6290] ioctl(4, LOOP_SET_FD, 3 [pid 6289] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6288] <... memfd_create resumed>) = 5 [pid 6287] memfd_create("syzkaller", 0 [pid 6292] write(3, "1000", 4 [pid 6289] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6287] <... memfd_create resumed>) = 5 [pid 6292] <... write resumed>) = 4 [pid 6291] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6290] <... ioctl resumed>) = 0 [pid 6289] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6288] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6287] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6292] close(3) = 0 [pid 6291] <... write resumed>) = 524288 [pid 6289] <... symlink resumed>) = 0 [pid 6288] <... mmap resumed>) = 0x7f0356e00000 [pid 6287] <... mmap resumed>) = 0x7f0356e00000 [pid 6292] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6289] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6287] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6292] memfd_create("syzkaller", 0) = 3 [pid 6289] <... creat resumed>) = 4 [pid 6292] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6289] rename("./bus", "./file2" [pid 6292] <... mmap resumed>) = 0x7f0356e00000 [pid 6289] <... rename resumed>) = -1 EEXIST (File exists) [pid 6289] memfd_create("syzkaller", 0) = 5 [pid 6289] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6288] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6291] munmap(0x7f0356e00000, 138412032) = 0 [pid 6290] close(3 [pid 6289] <... mmap resumed>) = 0x7f0356e00000 [pid 6291] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6290] <... close resumed>) = 0 [pid 6291] <... openat resumed>) = 4 [pid 6290] close(4 [pid 6292] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6291] ioctl(4, LOOP_SET_FD, 3 [pid 6290] <... close resumed>) = 0 [pid 6289] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6288] <... write resumed>) = 524288 [pid 6290] mkdir("./bus", 0777) = 0 [ 196.366711][ T6290] loop4: detected capacity change from 0 to 1024 [pid 6291] <... ioctl resumed>) = 0 [pid 6290] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6287] <... write resumed>) = 524288 [pid 6292] <... write resumed>) = 524288 [pid 6288] munmap(0x7f0356e00000, 138412032 [pid 6287] munmap(0x7f0356e00000, 138412032 [pid 6288] <... munmap resumed>) = 0 [pid 6287] <... munmap resumed>) = 0 [pid 6288] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6287] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6292] munmap(0x7f0356e00000, 138412032 [pid 6291] close(3 [pid 6289] <... write resumed>) = 524288 [pid 6288] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6287] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6292] <... munmap resumed>) = 0 [pid 6291] <... close resumed>) = 0 [pid 6291] close(4 [pid 6292] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6291] <... close resumed>) = 0 [pid 6291] mkdir("./bus", 0777) = 0 [pid 6288] close(5 [pid 6287] close(5 [pid 6292] <... openat resumed>) = 4 [pid 6291] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6292] ioctl(4, LOOP_SET_FD, 3 [pid 6290] <... mount resumed>) = 0 [pid 6287] <... close resumed>) = 0 [pid 6290] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6288] <... close resumed>) = 0 [pid 6290] <... openat resumed>) = 3 [pid 6290] chdir("./bus" [pid 6288] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6287] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6290] <... chdir resumed>) = 0 [pid 6290] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6289] munmap(0x7f0356e00000, 138412032 [pid 6288] <... open resumed>) = 5 [pid 6287] <... open resumed>) = 5 [pid 6290] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6288] ftruncate(5, 0 [pid 6287] ftruncate(5, 0 [pid 6290] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6288] <... ftruncate resumed>) = 0 [pid 6287] <... ftruncate resumed>) = 0 [pid 6288] exit_group(0 [pid 6289] <... munmap resumed>) = 0 [pid 6287] exit_group(0 [pid 6289] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6289] close(5 [pid 6290] <... symlink resumed>) = 0 [pid 6288] <... exit_group resumed>) = ? [pid 6287] <... exit_group resumed>) = ? [pid 6292] <... ioctl resumed>) = 0 [pid 6292] close(3 [pid 6287] +++ exited with 0 +++ [pid 6292] <... close resumed>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6287, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 6292] close(4) = 0 [pid 6292] mkdir("./bus", 0777 [pid 5074] umount2("./197", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6292] <... mkdir resumed>) = 0 [pid 6288] +++ exited with 0 +++ [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6292] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6291] <... mount resumed>) = 0 [pid 6289] <... close resumed>) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6288, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [ 196.427944][ T6291] loop3: detected capacity change from 0 to 1024 [ 196.467257][ T6292] loop2: detected capacity change from 0 to 1024 [pid 5074] openat(AT_FDCWD, "./197", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6291] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6290] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6289] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5074] <... openat resumed>) = 3 [pid 6291] <... openat resumed>) = 3 [pid 6291] chdir("./bus" [pid 5074] newfstatat(3, "", [pid 6291] <... chdir resumed>) = 0 [pid 5078] umount2("./200", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6291] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] getdents64(3, [pid 6291] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6290] <... creat resumed>) = 4 [pid 5078] openat(AT_FDCWD, "./200", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6290] rename("./bus", "./file2" [pid 5078] <... openat resumed>) = 3 [pid 5074] umount2("./197/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6291] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] umount2("./200/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6292] <... mount resumed>) = 0 [pid 6292] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6292] chdir("./bus" [pid 6291] <... symlink resumed>) = 0 [pid 6292] <... chdir resumed>) = 0 [pid 6292] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6289] <... open resumed>) = 5 [pid 6292] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6289] ftruncate(5, 0 [pid 6292] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6289] <... ftruncate resumed>) = 0 [pid 6291] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6289] exit_group(0 [pid 6292] <... symlink resumed>) = 0 [pid 6292] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6289] <... exit_group resumed>) = ? [pid 6289] +++ exited with 0 +++ [pid 6291] <... creat resumed>) = 4 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6289, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6292] <... creat resumed>) = 4 [pid 6291] rename("./bus", "./file2" [pid 6290] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] <... umount2 resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 6292] rename("./bus", "./file2" [pid 6291] <... rename resumed>) = -1 EEXIST (File exists) [pid 6292] <... rename resumed>) = -1 EEXIST (File exists) [pid 6291] memfd_create("syzkaller", 0 [pid 6290] memfd_create("syzkaller", 0 [pid 6291] <... memfd_create resumed>) = 5 [pid 6290] <... memfd_create resumed>) = 5 [pid 5078] umount2("./200/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6291] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6292] memfd_create("syzkaller", 0 [pid 6291] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] newfstatat(AT_FDCWD, "./200/bus", [pid 5073] umount2("./198", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6292] <... memfd_create resumed>) = 5 [pid 6290] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./197/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6290] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] umount2("./200/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./198", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./197/bus", [pid 5073] <... openat resumed>) = 3 [pid 5078] openat(AT_FDCWD, "./200/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] newfstatat(3, "", [pid 6291] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] umount2("./197/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6292] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] getdents64(3, [pid 6292] <... mmap resumed>) = 0x7f0356e00000 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6292] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6290] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... openat resumed>) = 4 [pid 5074] openat(AT_FDCWD, "./197/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] umount2("./198/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] newfstatat(4, "", [pid 5074] <... openat resumed>) = 4 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(4, [pid 5074] newfstatat(4, "", [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(4, [pid 5074] getdents64(4, [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6291] <... write resumed>) = 524288 [pid 5078] close(4 [pid 5074] close(4 [pid 5078] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./197/bus") = 0 [pid 5074] umount2("./197/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./197/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./197/binderfs") = 0 [pid 5078] rmdir("./200/bus" [pid 5074] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6292] <... write resumed>) = 524288 [pid 6290] <... write resumed>) = 524288 [pid 5078] <... rmdir resumed>) = 0 [pid 5074] close(3 [pid 5073] umount2("./198/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./197") = 0 [pid 6291] munmap(0x7f0356e00000, 138412032 [pid 5078] umount2("./200/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] mkdir("./198", 0777 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6291] <... munmap resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6290] munmap(0x7f0356e00000, 138412032 [pid 5074] <... mkdir resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./198/bus", [pid 5078] newfstatat(AT_FDCWD, "./200/binderfs", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] unlink("./200/binderfs" [pid 5073] umount2("./198/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6291] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6291] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... openat resumed>) = 3 [pid 6292] munmap(0x7f0356e00000, 138412032 [pid 6291] close(5 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6292] <... munmap resumed>) = 0 [pid 6290] <... munmap resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6292] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6291] <... close resumed>) = 0 [pid 6290] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] getdents64(3, [pid 5073] openat(AT_FDCWD, "./198/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6291] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6290] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6292] close(5 [pid 6290] close(5 [pid 5078] close(3 [pid 5073] <... openat resumed>) = 4 [pid 5073] newfstatat(4, "", [pid 5078] <... close resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] rmdir("./200" [pid 6291] <... open resumed>) = 5 [pid 5073] getdents64(4, [pid 6291] ftruncate(5, 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5078] mkdir("./201", 0777 [pid 5073] getdents64(4, [pid 6291] <... ftruncate resumed>) = 0 [pid 6291] exit_group(0) = ? [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] close(4 [pid 5078] <... mkdir resumed>) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] <... close resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5073] rmdir("./198/bus" [pid 5078] ioctl(3, LOOP_CLR_FD [pid 6291] +++ exited with 0 +++ [pid 5073] <... rmdir resumed>) = 0 [pid 6290] <... close resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6291, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5073] umount2("./198/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6290] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6292] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6292] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5076] umount2("./201", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./198/binderfs", [pid 5076] openat(AT_FDCWD, "./201", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] unlink("./198/binderfs" [pid 5076] getdents64(3, [pid 6292] <... open resumed>) = 5 [pid 6290] <... open resumed>) = 5 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] <... unlink resumed>) = 0 [pid 6292] ftruncate(5, 0 [pid 6290] ftruncate(5, 0 [pid 5076] umount2("./201/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] getdents64(3, [pid 6292] <... ftruncate resumed>) = 0 [pid 6290] <... ftruncate resumed>) = 0 [pid 6292] exit_group(0 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6292] <... exit_group resumed>) = ? [pid 6290] exit_group(0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./198") = 0 [pid 5073] mkdir("./199", 0777 [pid 6292] +++ exited with 0 +++ [pid 6290] <... exit_group resumed>) = ? [pid 5073] <... mkdir resumed>) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6292, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6290] +++ exited with 0 +++ [pid 5076] <... umount2 resumed>) = 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6290, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5076] umount2("./201/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... ioctl resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./198", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] newfstatat(AT_FDCWD, "./201/bus", [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] umount2("./200", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "./198", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... openat resumed>) = 3 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5077] openat(AT_FDCWD, "./200", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] umount2("./201/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] newfstatat(3, "", [pid 5074] close(3 [pid 5077] <... openat resumed>) = 3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... close resumed>) = 0 [pid 5077] newfstatat(3, "", [pid 5076] openat(AT_FDCWD, "./201/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] getdents64(3, [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 ./strace-static-x86_64: Process 6293 attached [pid 5077] getdents64(3, [pid 5076] newfstatat(4, "", [pid 5075] umount2("./198/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6293] set_robust_list(0x55556e32a660, 24 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6293] <... set_robust_list resumed>) = 0 [pid 5077] umount2("./200/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] getdents64(4, [pid 6293] chdir("./198" [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] close(4 [pid 6293] <... chdir resumed>) = 0 [pid 5078] <... ioctl resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6293 [pid 6293] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] rmdir("./201/bus") = 0 [pid 5076] umount2("./201/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./201/binderfs", [pid 5077] <... umount2 resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6293] <... prctl resumed>) = 0 [pid 5076] unlink("./201/binderfs") = 0 [pid 5076] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6293] setpgid(0, 0 [pid 5076] close(3 [pid 6293] <... setpgid resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5076] rmdir("./201" [pid 6293] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] <... rmdir resumed>) = 0 [pid 5077] umount2("./200/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./200/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] mkdir("./202", 0777 [pid 6293] <... openat resumed>) = 3 [pid 5077] umount2("./200/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] <... mkdir resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./200/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6293] write(3, "1000", 4 [pid 5078] close(3 [pid 5076] <... openat resumed>) = 3 [pid 5077] newfstatat(4, "", [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] getdents64(4, [pid 6293] <... write resumed>) = 4 [pid 5078] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 6293] close(3 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6293] <... close resumed>) = 0 [pid 5075] umount2("./198/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] close(4) = 0 [pid 5077] rmdir("./200/bus" [pid 6293] symlink("/dev/binderfs", "./binderfs" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6294 attached [pid 6294] set_robust_list(0x55556e32a660, 24 [pid 6293] <... symlink resumed>) = 0 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6294 [pid 5077] <... rmdir resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./198/bus", [pid 5073] close(3 [pid 6294] <... set_robust_list resumed>) = 0 [pid 6293] memfd_create("syzkaller", 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... close resumed>) = 0 [pid 6294] chdir("./201" [pid 5077] umount2("./200/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] umount2("./198/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6294] <... chdir resumed>) = 0 [pid 6293] <... memfd_create resumed>) = 3 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./200/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] unlink("./200/binderfs") = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] close(3) = 0 [pid 5077] rmdir("./200"./strace-static-x86_64: Process 6295 attached [pid 6294] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6293] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./198/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6293] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] mkdir("./201", 0777) = 0 [pid 5075] <... openat resumed>) = 4 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6294] <... prctl resumed>) = 0 [pid 6295] set_robust_list(0x55556e32a660, 24 [pid 5077] <... openat resumed>) = 3 [pid 5075] newfstatat(4, "", [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6295 [pid 6294] setpgid(0, 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6294] <... setpgid resumed>) = 0 [pid 6295] <... set_robust_list resumed>) = 0 [pid 5075] getdents64(4, [pid 6295] chdir("./199" [pid 6294] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6293] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5076] <... ioctl resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6295] <... chdir resumed>) = 0 [pid 6294] <... openat resumed>) = 3 [pid 5075] getdents64(4, [pid 6295] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6293] <... write resumed>) = 524288 [pid 5076] close(3 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6295] <... prctl resumed>) = 0 [pid 6294] write(3, "1000", 4 [pid 6295] setpgid(0, 0) = 0 [pid 5075] close(4 [pid 6295] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6294] <... write resumed>) = 4 [pid 5076] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 6294] close(3 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] rmdir("./198/bus" [pid 6294] <... close resumed>) = 0 [pid 6293] munmap(0x7f0356e00000, 138412032 [pid 5075] <... rmdir resumed>) = 0 [pid 6295] <... openat resumed>) = 3 [pid 6294] symlink("/dev/binderfs", "./binderfs" [pid 5075] umount2("./198/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6296 attached [pid 6295] write(3, "1000", 4 [pid 6294] <... symlink resumed>) = 0 [pid 6293] <... munmap resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./198/binderfs", [pid 6296] set_robust_list(0x55556e32a660, 24 [pid 6295] <... write resumed>) = 4 [pid 6293] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6296 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6296] <... set_robust_list resumed>) = 0 [pid 6295] close(3 [pid 6294] memfd_create("syzkaller", 0 [pid 6293] <... openat resumed>) = 4 [pid 5075] unlink("./198/binderfs" [pid 6295] <... close resumed>) = 0 [pid 6295] symlink("/dev/binderfs", "./binderfs" [pid 6293] ioctl(4, LOOP_SET_FD, 3 [pid 6296] chdir("./202" [pid 6295] <... symlink resumed>) = 0 [pid 6294] <... memfd_create resumed>) = 3 [pid 5075] <... unlink resumed>) = 0 [pid 6296] <... chdir resumed>) = 0 [pid 6294] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6296] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6295] memfd_create("syzkaller", 0 [pid 6294] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] getdents64(3, [pid 6296] <... prctl resumed>) = 0 [pid 6293] <... ioctl resumed>) = 0 [pid 6295] <... memfd_create resumed>) = 3 [pid 6296] setpgid(0, 0 [pid 6295] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6293] close(3 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6296] <... setpgid resumed>) = 0 [pid 5075] close(3 [pid 6296] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6295] <... mmap resumed>) = 0x7f0356e00000 [pid 6293] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 6293] close(4 [pid 5075] rmdir("./198" [pid 6296] <... openat resumed>) = 3 [pid 6293] <... close resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 6296] write(3, "1000", 4) = 4 [pid 6293] mkdir("./bus", 0777 [pid 5075] mkdir("./199", 0777 [pid 6296] close(3 [pid 6293] <... mkdir resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 6296] <... close resumed>) = 0 [pid 6296] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6296] memfd_create("syzkaller", 0 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5077] <... ioctl resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 6296] <... memfd_create resumed>) = 3 [pid 6296] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6294] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6296] <... mmap resumed>) = 0x7f0356e00000 [pid 6295] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6296] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6294] <... write resumed>) = 524288 [pid 6293] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5077] close(3) = 0 [pid 6296] <... write resumed>) = 524288 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6295] <... write resumed>) = 524288 [ 196.791085][ T6293] loop1: detected capacity change from 0 to 1024 [pid 6294] munmap(0x7f0356e00000, 138412032) = 0 [pid 6294] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6294] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6297 attached [pid 6296] munmap(0x7f0356e00000, 138412032 [pid 6295] munmap(0x7f0356e00000, 138412032 [pid 6294] <... ioctl resumed>) = 0 [pid 6297] set_robust_list(0x55556e32a660, 24 [pid 6296] <... munmap resumed>) = 0 [pid 6295] <... munmap resumed>) = 0 [pid 6294] close(3 [pid 6293] <... mount resumed>) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6297 [pid 5075] <... ioctl resumed>) = 0 [pid 6297] <... set_robust_list resumed>) = 0 [pid 6295] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] close(3 [pid 6295] <... openat resumed>) = 4 [pid 5075] <... close resumed>) = 0 [pid 6297] chdir("./201" [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6297] <... chdir resumed>) = 0 [pid 6296] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6295] ioctl(4, LOOP_SET_FD, 3 [pid 6294] <... close resumed>) = 0 [pid 6293] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6298 [pid 6294] close(4 [pid 6293] <... openat resumed>) = 3 [pid 6293] chdir("./bus"./strace-static-x86_64: Process 6298 attached ) = 0 [pid 6298] set_robust_list(0x55556e32a660, 24 [pid 6293] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6298] <... set_robust_list resumed>) = 0 [pid 6293] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6293] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6298] chdir("./199") = 0 [pid 6293] <... symlink resumed>) = 0 [pid 6298] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6298] setpgid(0, 0 [pid 6295] <... ioctl resumed>) = 0 [pid 6293] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6298] <... setpgid resumed>) = 0 [ 196.849026][ T6294] loop5: detected capacity change from 0 to 1024 [ 196.887564][ T6295] loop0: detected capacity change from 0 to 1024 [pid 6297] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6296] <... openat resumed>) = 4 [pid 6295] close(3 [pid 6294] <... close resumed>) = 0 [pid 6298] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6297] <... prctl resumed>) = 0 [pid 6296] ioctl(4, LOOP_SET_FD, 3 [pid 6295] <... close resumed>) = 0 [pid 6294] mkdir("./bus", 0777 [pid 6293] <... creat resumed>) = 4 [pid 6298] <... openat resumed>) = 3 [pid 6297] setpgid(0, 0 [pid 6295] close(4 [pid 6293] rename("./bus", "./file2" [pid 6298] write(3, "1000", 4 [pid 6297] <... setpgid resumed>) = 0 [pid 6295] <... close resumed>) = 0 [pid 6293] <... rename resumed>) = -1 EEXIST (File exists) [pid 6298] <... write resumed>) = 4 [pid 6293] memfd_create("syzkaller", 0 [pid 6298] close(3 [pid 6293] <... memfd_create resumed>) = 5 [pid 6298] <... close resumed>) = 0 [pid 6293] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6298] symlink("/dev/binderfs", "./binderfs" [pid 6293] <... mmap resumed>) = 0x7f0356e00000 [pid 6298] <... symlink resumed>) = 0 [pid 6294] <... mkdir resumed>) = 0 [pid 6297] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6295] mkdir("./bus", 0777 [pid 6294] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6298] memfd_create("syzkaller", 0) = 3 [pid 6298] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6295] <... mkdir resumed>) = 0 [pid 6293] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6298] <... mmap resumed>) = 0x7f0356e00000 [pid 6295] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6297] <... openat resumed>) = 3 [pid 6297] write(3, "1000", 4 [pid 6294] <... mount resumed>) = 0 [pid 6297] <... write resumed>) = 4 [pid 6297] close(3) = 0 [pid 6294] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6296] <... ioctl resumed>) = 0 [pid 6297] symlink("/dev/binderfs", "./binderfs" [pid 6296] close(3 [pid 6298] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6297] <... symlink resumed>) = 0 [pid 6296] <... close resumed>) = 0 [pid 6294] chdir("./bus" [pid 6296] close(4 [pid 6294] <... chdir resumed>) = 0 [pid 6297] memfd_create("syzkaller", 0 [pid 6296] <... close resumed>) = 0 [pid 6294] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6297] <... memfd_create resumed>) = 3 [pid 6296] mkdir("./bus", 0777 [pid 6294] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6297] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6296] <... mkdir resumed>) = 0 [pid 6294] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6298] <... write resumed>) = 524288 [pid 6297] <... mmap resumed>) = 0x7f0356e00000 [pid 6296] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6295] <... mount resumed>) = 0 [pid 6294] <... symlink resumed>) = 0 [pid 6293] <... write resumed>) = 524288 [pid 6294] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6293] munmap(0x7f0356e00000, 138412032 [pid 6295] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6293] <... munmap resumed>) = 0 [pid 6295] chdir("./bus") = 0 [pid 6293] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6293] close(5 [ 196.901512][ T6296] loop3: detected capacity change from 0 to 1024 [pid 6295] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6297] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6295] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6294] <... creat resumed>) = 4 [pid 6293] <... close resumed>) = 0 [pid 6294] rename("./bus", "./file2" [pid 6295] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6294] <... rename resumed>) = -1 EEXIST (File exists) [pid 6294] memfd_create("syzkaller", 0) = 5 [pid 6294] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6298] munmap(0x7f0356e00000, 138412032 [pid 6295] <... symlink resumed>) = 0 [pid 6294] <... mmap resumed>) = 0x7f0356e00000 [pid 6298] <... munmap resumed>) = 0 [pid 6294] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6298] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6295] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6293] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6298] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6296] <... mount resumed>) = 0 [pid 6297] <... write resumed>) = 524288 [pid 6296] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6295] <... creat resumed>) = 4 [pid 6293] <... open resumed>) = 5 [pid 6295] rename("./bus", "./file2" [pid 6297] munmap(0x7f0356e00000, 138412032) = 0 [pid 6296] <... openat resumed>) = 3 [pid 6295] <... rename resumed>) = -1 EEXIST (File exists) [pid 6293] ftruncate(5, 0 [pid 6296] chdir("./bus" [pid 6295] memfd_create("syzkaller", 0 [pid 6296] <... chdir resumed>) = 0 [pid 6295] <... memfd_create resumed>) = 5 [pid 6296] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6297] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6295] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6296] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6296] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6295] <... mmap resumed>) = 0x7f0356e00000 [pid 6293] <... ftruncate resumed>) = 0 [pid 6297] <... openat resumed>) = 4 [pid 6293] exit_group(0 [pid 6297] ioctl(4, LOOP_SET_FD, 3 [pid 6293] <... exit_group resumed>) = ? [pid 6293] +++ exited with 0 +++ [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6293, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5074] umount2("./198", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./198", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] newfstatat(3, "", [pid 6294] <... write resumed>) = 524288 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6298] close(3 [pid 6297] <... ioctl resumed>) = 0 [pid 6296] <... symlink resumed>) = 0 [pid 6295] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6294] munmap(0x7f0356e00000, 138412032 [pid 5074] getdents64(3, [pid 6298] <... close resumed>) = 0 [pid 6297] close(3 [pid 6296] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6295] <... write resumed>) = 524288 [pid 6294] <... munmap resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6298] close(4 [pid 6297] <... close resumed>) = 0 [pid 5074] umount2("./198/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6298] <... close resumed>) = 0 [pid 6297] close(4 [pid 6298] mkdir("./bus", 0777 [pid 6294] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6298] <... mkdir resumed>) = 0 [ 196.978128][ T6298] loop2: detected capacity change from 0 to 1024 [ 197.007518][ T6297] loop4: detected capacity change from 0 to 1024 [pid 6294] close(5 [pid 6298] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6297] <... close resumed>) = 0 [pid 6296] <... creat resumed>) = 4 [pid 6295] munmap(0x7f0356e00000, 138412032 [pid 6294] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 6297] mkdir("./bus", 0777 [pid 6296] rename("./bus", "./file2" [pid 6295] <... munmap resumed>) = 0 [pid 6297] <... mkdir resumed>) = 0 [pid 6296] <... rename resumed>) = -1 EEXIST (File exists) [pid 6295] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6298] <... mount resumed>) = 0 [pid 6297] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6296] memfd_create("syzkaller", 0 [pid 6295] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6294] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5074] umount2("./198/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6298] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6296] <... memfd_create resumed>) = 5 [pid 6295] close(5 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6298] <... openat resumed>) = 3 [pid 6296] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] newfstatat(AT_FDCWD, "./198/bus", [pid 6298] chdir("./bus" [pid 6296] <... mmap resumed>) = 0x7f0356e00000 [pid 6294] <... open resumed>) = 5 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6298] <... chdir resumed>) = 0 [pid 5074] umount2("./198/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6298] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6295] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6298] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6294] ftruncate(5, 0 [pid 5074] openat(AT_FDCWD, "./198/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6298] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6294] <... ftruncate resumed>) = 0 [pid 5074] <... openat resumed>) = 4 [pid 6297] <... mount resumed>) = 0 [pid 6296] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6294] exit_group(0 [pid 5074] newfstatat(4, "", [pid 6298] <... symlink resumed>) = 0 [pid 6297] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6294] <... exit_group resumed>) = ? [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6298] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6297] <... openat resumed>) = 3 [pid 6295] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6294] +++ exited with 0 +++ [pid 5074] getdents64(4, [pid 6297] chdir("./bus") = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6294, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5078] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 6298] <... creat resumed>) = 4 [pid 6295] <... open resumed>) = 5 [pid 6297] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6295] ftruncate(5, 0 [pid 6298] rename("./bus", "./file2" [pid 6297] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6296] <... write resumed>) = 524288 [pid 5078] umount2("./201", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6298] <... rename resumed>) = -1 EEXIST (File exists) [pid 6297] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6296] munmap(0x7f0356e00000, 138412032 [pid 6295] <... ftruncate resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] getdents64(4, [pid 6298] memfd_create("syzkaller", 0 [pid 6296] <... munmap resumed>) = 0 [pid 6295] exit_group(0 [pid 5078] openat(AT_FDCWD, "./201", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6297] <... symlink resumed>) = 0 [pid 6297] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6295] <... exit_group resumed>) = ? [pid 6296] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5074] close(4 [pid 6298] <... memfd_create resumed>) = 5 [pid 5074] <... close resumed>) = 0 [pid 6298] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6296] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] rmdir("./198/bus" [pid 6298] <... mmap resumed>) = 0x7f0356e00000 [pid 6296] close(5 [pid 5078] newfstatat(3, "", [pid 5074] <... rmdir resumed>) = 0 [pid 6298] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] umount2("./198/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6296] <... close resumed>) = 0 [pid 6295] +++ exited with 0 +++ [pid 5078] getdents64(3, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] newfstatat(AT_FDCWD, "./198/binderfs", [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6295, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5078] umount2("./201/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 6297] <... creat resumed>) = 4 [pid 6296] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5074] unlink("./198/binderfs" [pid 5073] <... restart_syscall resumed>) = 0 [pid 6297] rename("./bus", "./file2" [pid 5074] <... unlink resumed>) = 0 [pid 5074] getdents64(3, [pid 6298] <... write resumed>) = 524288 [pid 6297] <... rename resumed>) = -1 EEXIST (File exists) [pid 6296] <... open resumed>) = 5 [pid 5078] <... umount2 resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6297] memfd_create("syzkaller", 0 [pid 6296] ftruncate(5, 0 [pid 5073] umount2("./199", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6297] <... memfd_create resumed>) = 5 [pid 6297] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6297] <... mmap resumed>) = 0x7f0356e00000 [pid 5073] openat(AT_FDCWD, "./199", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, [pid 5074] close(3 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] umount2("./199/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./198") = 0 [pid 6296] <... ftruncate resumed>) = 0 [pid 5078] umount2("./201/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] mkdir("./199", 0777 [pid 6297] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6296] exit_group(0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... mkdir resumed>) = 0 [pid 6296] <... exit_group resumed>) = ? [pid 5078] newfstatat(AT_FDCWD, "./201/bus", [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5078] umount2("./201/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./201/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5078] newfstatat(4, "", [pid 6298] munmap(0x7f0356e00000, 138412032 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6298] <... munmap resumed>) = 0 [pid 5078] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, [pid 6296] +++ exited with 0 +++ [pid 6298] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5078] close(4 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6296, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6298] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... close resumed>) = 0 [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 6298] close(5 [pid 5078] rmdir("./201/bus" [pid 5076] <... restart_syscall resumed>) = 0 [pid 6297] <... write resumed>) = 524288 [pid 5078] <... rmdir resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 6297] munmap(0x7f0356e00000, 138412032 [pid 5073] umount2("./199/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6297] <... munmap resumed>) = 0 [pid 5076] umount2("./202", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./202", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6298] <... close resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5076] newfstatat(3, "", [pid 5073] newfstatat(AT_FDCWD, "./199/bus", [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6297] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] getdents64(3, [pid 5073] umount2("./199/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6297] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6297] close(5 [pid 5078] umount2("./201/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./202/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6298] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] newfstatat(AT_FDCWD, "./201/binderfs", [pid 5073] openat(AT_FDCWD, "./199/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... openat resumed>) = 4 [pid 5078] unlink("./201/binderfs") = 0 [pid 5073] newfstatat(4, "", [pid 5078] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] close(3) = 0 [pid 5073] getdents64(4, [pid 5078] rmdir("./201") = 0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5078] mkdir("./202", 0777 [pid 6298] <... open resumed>) = 5 [pid 5078] <... mkdir resumed>) = 0 [pid 5073] getdents64(4, [pid 6297] <... close resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6298] ftruncate(5, 0 [pid 5073] close(4 [pid 6298] <... ftruncate resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 6297] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5076] <... umount2 resumed>) = 0 [pid 5073] rmdir("./199/bus" [pid 5078] <... openat resumed>) = 3 [pid 6298] exit_group(0) = ? [pid 6298] +++ exited with 0 +++ [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5076] umount2("./202/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... rmdir resumed>) = 0 [pid 6297] <... open resumed>) = 5 [pid 6297] ftruncate(5, 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./199/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6297] <... ftruncate resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./202/bus", [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6298, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5074] <... ioctl resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] close(3 [pid 6297] exit_group(0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./199", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... close resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./199/binderfs", [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6297] <... exit_group resumed>) = ? [pid 5073] unlink("./199/binderfs" [pid 5075] openat(AT_FDCWD, "./199", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... unlink resumed>) = 0 [pid 5078] <... ioctl resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5073] getdents64(3, [pid 5075] newfstatat(3, "", [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] close(3 [pid 5076] umount2("./202/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] getdents64(3, [pid 5073] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] rmdir("./199" [pid 6297] +++ exited with 0 +++ [pid 5076] openat(AT_FDCWD, "./202/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6299 [pid 5073] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6299 attached [pid 5076] <... openat resumed>) = 4 [pid 5075] umount2("./199/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] mkdir("./200", 0777 [pid 6299] set_robust_list(0x55556e32a660, 24) = 0 [pid 6299] chdir("./199" [pid 5078] close(3) = 0 [pid 6299] <... chdir resumed>) = 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6297, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5076] newfstatat(4, "", [pid 5075] <... umount2 resumed>) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 5077] umount2("./201", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6299] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] getdents64(4, [pid 5073] <... openat resumed>) = 3 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] getdents64(4, [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5077] openat(AT_FDCWD, "./201", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] umount2("./199/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... openat resumed>) = 3 [pid 5076] close(4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(3, "", [pid 5076] <... close resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./199/bus", [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] rmdir("./202/bus" [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] getdents64(3, [pid 6299] <... prctl resumed>) = 0 [pid 6299] setpgid(0, 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] umount2("./199/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] umount2("./201/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "./199/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6299] <... setpgid resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 6299] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] newfstatat(4, "", ./strace-static-x86_64: Process 6300 attached [pid 5076] umount2("./202/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6300] set_robust_list(0x55556e32a660, 24 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(4, [pid 6300] <... set_robust_list resumed>) = 0 [pid 6299] <... openat resumed>) = 3 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6300 [pid 5076] newfstatat(AT_FDCWD, "./202/binderfs", [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, [pid 6300] chdir("./202" [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6299] write(3, "1000", 4 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] close(4 [pid 6300] <... chdir resumed>) = 0 [pid 6299] <... write resumed>) = 4 [pid 6300] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] <... close resumed>) = 0 [pid 6300] <... prctl resumed>) = 0 [pid 6299] close(3 [pid 5076] unlink("./202/binderfs" [pid 5075] rmdir("./199/bus" [pid 6300] setpgid(0, 0 [pid 6299] <... close resumed>) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 6299] symlink("/dev/binderfs", "./binderfs" [pid 6300] <... setpgid resumed>) = 0 [pid 6299] <... symlink resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 6300] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6299] memfd_create("syzkaller", 0 [pid 5077] umount2("./201/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./199/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6300] <... openat resumed>) = 3 [pid 5076] getdents64(3, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6299] <... memfd_create resumed>) = 3 [pid 5077] newfstatat(AT_FDCWD, "./201/bus", [pid 6299] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] newfstatat(AT_FDCWD, "./199/binderfs", [pid 6299] <... mmap resumed>) = 0x7f0356e00000 [pid 6300] write(3, "1000", 4 [pid 5077] umount2("./201/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6300] <... write resumed>) = 4 [pid 5075] unlink("./199/binderfs" [pid 6300] close(3 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] close(3 [pid 5075] <... unlink resumed>) = 0 [pid 6300] <... close resumed>) = 0 [pid 6300] symlink("/dev/binderfs", "./binderfs" [pid 6299] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] openat(AT_FDCWD, "./201/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... close resumed>) = 0 [pid 5075] getdents64(3, [pid 6300] <... symlink resumed>) = 0 [pid 5077] <... openat resumed>) = 4 [pid 5076] rmdir("./202" [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6300] memfd_create("syzkaller", 0 [pid 6299] <... write resumed>) = 524288 [pid 5077] newfstatat(4, "", [pid 5076] <... rmdir resumed>) = 0 [pid 5075] close(3 [pid 6300] <... memfd_create resumed>) = 3 [pid 6299] munmap(0x7f0356e00000, 138412032 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] mkdir("./203", 0777 [pid 5075] <... close resumed>) = 0 [pid 6300] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6300] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] close(4) = 0 [pid 6300] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] rmdir("./199" [pid 5073] <... ioctl resumed>) = 0 [pid 5077] rmdir("./201/bus" [pid 5075] <... rmdir resumed>) = 0 [pid 6299] <... munmap resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] mkdir("./200", 0777 [pid 5077] umount2("./201/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... openat resumed>) = 3 [pid 6299] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] <... mkdir resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./201/binderfs", [pid 6300] <... write resumed>) = 524288 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6299] <... openat resumed>) = 4 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6299] ioctl(4, LOOP_SET_FD, 3 [pid 5075] <... openat resumed>) = 3 [pid 5073] close(3 [pid 5077] unlink("./201/binderfs") = 0 [pid 5077] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] close(3) = 0 [pid 5077] rmdir("./201") = 0 [pid 6299] <... ioctl resumed>) = 0 [pid 5077] mkdir("./202", 0777 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5073] <... close resumed>) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6300] munmap(0x7f0356e00000, 138412032 [pid 5077] <... openat resumed>) = 3 [pid 6300] <... munmap resumed>) = 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 6300] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6300] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6301 attached [pid 6301] set_robust_list(0x55556e32a660, 24 [pid 6299] close(3 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6301 [pid 6301] <... set_robust_list resumed>) = 0 [pid 6299] <... close resumed>) = 0 [pid 6301] chdir("./200" [pid 6299] close(4) = 0 [pid 6300] <... ioctl resumed>) = 0 [pid 6301] <... chdir resumed>) = 0 [pid 6299] mkdir("./bus", 0777 [pid 6301] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6300] close(3) = 0 [pid 6300] close(4) = 0 [pid 6300] mkdir("./bus", 0777) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 6300] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5076] <... ioctl resumed>) = 0 [pid 6301] <... prctl resumed>) = 0 [pid 6299] <... mkdir resumed>) = 0 [pid 6301] setpgid(0, 0 [pid 6299] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5075] close(3) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6300] <... mount resumed>) = 0 [ 197.328440][ T6299] loop1: detected capacity change from 0 to 1024 [ 197.345694][ T6300] loop5: detected capacity change from 0 to 1024 ./strace-static-x86_64: Process 6302 attached [pid 6300] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6301] <... setpgid resumed>) = 0 [pid 5076] close(3 [pid 6302] set_robust_list(0x55556e32a660, 24 [pid 6301] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6300] <... openat resumed>) = 3 [pid 5076] <... close resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6302 [pid 6302] <... set_robust_list resumed>) = 0 [pid 6302] chdir("./200" [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6302] <... chdir resumed>) = 0 [pid 6301] <... openat resumed>) = 3 [pid 6300] chdir("./bus" [pid 6301] write(3, "1000", 4./strace-static-x86_64: Process 6303 attached [pid 6302] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6301] <... write resumed>) = 4 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6303 [pid 6301] close(3 [pid 6303] set_robust_list(0x55556e32a660, 24 [pid 6302] <... prctl resumed>) = 0 [pid 6301] <... close resumed>) = 0 [pid 6299] <... mount resumed>) = 0 [pid 5077] <... ioctl resumed>) = 0 [pid 6303] <... set_robust_list resumed>) = 0 [pid 6302] setpgid(0, 0 [pid 6299] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6301] symlink("/dev/binderfs", "./binderfs" [pid 6299] <... openat resumed>) = 3 [pid 6299] chdir("./bus" [pid 6303] chdir("./203" [pid 6302] <... setpgid resumed>) = 0 [pid 6301] <... symlink resumed>) = 0 [pid 6299] <... chdir resumed>) = 0 [pid 6303] <... chdir resumed>) = 0 [pid 6303] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6302] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6300] <... chdir resumed>) = 0 [pid 6299] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6303] <... prctl resumed>) = 0 [pid 6303] setpgid(0, 0 [pid 6301] memfd_create("syzkaller", 0 [pid 6300] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6299] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] close(3 [pid 6303] <... setpgid resumed>) = 0 [pid 6302] <... openat resumed>) = 3 [pid 6299] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6303] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6300] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... close resumed>) = 0 [pid 6300] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6303] <... openat resumed>) = 3 [pid 6302] write(3, "1000", 4 [pid 6301] <... memfd_create resumed>) = 3 [pid 6303] write(3, "1000", 4 [pid 6302] <... write resumed>) = 4 [pid 6301] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6299] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 6304 attached [pid 6303] <... write resumed>) = 4 [pid 6302] close(3 [pid 6301] <... mmap resumed>) = 0x7f0356e00000 [pid 6300] <... symlink resumed>) = 0 [pid 6299] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6304 [pid 6304] set_robust_list(0x55556e32a660, 24) = 0 [pid 6304] chdir("./202") = 0 [pid 6304] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6304] setpgid(0, 0) = 0 [pid 6300] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6304] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6300] <... creat resumed>) = 4 [pid 6304] <... openat resumed>) = 3 [pid 6300] rename("./bus", "./file2" [pid 6304] write(3, "1000", 4 [pid 6302] <... close resumed>) = 0 [pid 6304] <... write resumed>) = 4 [pid 6304] close(3) = 0 [pid 6304] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6303] close(3 [pid 6302] symlink("/dev/binderfs", "./binderfs" [pid 6301] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6300] <... rename resumed>) = -1 EEXIST (File exists) [pid 6304] memfd_create("syzkaller", 0 [pid 6303] <... close resumed>) = 0 [pid 6302] <... symlink resumed>) = 0 [pid 6300] memfd_create("syzkaller", 0 [pid 6304] <... memfd_create resumed>) = 3 [pid 6303] symlink("/dev/binderfs", "./binderfs" [pid 6302] memfd_create("syzkaller", 0 [pid 6300] <... memfd_create resumed>) = 5 [pid 6304] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6303] <... symlink resumed>) = 0 [pid 6302] <... memfd_create resumed>) = 3 [pid 6300] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6299] <... creat resumed>) = 4 [pid 6304] <... mmap resumed>) = 0x7f0356e00000 [pid 6303] memfd_create("syzkaller", 0 [pid 6302] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6300] <... mmap resumed>) = 0x7f0356e00000 [pid 6304] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6303] <... memfd_create resumed>) = 3 [pid 6302] <... mmap resumed>) = 0x7f0356e00000 [pid 6301] <... write resumed>) = 524288 [pid 6300] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6299] rename("./bus", "./file2" [pid 6302] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6303] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6299] <... rename resumed>) = -1 EEXIST (File exists) [pid 6301] munmap(0x7f0356e00000, 138412032 [pid 6303] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6301] <... munmap resumed>) = 0 [pid 6300] <... write resumed>) = 524288 [pid 6299] memfd_create("syzkaller", 0) = 5 [pid 6301] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6299] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6304] <... write resumed>) = 524288 [pid 6301] <... openat resumed>) = 4 [pid 6304] munmap(0x7f0356e00000, 138412032 [pid 6301] ioctl(4, LOOP_SET_FD, 3 [pid 6304] <... munmap resumed>) = 0 [pid 6300] munmap(0x7f0356e00000, 138412032) = 0 [pid 6304] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6304] ioctl(4, LOOP_SET_FD, 3 [pid 6300] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6302] <... write resumed>) = 524288 [pid 6301] <... ioctl resumed>) = 0 [pid 6299] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6301] close(3 [pid 6300] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6300] close(5 [pid 6303] <... write resumed>) = 524288 [pid 6301] <... close resumed>) = 0 [pid 6300] <... close resumed>) = 0 [pid 6301] close(4 [pid 6302] munmap(0x7f0356e00000, 138412032 [pid 6301] <... close resumed>) = 0 [pid 6299] <... write resumed>) = 524288 [pid 6302] <... munmap resumed>) = 0 [pid 6301] mkdir("./bus", 0777 [pid 6303] munmap(0x7f0356e00000, 138412032 [pid 6300] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6301] <... mkdir resumed>) = 0 [pid 6303] <... munmap resumed>) = 0 [pid 6302] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6301] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6300] <... open resumed>) = 5 [pid 6302] <... openat resumed>) = 4 [pid 6302] ioctl(4, LOOP_SET_FD, 3 [pid 6299] munmap(0x7f0356e00000, 138412032 [pid 6300] ftruncate(5, 0) = 0 [pid 6304] <... ioctl resumed>) = 0 [pid 6300] exit_group(0 [pid 6304] close(3 [pid 6300] <... exit_group resumed>) = ? [pid 6304] <... close resumed>) = 0 [pid 6304] close(4 [pid 6299] <... munmap resumed>) = 0 [pid 6304] <... close resumed>) = 0 [pid 6299] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6304] mkdir("./bus", 0777) = 0 [pid 6303] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6299] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6304] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6303] <... openat resumed>) = 4 [pid 6300] +++ exited with 0 +++ [pid 6299] close(5 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6300, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5078] umount2("./202", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./202", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6303] ioctl(4, LOOP_SET_FD, 3 [pid 6299] <... close resumed>) = 0 [pid 5078] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 197.486596][ T6301] loop0: detected capacity change from 0 to 1024 [ 197.491307][ T6304] loop4: detected capacity change from 0 to 1024 [ 197.524700][ T6302] loop2: detected capacity change from 0 to 1024 [pid 5078] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] umount2("./202/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6304] <... mount resumed>) = 0 [pid 6304] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6302] <... ioctl resumed>) = 0 [pid 6301] <... mount resumed>) = 0 [pid 6304] chdir("./bus" [pid 6302] close(3 [pid 6301] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6304] <... chdir resumed>) = 0 [pid 6302] <... close resumed>) = 0 [pid 6301] <... openat resumed>) = 3 [pid 6299] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6304] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6302] close(4 [pid 6301] chdir("./bus" [pid 6304] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6303] <... ioctl resumed>) = 0 [pid 6302] <... close resumed>) = 0 [pid 6301] <... chdir resumed>) = 0 [pid 6299] <... open resumed>) = 5 [pid 6301] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6299] ftruncate(5, 0 [pid 6304] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6301] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6303] close(3 [pid 6302] mkdir("./bus", 0777 [pid 6301] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6299] <... ftruncate resumed>) = 0 [pid 6303] <... close resumed>) = 0 [pid 6303] close(4 [pid 6302] <... mkdir resumed>) = 0 [pid 6301] <... symlink resumed>) = 0 [pid 6299] exit_group(0 [pid 5078] <... umount2 resumed>) = 0 [pid 6303] <... close resumed>) = 0 [pid 6302] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6301] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6299] <... exit_group resumed>) = ? [pid 6303] mkdir("./bus", 0777 [pid 6304] <... symlink resumed>) = 0 [pid 6304] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6303] <... mkdir resumed>) = 0 [pid 6299] +++ exited with 0 +++ [pid 6304] <... creat resumed>) = 4 [pid 6303] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6299, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5074] umount2("./199", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./202/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6301] <... creat resumed>) = 4 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./199", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6301] rename("./bus", "./file2" [pid 5078] newfstatat(AT_FDCWD, "./202/bus", [pid 5074] <... openat resumed>) = 3 [pid 6304] rename("./bus", "./file2" [pid 6303] <... mount resumed>) = 0 [pid 6302] <... mount resumed>) = 0 [pid 6301] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6303] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6302] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6301] memfd_create("syzkaller", 0) = 5 [pid 5078] umount2("./202/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] newfstatat(3, "", [pid 6303] <... openat resumed>) = 3 [pid 6302] <... openat resumed>) = 3 [pid 6301] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 197.559649][ T6303] loop3: detected capacity change from 0 to 1024 [pid 6304] <... rename resumed>) = -1 EEXIST (File exists) [pid 6303] chdir("./bus" [pid 6302] chdir("./bus" [pid 6301] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] openat(AT_FDCWD, "./202/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6304] memfd_create("syzkaller", 0 [pid 6303] <... chdir resumed>) = 0 [pid 6302] <... chdir resumed>) = 0 [pid 6301] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... openat resumed>) = 4 [pid 5074] getdents64(3, [pid 6304] <... memfd_create resumed>) = 5 [pid 6303] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6302] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] newfstatat(4, "", [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6304] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6303] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6302] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] umount2("./199/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6304] <... mmap resumed>) = 0x7f0356e00000 [pid 6303] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6302] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5078] close(4) = 0 [pid 5078] rmdir("./202/bus") = 0 [pid 6303] <... symlink resumed>) = 0 [pid 6302] <... symlink resumed>) = 0 [pid 6301] <... write resumed>) = 524288 [pid 5078] umount2("./202/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6301] munmap(0x7f0356e00000, 138412032 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6301] <... munmap resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 6302] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6304] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6303] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] newfstatat(AT_FDCWD, "./202/binderfs", [pid 6301] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] umount2("./199/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6301] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6301] close(5 [pid 5074] newfstatat(AT_FDCWD, "./199/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6301] <... close resumed>) = 0 [pid 5074] umount2("./199/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./199/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... openat resumed>) = 4 [pid 5074] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, [pid 5078] unlink("./202/binderfs" [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5078] <... unlink resumed>) = 0 [pid 5074] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5078] getdents64(3, [pid 5074] close(4 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./199/bus" [pid 6304] <... write resumed>) = 524288 [pid 5078] close(3 [pid 5074] <... rmdir resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5074] umount2("./199/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] rmdir("./202" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6304] munmap(0x7f0356e00000, 138412032 [pid 6303] <... creat resumed>) = 4 [pid 6302] <... creat resumed>) = 4 [pid 5078] <... rmdir resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./199/binderfs", [pid 6303] rename("./bus", "./file2" [pid 6302] rename("./bus", "./file2" [pid 6301] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] mkdir("./203", 0777 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6304] <... munmap resumed>) = 0 [pid 6303] <... rename resumed>) = -1 EEXIST (File exists) [pid 6302] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] <... mkdir resumed>) = 0 [pid 5074] unlink("./199/binderfs" [pid 6304] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6303] memfd_create("syzkaller", 0 [pid 6302] memfd_create("syzkaller", 0 [pid 5074] <... unlink resumed>) = 0 [pid 6303] <... memfd_create resumed>) = 5 [pid 6302] <... memfd_create resumed>) = 5 [pid 6304] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6303] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6302] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] getdents64(3, [pid 6304] close(5 [pid 6303] <... mmap resumed>) = 0x7f0356e00000 [pid 6302] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... openat resumed>) = 3 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5074] close(3) = 0 [pid 6301] <... open resumed>) = 5 [pid 6301] ftruncate(5, 0 [pid 5074] rmdir("./199" [pid 6301] <... ftruncate resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 6301] exit_group(0) = ? [pid 5074] mkdir("./200", 0777 [pid 6302] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... mkdir resumed>) = 0 [pid 6301] +++ exited with 0 +++ [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 6303] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6301, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6304] <... close resumed>) = 0 [pid 5073] umount2("./200", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6303] <... write resumed>) = 524288 [pid 5073] openat(AT_FDCWD, "./200", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6304] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6303] munmap(0x7f0356e00000, 138412032 [pid 6302] <... write resumed>) = 524288 [pid 5073] newfstatat(3, "", [pid 6304] <... open resumed>) = 5 [pid 6302] munmap(0x7f0356e00000, 138412032 [pid 5078] <... ioctl resumed>) = 0 [pid 6304] ftruncate(5, 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] close(3) = 0 [pid 6302] <... munmap resumed>) = 0 [pid 5073] getdents64(3, [pid 6304] <... ftruncate resumed>) = 0 [pid 6304] exit_group(0 [pid 6303] <... munmap resumed>) = 0 [pid 6302] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6304] <... exit_group resumed>) = ? [pid 5073] umount2("./200/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6304] +++ exited with 0 +++ [pid 6303] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6302] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6303] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6302] close(5 [pid 6303] close(5 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6304, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5077] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 6303] <... close resumed>) = 0 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6305 [pid 5077] umount2("./202", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6305 attached ) = -1 EINVAL (Invalid argument) [pid 6305] set_robust_list(0x55556e32a660, 24 [pid 6303] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6302] <... close resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./202", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... umount2 resumed>) = 0 [pid 6305] <... set_robust_list resumed>) = 0 [pid 6302] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6305] chdir("./203" [pid 5077] <... openat resumed>) = 3 [pid 5074] close(3 [pid 5077] newfstatat(3, "", [pid 5074] <... close resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] getdents64(3, [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] umount2("./202/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6306 attached [pid 6306] set_robust_list(0x55556e32a660, 24) = 0 [pid 6306] chdir("./200" [pid 6305] <... chdir resumed>) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6306 [pid 6302] <... open resumed>) = 5 [pid 6306] <... chdir resumed>) = 0 [pid 6305] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6306] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6302] ftruncate(5, 0 [pid 6306] <... prctl resumed>) = 0 [pid 6303] <... open resumed>) = 5 [pid 6306] setpgid(0, 0 [pid 6305] <... prctl resumed>) = 0 [pid 6302] <... ftruncate resumed>) = 0 [pid 5073] umount2("./200/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6306] <... setpgid resumed>) = 0 [pid 6306] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6305] setpgid(0, 0 [pid 6302] exit_group(0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6303] ftruncate(5, 0 [pid 5077] umount2("./202/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6306] <... openat resumed>) = 3 [pid 6305] <... setpgid resumed>) = 0 [pid 6303] <... ftruncate resumed>) = 0 [pid 6302] <... exit_group resumed>) = ? [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./200/bus", [pid 6305] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5077] newfstatat(AT_FDCWD, "./202/bus", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6306] write(3, "1000", 4 [pid 6305] <... openat resumed>) = 3 [pid 6303] exit_group(0 [pid 6302] +++ exited with 0 +++ [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./200/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6306] <... write resumed>) = 4 [pid 6305] write(3, "1000", 4 [pid 6303] <... exit_group resumed>) = ? [pid 5077] umount2("./202/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6302, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6306] close(3 [pid 6305] <... write resumed>) = 4 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./200/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6306] <... close resumed>) = 0 [pid 6305] close(3 [pid 6303] +++ exited with 0 +++ [pid 5077] openat(AT_FDCWD, "./202/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6306] symlink("/dev/binderfs", "./binderfs" [pid 6305] <... close resumed>) = 0 [pid 5077] <... openat resumed>) = 4 [pid 5075] umount2("./200", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... openat resumed>) = 4 [pid 6306] <... symlink resumed>) = 0 [pid 6305] symlink("/dev/binderfs", "./binderfs" [pid 5077] newfstatat(4, "", [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6303, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6306] memfd_create("syzkaller", 0 [pid 6305] <... symlink resumed>) = 0 [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6306] <... memfd_create resumed>) = 3 [pid 6305] memfd_create("syzkaller", 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... restart_syscall resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./200", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] newfstatat(4, "", [pid 6306] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6305] <... memfd_create resumed>) = 3 [pid 5077] getdents64(4, [pid 6306] <... mmap resumed>) = 0x7f0356e00000 [pid 6305] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] <... openat resumed>) = 3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6306] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6305] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] getdents64(4, [pid 5076] umount2("./203", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] getdents64(4, [pid 5075] newfstatat(3, "", [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] close(4 [pid 5076] openat(AT_FDCWD, "./203", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] <... close resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5075] getdents64(3, [pid 5073] getdents64(4, [pid 5077] rmdir("./202/bus" [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] getdents64(3, [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] umount2("./202/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] umount2("./200/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] close(4 [pid 6305] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... close resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./202/binderfs", [pid 5073] rmdir("./200/bus" [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./203/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... rmdir resumed>) = 0 [pid 5077] unlink("./202/binderfs" [pid 5073] umount2("./200/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... unlink resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] getdents64(3, [pid 5073] newfstatat(AT_FDCWD, "./200/binderfs", [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] close(3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6306] <... write resumed>) = 524288 [pid 6305] <... write resumed>) = 524288 [pid 5077] <... close resumed>) = 0 [pid 5073] unlink("./200/binderfs" [pid 6306] munmap(0x7f0356e00000, 138412032 [pid 6305] munmap(0x7f0356e00000, 138412032 [pid 5077] rmdir("./202" [pid 5073] <... unlink resumed>) = 0 [pid 6306] <... munmap resumed>) = 0 [pid 6305] <... munmap resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5073] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5077] mkdir("./203", 0777 [pid 5073] rmdir("./200" [pid 5077] <... mkdir resumed>) = 0 [pid 5076] umount2("./203/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6306] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] umount2("./200/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... rmdir resumed>) = 0 [pid 6305] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./203/bus", [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] mkdir("./201", 0777 [pid 6305] <... openat resumed>) = 4 [pid 6306] <... openat resumed>) = 4 [pid 5077] <... openat resumed>) = 3 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... mkdir resumed>) = 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6306] ioctl(4, LOOP_SET_FD, 3 [pid 6305] ioctl(4, LOOP_SET_FD, 3 [pid 5076] umount2("./203/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] newfstatat(AT_FDCWD, "./200/bus", [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5075] umount2("./200/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./203/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] openat(AT_FDCWD, "./200/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... openat resumed>) = 4 [pid 5075] <... openat resumed>) = 4 [pid 5076] newfstatat(4, "", [pid 5075] newfstatat(4, "", [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, [pid 5075] getdents64(4, [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, [pid 5075] getdents64(4, [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] close(4 [pid 5075] close(4 [pid 5076] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5076] rmdir("./203/bus" [pid 5075] rmdir("./200/bus" [pid 5076] <... rmdir resumed>) = 0 [pid 6305] <... ioctl resumed>) = 0 [pid 6305] close(3 [pid 5076] umount2("./203/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... rmdir resumed>) = 0 [pid 6306] <... ioctl resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./200/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] newfstatat(AT_FDCWD, "./203/binderfs", [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] newfstatat(AT_FDCWD, "./200/binderfs", [pid 5076] unlink("./203/binderfs" [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6306] close(3 [pid 6305] <... close resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5075] unlink("./200/binderfs" [pid 6306] <... close resumed>) = 0 [pid 6305] close(4 [pid 5076] getdents64(3, [pid 5075] <... unlink resumed>) = 0 [pid 6306] close(4 [pid 6305] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] getdents64(3, [pid 6306] <... close resumed>) = 0 [pid 6305] mkdir("./bus", 0777 [pid 5076] close(3 [pid 6306] mkdir("./bus", 0777 [pid 6305] <... mkdir resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6306] <... mkdir resumed>) = 0 [pid 6305] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5076] rmdir("./203" [pid 5075] close(3 [pid 6306] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./200" [pid 5076] mkdir("./204", 0777) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5077] <... ioctl resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] mkdir("./201", 0777 [pid 6306] <... mount resumed>) = 0 [pid 5077] close(3 [pid 5076] <... openat resumed>) = 3 [pid 5075] <... mkdir resumed>) = 0 [pid 6306] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5077] <... close resumed>) = 0 [pid 6306] chdir("./bus" [pid 6305] <... mount resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... openat resumed>) = 3 [pid 6306] <... chdir resumed>) = 0 [pid 6305] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6306] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6305] <... openat resumed>) = 3 [pid 6306] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6306] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6305] chdir("./bus") = 0 [pid 6305] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6305] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6306] <... symlink resumed>) = 0 [pid 6305] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5073] <... ioctl resumed>) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6307 [ 197.890221][ T6306] loop1: detected capacity change from 0 to 1024 [ 197.891280][ T6305] loop5: detected capacity change from 0 to 1024 [pid 6306] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6307 attached [pid 6305] <... symlink resumed>) = 0 [pid 6307] set_robust_list(0x55556e32a660, 24 [pid 6305] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5073] close(3 [pid 6306] <... creat resumed>) = 4 [pid 6306] rename("./bus", "./file2") = -1 EEXIST (File exists) [pid 6305] <... creat resumed>) = 4 [pid 6306] memfd_create("syzkaller", 0 [pid 6305] rename("./bus", "./file2" [pid 6306] <... memfd_create resumed>) = 5 [pid 6305] <... rename resumed>) = -1 EEXIST (File exists) [pid 5073] <... close resumed>) = 0 [pid 6307] <... set_robust_list resumed>) = 0 [pid 6306] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6305] memfd_create("syzkaller", 0 [pid 6307] chdir("./203" [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6307] <... chdir resumed>) = 0 [pid 6306] <... mmap resumed>) = 0x7f0356e00000 [pid 6305] <... memfd_create resumed>) = 5 [pid 6307] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6306] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6305] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6307] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 6308 attached [pid 6307] setpgid(0, 0 [pid 6305] <... mmap resumed>) = 0x7f0356e00000 [pid 6307] <... setpgid resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6308 [pid 6308] set_robust_list(0x55556e32a660, 24 [pid 6307] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6308] <... set_robust_list resumed>) = 0 [pid 6307] <... openat resumed>) = 3 [pid 6305] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6308] chdir("./201") = 0 [pid 6308] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6307] write(3, "1000", 4 [pid 6305] <... write resumed>) = 524288 [pid 5076] <... ioctl resumed>) = 0 [pid 6307] <... write resumed>) = 4 [pid 5076] close(3 [pid 6307] close(3 [pid 5076] <... close resumed>) = 0 [pid 6307] <... close resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6307] symlink("/dev/binderfs", "./binderfs" [pid 6308] setpgid(0, 0) = 0 [pid 6308] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6307] <... symlink resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6309 [pid 6308] write(3, "1000", 4) = 4 [pid 6308] close(3./strace-static-x86_64: Process 6309 attached ) = 0 [pid 6307] memfd_create("syzkaller", 0 [pid 6309] set_robust_list(0x55556e32a660, 24 [pid 6308] symlink("/dev/binderfs", "./binderfs" [pid 6306] <... write resumed>) = 524288 [pid 6307] <... memfd_create resumed>) = 3 [pid 5075] <... ioctl resumed>) = 0 [pid 6309] <... set_robust_list resumed>) = 0 [pid 6308] <... symlink resumed>) = 0 [pid 6307] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6308] memfd_create("syzkaller", 0 [pid 6309] chdir("./204" [pid 6308] <... memfd_create resumed>) = 3 [pid 6307] <... mmap resumed>) = 0x7f0356e00000 [pid 6305] munmap(0x7f0356e00000, 138412032 [pid 6309] <... chdir resumed>) = 0 [pid 6308] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6305] <... munmap resumed>) = 0 [pid 6309] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6308] <... mmap resumed>) = 0x7f0356e00000 [pid 6306] munmap(0x7f0356e00000, 138412032 [pid 6309] <... prctl resumed>) = 0 [pid 6308] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6306] <... munmap resumed>) = 0 [pid 6305] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] close(3 [pid 6309] setpgid(0, 0 [pid 5075] <... close resumed>) = 0 [pid 6305] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6305] close(5 [pid 6307] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6305] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6309] <... setpgid resumed>) = 0 [pid 6306] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6309] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6306] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6306] close(5 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6310 [pid 6309] <... openat resumed>) = 3 [pid 6309] write(3, "1000", 4) = 4 [pid 6309] close(3 [pid 6305] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6309] <... close resumed>) = 0 ./strace-static-x86_64: Process 6310 attached [pid 6308] <... write resumed>) = 524288 [pid 6307] <... write resumed>) = 524288 [pid 6306] <... close resumed>) = 0 [pid 6309] symlink("/dev/binderfs", "./binderfs" [pid 6305] <... open resumed>) = 5 [pid 6310] set_robust_list(0x55556e32a660, 24 [pid 6307] munmap(0x7f0356e00000, 138412032 [pid 6310] <... set_robust_list resumed>) = 0 [pid 6309] <... symlink resumed>) = 0 [pid 6308] munmap(0x7f0356e00000, 138412032 [pid 6305] ftruncate(5, 0 [pid 6310] chdir("./201" [pid 6307] <... munmap resumed>) = 0 [pid 6306] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6310] <... chdir resumed>) = 0 [pid 6309] memfd_create("syzkaller", 0 [pid 6308] <... munmap resumed>) = 0 [pid 6307] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6305] <... ftruncate resumed>) = 0 [pid 6310] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6309] <... memfd_create resumed>) = 3 [pid 6308] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6307] <... openat resumed>) = 4 [pid 6306] <... open resumed>) = 5 [pid 6305] exit_group(0 [pid 6310] <... prctl resumed>) = 0 [pid 6308] <... openat resumed>) = 4 [pid 6305] <... exit_group resumed>) = ? [pid 6310] setpgid(0, 0 [pid 6308] ioctl(4, LOOP_SET_FD, 3 [pid 6306] ftruncate(5, 0 [pid 6305] +++ exited with 0 +++ [pid 6310] <... setpgid resumed>) = 0 [pid 6307] ioctl(4, LOOP_SET_FD, 3 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6305, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6310] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6309] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6306] <... ftruncate resumed>) = 0 [pid 6306] exit_group(0 [pid 6310] <... openat resumed>) = 3 [pid 6306] <... exit_group resumed>) = ? [pid 6310] write(3, "1000", 4 [pid 6309] <... mmap resumed>) = 0x7f0356e00000 [pid 6307] <... ioctl resumed>) = 0 [pid 6306] +++ exited with 0 +++ [pid 6310] <... write resumed>) = 4 [pid 6310] close(3) = 0 [pid 6310] symlink("/dev/binderfs", "./binderfs" [pid 6309] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6307] close(3 [pid 5078] umount2("./203", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6306, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./203", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... restart_syscall resumed>) = 0 [pid 6310] <... symlink resumed>) = 0 [pid 6308] <... ioctl resumed>) = 0 [pid 6307] <... close resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 6307] close(4) = 0 [pid 6307] mkdir("./bus", 0777 [pid 5074] umount2("./200", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6310] memfd_create("syzkaller", 0 [pid 5078] newfstatat(3, "", [pid 6307] <... mkdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6310] <... memfd_create resumed>) = 3 [pid 6309] <... write resumed>) = 524288 [pid 6307] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] openat(AT_FDCWD, "./200", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6310] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] getdents64(3, [pid 5074] <... openat resumed>) = 3 [pid 6310] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] newfstatat(3, "", [pid 5078] umount2("./203/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6310] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] umount2("./200/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6308] close(3) = 0 [pid 6308] close(4) = 0 [pid 6308] mkdir("./bus", 0777) = 0 [pid 6308] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6307] <... mount resumed>) = 0 [ 198.077866][ T6307] loop4: detected capacity change from 0 to 1024 [ 198.097427][ T6308] loop0: detected capacity change from 0 to 1024 [pid 6309] munmap(0x7f0356e00000, 138412032 [pid 5078] <... umount2 resumed>) = 0 [pid 6309] <... munmap resumed>) = 0 [pid 6307] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6310] <... write resumed>) = 524288 [pid 6307] <... openat resumed>) = 3 [pid 6307] chdir("./bus" [pid 6309] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6307] <... chdir resumed>) = 0 [pid 5078] umount2("./203/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6307] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] newfstatat(AT_FDCWD, "./203/bus", [pid 6309] ioctl(4, LOOP_SET_FD, 3 [pid 6310] munmap(0x7f0356e00000, 138412032 [pid 6308] <... mount resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6310] <... munmap resumed>) = 0 [pid 6308] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6310] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6308] chdir("./bus" [pid 6307] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] umount2("./203/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6310] <... openat resumed>) = 4 [pid 6308] <... chdir resumed>) = 0 [pid 6310] ioctl(4, LOOP_SET_FD, 3 [pid 6308] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6309] <... ioctl resumed>) = 0 [pid 6308] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6307] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6309] close(3 [pid 5078] openat(AT_FDCWD, "./203/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6309] <... close resumed>) = 0 [pid 5078] <... openat resumed>) = 4 [pid 5078] newfstatat(4, "", [pid 6309] close(4 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6309] <... close resumed>) = 0 [pid 6309] mkdir("./bus", 0777 [pid 6308] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6307] <... symlink resumed>) = 0 [pid 6309] <... mkdir resumed>) = 0 [pid 6307] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] getdents64(4, [pid 5074] <... umount2 resumed>) = 0 [pid 6309] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6308] <... symlink resumed>) = 0 [pid 6308] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, [pid 5074] umount2("./200/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] close(4 [pid 5074] newfstatat(AT_FDCWD, "./200/bus", [pid 5078] <... close resumed>) = 0 [ 198.167701][ T6309] loop3: detected capacity change from 0 to 1024 [ 198.185696][ T6310] loop2: detected capacity change from 0 to 1024 [pid 6310] <... ioctl resumed>) = 0 [pid 6308] <... creat resumed>) = 4 [pid 6307] <... creat resumed>) = 4 [pid 6309] <... mount resumed>) = 0 [pid 5078] rmdir("./203/bus" [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6310] close(3 [pid 6309] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6307] rename("./bus", "./file2" [pid 5078] <... rmdir resumed>) = 0 [pid 5074] umount2("./200/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6310] <... close resumed>) = 0 [pid 6309] <... openat resumed>) = 3 [pid 6308] rename("./bus", "./file2" [pid 6310] close(4 [pid 6309] chdir("./bus" [pid 6307] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] umount2("./203/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6310] <... close resumed>) = 0 [pid 6309] <... chdir resumed>) = 0 [pid 6307] memfd_create("syzkaller", 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./200/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6310] mkdir("./bus", 0777 [pid 6309] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6307] <... memfd_create resumed>) = 5 [pid 5078] newfstatat(AT_FDCWD, "./203/binderfs", [pid 5074] <... openat resumed>) = 4 [pid 6310] <... mkdir resumed>) = 0 [pid 6309] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6307] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6309] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5074] newfstatat(4, "", [pid 6309] <... symlink resumed>) = 0 [pid 6308] <... rename resumed>) = -1 EEXIST (File exists) [pid 6307] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] unlink("./203/binderfs" [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6310] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6309] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6308] memfd_create("syzkaller", 0 [pid 5074] getdents64(4, [pid 6308] <... memfd_create resumed>) = 5 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6308] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... unlink resumed>) = 0 [pid 5074] getdents64(4, [pid 6310] <... mount resumed>) = 0 [pid 6309] <... creat resumed>) = 4 [pid 6308] <... mmap resumed>) = 0x7f0356e00000 [pid 6307] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] getdents64(3, [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6310] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6309] rename("./bus", "./file2" [pid 6310] <... openat resumed>) = 3 [pid 6310] chdir("./bus" [pid 5074] close(4 [pid 6310] <... chdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 6310] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] rmdir("./200/bus" [pid 6310] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] close(3 [pid 5074] <... rmdir resumed>) = 0 [pid 6310] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6308] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... close resumed>) = 0 [pid 6309] <... rename resumed>) = -1 EEXIST (File exists) [pid 5074] umount2("./200/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] rmdir("./203" [pid 6309] memfd_create("syzkaller", 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6310] <... symlink resumed>) = 0 [pid 6309] <... memfd_create resumed>) = 5 [pid 5074] newfstatat(AT_FDCWD, "./200/binderfs", [pid 6310] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6309] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6307] <... write resumed>) = 524288 [pid 5078] mkdir("./204", 0777 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6309] <... mmap resumed>) = 0x7f0356e00000 [pid 5074] unlink("./200/binderfs" [pid 6309] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... unlink resumed>) = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 5074] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] rmdir("./200" [pid 5078] <... openat resumed>) = 3 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5074] <... rmdir resumed>) = 0 [pid 6307] munmap(0x7f0356e00000, 138412032) = 0 [pid 5074] mkdir("./201", 0777 [pid 6310] <... creat resumed>) = 4 [pid 6307] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] <... mkdir resumed>) = 0 [pid 6310] rename("./bus", "./file2" [pid 6307] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6307] close(5 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6309] <... write resumed>) = 524288 [pid 5074] <... openat resumed>) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6307] <... close resumed>) = 0 [pid 6310] <... rename resumed>) = -1 EEXIST (File exists) [pid 6310] memfd_create("syzkaller", 0) = 5 [pid 6307] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6308] <... write resumed>) = 524288 [pid 6308] munmap(0x7f0356e00000, 138412032 [pid 6310] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6310] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6308] <... munmap resumed>) = 0 [pid 6308] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6307] <... open resumed>) = 5 [pid 6308] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6309] munmap(0x7f0356e00000, 138412032 [pid 6308] close(5 [pid 6307] ftruncate(5, 0 [pid 6309] <... munmap resumed>) = 0 [pid 6307] <... ftruncate resumed>) = 0 [pid 6307] exit_group(0 [pid 6308] <... close resumed>) = 0 [pid 6307] <... exit_group resumed>) = ? [pid 6309] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6307] +++ exited with 0 +++ [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6307, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6309] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6309] close(5 [pid 5077] umount2("./203", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6310] <... write resumed>) = 524288 [pid 6308] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./203", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5077] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5077] getdents64(3, [pid 5078] <... ioctl resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] umount2("./203/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6309] <... close resumed>) = 0 [pid 6308] <... open resumed>) = 5 [pid 6308] ftruncate(5, 0 [pid 5077] <... umount2 resumed>) = 0 [pid 6310] munmap(0x7f0356e00000, 138412032 [pid 6309] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6310] <... munmap resumed>) = 0 [pid 6308] <... ftruncate resumed>) = 0 [pid 6310] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6310] close(5) = 0 [pid 6308] exit_group(0 [pid 5078] close(3 [pid 5077] umount2("./203/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] close(3 [pid 6309] <... open resumed>) = 5 [pid 6309] ftruncate(5, 0 [pid 6308] <... exit_group resumed>) = ? [pid 5078] <... close resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... close resumed>) = 0 [pid 6309] <... ftruncate resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./203/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] umount2("./203/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6311 attached [pid 6309] exit_group(0 [pid 6308] +++ exited with 0 +++ [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6309] <... exit_group resumed>) = ? [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6309] +++ exited with 0 +++ [pid 5077] openat(AT_FDCWD, "./203/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6308, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6310] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] <... openat resumed>) = 4 [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 5077] newfstatat(4, "", [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6309, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5073] <... restart_syscall resumed>) = 0 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6311 [pid 5076] umount2("./204", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] openat(AT_FDCWD, "./204", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] umount2("./201", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6311] set_robust_list(0x55556e32a660, 24./strace-static-x86_64: Process 6312 attached ) = 0 [pid 5077] getdents64(4, [pid 5076] <... openat resumed>) = 3 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6312 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] newfstatat(3, "", [pid 5073] openat(AT_FDCWD, "./201", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6311] chdir("./204" [pid 6312] set_robust_list(0x55556e32a660, 24 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5076] getdents64(3, [pid 5073] newfstatat(3, "", [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6312] <... set_robust_list resumed>) = 0 [pid 6311] <... chdir resumed>) = 0 [pid 6310] <... open resumed>) = 5 [pid 5077] getdents64(4, [pid 5076] umount2("./204/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] getdents64(3, [pid 6312] chdir("./201" [pid 6311] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6312] <... chdir resumed>) = 0 [pid 6311] <... prctl resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] close(4 [pid 5073] umount2("./201/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6312] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6311] setpgid(0, 0 [pid 5077] <... close resumed>) = 0 [pid 6312] <... prctl resumed>) = 0 [pid 6311] <... setpgid resumed>) = 0 [pid 5077] rmdir("./203/bus" [pid 6312] setpgid(0, 0 [pid 6311] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5077] <... rmdir resumed>) = 0 [pid 6312] <... setpgid resumed>) = 0 [pid 6310] ftruncate(5, 0 [pid 6312] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6311] <... openat resumed>) = 3 [pid 6310] <... ftruncate resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 6310] exit_group(0 [pid 5077] umount2("./203/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6310] <... exit_group resumed>) = ? [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6312] <... openat resumed>) = 3 [pid 5077] newfstatat(AT_FDCWD, "./203/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] unlink("./203/binderfs" [pid 6311] write(3, "1000", 4 [pid 5077] <... unlink resumed>) = 0 [pid 6312] write(3, "1000", 4 [pid 6311] <... write resumed>) = 4 [pid 5077] getdents64(3, [pid 5073] <... umount2 resumed>) = 0 [pid 6312] <... write resumed>) = 4 [pid 6311] close(3 [pid 6310] +++ exited with 0 +++ [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] umount2("./201/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6312] close(3 [pid 6311] <... close resumed>) = 0 [pid 5077] close(3 [pid 5076] umount2("./204/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6312] <... close resumed>) = 0 [pid 6311] symlink("/dev/binderfs", "./binderfs" [pid 5077] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6310, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5073] newfstatat(AT_FDCWD, "./201/bus", [pid 5077] rmdir("./203" [pid 5076] newfstatat(AT_FDCWD, "./204/bus", [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6312] symlink("/dev/binderfs", "./binderfs" [pid 6311] <... symlink resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... restart_syscall resumed>) = 0 [pid 5073] umount2("./201/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6311] memfd_create("syzkaller", 0 [pid 5077] mkdir("./204", 0777 [pid 5076] umount2("./204/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] openat(AT_FDCWD, "./201/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6312] <... symlink resumed>) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./201", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... openat resumed>) = 4 [pid 6311] <... memfd_create resumed>) = 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6311] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] openat(AT_FDCWD, "./201", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] newfstatat(4, "", [pid 6312] memfd_create("syzkaller", 0 [pid 6311] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] openat(AT_FDCWD, "./204/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... openat resumed>) = 3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] <... openat resumed>) = 4 [pid 5075] newfstatat(3, "", [pid 5073] getdents64(4, [pid 5077] <... openat resumed>) = 3 [pid 5076] newfstatat(4, "", [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, [pid 5073] getdents64(4, [pid 6312] <... memfd_create resumed>) = 3 [pid 5076] getdents64(4, [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6312] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] umount2("./201/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] close(4 [pid 6312] <... mmap resumed>) = 0x7f0356e00000 [pid 5073] <... close resumed>) = 0 [pid 5076] getdents64(4, [pid 5073] rmdir("./201/bus" [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5076] close(4) = 0 [pid 5076] rmdir("./204/bus") = 0 [pid 5073] umount2("./201/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./201/binderfs", [pid 5076] umount2("./204/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] unlink("./201/binderfs" [pid 6311] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] newfstatat(AT_FDCWD, "./204/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5076] unlink("./204/binderfs" [pid 5075] umount2("./201/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] getdents64(3, [pid 5076] <... unlink resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6312] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] getdents64(3, [pid 5075] newfstatat(AT_FDCWD, "./201/bus", [pid 5073] close(3 [pid 6312] <... write resumed>) = 524288 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... close resumed>) = 0 [pid 5076] close(3 [pid 5075] umount2("./201/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] rmdir("./201" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... close resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 6312] munmap(0x7f0356e00000, 138412032 [pid 6311] <... write resumed>) = 524288 [pid 5076] rmdir("./204" [pid 5075] openat(AT_FDCWD, "./201/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6312] <... munmap resumed>) = 0 [pid 6311] munmap(0x7f0356e00000, 138412032 [pid 5073] mkdir("./202", 0777 [pid 6312] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6311] <... munmap resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 5075] newfstatat(4, "", [pid 6312] <... openat resumed>) = 4 [pid 6312] ioctl(4, LOOP_SET_FD, 3 [pid 5076] mkdir("./205", 0777 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 6311] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5077] <... ioctl resumed>) = 0 [pid 5075] getdents64(4, [pid 6311] ioctl(4, LOOP_SET_FD, 3 [pid 5077] close(3 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5077] <... close resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] getdents64(4, [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... openat resumed>) = 3 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6312] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 6313 attached [pid 6312] close(3 [pid 6311] <... ioctl resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5075] close(4 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6313] set_robust_list(0x55556e32a660, 24 [pid 6312] <... close resumed>) = 0 [pid 6311] close(3 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6313 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] <... close resumed>) = 0 [pid 6313] <... set_robust_list resumed>) = 0 [pid 6312] close(4 [pid 6311] <... close resumed>) = 0 [pid 5075] rmdir("./201/bus" [pid 6313] chdir("./204" [pid 6312] <... close resumed>) = 0 [pid 6311] close(4 [pid 6313] <... chdir resumed>) = 0 [pid 6312] mkdir("./bus", 0777 [pid 6311] <... close resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 6313] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6312] <... mkdir resumed>) = 0 [pid 6311] mkdir("./bus", 0777 [pid 5075] umount2("./201/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6313] <... prctl resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6313] setpgid(0, 0 [pid 6311] <... mkdir resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./201/binderfs", [pid 6313] <... setpgid resumed>) = 0 [pid 6312] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6313] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6311] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5075] unlink("./201/binderfs") = 0 [pid 6313] <... openat resumed>) = 3 [ 198.496582][ T6312] loop1: detected capacity change from 0 to 1024 [ 198.505365][ T6311] loop5: detected capacity change from 0 to 1024 [pid 6313] write(3, "1000", 4 [pid 5075] getdents64(3, [pid 6313] <... write resumed>) = 4 [pid 6312] <... mount resumed>) = 0 [pid 6311] <... mount resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6312] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6313] close(3 [pid 5075] close(3 [pid 6313] <... close resumed>) = 0 [pid 6312] <... openat resumed>) = 3 [pid 6311] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5075] <... close resumed>) = 0 [pid 6313] symlink("/dev/binderfs", "./binderfs" [pid 6311] <... openat resumed>) = 3 [pid 6311] chdir("./bus" [pid 5075] rmdir("./201" [pid 6313] <... symlink resumed>) = 0 [pid 6311] <... chdir resumed>) = 0 [pid 6311] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6312] chdir("./bus" [pid 6311] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5075] <... rmdir resumed>) = 0 [pid 6313] memfd_create("syzkaller", 0 [pid 6312] <... chdir resumed>) = 0 [pid 5075] mkdir("./202", 0777 [pid 6313] <... memfd_create resumed>) = 3 [pid 6312] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] <... mkdir resumed>) = 0 [pid 6312] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6311] <... symlink resumed>) = 0 [pid 6311] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6313] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6312] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5076] <... ioctl resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5073] <... ioctl resumed>) = 0 [pid 5076] close(3 [pid 6313] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] <... close resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 6313] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 6314 attached [pid 6312] <... symlink resumed>) = 0 [pid 5073] close(3 [pid 6311] <... creat resumed>) = 4 [pid 6311] rename("./bus", "./file2") = -1 EEXIST (File exists) [pid 6311] memfd_create("syzkaller", 0) = 5 [pid 6311] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6314] set_robust_list(0x55556e32a660, 24 [pid 6312] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6311] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6314 [pid 5073] <... close resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6315 attached [pid 6314] <... set_robust_list resumed>) = 0 [pid 6313] <... write resumed>) = 524288 [pid 6312] <... creat resumed>) = 4 [pid 6314] chdir("./205" [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6315 [pid 6315] set_robust_list(0x55556e32a660, 24 [pid 6314] <... chdir resumed>) = 0 [pid 6313] munmap(0x7f0356e00000, 138412032 [pid 6315] <... set_robust_list resumed>) = 0 [pid 6315] chdir("./202" [pid 6314] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6313] <... munmap resumed>) = 0 [pid 6312] rename("./bus", "./file2" [pid 6311] <... write resumed>) = 524288 [pid 6315] <... chdir resumed>) = 0 [pid 6314] <... prctl resumed>) = 0 [pid 6313] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6311] munmap(0x7f0356e00000, 138412032 [pid 6315] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6314] setpgid(0, 0 [pid 6313] <... openat resumed>) = 4 [pid 6311] <... munmap resumed>) = 0 [pid 6315] setpgid(0, 0 [pid 6314] <... setpgid resumed>) = 0 [pid 6313] ioctl(4, LOOP_SET_FD, 3 [pid 6311] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6312] <... rename resumed>) = -1 EEXIST (File exists) [pid 6311] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6312] memfd_create("syzkaller", 0) = 5 [pid 6312] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6312] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6315] <... setpgid resumed>) = 0 [pid 6314] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6313] <... ioctl resumed>) = 0 [pid 6311] close(5 [pid 6315] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6314] <... openat resumed>) = 3 [pid 6315] <... openat resumed>) = 3 [pid 6315] write(3, "1000", 4 [pid 6314] write(3, "1000", 4 [pid 6313] close(3 [pid 6315] <... write resumed>) = 4 [pid 6314] <... write resumed>) = 4 [pid 6313] <... close resumed>) = 0 [pid 6311] <... close resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 6313] close(4 [pid 6311] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6314] close(3 [pid 5075] close(3 [pid 6313] <... close resumed>) = 0 [pid 6314] <... close resumed>) = 0 [pid 6315] close(3 [pid 6314] symlink("/dev/binderfs", "./binderfs" [pid 6313] mkdir("./bus", 0777 [pid 5075] <... close resumed>) = 0 [pid 6315] <... close resumed>) = 0 [pid 6314] <... symlink resumed>) = 0 [pid 6313] <... mkdir resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6315] symlink("/dev/binderfs", "./binderfs") = 0 ./strace-static-x86_64: Process 6316 attached [pid 6315] memfd_create("syzkaller", 0 [pid 6314] memfd_create("syzkaller", 0 [pid 6313] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6312] <... write resumed>) = 524288 [pid 6311] <... open resumed>) = 5 [pid 6316] set_robust_list(0x55556e32a660, 24 [pid 6314] <... memfd_create resumed>) = 3 [pid 6311] ftruncate(5, 0 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6316 [pid 6316] <... set_robust_list resumed>) = 0 [pid 6315] <... memfd_create resumed>) = 3 [pid 6311] <... ftruncate resumed>) = 0 [pid 6316] chdir("./202" [pid 6315] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6314] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6311] exit_group(0 [pid 6316] <... chdir resumed>) = 0 [ 198.644953][ T6313] loop4: detected capacity change from 0 to 1024 [pid 6315] <... mmap resumed>) = 0x7f0356e00000 [pid 6314] <... mmap resumed>) = 0x7f0356e00000 [pid 6312] munmap(0x7f0356e00000, 138412032 [pid 6311] <... exit_group resumed>) = ? [pid 6316] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6313] <... mount resumed>) = 0 [pid 6312] <... munmap resumed>) = 0 [pid 6316] <... prctl resumed>) = 0 [pid 6316] setpgid(0, 0 [pid 6313] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6316] <... setpgid resumed>) = 0 [pid 6314] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6313] chdir("./bus" [pid 6312] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6315] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6316] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6313] <... chdir resumed>) = 0 [pid 6316] <... openat resumed>) = 3 [pid 6313] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6312] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6311] +++ exited with 0 +++ [pid 6316] write(3, "1000", 4 [pid 6314] <... write resumed>) = 524288 [pid 6313] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6312] close(5 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6311, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6316] <... write resumed>) = 4 [pid 5078] umount2("./204", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6316] close(3) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./204", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6316] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6312] <... close resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 6316] memfd_create("syzkaller", 0 [pid 5078] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(3, [pid 6313] <... symlink resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6313] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] umount2("./204/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6316] <... memfd_create resumed>) = 3 [pid 6316] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6314] munmap(0x7f0356e00000, 138412032 [pid 6316] <... mmap resumed>) = 0x7f0356e00000 [pid 6314] <... munmap resumed>) = 0 [pid 6314] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6312] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6316] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6315] <... write resumed>) = 524288 [pid 6314] <... openat resumed>) = 4 [pid 6313] <... creat resumed>) = 4 [pid 5078] <... umount2 resumed>) = 0 [pid 6313] rename("./bus", "./file2" [pid 6315] munmap(0x7f0356e00000, 138412032 [pid 6313] <... rename resumed>) = -1 EEXIST (File exists) [pid 6315] <... munmap resumed>) = 0 [pid 6314] ioctl(4, LOOP_SET_FD, 3 [pid 6313] memfd_create("syzkaller", 0 [pid 6312] <... open resumed>) = 5 [pid 6316] <... write resumed>) = 524288 [pid 6313] <... memfd_create resumed>) = 5 [pid 6312] ftruncate(5, 0 [pid 5078] umount2("./204/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6316] munmap(0x7f0356e00000, 138412032 [pid 6312] <... ftruncate resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6316] <... munmap resumed>) = 0 [pid 6315] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6313] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] newfstatat(AT_FDCWD, "./204/bus", [pid 6312] exit_group(0 [pid 6315] <... openat resumed>) = 4 [pid 6313] <... mmap resumed>) = 0x7f0356e00000 [pid 6315] ioctl(4, LOOP_SET_FD, 3 [pid 6314] <... ioctl resumed>) = 0 [pid 6316] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6312] <... exit_group resumed>) = ? [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6312] +++ exited with 0 +++ [pid 5078] umount2("./204/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6312, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 5078] openat(AT_FDCWD, "./204/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5074] <... restart_syscall resumed>) = 0 [pid 6316] <... openat resumed>) = 4 [pid 6314] close(3 [pid 6316] ioctl(4, LOOP_SET_FD, 3 [pid 6314] <... close resumed>) = 0 [pid 5078] newfstatat(4, "", [pid 6314] close(4 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] umount2("./201", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] getdents64(4, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] openat(AT_FDCWD, "./201", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(4, [pid 5074] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] umount2("./201/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] close(4) = 0 [pid 5078] rmdir("./204/bus" [pid 6314] <... close resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 6316] <... ioctl resumed>) = 0 [pid 6315] <... ioctl resumed>) = 0 [pid 6314] mkdir("./bus", 0777 [pid 6313] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... umount2 resumed>) = 0 [pid 6315] close(3 [pid 6314] <... mkdir resumed>) = 0 [pid 5078] umount2("./204/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./201/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6315] <... close resumed>) = 0 [pid 6314] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6316] close(3 [pid 6315] close(4 [pid 5078] newfstatat(AT_FDCWD, "./204/binderfs", [pid 5074] newfstatat(AT_FDCWD, "./201/bus", [pid 6316] <... close resumed>) = 0 [pid 6315] <... close resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6316] close(4 [pid 6315] mkdir("./bus", 0777 [pid 6314] <... mount resumed>) = 0 [pid 6313] <... write resumed>) = 524288 [pid 5078] unlink("./204/binderfs" [pid 5074] umount2("./201/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6316] <... close resumed>) = 0 [pid 6315] <... mkdir resumed>) = 0 [pid 6314] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6316] mkdir("./bus", 0777 [pid 6315] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6314] <... openat resumed>) = 3 [pid 5078] <... unlink resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./201/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6316] <... mkdir resumed>) = 0 [pid 6313] munmap(0x7f0356e00000, 138412032 [pid 5078] getdents64(3, [pid 5074] <... openat resumed>) = 4 [pid 6316] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] newfstatat(4, "", [pid 6315] <... mount resumed>) = 0 [pid 6314] chdir("./bus" [pid 6313] <... munmap resumed>) = 0 [pid 5078] close(3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6315] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6314] <... chdir resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5074] getdents64(4, [pid 6315] <... openat resumed>) = 3 [pid 6314] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6313] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] rmdir("./204" [ 198.760025][ T6314] loop3: detected capacity change from 0 to 1024 [ 198.770862][ T6315] loop0: detected capacity change from 0 to 1024 [ 198.779980][ T6316] loop2: detected capacity change from 0 to 1024 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6315] chdir("./bus" [pid 6314] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6313] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... rmdir resumed>) = 0 [pid 6314] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6313] close(5 [pid 6315] <... chdir resumed>) = 0 [pid 6315] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] close(4) = 0 [pid 5074] rmdir("./201/bus" [pid 6315] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] mkdir("./205", 0777 [pid 5074] <... rmdir resumed>) = 0 [pid 6315] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6314] <... symlink resumed>) = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 5074] umount2("./201/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./201/binderfs", [pid 6316] <... mount resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6315] <... symlink resumed>) = 0 [pid 6314] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6316] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] unlink("./201/binderfs" [pid 6316] <... openat resumed>) = 3 [pid 6315] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] <... openat resumed>) = 3 [pid 6316] chdir("./bus" [pid 6313] <... close resumed>) = 0 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5074] <... unlink resumed>) = 0 [pid 6316] <... chdir resumed>) = 0 [pid 6316] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] getdents64(3, [pid 6316] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6315] <... creat resumed>) = 4 [pid 6314] <... creat resumed>) = 4 [pid 6313] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6316] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5074] close(3) = 0 [pid 5074] rmdir("./201" [pid 6316] <... symlink resumed>) = 0 [pid 6315] rename("./bus", "./file2" [pid 6314] rename("./bus", "./file2" [pid 5074] <... rmdir resumed>) = 0 [pid 6313] <... open resumed>) = 5 [pid 6316] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5074] mkdir("./202", 0777 [pid 6315] <... rename resumed>) = -1 EEXIST (File exists) [pid 6314] <... rename resumed>) = -1 EEXIST (File exists) [pid 6313] ftruncate(5, 0 [pid 5074] <... mkdir resumed>) = 0 [pid 6315] memfd_create("syzkaller", 0 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6315] <... memfd_create resumed>) = 5 [pid 6314] memfd_create("syzkaller", 0 [pid 6313] <... ftruncate resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 6315] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6316] <... creat resumed>) = 4 [pid 6315] <... mmap resumed>) = 0x7f0356e00000 [pid 6314] <... memfd_create resumed>) = 5 [pid 6313] exit_group(0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6316] rename("./bus", "./file2" [pid 6313] <... exit_group resumed>) = ? [pid 6314] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6316] <... rename resumed>) = -1 EEXIST (File exists) [pid 6316] memfd_create("syzkaller", 0) = 5 [pid 6316] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6316] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6314] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... ioctl resumed>) = 0 [pid 6315] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6313] +++ exited with 0 +++ [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6313, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5077] umount2("./204", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./204", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5077] newfstatat(3, "", [pid 5074] <... ioctl resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] close(3 [pid 5077] getdents64(3, [pid 5078] <... close resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] umount2("./204/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6317 attached [pid 6317] set_robust_list(0x55556e32a660, 24) = 0 [pid 6317] chdir("./205" [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6317 [pid 6317] <... chdir resumed>) = 0 [pid 6317] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6317] setpgid(0, 0 [pid 6315] <... write resumed>) = 524288 [pid 6317] <... setpgid resumed>) = 0 [pid 6316] <... write resumed>) = 524288 [pid 6317] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6316] munmap(0x7f0356e00000, 138412032 [pid 5074] close(3 [pid 6314] <... write resumed>) = 524288 [pid 6317] <... openat resumed>) = 3 [pid 6316] <... munmap resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 6317] write(3, "1000", 4 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6317] <... write resumed>) = 4 [pid 6317] close(3 [pid 6316] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 6318 attached [pid 6317] <... close resumed>) = 0 [pid 6316] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6317] symlink("/dev/binderfs", "./binderfs" [pid 6316] close(5 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6318 [pid 6318] set_robust_list(0x55556e32a660, 24 [pid 6317] <... symlink resumed>) = 0 [pid 6318] <... set_robust_list resumed>) = 0 [pid 6317] memfd_create("syzkaller", 0 [pid 6318] chdir("./202" [pid 6317] <... memfd_create resumed>) = 3 [pid 6318] <... chdir resumed>) = 0 [pid 6317] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6318] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6317] <... mmap resumed>) = 0x7f0356e00000 [pid 6318] <... prctl resumed>) = 0 [pid 6317] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6315] munmap(0x7f0356e00000, 138412032 [pid 6318] setpgid(0, 0) = 0 [pid 6316] <... close resumed>) = 0 [pid 6315] <... munmap resumed>) = 0 [pid 6314] munmap(0x7f0356e00000, 138412032 [pid 6318] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6316] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6318] write(3, "1000", 4) = 4 [pid 6318] close(3 [pid 6317] <... write resumed>) = 524288 [pid 6315] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6314] <... munmap resumed>) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 6318] <... close resumed>) = 0 [pid 6316] <... open resumed>) = 5 [pid 6315] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6315] close(5 [pid 6318] symlink("/dev/binderfs", "./binderfs" [pid 6317] munmap(0x7f0356e00000, 138412032 [pid 6316] ftruncate(5, 0 [pid 6315] <... close resumed>) = 0 [pid 6314] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5077] umount2("./204/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6318] <... symlink resumed>) = 0 [pid 6316] <... ftruncate resumed>) = 0 [pid 6318] memfd_create("syzkaller", 0 [pid 6316] exit_group(0 [pid 6315] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6314] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6318] <... memfd_create resumed>) = 3 [pid 6317] <... munmap resumed>) = 0 [pid 6316] <... exit_group resumed>) = ? [pid 6318] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6316] +++ exited with 0 +++ [pid 6314] close(5 [pid 5077] newfstatat(AT_FDCWD, "./204/bus", [pid 6318] <... mmap resumed>) = 0x7f0356e00000 [pid 6317] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6315] <... open resumed>) = 5 [pid 6314] <... close resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6317] <... openat resumed>) = 4 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6316, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6317] ioctl(4, LOOP_SET_FD, 3 [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 6315] ftruncate(5, 0 [pid 5075] <... restart_syscall resumed>) = 0 [pid 6315] <... ftruncate resumed>) = 0 [pid 6315] exit_group(0 [pid 5077] umount2("./204/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6315] <... exit_group resumed>) = ? [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6315] +++ exited with 0 +++ [pid 5077] openat(AT_FDCWD, "./204/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6315, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5077] newfstatat(4, "", [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6318] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] getdents64(4, [pid 5073] <... restart_syscall resumed>) = 0 [pid 6318] <... write resumed>) = 524288 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] umount2("./202", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6314] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6318] munmap(0x7f0356e00000, 138412032 [pid 6317] <... ioctl resumed>) = 0 [pid 5077] close(4 [pid 5075] openat(AT_FDCWD, "./202", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] umount2("./202", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... close resumed>) = 0 [pid 5077] rmdir("./204/bus" [pid 5075] <... openat resumed>) = 3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6318] <... munmap resumed>) = 0 [pid 6317] close(3 [pid 5077] <... rmdir resumed>) = 0 [pid 5075] newfstatat(3, "", [pid 5073] openat(AT_FDCWD, "./202", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6318] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6317] <... close resumed>) = 0 [pid 5077] umount2("./204/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6318] <... openat resumed>) = 4 [pid 6317] close(4 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(3, [pid 5073] <... openat resumed>) = 3 [pid 6318] ioctl(4, LOOP_SET_FD, 3 [pid 5073] newfstatat(3, "", [pid 5077] newfstatat(AT_FDCWD, "./204/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] unlink("./204/binderfs") = 0 [pid 5077] getdents64(3, [pid 6318] <... ioctl resumed>) = 0 [pid 6317] <... close resumed>) = 0 [pid 6314] <... open resumed>) = 5 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] getdents64(3, [pid 6318] close(3 [pid 6317] mkdir("./bus", 0777 [pid 6314] ftruncate(5, 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] umount2("./202/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6318] <... close resumed>) = 0 [pid 6317] <... mkdir resumed>) = 0 [pid 6314] <... ftruncate resumed>) = 0 [pid 5077] close(3 [pid 5073] umount2("./202/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6318] close(4 [pid 5077] <... close resumed>) = 0 [pid 6314] exit_group(0) = ? [pid 6317] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6318] <... close resumed>) = 0 [pid 5077] rmdir("./204" [pid 6318] mkdir("./bus", 0777 [pid 5077] <... rmdir resumed>) = 0 [pid 6318] <... mkdir resumed>) = 0 [pid 5077] mkdir("./205", 0777 [pid 6318] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5077] <... mkdir resumed>) = 0 [pid 6314] +++ exited with 0 +++ [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5075] <... umount2 resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6314, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5075] umount2("./202/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6318] <... mount resumed>) = 0 [pid 5076] <... restart_syscall resumed>) = 0 [pid 6318] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5076] umount2("./205", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6318] chdir("./bus" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6318] <... chdir resumed>) = 0 [pid 6317] <... mount resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./205", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6317] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5076] <... openat resumed>) = 3 [pid 5075] newfstatat(AT_FDCWD, "./202/bus", [pid 5073] <... umount2 resumed>) = 0 [pid 6318] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6317] <... openat resumed>) = 3 [pid 5076] newfstatat(3, "", [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 199.018555][ T6317] loop5: detected capacity change from 0 to 1024 [ 199.043763][ T6318] loop1: detected capacity change from 0 to 1024 [pid 6318] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6318] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6317] chdir("./bus" [pid 5076] getdents64(3, [pid 5075] umount2("./202/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./202/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6317] <... chdir resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6317] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5076] umount2("./205/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "./202/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6317] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... openat resumed>) = 4 [pid 5073] newfstatat(AT_FDCWD, "./202/bus", [pid 6318] <... symlink resumed>) = 0 [pid 6317] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5075] newfstatat(4, "", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] umount2("./202/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] getdents64(4, [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] openat(AT_FDCWD, "./202/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6317] <... symlink resumed>) = 0 [pid 5075] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] <... openat resumed>) = 4 [pid 5075] close(4 [pid 6317] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5076] <... umount2 resumed>) = 0 [pid 6318] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5075] <... close resumed>) = 0 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] rmdir("./202/bus" [pid 5073] getdents64(4, [pid 5075] <... rmdir resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./202/bus" [pid 5075] umount2("./202/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6318] <... creat resumed>) = 4 [pid 6317] <... creat resumed>) = 4 [pid 5076] umount2("./205/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... rmdir resumed>) = 0 [pid 6318] rename("./bus", "./file2" [pid 5075] newfstatat(AT_FDCWD, "./202/binderfs", [pid 6317] rename("./bus", "./file2" [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./202/binderfs" [pid 5073] umount2("./202/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6317] <... rename resumed>) = -1 EEXIST (File exists) [pid 5075] <... unlink resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./202/binderfs", [pid 6317] memfd_create("syzkaller", 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6317] <... memfd_create resumed>) = 5 [pid 5075] getdents64(3, [pid 6317] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] <... ioctl resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] unlink("./202/binderfs" [pid 6317] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] close(3 [pid 5073] <... unlink resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5073] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./202" [pid 5075] rmdir("./202" [pid 5073] <... rmdir resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5073] mkdir("./203", 0777) = 0 [pid 5075] mkdir("./203", 0777 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] <... mkdir resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5077] close(3 [pid 5076] newfstatat(AT_FDCWD, "./205/bus", [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6317] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] umount2("./205/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6318] <... rename resumed>) = -1 EEXIST (File exists) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6318] memfd_create("syzkaller", 0 [pid 6317] <... write resumed>) = 524288 [pid 5076] openat(AT_FDCWD, "./205/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... openat resumed>) = 3 [pid 6318] <... memfd_create resumed>) = 5 ./strace-static-x86_64: Process 6319 attached [pid 6318] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6319 [pid 5076] <... openat resumed>) = 4 [pid 6319] set_robust_list(0x55556e32a660, 24 [pid 6318] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] newfstatat(4, "", [pid 6319] <... set_robust_list resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5076] getdents64(4, [pid 6319] chdir("./205") = 0 [pid 6319] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6319] setpgid(0, 0) = 0 [pid 6319] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6318] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] close(4) = 0 [pid 6319] <... openat resumed>) = 3 [pid 5076] rmdir("./205/bus" [pid 6319] write(3, "1000", 4) = 4 [pid 6319] close(3) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 6319] symlink("/dev/binderfs", "./binderfs" [pid 5076] umount2("./205/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6319] <... symlink resumed>) = 0 [pid 6317] munmap(0x7f0356e00000, 138412032 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./205/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./205/binderfs") = 0 [pid 5076] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3) = 0 [pid 5076] rmdir("./205" [pid 6319] memfd_create("syzkaller", 0 [pid 6317] <... munmap resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5076] mkdir("./206", 0777) = 0 [pid 6319] <... memfd_create resumed>) = 3 [pid 6318] <... write resumed>) = 524288 [pid 6317] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6319] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6318] munmap(0x7f0356e00000, 138412032 [pid 6317] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... openat resumed>) = 3 [pid 6319] <... mmap resumed>) = 0x7f0356e00000 [pid 6318] <... munmap resumed>) = 0 [pid 6317] close(5 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6318] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6319] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6318] close(5 [pid 6317] <... close resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 6319] <... write resumed>) = 524288 [pid 6317] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5075] close(3 [pid 5073] close(3) = 0 [pid 6319] munmap(0x7f0356e00000, 138412032 [pid 6318] <... close resumed>) = 0 [pid 6317] <... open resumed>) = 5 [pid 5075] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6319] <... munmap resumed>) = 0 [pid 6319] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6317] ftruncate(5, 0./strace-static-x86_64: Process 6320 attached ./strace-static-x86_64: Process 6321 attached [pid 6319] <... openat resumed>) = 4 [pid 6318] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6317] <... ftruncate resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6321 [pid 6321] set_robust_list(0x55556e32a660, 24) = 0 [pid 6317] exit_group(0 [pid 6320] set_robust_list(0x55556e32a660, 24 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6320 [pid 6321] chdir("./203" [pid 6320] <... set_robust_list resumed>) = 0 [pid 5076] close(3 [pid 6320] chdir("./203" [pid 6317] <... exit_group resumed>) = ? [pid 5076] <... close resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6320] <... chdir resumed>) = 0 [pid 6321] <... chdir resumed>) = 0 [pid 6319] ioctl(4, LOOP_SET_FD, 3 [pid 6318] <... open resumed>) = 5 [pid 6317] +++ exited with 0 +++ ./strace-static-x86_64: Process 6322 attached [pid 6320] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6317, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6320] <... prctl resumed>) = 0 [pid 6320] setpgid(0, 0) = 0 [pid 6320] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6322] set_robust_list(0x55556e32a660, 24 [pid 6320] <... openat resumed>) = 3 [pid 6321] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6319] <... ioctl resumed>) = 0 [pid 6318] ftruncate(5, 0 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6322 [pid 6322] <... set_robust_list resumed>) = 0 [pid 6321] <... prctl resumed>) = 0 [pid 6318] <... ftruncate resumed>) = 0 [pid 6321] setpgid(0, 0) = 0 [pid 6322] chdir("./206" [pid 6321] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6320] write(3, "1000", 4) = 4 [pid 6320] close(3 [pid 6321] <... openat resumed>) = 3 [pid 6322] <... chdir resumed>) = 0 [pid 6322] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6320] <... close resumed>) = 0 [pid 6318] exit_group(0 [pid 6322] <... prctl resumed>) = 0 [pid 6320] symlink("/dev/binderfs", "./binderfs" [pid 6321] write(3, "1000", 4 [pid 6322] setpgid(0, 0 [pid 6320] <... symlink resumed>) = 0 [pid 6321] <... write resumed>) = 4 [pid 6322] <... setpgid resumed>) = 0 [pid 6320] memfd_create("syzkaller", 0 [pid 6321] close(3 [pid 6319] close(3 [pid 6318] <... exit_group resumed>) = ? [pid 6322] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6320] <... memfd_create resumed>) = 3 [pid 6321] <... close resumed>) = 0 [pid 6319] <... close resumed>) = 0 [pid 6318] +++ exited with 0 +++ [pid 6320] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6321] symlink("/dev/binderfs", "./binderfs" [pid 6319] close(4 [pid 5078] umount2("./205", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6322] <... openat resumed>) = 3 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6318, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6320] <... mmap resumed>) = 0x7f0356e00000 [pid 6322] write(3, "1000", 4 [pid 6321] <... symlink resumed>) = 0 [pid 6319] <... close resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6322] <... write resumed>) = 4 [pid 6319] mkdir("./bus", 0777 [pid 5078] openat(AT_FDCWD, "./205", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] umount2("./202", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6322] close(3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6322] <... close resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./202", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6322] symlink("/dev/binderfs", "./binderfs" [pid 6321] memfd_create("syzkaller", 0 [pid 6319] <... mkdir resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5074] <... openat resumed>) = 3 [pid 5074] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6322] <... symlink resumed>) = 0 [pid 5074] umount2("./202/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6322] memfd_create("syzkaller", 0 [pid 6320] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6321] <... memfd_create resumed>) = 3 [pid 6319] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5078] getdents64(3, [pid 5074] <... umount2 resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [ 199.263877][ T6319] loop4: detected capacity change from 0 to 1024 [pid 5074] umount2("./202/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6322] <... memfd_create resumed>) = 3 [pid 6320] <... write resumed>) = 524288 [pid 6321] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6319] <... mount resumed>) = 0 [pid 5078] umount2("./205/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6322] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6319] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6322] <... mmap resumed>) = 0x7f0356e00000 [pid 6321] <... mmap resumed>) = 0x7f0356e00000 [pid 5074] newfstatat(AT_FDCWD, "./202/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./202/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./202/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6319] <... openat resumed>) = 3 [pid 5074] <... openat resumed>) = 4 [pid 5074] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6322] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6320] munmap(0x7f0356e00000, 138412032 [pid 6321] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6319] chdir("./bus" [pid 5078] <... umount2 resumed>) = 0 [pid 5074] getdents64(4, [pid 6319] <... chdir resumed>) = 0 [pid 5078] umount2("./205/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6320] <... munmap resumed>) = 0 [pid 6319] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6320] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5078] newfstatat(AT_FDCWD, "./205/bus", [pid 6320] <... openat resumed>) = 4 [pid 6319] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6320] ioctl(4, LOOP_SET_FD, 3 [pid 6319] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] umount2("./205/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6322] <... write resumed>) = 524288 [pid 5074] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6322] munmap(0x7f0356e00000, 138412032 [pid 6320] <... ioctl resumed>) = 0 [pid 6319] <... symlink resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] close(4 [pid 6319] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] openat(AT_FDCWD, "./205/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... close resumed>) = 0 [pid 5078] <... openat resumed>) = 4 [pid 5074] rmdir("./202/bus") = 0 [pid 5074] umount2("./202/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6322] <... munmap resumed>) = 0 [pid 6320] close(3 [pid 5078] newfstatat(4, "", [pid 5074] newfstatat(AT_FDCWD, "./202/binderfs", [pid 6320] <... close resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./202/binderfs" [pid 6320] close(4 [pid 5078] getdents64(4, [pid 5074] <... unlink resumed>) = 0 [pid 5074] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 6322] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6320] <... close resumed>) = 0 [pid 6321] <... write resumed>) = 524288 [pid 6319] <... creat resumed>) = 4 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [ 199.349651][ T6320] loop0: detected capacity change from 0 to 1024 [pid 6322] <... openat resumed>) = 4 [pid 6320] mkdir("./bus", 0777 [pid 6321] munmap(0x7f0356e00000, 138412032 [pid 5078] getdents64(4, [pid 5074] rmdir("./202" [pid 6319] rename("./bus", "./file2" [pid 6320] <... mkdir resumed>) = 0 [pid 6320] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6322] ioctl(4, LOOP_SET_FD, 3 [pid 5074] <... rmdir resumed>) = 0 [pid 6321] <... munmap resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] mkdir("./203", 0777) = 0 [pid 5078] close(4 [pid 6319] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] <... close resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6321] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] rmdir("./205/bus" [pid 5074] <... openat resumed>) = 3 [pid 6319] memfd_create("syzkaller", 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5078] <... rmdir resumed>) = 0 [pid 6321] <... openat resumed>) = 4 [pid 6322] <... ioctl resumed>) = 0 [pid 6320] <... mount resumed>) = 0 [pid 6319] <... memfd_create resumed>) = 5 [pid 5078] umount2("./205/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6321] ioctl(4, LOOP_SET_FD, 3 [pid 6322] close(3 [pid 6320] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6319] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6322] <... close resumed>) = 0 [pid 6320] <... openat resumed>) = 3 [pid 6319] <... mmap resumed>) = 0x7f0356e00000 [pid 6322] close(4 [pid 6319] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6322] <... close resumed>) = 0 [pid 6322] mkdir("./bus", 0777) = 0 [pid 6320] chdir("./bus" [pid 6321] <... ioctl resumed>) = 0 [pid 5078] newfstatat(AT_FDCWD, "./205/binderfs", [pid 6320] <... chdir resumed>) = 0 [pid 6321] close(3 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6320] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6321] <... close resumed>) = 0 [pid 5078] unlink("./205/binderfs" [pid 6320] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6321] close(4 [pid 6322] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6320] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] <... unlink resumed>) = 0 [pid 6321] <... close resumed>) = 0 [pid 6321] mkdir("./bus", 0777 [pid 5078] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6320] <... symlink resumed>) = 0 [pid 6321] <... mkdir resumed>) = 0 [pid 6319] <... write resumed>) = 524288 [pid 5078] close(3 [pid 6322] <... mount resumed>) = 0 [pid 6320] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6321] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6319] munmap(0x7f0356e00000, 138412032 [pid 5078] <... close resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 6322] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] rmdir("./205" [pid 6322] <... openat resumed>) = 3 [pid 5078] <... rmdir resumed>) = 0 [pid 6322] chdir("./bus" [pid 6319] <... munmap resumed>) = 0 [pid 5074] close(3 [pid 6322] <... chdir resumed>) = 0 [pid 5078] mkdir("./206", 0777 [pid 5074] <... close resumed>) = 0 [pid 6322] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6319] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] <... mkdir resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6322] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6320] <... creat resumed>) = 4 [pid 6319] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 6320] rename("./bus", "./file2" [pid 6319] close(5 [pid 6322] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6321] <... mount resumed>) = 0 [pid 6319] <... close resumed>) = 0 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 6322] <... symlink resumed>) = 0 [pid 6321] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6323 [pid 6321] <... openat resumed>) = 3 [pid 6322] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6323 attached [pid 6320] <... rename resumed>) = -1 EEXIST (File exists) [pid 6321] chdir("./bus" [pid 6320] memfd_create("syzkaller", 0 [pid 6323] set_robust_list(0x55556e32a660, 24 [pid 6320] <... memfd_create resumed>) = 5 [pid 6321] <... chdir resumed>) = 0 [pid 6323] <... set_robust_list resumed>) = 0 [ 199.390167][ T6322] loop3: detected capacity change from 0 to 1024 [ 199.415274][ T6321] loop2: detected capacity change from 0 to 1024 [pid 6320] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6321] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6323] chdir("./203" [pid 6320] <... mmap resumed>) = 0x7f0356e00000 [pid 6321] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6323] <... chdir resumed>) = 0 [pid 6323] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6322] <... creat resumed>) = 4 [pid 6320] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6321] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6319] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6323] setpgid(0, 0 [pid 6322] rename("./bus", "./file2" [pid 6323] <... setpgid resumed>) = 0 [pid 6323] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6322] <... rename resumed>) = -1 EEXIST (File exists) [pid 6321] <... symlink resumed>) = 0 [pid 6319] <... open resumed>) = 5 [pid 6323] <... openat resumed>) = 3 [pid 6322] memfd_create("syzkaller", 0 [pid 6321] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6319] ftruncate(5, 0 [pid 6323] write(3, "1000", 4 [pid 6322] <... memfd_create resumed>) = 5 [pid 6323] <... write resumed>) = 4 [pid 6322] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6319] <... ftruncate resumed>) = 0 [pid 6323] close(3 [pid 6322] <... mmap resumed>) = 0x7f0356e00000 [pid 6319] exit_group(0 [pid 6322] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6319] <... exit_group resumed>) = ? [pid 6323] <... close resumed>) = 0 [pid 6321] <... creat resumed>) = 4 [pid 6323] symlink("/dev/binderfs", "./binderfs" [pid 6321] rename("./bus", "./file2" [pid 6323] <... symlink resumed>) = 0 [pid 6320] <... write resumed>) = 524288 [pid 6319] +++ exited with 0 +++ [pid 5078] <... ioctl resumed>) = 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6319, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6320] munmap(0x7f0356e00000, 138412032 [pid 6321] <... rename resumed>) = -1 EEXIST (File exists) [pid 6323] memfd_create("syzkaller", 0 [pid 6320] <... munmap resumed>) = 0 [pid 6321] memfd_create("syzkaller", 0 [pid 6323] <... memfd_create resumed>) = 3 [pid 6321] <... memfd_create resumed>) = 5 [pid 6323] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6321] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] umount2("./205", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6321] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6320] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6321] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] openat(AT_FDCWD, "./205", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6320] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6320] close(5 [pid 5077] <... openat resumed>) = 3 [pid 6323] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6320] <... close resumed>) = 0 [pid 5077] newfstatat(3, "", [pid 5078] close(3 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] <... close resumed>) = 0 [pid 5077] getdents64(3, [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] umount2("./205/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6324 attached [pid 6321] <... write resumed>) = 524288 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6324 [pid 6324] set_robust_list(0x55556e32a660, 24) = 0 [pid 6324] chdir("./206") = 0 [pid 6320] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6324] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6324] setpgid(0, 0) = 0 [pid 6324] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6324] write(3, "1000", 4) = 4 [pid 6324] close(3) = 0 [pid 6324] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6322] <... write resumed>) = 524288 [pid 6320] <... open resumed>) = 5 [pid 5077] <... umount2 resumed>) = 0 [pid 6324] memfd_create("syzkaller", 0 [pid 6320] ftruncate(5, 0 [pid 6322] munmap(0x7f0356e00000, 138412032 [pid 6324] <... memfd_create resumed>) = 3 [pid 6320] <... ftruncate resumed>) = 0 [pid 5077] umount2("./205/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6324] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6320] exit_group(0 [pid 6324] <... mmap resumed>) = 0x7f0356e00000 [pid 6322] <... munmap resumed>) = 0 [pid 6320] <... exit_group resumed>) = ? [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6324] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6323] <... write resumed>) = 524288 [pid 6320] +++ exited with 0 +++ [pid 6321] munmap(0x7f0356e00000, 138412032 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6320, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6323] munmap(0x7f0356e00000, 138412032 [pid 6322] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5077] newfstatat(AT_FDCWD, "./205/bus", [pid 6322] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6321] <... munmap resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6323] <... munmap resumed>) = 0 [pid 6322] close(5 [pid 5077] umount2("./205/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6321] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6321] close(5 [pid 6323] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6322] <... close resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./203", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6323] <... openat resumed>) = 4 [pid 5077] openat(AT_FDCWD, "./205/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6324] <... write resumed>) = 524288 [pid 6323] ioctl(4, LOOP_SET_FD, 3 [pid 6322] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] <... openat resumed>) = 4 [pid 5073] openat(AT_FDCWD, "./203", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6324] munmap(0x7f0356e00000, 138412032 [pid 6321] <... close resumed>) = 0 [pid 6321] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5073] <... openat resumed>) = 3 [pid 6324] <... munmap resumed>) = 0 [pid 5073] newfstatat(3, "", [pid 6324] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6324] <... openat resumed>) = 4 [pid 6324] ioctl(4, LOOP_SET_FD, 3 [pid 5073] getdents64(3, [pid 6321] <... open resumed>) = 5 [pid 6321] ftruncate(5, 0 [pid 6324] <... ioctl resumed>) = 0 [pid 6323] <... ioctl resumed>) = 0 [pid 6322] <... open resumed>) = 5 [pid 5077] newfstatat(4, "", [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6322] ftruncate(5, 0 [pid 6321] <... ftruncate resumed>) = 0 [pid 6322] <... ftruncate resumed>) = 0 [pid 6324] close(3 [pid 6321] exit_group(0 [pid 6323] close(3 [pid 6324] <... close resumed>) = 0 [pid 6322] exit_group(0 [pid 6321] <... exit_group resumed>) = ? [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] umount2("./203/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6324] close(4 [pid 6323] <... close resumed>) = 0 [pid 6322] <... exit_group resumed>) = ? [pid 6321] +++ exited with 0 +++ [pid 5077] getdents64(4, [pid 6324] <... close resumed>) = 0 [pid 6323] close(4 [pid 6322] +++ exited with 0 +++ [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] <... umount2 resumed>) = 0 [pid 6324] mkdir("./bus", 0777 [pid 6323] <... close resumed>) = 0 [pid 5077] getdents64(4, [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6322, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6321, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] <... restart_syscall resumed>) = 0 [pid 5076] umount2("./206", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6324] <... mkdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./206", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] umount2("./203", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(3, "", [pid 5075] openat(AT_FDCWD, "./203", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5076] getdents64(3, [pid 5075] newfstatat(3, "", [pid 6324] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6323] mkdir("./bus", 0777 [pid 5077] close(4 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] umount2("./203/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6323] <... mkdir resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5076] umount2("./206/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6323] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5077] rmdir("./205/bus" [pid 5075] getdents64(3, [pid 5073] newfstatat(AT_FDCWD, "./203/bus", [pid 6324] <... mount resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 199.597351][ T6323] loop1: detected capacity change from 0 to 1024 [ 199.614936][ T6324] loop5: detected capacity change from 0 to 1024 [pid 6324] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6323] <... mount resumed>) = 0 [pid 5077] umount2("./205/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./203/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./203/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6324] <... openat resumed>) = 3 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6324] chdir("./bus" [pid 6323] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5077] newfstatat(AT_FDCWD, "./205/binderfs", [pid 5073] openat(AT_FDCWD, "./203/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6324] <... chdir resumed>) = 0 [pid 6323] <... openat resumed>) = 3 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5073] <... openat resumed>) = 4 [pid 6324] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6323] chdir("./bus" [pid 5077] unlink("./205/binderfs" [pid 5075] <... umount2 resumed>) = 0 [pid 5073] newfstatat(4, "", [pid 6323] <... chdir resumed>) = 0 [pid 6324] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... unlink resumed>) = 0 [pid 5076] umount2("./206/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6324] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6323] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6323] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] getdents64(3, [pid 5073] getdents64(4, [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] newfstatat(AT_FDCWD, "./206/bus", [pid 5077] close(3 [pid 6324] <... symlink resumed>) = 0 [pid 6323] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5077] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6324] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5077] rmdir("./205" [pid 5076] umount2("./206/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6323] <... symlink resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./203/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] getdents64(4, [pid 5076] openat(AT_FDCWD, "./206/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] close(4 [pid 5077] mkdir("./206", 0777 [pid 5076] <... openat resumed>) = 4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... close resumed>) = 0 [pid 5076] newfstatat(4, "", [pid 5073] rmdir("./203/bus" [pid 6324] <... creat resumed>) = 4 [pid 5077] <... mkdir resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] newfstatat(AT_FDCWD, "./203/bus", [pid 5073] <... rmdir resumed>) = 0 [pid 6324] rename("./bus", "./file2" [pid 6323] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5076] getdents64(4, [pid 6324] <... rename resumed>) = -1 EEXIST (File exists) [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./203/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6324] memfd_create("syzkaller", 0 [pid 5077] <... openat resumed>) = 3 [pid 5076] getdents64(4, [pid 5075] umount2("./203/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6324] <... memfd_create resumed>) = 5 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6324] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] close(4 [pid 6324] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./203/binderfs", [pid 5076] <... close resumed>) = 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5076] rmdir("./206/bus" [pid 5075] openat(AT_FDCWD, "./203/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... openat resumed>) = 4 [pid 5076] <... rmdir resumed>) = 0 [pid 5073] unlink("./203/binderfs" [pid 5076] umount2("./206/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... unlink resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./206/binderfs", [pid 5073] getdents64(3, [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] newfstatat(4, "", [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] unlink("./206/binderfs" [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, [pid 5073] close(3 [pid 5076] <... unlink resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./203") = 0 [pid 5075] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] mkdir("./204", 0777 [pid 6323] <... creat resumed>) = 4 [pid 5075] close(4) = 0 [pid 6323] rename("./bus", "./file2" [pid 5075] rmdir("./203/bus" [pid 5076] getdents64(3, [pid 5073] <... mkdir resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 6324] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] umount2("./203/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... openat resumed>) = 3 [pid 5076] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5075] newfstatat(AT_FDCWD, "./203/binderfs", [pid 5076] rmdir("./206" [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./203/binderfs") = 0 [pid 5075] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 5075] rmdir("./203") = 0 [pid 5075] mkdir("./204", 0777 [pid 6324] <... write resumed>) = 524288 [pid 5075] <... mkdir resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6323] <... rename resumed>) = -1 EEXIST (File exists) [pid 5076] mkdir("./207", 0777 [pid 6323] memfd_create("syzkaller", 0) = 5 [pid 6323] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5076] <... mkdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 6324] munmap(0x7f0356e00000, 138412032 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6324] <... munmap resumed>) = 0 [pid 6324] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6324] close(5 [pid 6323] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6324] <... close resumed>) = 0 [pid 5077] <... ioctl resumed>) = 0 [pid 6324] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6323] <... write resumed>) = 524288 [pid 6323] munmap(0x7f0356e00000, 138412032 [pid 6324] <... open resumed>) = 5 [pid 5077] close(3 [pid 5075] <... ioctl resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 6324] ftruncate(5, 0 [pid 5077] <... close resumed>) = 0 [pid 6324] <... ftruncate resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6324] exit_group(0) = ? [pid 6324] +++ exited with 0 +++ [pid 6323] <... munmap resumed>) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6325 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6324, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5078] umount2("./206", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./206", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6323] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5078] <... openat resumed>) = 3 [pid 6323] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] newfstatat(3, "", ./strace-static-x86_64: Process 6325 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5073] close(3 [pid 6323] close(5 [pid 5075] close(3 [pid 5078] getdents64(3, [pid 5075] <... close resumed>) = 0 [pid 6323] <... close resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6325] set_robust_list(0x55556e32a660, 24 [pid 5073] <... close resumed>) = 0 [pid 5078] umount2("./206/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6325] <... set_robust_list resumed>) = 0 [pid 5076] close(3 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6326 attached [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6326 [pid 6326] set_robust_list(0x55556e32a660, 24) = 0 [pid 6326] chdir("./204" [pid 5076] <... close resumed>) = 0 [pid 6325] chdir("./206" [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6325] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 6328 attached [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6328 [pid 6328] set_robust_list(0x55556e32a660, 24 [pid 6325] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6327 [pid 6328] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 6327 attached [pid 6328] chdir("./207" [pid 6326] <... chdir resumed>) = 0 [pid 6325] <... prctl resumed>) = 0 [pid 6323] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6328] <... chdir resumed>) = 0 [pid 6325] setpgid(0, 0 [pid 6328] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6325] <... setpgid resumed>) = 0 [pid 6328] <... prctl resumed>) = 0 [pid 6326] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6325] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6327] set_robust_list(0x55556e32a660, 24 [pid 6328] setpgid(0, 0 [pid 6326] <... prctl resumed>) = 0 [pid 6323] <... open resumed>) = 5 [pid 5078] <... umount2 resumed>) = 0 [pid 6327] <... set_robust_list resumed>) = 0 [pid 6328] <... setpgid resumed>) = 0 [pid 6326] setpgid(0, 0 [pid 6325] <... openat resumed>) = 3 [pid 6327] chdir("./204" [pid 6326] <... setpgid resumed>) = 0 [pid 6323] ftruncate(5, 0 [pid 6328] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6325] write(3, "1000", 4 [pid 6327] <... chdir resumed>) = 0 [pid 6328] <... openat resumed>) = 3 [pid 6326] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6323] <... ftruncate resumed>) = 0 [pid 5078] umount2("./206/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6327] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6328] write(3, "1000", 4 [pid 6326] <... openat resumed>) = 3 [pid 6323] exit_group(0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6327] <... prctl resumed>) = 0 [pid 5078] newfstatat(AT_FDCWD, "./206/bus", [pid 6327] setpgid(0, 0 [pid 6326] write(3, "1000", 4 [pid 6323] <... exit_group resumed>) = ? [pid 6328] <... write resumed>) = 4 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6325] <... write resumed>) = 4 [pid 6327] <... setpgid resumed>) = 0 [pid 6328] close(3 [pid 6326] <... write resumed>) = 4 [pid 6325] close(3 [pid 6323] +++ exited with 0 +++ [pid 5078] umount2("./206/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6328] <... close resumed>) = 0 [pid 6325] <... close resumed>) = 0 [pid 6328] symlink("/dev/binderfs", "./binderfs" [pid 6325] symlink("/dev/binderfs", "./binderfs" [pid 6327] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6326] close(3 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6323, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6327] <... openat resumed>) = 3 [pid 6326] <... close resumed>) = 0 [pid 6325] <... symlink resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./206/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6328] <... symlink resumed>) = 0 [pid 6326] symlink("/dev/binderfs", "./binderfs" [pid 6325] memfd_create("syzkaller", 0 [pid 5078] <... openat resumed>) = 4 [pid 6328] memfd_create("syzkaller", 0 [pid 6326] <... symlink resumed>) = 0 [pid 5078] newfstatat(4, "", [pid 6327] write(3, "1000", 4 [pid 6326] memfd_create("syzkaller", 0 [pid 6325] <... memfd_create resumed>) = 3 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6327] <... write resumed>) = 4 [pid 6328] <... memfd_create resumed>) = 3 [pid 6326] <... memfd_create resumed>) = 3 [pid 6325] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] getdents64(4, [pid 6327] close(3 [pid 6328] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6325] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6327] <... close resumed>) = 0 [pid 6326] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] getdents64(4, [pid 6328] <... mmap resumed>) = 0x7f0356e00000 [pid 5074] umount2("./203", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6327] symlink("/dev/binderfs", "./binderfs" [pid 6326] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6327] <... symlink resumed>) = 0 [pid 6328] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6326] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] close(4 [pid 5074] openat(AT_FDCWD, "./203", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6327] memfd_create("syzkaller", 0) = 3 [pid 5078] <... close resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 6327] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] rmdir("./206/bus" [pid 5074] newfstatat(3, "", [pid 6327] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... rmdir resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] umount2("./206/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./203/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] newfstatat(AT_FDCWD, "./206/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] unlink("./206/binderfs" [pid 6325] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... unlink resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5078] getdents64(3, [pid 6327] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6328] <... write resumed>) = 524288 [pid 6326] <... write resumed>) = 524288 [pid 6325] <... write resumed>) = 524288 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6328] munmap(0x7f0356e00000, 138412032 [pid 6325] munmap(0x7f0356e00000, 138412032 [pid 6328] <... munmap resumed>) = 0 [pid 6325] <... munmap resumed>) = 0 [pid 6325] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] close(3 [pid 5074] umount2("./203/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6328] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6325] <... openat resumed>) = 4 [pid 6328] <... openat resumed>) = 4 [pid 5078] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] rmdir("./206" [pid 5074] newfstatat(AT_FDCWD, "./203/bus", [pid 6328] ioctl(4, LOOP_SET_FD, 3 [pid 6325] ioctl(4, LOOP_SET_FD, 3 [pid 5078] <... rmdir resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6327] <... write resumed>) = 524288 [pid 5074] umount2("./203/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./203/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] mkdir("./207", 0777 [pid 5074] <... openat resumed>) = 4 [pid 5078] <... mkdir resumed>) = 0 [pid 5074] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] getdents64(4, [pid 5078] <... openat resumed>) = 3 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5074] close(4) = 0 [pid 5074] rmdir("./203/bus") = 0 [pid 6326] munmap(0x7f0356e00000, 138412032 [pid 5074] umount2("./203/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6327] munmap(0x7f0356e00000, 138412032 [pid 6326] <... munmap resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./203/binderfs", [pid 6327] <... munmap resumed>) = 0 [pid 6328] <... ioctl resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6326] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] unlink("./203/binderfs" [pid 6327] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6326] <... openat resumed>) = 4 [pid 5074] <... unlink resumed>) = 0 [pid 6327] <... openat resumed>) = 4 [pid 6326] ioctl(4, LOOP_SET_FD, 3 [pid 5074] getdents64(3, [pid 6327] ioctl(4, LOOP_SET_FD, 3 [pid 6328] close(3 [pid 6325] <... ioctl resumed>) = 0 [pid 6326] <... ioctl resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6326] close(3 [pid 5074] close(3) = 0 [pid 5074] rmdir("./203") = 0 [pid 6326] <... close resumed>) = 0 [pid 6326] close(4) = 0 [pid 6326] mkdir("./bus", 0777) = 0 [pid 6326] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5074] mkdir("./204", 0777 [pid 6325] close(3 [pid 5074] <... mkdir resumed>) = 0 [pid 6325] <... close resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 6328] <... close resumed>) = 0 [pid 6325] close(4 [pid 6328] close(4 [pid 6325] <... close resumed>) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6328] <... close resumed>) = 0 [pid 6325] mkdir("./bus", 0777 [pid 6327] <... ioctl resumed>) = 0 [pid 6325] <... mkdir resumed>) = 0 [pid 6328] mkdir("./bus", 0777 [pid 6327] close(3) = 0 [pid 6328] <... mkdir resumed>) = 0 [pid 6327] close(4 [pid 6328] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6327] <... close resumed>) = 0 [pid 6327] mkdir("./bus", 0777) = 0 [pid 6325] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6327] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6326] <... mount resumed>) = 0 [pid 5078] <... ioctl resumed>) = 0 [pid 6326] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6326] chdir("./bus" [pid 6325] <... mount resumed>) = 0 [pid 6325] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6326] <... chdir resumed>) = 0 [pid 6326] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] close(3 [pid 6327] <... mount resumed>) = 0 [pid 6328] <... mount resumed>) = 0 [pid 6326] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6325] <... openat resumed>) = 3 [pid 6328] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6326] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6327] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6328] <... openat resumed>) = 3 [pid 6327] chdir("./bus" [pid 6328] chdir("./bus" [pid 6327] <... chdir resumed>) = 0 [pid 6327] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6328] <... chdir resumed>) = 0 [pid 6327] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6327] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5078] <... close resumed>) = 0 [pid 6327] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6328] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6328] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6326] <... symlink resumed>) = 0 [pid 6325] chdir("./bus"./strace-static-x86_64: Process 6329 attached [pid 6328] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6326] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6325] <... chdir resumed>) = 0 [pid 6325] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6329 [ 199.900410][ T6325] loop4: detected capacity change from 0 to 1024 [ 199.908114][ T6328] loop3: detected capacity change from 0 to 1024 [ 199.917416][ T6326] loop2: detected capacity change from 0 to 1024 [ 199.921391][ T6327] loop0: detected capacity change from 0 to 1024 [pid 6329] set_robust_list(0x55556e32a660, 24 [pid 6328] <... symlink resumed>) = 0 [pid 6325] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6329] <... set_robust_list resumed>) = 0 [pid 6327] <... creat resumed>) = 4 [pid 6328] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6326] <... creat resumed>) = 4 [pid 6325] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6329] chdir("./207" [pid 6327] rename("./bus", "./file2") = -1 EEXIST (File exists) [pid 6329] <... chdir resumed>) = 0 [pid 6327] memfd_create("syzkaller", 0) = 5 [pid 6329] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6327] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6326] rename("./bus", "./file2" [pid 6325] <... symlink resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 6329] <... prctl resumed>) = 0 [pid 6327] <... mmap resumed>) = 0x7f0356e00000 [pid 6329] setpgid(0, 0 [pid 6326] <... rename resumed>) = -1 EEXIST (File exists) [pid 6325] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5074] close(3 [pid 6329] <... setpgid resumed>) = 0 [pid 6326] memfd_create("syzkaller", 0 [pid 6329] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6328] <... creat resumed>) = 4 [pid 6328] rename("./bus", "./file2" [pid 5074] <... close resumed>) = 0 [pid 6329] <... openat resumed>) = 3 [pid 6326] <... memfd_create resumed>) = 5 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6327] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6328] <... rename resumed>) = -1 EEXIST (File exists) [pid 6326] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6329] write(3, "1000", 4 [pid 6328] memfd_create("syzkaller", 0 [pid 6326] <... mmap resumed>) = 0x7f0356e00000 [pid 6329] <... write resumed>) = 4 [pid 6328] <... memfd_create resumed>) = 5 [pid 6325] <... creat resumed>) = 4 [pid 6329] close(3 [pid 6328] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6329] <... close resumed>) = 0 [pid 6328] <... mmap resumed>) = 0x7f0356e00000 [pid 6325] rename("./bus", "./file2"./strace-static-x86_64: Process 6330 attached [pid 6329] symlink("/dev/binderfs", "./binderfs" [pid 6326] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6325] <... rename resumed>) = -1 EEXIST (File exists) [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6330 [pid 6329] <... symlink resumed>) = 0 [pid 6330] set_robust_list(0x55556e32a660, 24 [pid 6329] memfd_create("syzkaller", 0 [pid 6330] <... set_robust_list resumed>) = 0 [pid 6325] memfd_create("syzkaller", 0 [pid 6330] chdir("./204" [pid 6329] <... memfd_create resumed>) = 3 [pid 6325] <... memfd_create resumed>) = 5 [pid 6330] <... chdir resumed>) = 0 [pid 6329] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6325] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6330] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6325] <... mmap resumed>) = 0x7f0356e00000 [pid 6330] <... prctl resumed>) = 0 [pid 6329] <... mmap resumed>) = 0x7f0356e00000 [pid 6327] <... write resumed>) = 524288 [pid 6328] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6326] <... write resumed>) = 524288 [pid 6330] setpgid(0, 0 [pid 6327] munmap(0x7f0356e00000, 138412032 [pid 6330] <... setpgid resumed>) = 0 [pid 6329] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6327] <... munmap resumed>) = 0 [pid 6330] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6327] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6325] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6330] <... openat resumed>) = 3 [pid 6329] <... write resumed>) = 524288 [pid 6327] close(5 [pid 6328] <... write resumed>) = 524288 [pid 6326] munmap(0x7f0356e00000, 138412032 [pid 6325] <... write resumed>) = 524288 [pid 6330] write(3, "1000", 4 [pid 6326] <... munmap resumed>) = 0 [pid 6330] <... write resumed>) = 4 [pid 6328] munmap(0x7f0356e00000, 138412032 [pid 6329] munmap(0x7f0356e00000, 138412032 [pid 6326] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6330] close(3 [pid 6329] <... munmap resumed>) = 0 [pid 6328] <... munmap resumed>) = 0 [pid 6330] <... close resumed>) = 0 [pid 6329] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6326] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6330] symlink("/dev/binderfs", "./binderfs" [pid 6329] <... openat resumed>) = 4 [pid 6326] close(5 [pid 6330] <... symlink resumed>) = 0 [pid 6329] ioctl(4, LOOP_SET_FD, 3 [pid 6328] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6330] memfd_create("syzkaller", 0 [pid 6327] <... close resumed>) = 0 [pid 6328] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6330] <... memfd_create resumed>) = 3 [pid 6330] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6329] <... ioctl resumed>) = 0 [pid 6328] close(5 [pid 6326] <... close resumed>) = 0 [pid 6329] close(3) = 0 [pid 6329] close(4) = 0 [pid 6329] mkdir("./bus", 0777) = 0 [pid 6329] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6325] munmap(0x7f0356e00000, 138412032 [pid 6326] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6325] <... munmap resumed>) = 0 [pid 6325] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6327] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6328] <... close resumed>) = 0 [pid 6325] close(5 [pid 6326] <... open resumed>) = 5 [pid 6325] <... close resumed>) = 0 [pid 6326] ftruncate(5, 0) = 0 [pid 6330] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [ 200.068596][ T6329] loop5: detected capacity change from 0 to 1024 [pid 6328] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6327] <... open resumed>) = 5 [pid 6326] exit_group(0 [pid 6328] <... open resumed>) = 5 [pid 6325] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6329] <... mount resumed>) = 0 [pid 6326] <... exit_group resumed>) = ? [pid 6328] ftruncate(5, 0 [pid 6329] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6327] ftruncate(5, 0 [pid 6328] <... ftruncate resumed>) = 0 [pid 6326] +++ exited with 0 +++ [pid 6329] <... openat resumed>) = 3 [pid 6327] <... ftruncate resumed>) = 0 [pid 6328] exit_group(0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6326, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6329] chdir("./bus") = 0 [pid 6330] <... write resumed>) = 524288 [pid 6329] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6327] exit_group(0 [pid 6328] <... exit_group resumed>) = ? [pid 6330] munmap(0x7f0356e00000, 138412032 [pid 6329] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] umount2("./204", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6327] <... exit_group resumed>) = ? [pid 6328] +++ exited with 0 +++ [pid 6325] <... open resumed>) = 5 [pid 6325] ftruncate(5, 0) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6328, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5076] umount2("./207", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6329] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6325] exit_group(0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6325] <... exit_group resumed>) = ? [pid 5076] openat(AT_FDCWD, "./207", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6325] +++ exited with 0 +++ [pid 5076] <... openat resumed>) = 3 [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, [pid 6329] <... symlink resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] umount2("./207/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6329] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 4 [pid 6329] rename("./bus", "./file2") = -1 EEXIST (File exists) [pid 6329] memfd_create("syzkaller", 0) = 5 [pid 6329] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6330] <... munmap resumed>) = 0 [pid 6327] +++ exited with 0 +++ [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6327, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5075] openat(AT_FDCWD, "./204", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6330] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6325, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6330] <... openat resumed>) = 4 [pid 5077] umount2("./206", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... openat resumed>) = 3 [pid 6330] ioctl(4, LOOP_SET_FD, 3 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 200.147303][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 200.147325][ T28] audit: type=1800 audit(1710613082.254:1237): pid=6325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop4" ino=20 res=0 errno=0 [pid 5075] newfstatat(3, "", [pid 6330] <... ioctl resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./206", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... umount2 resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] umount2("./204", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... openat resumed>) = 3 [pid 5075] getdents64(3, [pid 5077] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] getdents64(3, [pid 5075] umount2("./204/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] openat(AT_FDCWD, "./204", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] <... openat resumed>) = 3 [pid 6330] close(3 [pid 5077] umount2("./206/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6330] <... close resumed>) = 0 [pid 6330] close(4 [pid 6329] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] newfstatat(3, "", [pid 6330] <... close resumed>) = 0 [pid 6330] mkdir("./bus", 0777 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6330] <... mkdir resumed>) = 0 [pid 6329] <... write resumed>) = 524288 [pid 5073] getdents64(3, [pid 5077] <... umount2 resumed>) = 0 [pid 5077] umount2("./206/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] umount2("./204/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./207/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./207/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./207/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./207/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6330] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5077] newfstatat(AT_FDCWD, "./206/bus", [pid 5076] <... openat resumed>) = 4 [pid 5075] umount2("./204/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6330] <... mount resumed>) = 0 [pid 6329] munmap(0x7f0356e00000, 138412032 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6330] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5077] umount2("./206/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] newfstatat(4, "", [pid 5075] newfstatat(AT_FDCWD, "./204/bus", [pid 6330] <... openat resumed>) = 3 [pid 6329] <... munmap resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6330] chdir("./bus" [pid 5077] openat(AT_FDCWD, "./206/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] getdents64(4, [pid 5075] umount2("./204/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6330] <... chdir resumed>) = 0 [pid 6329] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] <... openat resumed>) = 4 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6330] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6329] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] newfstatat(4, "", [pid 5076] getdents64(4, [pid 5075] openat(AT_FDCWD, "./204/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6330] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6329] close(5 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] <... openat resumed>) = 4 [pid 6330] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5077] getdents64(4, [pid 5076] close(4 [pid 5073] <... umount2 resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] <... close resumed>) = 0 [pid 5077] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] close(4 [pid 5076] rmdir("./207/bus" [pid 5077] <... close resumed>) = 0 [pid 5077] rmdir("./206/bus" [pid 5075] newfstatat(4, "", [pid 6330] <... symlink resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 6330] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5077] umount2("./206/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(4, [pid 5077] newfstatat(AT_FDCWD, "./206/binderfs", [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6329] <... close resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./207/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] getdents64(4, [pid 6330] <... creat resumed>) = 4 [pid 5077] unlink("./206/binderfs" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [ 200.197941][ T6330] loop1: detected capacity change from 0 to 1024 [pid 5073] umount2("./204/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... unlink resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./207/binderfs", [pid 5075] close(4 [pid 6330] rename("./bus", "./file2" [pid 5077] getdents64(3, [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6329] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] unlink("./207/binderfs" [pid 5075] rmdir("./204/bus" [pid 6330] <... rename resumed>) = -1 EEXIST (File exists) [pid 5077] close(3 [pid 5076] <... unlink resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./204/bus", [pid 6330] memfd_create("syzkaller", 0 [pid 5077] <... close resumed>) = 0 [pid 5075] umount2("./204/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6330] <... memfd_create resumed>) = 5 [pid 5077] rmdir("./206" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... rmdir resumed>) = 0 [pid 5076] getdents64(3, [pid 6330] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] newfstatat(AT_FDCWD, "./204/binderfs", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6330] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./204/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] close(3 [pid 6330] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6329] <... open resumed>) = 5 [pid 5077] mkdir("./207", 0777 [pid 5076] <... close resumed>) = 0 [pid 5075] unlink("./204/binderfs" [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] rmdir("./207" [pid 5073] openat(AT_FDCWD, "./204/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] <... rmdir resumed>) = 0 [pid 5073] newfstatat(4, "", [pid 5076] mkdir("./208", 0777 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5073] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./204/bus" [pid 6329] ftruncate(5, 0 [pid 5077] <... mkdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] <... unlink resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 6329] <... ftruncate resumed>) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] <... openat resumed>) = 3 [pid 5075] getdents64(3, [pid 6329] exit_group(0 [pid 5077] <... openat resumed>) = 3 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5073] umount2("./204/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5075] close(3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... close resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./204/binderfs", [pid 6329] <... exit_group resumed>) = ? [pid 5075] rmdir("./204" [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./204/binderfs" [pid 6330] <... write resumed>) = 524288 [pid 6329] +++ exited with 0 +++ [pid 5075] <... rmdir resumed>) = 0 [pid 6330] munmap(0x7f0356e00000, 138412032 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6329, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] mkdir("./205", 0777 [pid 5073] <... unlink resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5073] getdents64(3, [pid 6330] <... munmap resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3 [pid 6330] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5078] umount2("./207", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... openat resumed>) = 3 [pid 6330] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5073] <... close resumed>) = 0 [pid 6330] close(5 [pid 5078] openat(AT_FDCWD, "./207", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] rmdir("./204" [pid 5078] <... openat resumed>) = 3 [pid 5073] <... rmdir resumed>) = 0 [pid 5078] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [ 200.274758][ T28] audit: type=1800 audit(1710613082.374:1238): pid=6329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop5" ino=20 res=0 errno=0 [pid 5078] umount2("./207/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] mkdir("./205", 0777) = 0 [pid 5077] <... ioctl resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5078] <... umount2 resumed>) = 0 [pid 5077] close(3 [pid 5076] <... ioctl resumed>) = 0 [pid 5078] umount2("./207/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... close resumed>) = 0 [pid 5076] close(3 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... close resumed>) = 0 ./strace-static-x86_64: Process 6331 attached [pid 6330] <... close resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... openat resumed>) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6331 [pid 6331] set_robust_list(0x55556e32a660, 24 [pid 6330] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] newfstatat(AT_FDCWD, "./207/bus", [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6332 ./strace-static-x86_64: Process 6332 attached [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6331] <... set_robust_list resumed>) = 0 [pid 5078] umount2("./207/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6332] set_robust_list(0x55556e32a660, 24 [pid 6331] chdir("./207" [pid 6330] <... open resumed>) = 5 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6332] <... set_robust_list resumed>) = 0 [pid 6332] chdir("./208") = 0 [pid 6332] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6332] setpgid(0, 0) = 0 [pid 6332] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6332] write(3, "1000", 4) = 4 [pid 6332] close(3) = 0 [pid 6332] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6332] memfd_create("syzkaller", 0) = 3 [pid 6332] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6332] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6331] <... chdir resumed>) = 0 [pid 6330] ftruncate(5, 0 [pid 5078] openat(AT_FDCWD, "./207/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6331] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6330] <... ftruncate resumed>) = 0 [pid 5078] <... openat resumed>) = 4 [pid 6332] <... write resumed>) = 524288 [pid 6331] setpgid(0, 0 [pid 6330] exit_group(0 [pid 5078] newfstatat(4, "", [pid 6331] <... setpgid resumed>) = 0 [pid 6330] <... exit_group resumed>) = ? [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 6331] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6330] +++ exited with 0 +++ [pid 5078] getdents64(4, [pid 5075] close(3 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6330, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6331] <... openat resumed>) = 3 [pid 5078] getdents64(4, [pid 5075] <... close resumed>) = 0 [pid 6331] write(3, "1000", 4 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6331] <... write resumed>) = 4 [pid 5078] close(4) = 0 [pid 5074] umount2("./204", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./204", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6331] close(3 [pid 5078] rmdir("./207/bus" [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6333 [pid 5074] <... openat resumed>) = 3 [pid 6331] <... close resumed>) = 0 [pid 6331] symlink("/dev/binderfs", "./binderfs" [pid 5074] newfstatat(3, "", [pid 6331] <... symlink resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 200.367990][ T28] audit: type=1800 audit(1710613082.474:1239): pid=6330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop1" ino=20 res=0 errno=0 [pid 5074] getdents64(3, [pid 5078] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6333 attached [pid 6331] memfd_create("syzkaller", 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6333] set_robust_list(0x55556e32a660, 24 [pid 6331] <... memfd_create resumed>) = 3 [pid 5078] umount2("./207/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./204/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... ioctl resumed>) = 0 [pid 6333] <... set_robust_list resumed>) = 0 [pid 6332] munmap(0x7f0356e00000, 138412032 [pid 6331] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6333] chdir("./205" [pid 5078] newfstatat(AT_FDCWD, "./207/binderfs", [pid 6333] <... chdir resumed>) = 0 [pid 6332] <... munmap resumed>) = 0 [pid 6331] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6332] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6332] ioctl(4, LOOP_SET_FD, 3 [pid 6333] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6331] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] unlink("./207/binderfs" [pid 6333] <... prctl resumed>) = 0 [pid 6331] <... write resumed>) = 524288 [pid 5078] <... unlink resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 6333] setpgid(0, 0 [pid 5078] getdents64(3, [pid 5074] umount2("./204/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] close(3 [pid 6333] <... setpgid resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] close(3 [pid 5073] <... close resumed>) = 0 [pid 6333] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5078] <... close resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./204/bus", [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6333] <... openat resumed>) = 3 [pid 5078] rmdir("./207" [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6333] write(3, "1000", 4 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6334 [pid 6333] <... write resumed>) = 4 [pid 5074] umount2("./204/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6334 attached [pid 6333] close(3 [pid 5078] <... rmdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6333] <... close resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./204/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6333] symlink("/dev/binderfs", "./binderfs" [pid 6331] munmap(0x7f0356e00000, 138412032 [pid 5078] mkdir("./208", 0777 [pid 5074] <... openat resumed>) = 4 [pid 6334] set_robust_list(0x55556e32a660, 24 [pid 6333] <... symlink resumed>) = 0 [pid 5074] newfstatat(4, "", [pid 6334] <... set_robust_list resumed>) = 0 [pid 6332] <... ioctl resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6334] chdir("./205" [pid 6332] close(3 [pid 5078] <... mkdir resumed>) = 0 [pid 5074] getdents64(4, [pid 6334] <... chdir resumed>) = 0 [pid 6332] <... close resumed>) = 0 [pid 6332] close(4 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6334] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6332] <... close resumed>) = 0 [pid 5074] getdents64(4, [pid 6332] mkdir("./bus", 0777 [pid 6331] <... munmap resumed>) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6334] <... prctl resumed>) = 0 [pid 6332] <... mkdir resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6334] setpgid(0, 0 [pid 6333] memfd_create("syzkaller", 0 [pid 6332] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6331] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] <... openat resumed>) = 3 [pid 5074] close(4 [pid 6334] <... setpgid resumed>) = 0 [pid 6333] <... memfd_create resumed>) = 3 [pid 6334] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6333] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6331] <... openat resumed>) = 4 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./204/bus" [pid 6334] <... openat resumed>) = 3 [pid 6333] <... mmap resumed>) = 0x7f0356e00000 [pid 6331] ioctl(4, LOOP_SET_FD, 3 [pid 5074] <... rmdir resumed>) = 0 [ 200.441824][ T6332] loop3: detected capacity change from 0 to 1024 [pid 6334] write(3, "1000", 4) = 4 [pid 6334] close(3) = 0 [pid 6334] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6334] memfd_create("syzkaller", 0) = 3 [pid 6334] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6333] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6331] <... ioctl resumed>) = 0 [pid 5074] umount2("./204/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6332] <... mount resumed>) = 0 [pid 6333] <... write resumed>) = 524288 [pid 6332] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5074] newfstatat(AT_FDCWD, "./204/binderfs", [pid 6332] <... openat resumed>) = 3 [pid 6334] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6332] chdir("./bus" [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./204/binderfs" [pid 6331] close(3 [pid 5074] <... unlink resumed>) = 0 [pid 6331] <... close resumed>) = 0 [pid 5074] getdents64(3, [pid 6331] close(4 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6332] <... chdir resumed>) = 0 [pid 6331] <... close resumed>) = 0 [pid 5074] close(3 [pid 6331] mkdir("./bus", 0777 [pid 6332] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6331] <... mkdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 6331] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5074] rmdir("./204" [pid 6332] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6332] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5074] <... rmdir resumed>) = 0 [pid 6334] <... write resumed>) = 524288 [pid 6332] <... symlink resumed>) = 0 [pid 6331] <... mount resumed>) = 0 [pid 6331] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5074] mkdir("./205", 0777 [pid 6333] munmap(0x7f0356e00000, 138412032 [pid 6331] <... openat resumed>) = 3 [pid 5074] <... mkdir resumed>) = 0 [pid 6331] chdir("./bus" [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6331] <... chdir resumed>) = 0 [pid 6332] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6331] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] <... openat resumed>) = 3 [pid 6333] <... munmap resumed>) = 0 [pid 6331] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] ioctl(3, LOOP_CLR_FD [ 200.496673][ T6331] loop4: detected capacity change from 0 to 1024 [pid 6331] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6334] munmap(0x7f0356e00000, 138412032 [pid 6332] <... creat resumed>) = 4 [pid 6331] <... symlink resumed>) = 0 [pid 5078] <... ioctl resumed>) = 0 [pid 6334] <... munmap resumed>) = 0 [pid 6333] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6331] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6333] <... openat resumed>) = 4 [pid 6332] rename("./bus", "./file2" [pid 6334] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6333] ioctl(4, LOOP_SET_FD, 3 [pid 6331] <... creat resumed>) = 4 [pid 5078] close(3 [pid 6334] <... openat resumed>) = 4 [pid 6334] ioctl(4, LOOP_SET_FD, 3 [pid 6333] <... ioctl resumed>) = 0 [pid 6331] rename("./bus", "./file2" [pid 5078] <... close resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6332] <... rename resumed>) = -1 EEXIST (File exists) [pid 6332] memfd_create("syzkaller", 0) = 5 [pid 6332] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6333] close(3 [pid 6331] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6335 [pid 5074] close(3 [pid 6333] <... close resumed>) = 0 [pid 6331] memfd_create("syzkaller", 0 [pid 6333] close(4 [pid 5074] <... close resumed>) = 0 [pid 6333] <... close resumed>) = 0 [pid 6333] mkdir("./bus", 0777 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6331] <... memfd_create resumed>) = 5 ./strace-static-x86_64: Process 6336 attached ./strace-static-x86_64: Process 6335 attached [pid 6333] <... mkdir resumed>) = 0 [pid 6332] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6331] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6335] set_robust_list(0x55556e32a660, 24 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6336 [pid 6336] set_robust_list(0x55556e32a660, 24 [pid 6333] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6331] <... mmap resumed>) = 0x7f0356e00000 [pid 6335] <... set_robust_list resumed>) = 0 [pid 6335] chdir("./208" [pid 6336] <... set_robust_list resumed>) = 0 [pid 6335] <... chdir resumed>) = 0 [pid 6332] <... write resumed>) = 524288 [pid 6331] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6335] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 200.568837][ T6333] loop2: detected capacity change from 0 to 1024 [ 200.571176][ T6334] loop0: detected capacity change from 0 to 1024 [pid 6335] setpgid(0, 0) = 0 [pid 6334] <... ioctl resumed>) = 0 [pid 6336] chdir("./205" [pid 6335] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6334] close(3 [pid 6335] <... openat resumed>) = 3 [pid 6334] <... close resumed>) = 0 [pid 6334] close(4) = 0 [pid 6334] mkdir("./bus", 0777 [pid 6336] <... chdir resumed>) = 0 [pid 6335] write(3, "1000", 4 [pid 6334] <... mkdir resumed>) = 0 [pid 6333] <... mount resumed>) = 0 [pid 6336] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6335] <... write resumed>) = 4 [pid 6334] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6333] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6336] <... prctl resumed>) = 0 [pid 6335] close(3 [pid 6333] <... openat resumed>) = 3 [pid 6336] setpgid(0, 0 [pid 6335] <... close resumed>) = 0 [pid 6333] chdir("./bus" [pid 6332] munmap(0x7f0356e00000, 138412032 [pid 6331] <... write resumed>) = 524288 [pid 6336] <... setpgid resumed>) = 0 [pid 6333] <... chdir resumed>) = 0 [pid 6336] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6335] symlink("/dev/binderfs", "./binderfs" [pid 6333] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6332] <... munmap resumed>) = 0 [pid 6335] <... symlink resumed>) = 0 [pid 6333] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6332] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6335] memfd_create("syzkaller", 0 [pid 6333] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6332] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6332] close(5 [pid 6335] <... memfd_create resumed>) = 3 [pid 6333] <... symlink resumed>) = 0 [pid 6335] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6336] <... openat resumed>) = 3 [pid 6334] <... mount resumed>) = 0 [pid 6333] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6331] munmap(0x7f0356e00000, 138412032 [pid 6336] write(3, "1000", 4 [pid 6334] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6336] <... write resumed>) = 4 [pid 6334] <... openat resumed>) = 3 [pid 6332] <... close resumed>) = 0 [pid 6336] close(3 [pid 6334] chdir("./bus" [pid 6333] <... creat resumed>) = 4 [pid 6336] <... close resumed>) = 0 [pid 6334] <... chdir resumed>) = 0 [pid 6332] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6336] symlink("/dev/binderfs", "./binderfs" [pid 6334] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6333] rename("./bus", "./file2" [pid 6331] <... munmap resumed>) = 0 [pid 6336] <... symlink resumed>) = 0 [pid 6335] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6334] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6332] <... open resumed>) = 5 [pid 6334] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6332] ftruncate(5, 0 [pid 6334] <... symlink resumed>) = 0 [pid 6332] <... ftruncate resumed>) = 0 [pid 6334] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6332] exit_group(0) = ? [pid 6334] <... creat resumed>) = 4 [pid 6334] rename("./bus", "./file2" [pid 6332] +++ exited with 0 +++ [pid 6335] <... write resumed>) = 524288 [pid 6334] <... rename resumed>) = -1 EEXIST (File exists) [pid 6334] memfd_create("syzkaller", 0) = 5 [pid 6334] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6336] memfd_create("syzkaller", 0 [pid 6334] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6332, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6336] <... memfd_create resumed>) = 3 [pid 6335] munmap(0x7f0356e00000, 138412032 [pid 6331] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] umount2("./208", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6336] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6335] <... munmap resumed>) = 0 [pid 6331] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6336] <... mmap resumed>) = 0x7f0356e00000 [pid 6331] close(5 [pid 5076] openat(AT_FDCWD, "./208", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6331] <... close resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5076] newfstatat(3, "", [pid 6333] <... rename resumed>) = -1 EEXIST (File exists) [ 200.671586][ T28] audit: type=1800 audit(1710613082.774:1240): pid=6332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop3" ino=20 res=0 errno=0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6336] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6335] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6333] memfd_create("syzkaller", 0 [pid 5076] getdents64(3, [pid 6333] <... memfd_create resumed>) = 5 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6335] <... openat resumed>) = 4 [pid 6331] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5076] umount2("./208/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6335] ioctl(4, LOOP_SET_FD, 3 [pid 6334] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6333] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6331] <... open resumed>) = 5 [pid 6336] <... write resumed>) = 524288 [pid 6331] ftruncate(5, 0) = 0 [pid 6331] exit_group(0) = ? [pid 6334] <... write resumed>) = 524288 [pid 6333] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... umount2 resumed>) = 0 [pid 6331] +++ exited with 0 +++ [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6331, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5077] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5076] umount2("./208/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6335] <... ioctl resumed>) = 0 [pid 5077] umount2("./207", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6336] munmap(0x7f0356e00000, 138412032 [pid 6335] close(3 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./208/bus", [pid 6335] <... close resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./207", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6336] <... munmap resumed>) = 0 [pid 6335] close(4 [pid 5077] <... openat resumed>) = 3 [ 200.714300][ T6335] loop5: detected capacity change from 0 to 1024 [pid 5076] umount2("./208/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6336] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6335] <... close resumed>) = 0 [pid 5077] newfstatat(3, "", [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6336] <... openat resumed>) = 4 [pid 6335] mkdir("./bus", 0777 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] openat(AT_FDCWD, "./208/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6336] ioctl(4, LOOP_SET_FD, 3 [pid 6335] <... mkdir resumed>) = 0 [pid 5077] getdents64(3, [pid 5076] <... openat resumed>) = 4 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] umount2("./207/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6334] munmap(0x7f0356e00000, 138412032 [pid 6333] <... write resumed>) = 524288 [pid 6335] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5076] newfstatat(4, "", [pid 6334] <... munmap resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6334] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6333] munmap(0x7f0356e00000, 138412032 [pid 5076] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] close(4 [pid 6334] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6333] <... munmap resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 6334] close(5 [pid 6333] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5076] rmdir("./208/bus") = 0 [pid 5076] umount2("./208/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./208/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./208/binderfs") = 0 [pid 6334] <... close resumed>) = 0 [pid 6333] close(5 [pid 6335] <... mount resumed>) = 0 [pid 6333] <... close resumed>) = 0 [ 200.749891][ T28] audit: type=1800 audit(1710613082.834:1241): pid=6331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 200.754676][ T6336] loop1: detected capacity change from 0 to 1024 [pid 6334] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6333] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6334] <... open resumed>) = 5 [pid 5077] <... umount2 resumed>) = 0 [pid 6335] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5077] umount2("./207/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] getdents64(3, [pid 6334] ftruncate(5, 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] newfstatat(AT_FDCWD, "./207/bus", [pid 5076] close(3 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... close resumed>) = 0 [pid 5077] umount2("./207/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] rmdir("./208" [pid 6336] <... ioctl resumed>) = 0 [pid 6335] <... openat resumed>) = 3 [pid 6334] <... ftruncate resumed>) = 0 [pid 6333] <... open resumed>) = 5 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... rmdir resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./207/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5077] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] getdents64(4, [pid 5076] mkdir("./209", 0777 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5077] close(4) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6335] chdir("./bus" [pid 5077] rmdir("./207/bus" [pid 5076] <... openat resumed>) = 3 [pid 6335] <... chdir resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6335] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] umount2("./207/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6335] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6334] exit_group(0 [pid 5077] newfstatat(AT_FDCWD, "./207/binderfs", [pid 6334] <... exit_group resumed>) = ? [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6335] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5077] unlink("./207/binderfs" [pid 6336] close(3 [pid 6335] <... symlink resumed>) = 0 [pid 6334] +++ exited with 0 +++ [pid 6333] ftruncate(5, 0 [pid 5077] <... unlink resumed>) = 0 [ 200.806168][ T28] audit: type=1800 audit(1710613082.904:1242): pid=6334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 200.833221][ T28] audit: type=1800 audit(1710613082.934:1243): pid=6333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop2" ino=20 res=0 errno=0 [pid 6335] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6334, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6336] <... close resumed>) = 0 [pid 6335] <... creat resumed>) = 4 [pid 6333] <... ftruncate resumed>) = 0 [pid 5077] getdents64(3, [pid 6335] rename("./bus", "./file2" [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6336] close(4 [pid 6335] <... rename resumed>) = -1 EEXIST (File exists) [pid 6333] exit_group(0 [pid 6336] <... close resumed>) = 0 [pid 6333] <... exit_group resumed>) = ? [pid 6335] memfd_create("syzkaller", 0 [pid 5077] close(3 [pid 6335] <... memfd_create resumed>) = 5 [pid 5077] <... close resumed>) = 0 [pid 6335] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] rmdir("./207" [pid 5073] umount2("./205", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6335] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] <... rmdir resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6335] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] mkdir("./208", 0777 [pid 5073] openat(AT_FDCWD, "./205", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... mkdir resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] <... openat resumed>) = 3 [pid 5073] umount2("./205/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6336] mkdir("./bus", 0777 [pid 6333] +++ exited with 0 +++ [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5076] <... ioctl resumed>) = 0 [pid 6336] <... mkdir resumed>) = 0 [pid 6335] <... write resumed>) = 524288 [pid 5073] <... umount2 resumed>) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6333, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6336] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5075] umount2("./205", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] close(3 [pid 5073] umount2("./205/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] openat(AT_FDCWD, "./205", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] newfstatat(AT_FDCWD, "./205/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./205/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./205/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6337 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./205/bus") = 0 ./strace-static-x86_64: Process 6337 attached [pid 6337] set_robust_list(0x55556e32a660, 24) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5073] umount2("./205/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6337] chdir("./209" [pid 5075] newfstatat(3, "", [pid 6337] <... chdir resumed>) = 0 [pid 6335] munmap(0x7f0356e00000, 138412032 [pid 6337] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6335] <... munmap resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6337] <... prctl resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6337] setpgid(0, 0 [pid 5073] newfstatat(AT_FDCWD, "./205/binderfs", [pid 6337] <... setpgid resumed>) = 0 [pid 6335] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6337] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6335] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] unlink("./205/binderfs" [pid 6337] <... openat resumed>) = 3 [pid 5073] <... unlink resumed>) = 0 [pid 6337] write(3, "1000", 4 [pid 6335] close(5 [pid 5073] getdents64(3, [pid 5075] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6337] <... write resumed>) = 4 [pid 5075] umount2("./205/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6337] close(3) = 0 [pid 6336] <... mount resumed>) = 0 [pid 6335] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6336] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6337] symlink("/dev/binderfs", "./binderfs" [pid 5073] close(3 [pid 6337] <... symlink resumed>) = 0 [pid 6336] <... openat resumed>) = 3 [pid 5075] umount2("./205/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6336] chdir("./bus" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... close resumed>) = 0 [pid 6337] memfd_create("syzkaller", 0 [pid 6336] <... chdir resumed>) = 0 [pid 6335] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5075] newfstatat(AT_FDCWD, "./205/bus", [pid 5073] rmdir("./205" [pid 6337] <... memfd_create resumed>) = 3 [pid 6336] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5077] <... ioctl resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 6336] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] umount2("./205/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6336] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./205/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6335] <... open resumed>) = 5 [pid 5075] <... openat resumed>) = 4 [pid 5073] mkdir("./206", 0777 [pid 6336] <... symlink resumed>) = 0 [pid 5075] newfstatat(4, "", [pid 6335] ftruncate(5, 0 [pid 5073] <... mkdir resumed>) = 0 [pid 6337] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6335] <... ftruncate resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6337] <... mmap resumed>) = 0x7f0356e00000 [pid 6335] exit_group(0 [pid 5073] <... openat resumed>) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = 0 [pid 6335] <... exit_group resumed>) = ? [pid 5077] close(3 [pid 5073] close(3 [pid 6335] +++ exited with 0 +++ [pid 5077] <... close resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6338 attached [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6335, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6338] set_robust_list(0x55556e32a660, 24 [pid 5078] umount2("./208", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6338 [pid 6338] <... set_robust_list resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6339 [pid 5078] openat(AT_FDCWD, "./208", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6338] chdir("./206" [pid 5078] newfstatat(3, "", [pid 6337] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6338] <... chdir resumed>) = 0 [pid 5078] getdents64(3, [pid 6338] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6338] <... prctl resumed>) = 0 [pid 5078] umount2("./208/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6336] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 6339 attached [pid 6338] setpgid(0, 0 [pid 6337] <... write resumed>) = 524288 [pid 6339] set_robust_list(0x55556e32a660, 24 [pid 5075] getdents64(4, [pid 6339] <... set_robust_list resumed>) = 0 [pid 6338] <... setpgid resumed>) = 0 [pid 6336] <... creat resumed>) = 4 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6339] chdir("./208" [pid 6338] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6336] rename("./bus", "./file2" [pid 5075] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6339] <... chdir resumed>) = 0 [pid 6338] <... openat resumed>) = 3 [pid 5075] close(4 [pid 6339] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6338] write(3, "1000", 4 [pid 6336] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] <... umount2 resumed>) = 0 [pid 6336] memfd_create("syzkaller", 0 [pid 5075] <... close resumed>) = 0 [pid 6339] <... prctl resumed>) = 0 [pid 6338] <... write resumed>) = 4 [pid 6338] close(3) = 0 [pid 6337] munmap(0x7f0356e00000, 138412032 [pid 6338] symlink("/dev/binderfs", "./binderfs" [pid 6337] <... munmap resumed>) = 0 [pid 6338] <... symlink resumed>) = 0 [pid 6339] setpgid(0, 0 [pid 6338] memfd_create("syzkaller", 0 [pid 6336] <... memfd_create resumed>) = 5 [pid 5075] rmdir("./205/bus" [pid 6339] <... setpgid resumed>) = 0 [pid 6336] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6338] <... memfd_create resumed>) = 3 [pid 6339] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6338] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [ 200.949039][ T28] audit: type=1800 audit(1710613083.054:1244): pid=6335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop5" ino=20 res=0 errno=0 [pid 6337] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6336] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] umount2("./208/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6339] <... openat resumed>) = 3 [pid 5075] <... rmdir resumed>) = 0 [pid 6337] <... openat resumed>) = 4 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6337] ioctl(4, LOOP_SET_FD, 3 [pid 5078] newfstatat(AT_FDCWD, "./208/bus", [pid 6339] write(3, "1000", 4 [pid 6336] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] umount2("./205/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6339] <... write resumed>) = 4 [pid 6338] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6339] close(3) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] newfstatat(AT_FDCWD, "./205/binderfs", [pid 5078] umount2("./208/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6339] symlink("/dev/binderfs", "./binderfs" [pid 6337] <... ioctl resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6339] <... symlink resumed>) = 0 [pid 6337] close(3 [pid 5078] openat(AT_FDCWD, "./208/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] unlink("./205/binderfs" [pid 6337] <... close resumed>) = 0 [pid 5078] <... openat resumed>) = 4 [pid 6337] close(4 [pid 5078] newfstatat(4, "", [pid 6337] <... close resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6337] mkdir("./bus", 0777 [pid 6339] memfd_create("syzkaller", 0 [pid 6338] <... write resumed>) = 524288 [pid 6337] <... mkdir resumed>) = 0 [pid 6336] <... write resumed>) = 524288 [pid 5078] getdents64(4, [pid 5075] <... unlink resumed>) = 0 [pid 6339] <... memfd_create resumed>) = 3 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5078] close(4 [pid 6337] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5078] <... close resumed>) = 0 [pid 5078] rmdir("./208/bus" [pid 6339] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5075] getdents64(3, [pid 6339] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] umount2("./208/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] newfstatat(AT_FDCWD, "./208/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] unlink("./208/binderfs") = 0 [pid 5075] close(3 [pid 6339] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] getdents64(3, [pid 5075] <... close resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] rmdir("./205" [pid 6337] <... mount resumed>) = 0 [pid 5078] close(3 [pid 6337] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] <... close resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 6338] munmap(0x7f0356e00000, 138412032 [pid 6337] <... openat resumed>) = 3 [pid 5078] rmdir("./208" [pid 5075] mkdir("./206", 0777 [pid 6338] <... munmap resumed>) = 0 [pid 6337] chdir("./bus" [pid 5078] <... rmdir resumed>) = 0 [pid 6337] <... chdir resumed>) = 0 [pid 6337] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [ 201.008421][ T6337] loop3: detected capacity change from 0 to 1024 [pid 5078] mkdir("./209", 0777 [pid 5075] <... mkdir resumed>) = 0 [pid 6337] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] <... mkdir resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6338] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6337] <... symlink resumed>) = 0 [pid 6338] <... openat resumed>) = 4 [pid 6337] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 6338] ioctl(4, LOOP_SET_FD, 3 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5075] <... openat resumed>) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6337] <... creat resumed>) = 4 [pid 6337] rename("./bus", "./file2") = -1 EEXIST (File exists) [pid 6339] <... write resumed>) = 524288 [pid 6337] memfd_create("syzkaller", 0 [pid 6336] munmap(0x7f0356e00000, 138412032 [pid 6337] <... memfd_create resumed>) = 5 [pid 6337] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6337] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6336] <... munmap resumed>) = 0 [pid 6338] <... ioctl resumed>) = 0 [pid 6338] close(3) = 0 [pid 6338] close(4) = 0 [pid 6338] mkdir("./bus", 0777 [pid 6336] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6336] close(5 [pid 6338] <... mkdir resumed>) = 0 [pid 6338] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6339] munmap(0x7f0356e00000, 138412032 [pid 6337] <... write resumed>) = 524288 [pid 6336] <... close resumed>) = 0 [pid 6339] <... munmap resumed>) = 0 [pid 6336] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6339] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5075] <... ioctl resumed>) = 0 [pid 6338] <... mount resumed>) = 0 [pid 6338] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6338] chdir("./bus") = 0 [pid 6338] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5078] <... ioctl resumed>) = 0 [pid 5075] close(3 [pid 6339] <... openat resumed>) = 4 [pid 6338] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 201.071970][ T6338] loop0: detected capacity change from 0 to 1024 [pid 6337] munmap(0x7f0356e00000, 138412032 [pid 6339] ioctl(4, LOOP_SET_FD, 3 [pid 6338] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5075] <... close resumed>) = 0 [pid 6337] <... munmap resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6338] <... symlink resumed>) = 0 [pid 6338] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6337] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6337] close(5 [pid 5078] close(3) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6338] <... creat resumed>) = 4 [pid 6336] <... open resumed>) = 5 [pid 6338] rename("./bus", "./file2" [pid 6337] <... close resumed>) = 0 [pid 6338] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6341 [pid 6338] memfd_create("syzkaller", 0 [pid 6337] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000./strace-static-x86_64: Process 6341 attached [pid 6338] <... memfd_create resumed>) = 5 [pid 6341] set_robust_list(0x55556e32a660, 24 [pid 6338] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6341] <... set_robust_list resumed>) = 0 [pid 6338] <... mmap resumed>) = 0x7f0356e00000 [pid 6341] chdir("./209" [pid 6338] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6337] <... open resumed>) = 5 [pid 6341] <... chdir resumed>) = 0 [pid 6341] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6340 [pid 6341] setpgid(0, 0) = 0 [pid 6336] ftruncate(5, 0 [pid 6341] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6337] ftruncate(5, 0 [pid 6341] <... openat resumed>) = 3 [pid 6337] <... ftruncate resumed>) = 0 [pid 6341] write(3, "1000", 4 [pid 6337] exit_group(0./strace-static-x86_64: Process 6340 attached [pid 6341] <... write resumed>) = 4 [pid 6339] <... ioctl resumed>) = 0 [pid 6337] <... exit_group resumed>) = ? [pid 6336] <... ftruncate resumed>) = 0 [pid 6340] set_robust_list(0x55556e32a660, 24 [pid 6339] close(3 [pid 6338] <... write resumed>) = 524288 [ 201.131408][ T6339] loop4: detected capacity change from 0 to 1024 [ 201.146923][ T28] audit: type=1800 audit(1710613083.254:1245): pid=6336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop1" ino=20 res=0 errno=0 [pid 6336] exit_group(0 [pid 6340] <... set_robust_list resumed>) = 0 [pid 6341] close(3 [pid 6339] <... close resumed>) = 0 [pid 6337] +++ exited with 0 +++ [pid 6336] <... exit_group resumed>) = ? [pid 6341] <... close resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6337, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6341] symlink("/dev/binderfs", "./binderfs" [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 6341] <... symlink resumed>) = 0 [pid 5076] <... restart_syscall resumed>) = 0 [pid 5076] umount2("./209", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6341] memfd_create("syzkaller", 0 [pid 5076] openat(AT_FDCWD, "./209", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6341] <... memfd_create resumed>) = 3 [pid 5076] <... openat resumed>) = 3 [pid 6341] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] newfstatat(3, "", [pid 6341] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6340] chdir("./206" [pid 6339] close(4 [pid 6336] +++ exited with 0 +++ [pid 6340] <... chdir resumed>) = 0 [pid 6339] <... close resumed>) = 0 [pid 5076] getdents64(3, [pid 6340] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6339] mkdir("./bus", 0777 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6336, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6340] <... prctl resumed>) = 0 [pid 6339] <... mkdir resumed>) = 0 [pid 6340] setpgid(0, 0 [pid 6341] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6339] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6338] munmap(0x7f0356e00000, 138412032 [pid 5076] umount2("./209/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 6340] <... setpgid resumed>) = 0 [pid 6340] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6341] <... write resumed>) = 524288 [pid 6338] <... munmap resumed>) = 0 [pid 5074] <... restart_syscall resumed>) = 0 [pid 6338] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6340] <... openat resumed>) = 3 [pid 6340] write(3, "1000", 4 [pid 6338] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6340] <... write resumed>) = 4 [pid 6340] close(3 [pid 6338] close(5 [pid 5074] umount2("./205", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6340] <... close resumed>) = 0 [ 201.196212][ T28] audit: type=1800 audit(1710613083.264:1246): pid=6337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop3" ino=20 res=0 errno=0 [pid 6340] symlink("/dev/binderfs", "./binderfs" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6340] <... symlink resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./205", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6340] memfd_create("syzkaller", 0 [pid 5074] <... openat resumed>) = 3 [pid 6340] <... memfd_create resumed>) = 3 [pid 5074] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5074] getdents64(3, [pid 6340] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] umount2("./205/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6341] munmap(0x7f0356e00000, 138412032 [pid 6338] <... close resumed>) = 0 [pid 6338] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6340] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6341] <... munmap resumed>) = 0 [pid 6339] <... mount resumed>) = 0 [pid 6338] <... open resumed>) = 5 [pid 5076] umount2("./209/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = 0 [pid 6339] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6338] ftruncate(5, 0 [pid 6339] <... openat resumed>) = 3 [pid 6338] <... ftruncate resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6341] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6339] chdir("./bus" [pid 6338] exit_group(0 [pid 6341] <... openat resumed>) = 4 [pid 6339] <... chdir resumed>) = 0 [pid 6338] <... exit_group resumed>) = ? [pid 5076] newfstatat(AT_FDCWD, "./209/bus", [pid 5074] umount2("./205/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6341] ioctl(4, LOOP_SET_FD, 3 [pid 6339] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6338] +++ exited with 0 +++ [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6339] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6338, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6339] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6340] <... write resumed>) = 524288 [pid 5076] umount2("./209/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./206", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6340] munmap(0x7f0356e00000, 138412032 [pid 5076] openat(AT_FDCWD, "./209/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6340] <... munmap resumed>) = 0 [pid 6339] <... symlink resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5073] openat(AT_FDCWD, "./206", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... openat resumed>) = 3 [pid 5074] newfstatat(AT_FDCWD, "./205/bus", [pid 5073] newfstatat(3, "", [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] umount2("./205/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] getdents64(3, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] openat(AT_FDCWD, "./205/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] umount2("./206/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... openat resumed>) = 4 [pid 6340] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6339] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5076] newfstatat(4, "", [pid 5074] newfstatat(4, "", [pid 6340] <... openat resumed>) = 4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, [pid 6340] ioctl(4, LOOP_SET_FD, 3 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, [pid 5074] getdents64(4, [pid 5073] <... umount2 resumed>) = 0 [pid 6340] <... ioctl resumed>) = 0 [pid 6341] <... ioctl resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6341] close(3 [pid 5076] getdents64(4, [pid 5074] close(4 [pid 5073] umount2("./206/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6341] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6341] close(4 [pid 5074] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6340] close(3 [pid 6341] <... close resumed>) = 0 [pid 5074] rmdir("./205/bus" [pid 5073] newfstatat(AT_FDCWD, "./206/bus", [pid 6340] <... close resumed>) = 0 [pid 6341] mkdir("./bus", 0777 [pid 6339] <... creat resumed>) = 4 [pid 5076] close(4 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6340] close(4 [pid 6341] <... mkdir resumed>) = 0 [pid 5073] umount2("./206/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6340] <... close resumed>) = 0 [pid 6341] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5074] umount2("./205/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6340] mkdir("./bus", 0777 [pid 6341] <... mount resumed>) = 0 [pid 6339] rename("./bus", "./file2" [pid 5076] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./206/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6340] <... mkdir resumed>) = 0 [pid 6341] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6339] <... rename resumed>) = -1 EEXIST (File exists) [pid 5076] rmdir("./209/bus" [pid 5074] newfstatat(AT_FDCWD, "./205/binderfs", [pid 5073] <... openat resumed>) = 4 [pid 6340] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6341] <... openat resumed>) = 3 [pid 6339] memfd_create("syzkaller", 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] newfstatat(4, "", [pid 6341] chdir("./bus" [pid 6339] <... memfd_create resumed>) = 5 [pid 5076] umount2("./209/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] unlink("./205/binderfs" [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6341] <... chdir resumed>) = 0 [ 201.298878][ T6341] loop5: detected capacity change from 0 to 1024 [ 201.331109][ T6340] loop2: detected capacity change from 0 to 1024 [pid 6339] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... unlink resumed>) = 0 [pid 5073] getdents64(4, [pid 6341] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6339] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] newfstatat(AT_FDCWD, "./209/binderfs", [pid 5074] getdents64(3, [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6341] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] getdents64(4, [pid 6341] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5076] unlink("./209/binderfs" [pid 5074] close(3 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] close(4 [pid 5076] <... unlink resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./206/bus" [pid 5076] getdents64(3, [pid 5073] <... rmdir resumed>) = 0 [pid 6341] <... symlink resumed>) = 0 [pid 6341] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5074] <... close resumed>) = 0 [pid 6339] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] umount2("./206/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6341] <... creat resumed>) = 4 [pid 5076] close(3 [pid 5074] rmdir("./205" [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6340] <... mount resumed>) = 0 [pid 6341] rename("./bus", "./file2" [pid 6339] <... write resumed>) = 524288 [pid 5076] <... close resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 6340] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5074] mkdir("./206", 0777) = 0 [pid 6340] <... openat resumed>) = 3 [pid 5073] newfstatat(AT_FDCWD, "./206/binderfs", [pid 5076] rmdir("./209" [pid 6340] chdir("./bus" [pid 5076] <... rmdir resumed>) = 0 [pid 6340] <... chdir resumed>) = 0 [pid 5076] mkdir("./210", 0777 [pid 6341] <... rename resumed>) = -1 EEXIST (File exists) [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5074] <... openat resumed>) = 3 [pid 5073] unlink("./206/binderfs" [pid 5076] <... openat resumed>) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] <... unlink resumed>) = 0 [pid 6340] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5073] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6340] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] close(3 [pid 6340] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6339] munmap(0x7f0356e00000, 138412032 [pid 5073] <... close resumed>) = 0 [pid 6341] memfd_create("syzkaller", 0 [pid 5073] rmdir("./206" [pid 6341] <... memfd_create resumed>) = 5 [pid 5073] <... rmdir resumed>) = 0 [pid 6341] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6341] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6339] <... munmap resumed>) = 0 [pid 6339] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] mkdir("./207", 0777 [pid 6340] <... symlink resumed>) = 0 [pid 6339] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... mkdir resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6340] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6339] close(5) = 0 [pid 6340] <... creat resumed>) = 4 [pid 6340] rename("./bus", "./file2" [pid 6341] <... write resumed>) = 524288 [pid 6341] munmap(0x7f0356e00000, 138412032 [pid 6340] <... rename resumed>) = -1 EEXIST (File exists) [pid 6339] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5076] <... ioctl resumed>) = 0 [pid 6340] memfd_create("syzkaller", 0 [pid 5076] close(3 [pid 5074] <... ioctl resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5074] close(3 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... close resumed>) = 0 ./strace-static-x86_64: Process 6342 attached [pid 6340] <... memfd_create resumed>) = 5 [pid 6341] <... munmap resumed>) = 0 [pid 6339] <... open resumed>) = 5 [pid 5073] <... ioctl resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6342 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6339] ftruncate(5, 0) = 0 [pid 6339] exit_group(0./strace-static-x86_64: Process 6343 attached [pid 6342] set_robust_list(0x55556e32a660, 24 [pid 6341] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6343 [pid 6342] <... set_robust_list resumed>) = 0 [pid 6341] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6339] <... exit_group resumed>) = ? [pid 6343] set_robust_list(0x55556e32a660, 24 [pid 6342] chdir("./210" [pid 6341] close(5 [pid 6339] +++ exited with 0 +++ [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6339, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6340] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6341] <... close resumed>) = 0 [pid 6343] <... set_robust_list resumed>) = 0 [pid 5073] close(3 [pid 6342] <... chdir resumed>) = 0 [pid 5077] umount2("./208", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6343] chdir("./206" [pid 6340] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... close resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./208", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6342] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6343] <... chdir resumed>) = 0 [pid 6342] setpgid(0, 0 [pid 6340] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... openat resumed>) = 3 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6342] <... setpgid resumed>) = 0 [pid 5077] newfstatat(3, "", [pid 6343] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] getdents64(3, [pid 6343] <... prctl resumed>) = 0 [pid 6343] setpgid(0, 0 [pid 6342] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6341] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6343] <... setpgid resumed>) = 0 [pid 5077] umount2("./208/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6343] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6344 [pid 6343] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6344 attached [pid 6343] write(3, "1000", 4 [pid 6342] <... openat resumed>) = 3 [pid 6343] <... write resumed>) = 4 [pid 6343] close(3 [pid 6344] set_robust_list(0x55556e32a660, 24 [pid 6343] <... close resumed>) = 0 [pid 6343] symlink("/dev/binderfs", "./binderfs" [pid 6344] <... set_robust_list resumed>) = 0 [pid 6344] chdir("./207") = 0 [pid 6344] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6344] setpgid(0, 0 [pid 6341] <... open resumed>) = 5 [pid 6344] <... setpgid resumed>) = 0 [pid 6344] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6340] <... write resumed>) = 524288 [pid 6344] <... openat resumed>) = 3 [pid 6344] write(3, "1000", 4 [pid 6343] <... symlink resumed>) = 0 [pid 6341] ftruncate(5, 0 [pid 6344] <... write resumed>) = 4 [pid 6343] memfd_create("syzkaller", 0 [pid 6342] write(3, "1000", 4 [pid 6341] <... ftruncate resumed>) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 6342] <... write resumed>) = 4 [pid 6344] close(3 [pid 6343] <... memfd_create resumed>) = 3 [pid 6342] close(3 [pid 6341] exit_group(0 [pid 5077] umount2("./208/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6344] <... close resumed>) = 0 [pid 6342] <... close resumed>) = 0 [pid 6340] munmap(0x7f0356e00000, 138412032 [pid 6341] <... exit_group resumed>) = ? [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6344] symlink("/dev/binderfs", "./binderfs" [pid 6343] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6342] symlink("/dev/binderfs", "./binderfs" [pid 6340] <... munmap resumed>) = 0 [pid 6344] <... symlink resumed>) = 0 [pid 6340] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5077] newfstatat(AT_FDCWD, "./208/bus", [pid 6344] memfd_create("syzkaller", 0 [pid 6343] <... mmap resumed>) = 0x7f0356e00000 [pid 6342] <... symlink resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] umount2("./208/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6344] <... memfd_create resumed>) = 3 [pid 6340] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6340] close(5 [pid 6343] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6342] memfd_create("syzkaller", 0 [pid 6340] <... close resumed>) = 0 [pid 6341] +++ exited with 0 +++ [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6341, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5077] openat(AT_FDCWD, "./208/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6344] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5078] umount2("./209", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... openat resumed>) = 4 [pid 5077] newfstatat(4, "", [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6342] <... memfd_create resumed>) = 3 [pid 5078] openat(AT_FDCWD, "./209", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6342] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] getdents64(4, [pid 5078] <... openat resumed>) = 3 [pid 6344] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6342] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] newfstatat(3, "", [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] close(4 [pid 6343] <... write resumed>) = 524288 [pid 5078] getdents64(3, [pid 5077] <... close resumed>) = 0 [pid 6343] munmap(0x7f0356e00000, 138412032 [pid 6342] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6340] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] rmdir("./208/bus" [pid 5078] umount2("./209/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... rmdir resumed>) = 0 [pid 6340] <... open resumed>) = 5 [pid 6340] ftruncate(5, 0) = 0 [pid 6340] exit_group(0) = ? [pid 6340] +++ exited with 0 +++ [pid 6343] <... munmap resumed>) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6340, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5077] umount2("./208/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6343] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./206", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6344] <... write resumed>) = 524288 [pid 6343] <... openat resumed>) = 4 [pid 5077] newfstatat(AT_FDCWD, "./208/binderfs", [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6343] ioctl(4, LOOP_SET_FD, 3 [pid 5075] openat(AT_FDCWD, "./206", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6344] munmap(0x7f0356e00000, 138412032 [pid 5077] unlink("./208/binderfs" [pid 5075] <... openat resumed>) = 3 [pid 6344] <... munmap resumed>) = 0 [pid 6344] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6343] <... ioctl resumed>) = 0 [pid 6342] <... write resumed>) = 524288 [pid 5078] <... umount2 resumed>) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 5075] newfstatat(3, "", [pid 6344] <... openat resumed>) = 4 [pid 6343] close(3 [pid 6342] munmap(0x7f0356e00000, 138412032 [pid 5078] umount2("./209/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] getdents64(3, [pid 6344] ioctl(4, LOOP_SET_FD, 3 [pid 6343] <... close resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6342] <... munmap resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6342] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6342] <... openat resumed>) = 4 [pid 5075] umount2("./206/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6342] ioctl(4, LOOP_SET_FD, 3 [pid 6344] <... ioctl resumed>) = 0 [pid 6343] close(4 [pid 5078] newfstatat(AT_FDCWD, "./209/bus", [pid 5077] close(3 [pid 6344] close(3 [pid 6343] <... close resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] <... close resumed>) = 0 [pid 6344] <... close resumed>) = 0 [pid 6343] mkdir("./bus", 0777 [pid 5078] umount2("./209/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] rmdir("./208" [pid 6344] close(4 [pid 6343] <... mkdir resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... rmdir resumed>) = 0 [pid 6344] <... close resumed>) = 0 [pid 6343] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5078] openat(AT_FDCWD, "./209/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] mkdir("./209", 0777 [pid 6344] mkdir("./bus", 0777 [pid 5078] <... openat resumed>) = 4 [pid 5077] <... mkdir resumed>) = 0 [pid 5078] newfstatat(4, "", [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] <... openat resumed>) = 3 [pid 6344] <... mkdir resumed>) = 0 [pid 5078] getdents64(4, [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6344] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5078] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5078] close(4) = 0 [pid 5078] rmdir("./209/bus") = 0 [pid 5078] umount2("./209/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6344] <... mount resumed>) = 0 [pid 6343] <... mount resumed>) = 0 [pid 6342] <... ioctl resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 6344] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5075] umount2("./206/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./206/bus", [pid 6344] chdir("./bus" [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6344] <... chdir resumed>) = 0 [pid 6344] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5075] umount2("./206/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6344] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5075] openat(AT_FDCWD, "./206/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6343] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5077] <... ioctl resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 6342] close(3 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, [pid 6343] <... openat resumed>) = 3 [pid 5078] newfstatat(AT_FDCWD, "./209/binderfs", [pid 6342] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6342] close(4) = 0 [pid 6342] mkdir("./bus", 0777 [pid 5075] getdents64(4, [pid 6342] <... mkdir resumed>) = 0 [pid 6343] chdir("./bus" [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6343] <... chdir resumed>) = 0 [pid 5078] unlink("./209/binderfs" [pid 5075] close(4) = 0 [pid 6343] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5078] <... unlink resumed>) = 0 [pid 5075] rmdir("./206/bus" [pid 6344] <... symlink resumed>) = 0 [pid 6343] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] getdents64(3, [pid 5075] <... rmdir resumed>) = 0 [ 201.602398][ T6343] loop1: detected capacity change from 0 to 1024 [ 201.616704][ T6344] loop0: detected capacity change from 0 to 1024 [ 201.621534][ T6342] loop3: detected capacity change from 0 to 1024 [pid 6344] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6342] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] umount2("./206/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6343] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] close(3 [pid 5077] close(3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... close resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./206/binderfs", [pid 5078] rmdir("./209" [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5075] unlink("./206/binderfs" [pid 6343] <... symlink resumed>) = 0 [pid 6342] <... mount resumed>) = 0 [pid 5078] mkdir("./210", 0777 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... unlink resumed>) = 0 [pid 6343] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] <... mkdir resumed>) = 0 [pid 5075] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 5075] rmdir("./206") = 0 ./strace-static-x86_64: Process 6345 attached [pid 6342] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] mkdir("./207", 0777 [pid 6345] set_robust_list(0x55556e32a660, 24 [pid 6344] <... creat resumed>) = 4 [pid 6342] <... openat resumed>) = 3 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6345 [pid 5075] <... mkdir resumed>) = 0 [pid 6344] rename("./bus", "./file2" [pid 5078] <... openat resumed>) = 3 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 6344] <... rename resumed>) = -1 EEXIST (File exists) [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6344] memfd_create("syzkaller", 0) = 5 [pid 6344] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6345] <... set_robust_list resumed>) = 0 [pid 6344] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6343] <... creat resumed>) = 4 [pid 6342] chdir("./bus" [pid 6343] rename("./bus", "./file2" [pid 6344] <... write resumed>) = 524288 [pid 6343] <... rename resumed>) = -1 EEXIST (File exists) [pid 6342] <... chdir resumed>) = 0 [pid 6345] chdir("./209" [pid 6343] memfd_create("syzkaller", 0 [pid 6342] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6345] <... chdir resumed>) = 0 [pid 6343] <... memfd_create resumed>) = 5 [pid 6342] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6345] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6343] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6342] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6343] <... mmap resumed>) = 0x7f0356e00000 [pid 6344] munmap(0x7f0356e00000, 138412032 [pid 6345] <... prctl resumed>) = 0 [pid 6343] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6342] <... symlink resumed>) = 0 [pid 5078] <... ioctl resumed>) = 0 [pid 6345] setpgid(0, 0 [pid 6342] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6344] <... munmap resumed>) = 0 [pid 6342] <... creat resumed>) = 4 [pid 5075] <... ioctl resumed>) = 0 [pid 6345] <... setpgid resumed>) = 0 [pid 6342] rename("./bus", "./file2" [pid 6345] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6343] <... write resumed>) = 524288 [pid 6342] <... rename resumed>) = -1 EEXIST (File exists) [pid 6345] <... openat resumed>) = 3 [pid 6344] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6343] munmap(0x7f0356e00000, 138412032 [pid 6342] memfd_create("syzkaller", 0 [pid 6344] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6342] <... memfd_create resumed>) = 5 [pid 5075] close(3 [pid 6342] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6344] close(5 [pid 5075] <... close resumed>) = 0 [pid 6342] <... mmap resumed>) = 0x7f0356e00000 [pid 6344] <... close resumed>) = 0 [pid 6342] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] close(3 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6345] write(3, "1000", 4 [pid 6343] <... munmap resumed>) = 0 [pid 6345] <... write resumed>) = 4 [pid 6343] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5078] <... close resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6346 [pid 6343] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6345] close(3) = 0 [pid 6343] close(5./strace-static-x86_64: Process 6346 attached [pid 6345] symlink("/dev/binderfs", "./binderfs" [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6347 ./strace-static-x86_64: Process 6347 attached [pid 6345] <... symlink resumed>) = 0 [pid 6344] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6343] <... close resumed>) = 0 [pid 6347] set_robust_list(0x55556e32a660, 24 [pid 6345] memfd_create("syzkaller", 0 [pid 6346] set_robust_list(0x55556e32a660, 24 [pid 6347] <... set_robust_list resumed>) = 0 [pid 6346] <... set_robust_list resumed>) = 0 [pid 6345] <... memfd_create resumed>) = 3 [pid 6344] <... open resumed>) = 5 [pid 6347] chdir("./210" [pid 6346] chdir("./207" [pid 6345] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6344] ftruncate(5, 0 [pid 6346] <... chdir resumed>) = 0 [pid 6345] <... mmap resumed>) = 0x7f0356e00000 [pid 6344] <... ftruncate resumed>) = 0 [pid 6347] <... chdir resumed>) = 0 [pid 6346] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6344] exit_group(0 [pid 6347] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6346] <... prctl resumed>) = 0 [pid 6345] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6344] <... exit_group resumed>) = ? [pid 6343] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6342] <... write resumed>) = 524288 [pid 6347] <... prctl resumed>) = 0 [pid 6346] setpgid(0, 0 [pid 6345] <... write resumed>) = 524288 [pid 6344] +++ exited with 0 +++ [pid 6346] <... setpgid resumed>) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6344, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5073] umount2("./207", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6346] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6347] setpgid(0, 0 [pid 5073] openat(AT_FDCWD, "./207", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6346] <... openat resumed>) = 3 [pid 5073] <... openat resumed>) = 3 [pid 6347] <... setpgid resumed>) = 0 [pid 5073] newfstatat(3, "", [pid 6346] write(3, "1000", 4 [pid 6347] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6346] <... write resumed>) = 4 [pid 6345] munmap(0x7f0356e00000, 138412032 [pid 6342] munmap(0x7f0356e00000, 138412032 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6346] close(3) = 0 [pid 5073] getdents64(3, [pid 6346] symlink("/dev/binderfs", "./binderfs" [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] umount2("./207/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6347] <... openat resumed>) = 3 [pid 6346] <... symlink resumed>) = 0 [pid 6347] write(3, "1000", 4) = 4 [pid 6343] <... open resumed>) = 5 [pid 6347] close(3 [pid 6346] memfd_create("syzkaller", 0 [pid 6347] <... close resumed>) = 0 [pid 6347] symlink("/dev/binderfs", "./binderfs" [pid 6346] <... memfd_create resumed>) = 3 [pid 6347] <... symlink resumed>) = 0 [pid 6346] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6345] <... munmap resumed>) = 0 [pid 6343] ftruncate(5, 0 [pid 6342] <... munmap resumed>) = 0 [pid 6347] memfd_create("syzkaller", 0 [pid 6346] <... mmap resumed>) = 0x7f0356e00000 [pid 6347] <... memfd_create resumed>) = 3 [pid 6343] <... ftruncate resumed>) = 0 [pid 6347] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6346] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6345] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6342] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] <... umount2 resumed>) = 0 [pid 6347] <... mmap resumed>) = 0x7f0356e00000 [pid 6345] <... openat resumed>) = 4 [pid 6343] exit_group(0 [pid 6342] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6345] ioctl(4, LOOP_SET_FD, 3 [pid 6343] <... exit_group resumed>) = ? [pid 6342] close(5 [pid 5073] umount2("./207/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./207/bus", [pid 6343] +++ exited with 0 +++ [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6343, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6347] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] umount2("./207/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./207/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6346] <... write resumed>) = 524288 [pid 6345] <... ioctl resumed>) = 0 [pid 6342] <... close resumed>) = 0 [pid 5073] newfstatat(4, "", [pid 6346] munmap(0x7f0356e00000, 138412032 [pid 6345] close(3 [pid 5074] umount2("./206", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6345] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] getdents64(4, [pid 6346] <... munmap resumed>) = 0 [pid 6345] close(4 [pid 5074] openat(AT_FDCWD, "./206", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6347] <... write resumed>) = 524288 [pid 6346] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6345] <... close resumed>) = 0 [pid 6342] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5074] <... openat resumed>) = 3 [pid 5073] getdents64(4, [pid 6346] <... openat resumed>) = 4 [pid 6345] mkdir("./bus", 0777 [pid 5074] newfstatat(3, "", [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6347] munmap(0x7f0356e00000, 138412032 [pid 6346] ioctl(4, LOOP_SET_FD, 3 [pid 6345] <... mkdir resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] close(4 [pid 6347] <... munmap resumed>) = 0 [pid 6346] <... ioctl resumed>) = 0 [pid 6345] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5074] getdents64(3, [pid 6347] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] <... close resumed>) = 0 [pid 6347] <... openat resumed>) = 4 [pid 6342] <... open resumed>) = 5 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] rmdir("./207/bus" [pid 6347] ioctl(4, LOOP_SET_FD, 3 [pid 5074] umount2("./206/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6342] ftruncate(5, 0) = 0 [pid 6342] exit_group(0) = ? [pid 6342] +++ exited with 0 +++ [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6342, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5076] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5076] umount2("./210", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./210", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5076] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6346] close(3 [pid 6345] <... mount resumed>) = 0 [pid 5076] umount2("./210/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6346] <... close resumed>) = 0 [pid 5073] umount2("./207/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6345] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6346] close(4 [pid 6345] <... openat resumed>) = 3 [pid 6346] <... close resumed>) = 0 [pid 6345] chdir("./bus" [pid 6346] mkdir("./bus", 0777 [pid 6345] <... chdir resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./207/binderfs", [pid 6346] <... mkdir resumed>) = 0 [pid 6345] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6345] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... umount2 resumed>) = 0 [pid 5073] unlink("./207/binderfs" [pid 6345] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6346] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5073] <... unlink resumed>) = 0 [pid 5074] umount2("./206/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] getdents64(3, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] newfstatat(AT_FDCWD, "./206/bus", [pid 5073] close(3 [pid 6347] <... ioctl resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./207" [pid 6345] <... symlink resumed>) = 0 [pid 6345] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5073] <... rmdir resumed>) = 0 [ 201.867713][ T6345] loop4: detected capacity change from 0 to 1024 [ 201.899661][ T6346] loop2: detected capacity change from 0 to 1024 [ 201.911513][ T6347] loop5: detected capacity change from 0 to 1024 [pid 5076] umount2("./210/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6347] close(3 [pid 5074] umount2("./206/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] mkdir("./208", 0777 [pid 6347] <... close resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./210/bus", [pid 6347] close(4 [pid 6345] <... creat resumed>) = 4 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... mkdir resumed>) = 0 [pid 6347] <... close resumed>) = 0 [pid 6345] rename("./bus", "./file2" [pid 5074] openat(AT_FDCWD, "./206/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6347] mkdir("./bus", 0777 [pid 6346] <... mount resumed>) = 0 [pid 5076] umount2("./210/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6346] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6345] <... rename resumed>) = -1 EEXIST (File exists) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... openat resumed>) = 3 [pid 6347] <... mkdir resumed>) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6347] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5074] <... openat resumed>) = 4 [pid 6346] <... openat resumed>) = 3 [pid 6345] memfd_create("syzkaller", 0 [pid 5076] openat(AT_FDCWD, "./210/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6345] <... memfd_create resumed>) = 5 [pid 6346] chdir("./bus" [pid 6345] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] newfstatat(4, "", [pid 5074] newfstatat(4, "", [pid 6346] <... chdir resumed>) = 0 [pid 6345] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6346] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] getdents64(4, [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, [pid 6346] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6346] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5076] getdents64(4, [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] getdents64(4, [pid 5076] close(4 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] <... close resumed>) = 0 [pid 5074] close(4 [pid 5076] rmdir("./210/bus") = 0 [pid 5074] <... close resumed>) = 0 [pid 6346] <... symlink resumed>) = 0 [pid 6345] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6347] <... mount resumed>) = 0 [pid 5074] rmdir("./206/bus" [pid 6347] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5076] umount2("./210/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6347] <... openat resumed>) = 3 [pid 6346] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5074] <... rmdir resumed>) = 0 [pid 6347] chdir("./bus" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6347] <... chdir resumed>) = 0 [pid 5074] umount2("./206/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6347] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6347] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] newfstatat(AT_FDCWD, "./206/binderfs", [pid 6347] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./206/binderfs") = 0 [pid 5076] newfstatat(AT_FDCWD, "./210/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./210/binderfs" [pid 6346] <... creat resumed>) = 4 [pid 5076] <... unlink resumed>) = 0 [pid 6346] rename("./bus", "./file2" [pid 5076] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] getdents64(3, [pid 6347] <... symlink resumed>) = 0 [pid 6347] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6346] <... rename resumed>) = -1 EEXIST (File exists) [pid 6345] <... write resumed>) = 524288 [pid 5076] close(3 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 6346] memfd_create("syzkaller", 0 [pid 5076] <... close resumed>) = 0 [pid 6346] <... memfd_create resumed>) = 5 [pid 5074] close(3 [pid 5073] close(3 [pid 6346] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] rmdir("./210" [pid 5074] <... close resumed>) = 0 [pid 6346] <... mmap resumed>) = 0x7f0356e00000 [pid 6345] munmap(0x7f0356e00000, 138412032 [pid 5076] <... rmdir resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 6347] <... creat resumed>) = 4 [pid 6346] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6345] <... munmap resumed>) = 0 [pid 5074] rmdir("./206" [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6347] rename("./bus", "./file2" [pid 5076] mkdir("./211", 0777 [pid 6345] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 6348 attached [pid 6347] <... rename resumed>) = -1 EEXIST (File exists) [pid 6345] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... rmdir resumed>) = 0 [pid 6348] set_robust_list(0x55556e32a660, 24 [pid 6347] memfd_create("syzkaller", 0 [pid 6346] <... write resumed>) = 524288 [pid 6345] close(5 [pid 5074] mkdir("./207", 0777 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6348 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6348] <... set_robust_list resumed>) = 0 [pid 6347] <... memfd_create resumed>) = 5 [pid 5074] <... mkdir resumed>) = 0 [pid 6347] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6348] chdir("./208" [pid 6347] <... mmap resumed>) = 0x7f0356e00000 [pid 6345] <... close resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 6348] <... chdir resumed>) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6346] munmap(0x7f0356e00000, 138412032 [pid 6345] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6348] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6346] <... munmap resumed>) = 0 [pid 6348] <... prctl resumed>) = 0 [pid 6348] setpgid(0, 0 [pid 6347] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6346] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5076] <... ioctl resumed>) = 0 [pid 6346] close(5 [pid 6348] <... setpgid resumed>) = 0 [pid 6348] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6345] <... open resumed>) = 5 [pid 6345] ftruncate(5, 0 [pid 6348] <... openat resumed>) = 3 [pid 6345] <... ftruncate resumed>) = 0 [pid 6345] exit_group(0) = ? [pid 6346] <... close resumed>) = 0 [pid 6348] write(3, "1000", 4 [pid 6346] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5076] close(3 [pid 6348] <... write resumed>) = 4 [pid 6347] <... write resumed>) = 524288 [pid 6346] <... open resumed>) = 5 [pid 6345] +++ exited with 0 +++ [pid 5076] <... close resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 6346] ftruncate(5, 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6348] close(3 [pid 6347] munmap(0x7f0356e00000, 138412032 [pid 6346] <... ftruncate resumed>) = 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6345, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5074] close(3./strace-static-x86_64: Process 6349 attached [pid 6348] <... close resumed>) = 0 [pid 6347] <... munmap resumed>) = 0 [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 5074] <... close resumed>) = 0 [pid 6349] set_robust_list(0x55556e32a660, 24 [pid 6348] symlink("/dev/binderfs", "./binderfs" [pid 6347] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6346] exit_group(0 [pid 5077] <... restart_syscall resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6349 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6350 attached [pid 6349] <... set_robust_list resumed>) = 0 [pid 6348] <... symlink resumed>) = 0 [pid 6347] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6350 [pid 6348] memfd_create("syzkaller", 0 [pid 6347] close(5 [pid 6350] set_robust_list(0x55556e32a660, 24 [pid 5077] umount2("./209", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6350] <... set_robust_list resumed>) = 0 [pid 6348] <... memfd_create resumed>) = 3 [pid 6346] <... exit_group resumed>) = ? [pid 5077] openat(AT_FDCWD, "./209", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6348] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6350] chdir("./207" [pid 6348] <... mmap resumed>) = 0x7f0356e00000 [pid 6346] +++ exited with 0 +++ [pid 5077] <... openat resumed>) = 3 [pid 5077] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6346, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6349] chdir("./211") = 0 [pid 5077] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] umount2("./209/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./207", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6349] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] openat(AT_FDCWD, "./207", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6350] <... chdir resumed>) = 0 [pid 6349] <... prctl resumed>) = 0 [pid 6348] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6347] <... close resumed>) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 6350] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6349] setpgid(0, 0 [pid 5077] umount2("./209/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./209/bus", [pid 6350] <... prctl resumed>) = 0 [pid 6349] <... setpgid resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] umount2("./209/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6350] setpgid(0, 0 [pid 6349] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6347] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] openat(AT_FDCWD, "./209/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] newfstatat(3, "", [pid 6350] <... setpgid resumed>) = 0 [pid 6349] <... openat resumed>) = 3 [pid 5077] <... openat resumed>) = 4 [pid 6350] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6349] write(3, "1000", 4 [pid 5077] newfstatat(4, "", [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6349] <... write resumed>) = 4 [pid 5075] getdents64(3, [pid 6349] close(3) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6350] <... openat resumed>) = 3 [pid 6349] symlink("/dev/binderfs", "./binderfs" [pid 5077] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] close(4 [pid 6349] <... symlink resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5077] rmdir("./209/bus" [pid 6349] memfd_create("syzkaller", 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5077] umount2("./209/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6347] <... open resumed>) = 5 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6347] ftruncate(5, 0 [pid 5077] newfstatat(AT_FDCWD, "./209/binderfs", [pid 6350] write(3, "1000", 4) = 4 [pid 6349] <... memfd_create resumed>) = 3 [pid 6347] <... ftruncate resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./207/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6347] exit_group(0 [pid 5077] unlink("./209/binderfs") = 0 [pid 5077] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6347] <... exit_group resumed>) = ? [pid 5077] close(3) = 0 [pid 5077] rmdir("./209") = 0 [pid 6349] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6348] <... write resumed>) = 524288 [pid 5077] mkdir("./210", 0777 [pid 6348] munmap(0x7f0356e00000, 138412032 [pid 6350] close(3 [pid 6349] <... mmap resumed>) = 0x7f0356e00000 [pid 6348] <... munmap resumed>) = 0 [pid 6347] +++ exited with 0 +++ [pid 5077] <... mkdir resumed>) = 0 [pid 6350] <... close resumed>) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6347, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6349] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6350] symlink("/dev/binderfs", "./binderfs" [pid 6348] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5078] umount2("./210", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6350] <... symlink resumed>) = 0 [pid 6348] <... openat resumed>) = 4 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... openat resumed>) = 3 [pid 5078] openat(AT_FDCWD, "./210", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6348] ioctl(4, LOOP_SET_FD, 3 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5078] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] umount2("./210/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6350] memfd_create("syzkaller", 0) = 3 [pid 6350] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6350] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6349] <... write resumed>) = 524288 [pid 6348] <... ioctl resumed>) = 0 [pid 5078] <... umount2 resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5078] umount2("./210/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] newfstatat(AT_FDCWD, "./210/bus", [pid 6349] munmap(0x7f0356e00000, 138412032 [pid 6350] <... write resumed>) = 524288 [pid 6348] close(3 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] <... ioctl resumed>) = 0 [pid 5075] umount2("./207/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] close(3) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] umount2("./210/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./207/bus", [pid 6348] <... close resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./210/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6348] close(4 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] <... openat resumed>) = 4 [pid 5078] newfstatat(4, "", [pid 5075] umount2("./207/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6348] <... close resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] getdents64(4, [pid 5075] openat(AT_FDCWD, "./207/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6348] mkdir("./bus", 0777 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] newfstatat(4, "", [pid 6349] <... munmap resumed>) = 0 [pid 6348] <... mkdir resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5078] close(4 [pid 5075] getdents64(4, [pid 5078] <... close resumed>) = 0 [pid 6350] munmap(0x7f0356e00000, 138412032 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5078] rmdir("./210/bus" [pid 6350] <... munmap resumed>) = 0 [pid 6349] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5075] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] close(4 [pid 6348] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [ 202.189019][ T6348] loop0: detected capacity change from 0 to 1024 [pid 6350] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5078] <... rmdir resumed>) = 0 [pid 6350] ioctl(4, LOOP_SET_FD, 3 [pid 6349] ioctl(4, LOOP_SET_FD, 3 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6351 [pid 5075] <... close resumed>) = 0 [pid 5078] umount2("./210/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] rmdir("./207/bus"./strace-static-x86_64: Process 6351 attached [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... rmdir resumed>) = 0 [pid 6348] <... mount resumed>) = 0 [pid 6348] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6348] chdir("./bus") = 0 [pid 6348] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6348] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6351] set_robust_list(0x55556e32a660, 24 [pid 6350] <... ioctl resumed>) = 0 [pid 5078] newfstatat(AT_FDCWD, "./210/binderfs", [pid 5075] umount2("./207/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6351] <... set_robust_list resumed>) = 0 [pid 6348] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6351] chdir("./210" [pid 6350] close(3 [pid 6349] <... ioctl resumed>) = 0 [pid 5078] unlink("./210/binderfs" [pid 5075] newfstatat(AT_FDCWD, "./207/binderfs", [pid 6351] <... chdir resumed>) = 0 [pid 6350] <... close resumed>) = 0 [pid 6351] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6350] close(4 [pid 6349] close(3 [pid 5078] <... unlink resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6351] <... prctl resumed>) = 0 [pid 6350] <... close resumed>) = 0 [pid 6349] <... close resumed>) = 0 [pid 5075] unlink("./207/binderfs" [pid 6351] setpgid(0, 0 [pid 6350] mkdir("./bus", 0777 [pid 6349] close(4 [pid 6348] <... creat resumed>) = 4 [pid 6351] <... setpgid resumed>) = 0 [pid 6350] <... mkdir resumed>) = 0 [pid 6349] <... close resumed>) = 0 [pid 6348] rename("./bus", "./file2" [pid 5075] <... unlink resumed>) = 0 [pid 6351] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6349] mkdir("./bus", 0777 [pid 6348] <... rename resumed>) = -1 EEXIST (File exists) [pid 6350] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6349] <... mkdir resumed>) = 0 [pid 6348] memfd_create("syzkaller", 0 [pid 6351] <... openat resumed>) = 3 [pid 6349] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6348] <... memfd_create resumed>) = 5 [pid 5078] getdents64(3, [pid 5075] getdents64(3, [pid 6351] write(3, "1000", 4 [pid 6350] <... mount resumed>) = 0 [pid 6348] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6351] <... write resumed>) = 4 [pid 6350] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6348] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] close(3 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6351] close(3 [pid 6350] <... openat resumed>) = 3 [pid 6349] <... mount resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5075] close(3 [pid 6351] <... close resumed>) = 0 [pid 6350] chdir("./bus" [pid 6349] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6348] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [ 202.234710][ T6350] loop1: detected capacity change from 0 to 1024 [ 202.237971][ T6349] loop3: detected capacity change from 0 to 1024 [pid 5078] rmdir("./210" [pid 6351] symlink("/dev/binderfs", "./binderfs" [pid 6350] <... chdir resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 6351] <... symlink resumed>) = 0 [pid 6350] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6349] <... openat resumed>) = 3 [pid 5078] <... rmdir resumed>) = 0 [pid 5075] rmdir("./207" [pid 6350] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6350] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5075] <... rmdir resumed>) = 0 [pid 6349] chdir("./bus" [pid 5078] mkdir("./211", 0777 [pid 6349] <... chdir resumed>) = 0 [pid 6349] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6350] <... symlink resumed>) = 0 [pid 6349] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6350] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6351] memfd_create("syzkaller", 0 [pid 6349] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] <... mkdir resumed>) = 0 [pid 5075] mkdir("./208", 0777 [pid 6351] <... memfd_create resumed>) = 3 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6351] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6350] <... creat resumed>) = 4 [pid 6349] <... symlink resumed>) = 0 [pid 6348] <... write resumed>) = 524288 [pid 5078] <... openat resumed>) = 3 [pid 5075] <... mkdir resumed>) = 0 [pid 6350] rename("./bus", "./file2" [pid 6351] <... mmap resumed>) = 0x7f0356e00000 [pid 6350] <... rename resumed>) = -1 EEXIST (File exists) [pid 6349] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6350] memfd_create("syzkaller", 0) = 5 [pid 6350] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6351] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6350] <... mmap resumed>) = 0x7f0356e00000 [pid 6350] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6348] munmap(0x7f0356e00000, 138412032 [pid 6349] <... creat resumed>) = 4 [pid 6348] <... munmap resumed>) = 0 [pid 6349] rename("./bus", "./file2" [pid 6351] <... write resumed>) = 524288 [pid 6349] <... rename resumed>) = -1 EEXIST (File exists) [pid 6348] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6349] memfd_create("syzkaller", 0) = 5 [pid 6351] munmap(0x7f0356e00000, 138412032 [pid 6349] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6351] <... munmap resumed>) = 0 [pid 6350] <... write resumed>) = 524288 [pid 6349] <... mmap resumed>) = 0x7f0356e00000 [pid 6348] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6348] close(5 [pid 6351] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6350] munmap(0x7f0356e00000, 138412032 [pid 6348] <... close resumed>) = 0 [pid 6348] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6350] <... munmap resumed>) = 0 [pid 6351] <... openat resumed>) = 4 [pid 6351] ioctl(4, LOOP_SET_FD, 3 [pid 6349] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... ioctl resumed>) = 0 [pid 6350] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6348] <... open resumed>) = 5 [pid 6350] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6348] ftruncate(5, 0 [pid 6350] close(5 [pid 6348] <... ftruncate resumed>) = 0 [pid 6350] <... close resumed>) = 0 [pid 6348] exit_group(0 [pid 5078] <... ioctl resumed>) = 0 [pid 6348] <... exit_group resumed>) = ? [pid 5075] close(3) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] close(3 [pid 6349] <... write resumed>) = 524288 [pid 6348] +++ exited with 0 +++ [pid 5078] <... close resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6348, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6350] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000./strace-static-x86_64: Process 6353 attached [pid 6351] <... ioctl resumed>) = 0 [pid 6349] munmap(0x7f0356e00000, 138412032 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6352 [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 6353] set_robust_list(0x55556e32a660, 24 [pid 6349] <... munmap resumed>) = 0 [pid 6353] <... set_robust_list resumed>) = 0 [pid 6351] close(3 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6353 [pid 6349] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] <... restart_syscall resumed>) = 0 [pid 6351] <... close resumed>) = 0 [pid 6349] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6351] close(4./strace-static-x86_64: Process 6352 attached [pid 6353] chdir("./211" [pid 6351] <... close resumed>) = 0 [pid 6350] <... open resumed>) = 5 [pid 6349] close(5 [pid 6353] <... chdir resumed>) = 0 [pid 6352] set_robust_list(0x55556e32a660, 24 [pid 6351] mkdir("./bus", 0777 [pid 6350] ftruncate(5, 0 [pid 5073] umount2("./208", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6352] <... set_robust_list resumed>) = 0 [pid 6350] <... ftruncate resumed>) = 0 [pid 6349] <... close resumed>) = 0 [pid 6353] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6352] chdir("./208" [pid 6351] <... mkdir resumed>) = 0 [pid 6350] exit_group(0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6353] <... prctl resumed>) = 0 [pid 6352] <... chdir resumed>) = 0 [pid 6350] <... exit_group resumed>) = ? [ 202.364837][ T6351] loop4: detected capacity change from 0 to 1024 [pid 6353] setpgid(0, 0 [pid 6352] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6351] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6350] +++ exited with 0 +++ [pid 5073] openat(AT_FDCWD, "./208", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6353] <... setpgid resumed>) = 0 [pid 6352] <... prctl resumed>) = 0 [pid 6349] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6352] setpgid(0, 0 [pid 5073] <... openat resumed>) = 3 [pid 6352] <... setpgid resumed>) = 0 [pid 6353] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6352] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5073] newfstatat(3, "", [pid 6353] <... openat resumed>) = 3 [pid 6352] <... openat resumed>) = 3 [pid 6351] <... mount resumed>) = 0 [pid 6349] <... open resumed>) = 5 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6350, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6352] write(3, "1000", 4 [pid 6351] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 6353] write(3, "1000", 4 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6352] <... write resumed>) = 4 [pid 6351] <... openat resumed>) = 3 [pid 6349] ftruncate(5, 0 [pid 6353] <... write resumed>) = 4 [pid 5074] <... restart_syscall resumed>) = 0 [pid 5073] getdents64(3, [pid 6353] close(3 [pid 6349] <... ftruncate resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] umount2("./208/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6353] <... close resumed>) = 0 [pid 5074] umount2("./207", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6353] symlink("/dev/binderfs", "./binderfs" [pid 6352] close(3 [pid 6351] chdir("./bus" [pid 6349] exit_group(0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6353] <... symlink resumed>) = 0 [pid 6352] <... close resumed>) = 0 [pid 6351] <... chdir resumed>) = 0 [pid 6352] symlink("/dev/binderfs", "./binderfs" [pid 6351] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] openat(AT_FDCWD, "./207", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6353] memfd_create("syzkaller", 0 [pid 6352] <... symlink resumed>) = 0 [pid 6351] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6349] <... exit_group resumed>) = ? [pid 6351] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6352] memfd_create("syzkaller", 0 [pid 6351] <... symlink resumed>) = 0 [pid 6351] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6353] <... memfd_create resumed>) = 3 [pid 6349] +++ exited with 0 +++ [pid 5074] <... openat resumed>) = 3 [pid 6353] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6349, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6353] <... mmap resumed>) = 0x7f0356e00000 [pid 6352] <... memfd_create resumed>) = 3 [pid 5074] newfstatat(3, "", [pid 6352] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6351] <... creat resumed>) = 4 [pid 6352] <... mmap resumed>) = 0x7f0356e00000 [pid 6351] rename("./bus", "./file2" [pid 5076] umount2("./211", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6353] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] openat(AT_FDCWD, "./211", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] getdents64(3, [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6351] <... rename resumed>) = -1 EEXIST (File exists) [pid 5076] getdents64(3, [pid 6351] memfd_create("syzkaller", 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] umount2("./207/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6352] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6351] <... memfd_create resumed>) = 5 [pid 5076] umount2("./211/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = 0 [pid 6351] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5073] umount2("./208/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6351] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... umount2 resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./208/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./208/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./208/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] umount2("./207/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6353] <... write resumed>) = 524288 [pid 6352] <... write resumed>) = 524288 [pid 5076] <... umount2 resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... openat resumed>) = 4 [pid 5074] newfstatat(AT_FDCWD, "./207/bus", [pid 5073] newfstatat(4, "", [pid 6351] <... write resumed>) = 524288 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] umount2("./207/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] getdents64(4, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] umount2("./211/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] openat(AT_FDCWD, "./207/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] getdents64(4, [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./211/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./211/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./211/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6352] munmap(0x7f0356e00000, 138412032 [pid 5076] <... openat resumed>) = 4 [pid 6352] <... munmap resumed>) = 0 [pid 5076] newfstatat(4, "", [pid 5074] <... openat resumed>) = 4 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6353] munmap(0x7f0356e00000, 138412032 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] newfstatat(4, "", [pid 5073] close(4 [pid 5076] getdents64(4, [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, [pid 5073] <... close resumed>) = 0 [pid 6353] <... munmap resumed>) = 0 [pid 5076] getdents64(4, [pid 6353] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6352] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6351] munmap(0x7f0356e00000, 138412032 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] rmdir("./208/bus" [pid 6353] <... openat resumed>) = 4 [pid 6352] <... openat resumed>) = 4 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] getdents64(4, [pid 5073] <... rmdir resumed>) = 0 [pid 6353] ioctl(4, LOOP_SET_FD, 3 [pid 5076] close(4 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] umount2("./208/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6353] <... ioctl resumed>) = 0 [pid 6352] ioctl(4, LOOP_SET_FD, 3 [pid 6351] <... munmap resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5074] close(4 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6351] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] <... close resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./208/binderfs", [pid 6351] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] rmdir("./207/bus" [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6353] close(3 [pid 6351] close(5 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] unlink("./208/binderfs" [pid 6353] <... close resumed>) = 0 [pid 5076] rmdir("./211/bus" [pid 6352] <... ioctl resumed>) = 0 [pid 6353] close(4 [pid 6352] close(3 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] umount2("./207/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... unlink resumed>) = 0 [pid 6353] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] getdents64(3, [pid 5074] newfstatat(AT_FDCWD, "./207/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6352] <... close resumed>) = 0 [pid 6351] <... close resumed>) = 0 [pid 5076] umount2("./211/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] unlink("./207/binderfs" [pid 5073] close(3 [pid 6353] mkdir("./bus", 0777 [pid 6352] close(4 [pid 6351] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... unlink resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 6353] <... mkdir resumed>) = 0 [pid 6352] <... close resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./211/binderfs", [pid 5074] getdents64(3, [pid 5073] rmdir("./208" [pid 6353] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6352] mkdir("./bus", 0777 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 6353] <... mount resumed>) = 0 [pid 6352] <... mkdir resumed>) = 0 [pid 6351] <... open resumed>) = 5 [pid 5076] unlink("./211/binderfs" [pid 5074] close(3 [pid 5073] mkdir("./209", 0777 [pid 6353] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6352] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6351] ftruncate(5, 0 [pid 5076] <... unlink resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 6353] <... openat resumed>) = 3 [pid 6351] <... ftruncate resumed>) = 0 [pid 5076] getdents64(3, [pid 5074] rmdir("./207" [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6353] chdir("./bus" [pid 6351] exit_group(0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 6353] <... chdir resumed>) = 0 [pid 5076] close(3 [pid 5074] mkdir("./208", 0777 [pid 5073] <... openat resumed>) = 3 [ 202.519929][ T6353] loop5: detected capacity change from 0 to 1024 [ 202.538896][ T6352] loop2: detected capacity change from 0 to 1024 [pid 6353] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] <... mkdir resumed>) = 0 [pid 6353] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6351] <... exit_group resumed>) = ? [pid 5076] <... close resumed>) = 0 [pid 6353] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5076] rmdir("./211" [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6353] <... symlink resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] mkdir("./212", 0777 [pid 5074] <... openat resumed>) = 3 [pid 6353] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5076] <... mkdir resumed>) = 0 [pid 6351] +++ exited with 0 +++ [pid 6353] <... creat resumed>) = 4 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6351, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6353] rename("./bus", "./file2" [pid 6352] <... mount resumed>) = 0 [pid 6352] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5076] <... openat resumed>) = 3 [pid 6352] <... openat resumed>) = 3 [pid 6353] <... rename resumed>) = -1 EEXIST (File exists) [pid 6352] chdir("./bus" [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6353] memfd_create("syzkaller", 0 [pid 6352] <... chdir resumed>) = 0 [pid 6353] <... memfd_create resumed>) = 5 [pid 6352] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5077] umount2("./210", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6353] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6352] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6352] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6353] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] openat(AT_FDCWD, "./210", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6353] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6352] <... symlink resumed>) = 0 [pid 5077] newfstatat(3, "", [pid 6352] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 6353] <... write resumed>) = 524288 [pid 6352] <... creat resumed>) = 4 [pid 5077] getdents64(3, [pid 5076] <... ioctl resumed>) = 0 [pid 6353] munmap(0x7f0356e00000, 138412032 [pid 6352] rename("./bus", "./file2" [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] close(3 [pid 6353] <... munmap resumed>) = 0 [pid 6352] <... rename resumed>) = -1 EEXIST (File exists) [pid 5073] <... close resumed>) = 0 [pid 6353] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6352] memfd_create("syzkaller", 0 [pid 5077] umount2("./210/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6354 [pid 6353] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6353] close(5./strace-static-x86_64: Process 6354 attached ) = 0 [pid 6354] set_robust_list(0x55556e32a660, 24) = 0 [pid 6352] <... memfd_create resumed>) = 5 [pid 6354] chdir("./209" [pid 6352] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] <... umount2 resumed>) = 0 [pid 6352] <... mmap resumed>) = 0x7f0356e00000 [pid 6352] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] umount2("./210/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] close(3 [pid 5074] <... ioctl resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... close resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6354] <... chdir resumed>) = 0 [pid 6354] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6353] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6354] setpgid(0, 0) = 0 [pid 6354] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 6355 attached ) = 3 [pid 6353] <... open resumed>) = 5 [pid 5077] newfstatat(AT_FDCWD, "./210/bus", [pid 5074] close(3 [pid 6355] set_robust_list(0x55556e32a660, 24 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6355 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6355] <... set_robust_list resumed>) = 0 [pid 5077] umount2("./210/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6353] ftruncate(5, 0) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6355] chdir("./212" [pid 6353] exit_group(0 [pid 5077] openat(AT_FDCWD, "./210/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6353] <... exit_group resumed>) = ? [pid 5077] <... openat resumed>) = 4 ./strace-static-x86_64: Process 6356 attached [pid 6355] <... chdir resumed>) = 0 [pid 6354] write(3, "1000", 4 [pid 6353] +++ exited with 0 +++ [pid 6352] <... write resumed>) = 524288 [pid 5077] newfstatat(4, "", [pid 6356] set_robust_list(0x55556e32a660, 24 [pid 6355] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6354] <... write resumed>) = 4 [pid 6352] munmap(0x7f0356e00000, 138412032 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6353, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6356 [pid 6356] <... set_robust_list resumed>) = 0 [pid 6355] <... prctl resumed>) = 0 [pid 6354] close(3 [pid 5077] getdents64(4, [pid 6356] chdir("./208" [pid 6355] setpgid(0, 0 [pid 6354] <... close resumed>) = 0 [pid 6356] <... chdir resumed>) = 0 [pid 6355] <... setpgid resumed>) = 0 [pid 6354] symlink("/dev/binderfs", "./binderfs" [pid 6352] <... munmap resumed>) = 0 [pid 5078] umount2("./211", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6356] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6355] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6354] <... symlink resumed>) = 0 [pid 6352] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] getdents64(4, [pid 6356] <... prctl resumed>) = 0 [pid 6355] <... openat resumed>) = 3 [pid 6354] memfd_create("syzkaller", 0 [pid 6352] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] openat(AT_FDCWD, "./211", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6356] setpgid(0, 0 [pid 6355] write(3, "1000", 4 [pid 6354] <... memfd_create resumed>) = 3 [pid 6352] close(5 [pid 5078] <... openat resumed>) = 3 [pid 6354] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] newfstatat(3, "", [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6356] <... setpgid resumed>) = 0 [pid 6355] <... write resumed>) = 4 [pid 6354] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] close(4 [pid 6356] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6355] close(3 [pid 5078] getdents64(3, [pid 6356] <... openat resumed>) = 3 [pid 6355] <... close resumed>) = 0 [pid 6354] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6352] <... close resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] <... close resumed>) = 0 [pid 6355] symlink("/dev/binderfs", "./binderfs" [pid 5078] umount2("./211/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] rmdir("./210/bus" [pid 6356] write(3, "1000", 4 [pid 6355] <... symlink resumed>) = 0 [pid 6352] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6356] <... write resumed>) = 4 [pid 6355] memfd_create("syzkaller", 0 [pid 5077] <... rmdir resumed>) = 0 [pid 6352] <... open resumed>) = 5 [pid 5077] umount2("./210/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6356] close(3 [pid 6355] <... memfd_create resumed>) = 3 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6356] <... close resumed>) = 0 [pid 6355] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6356] symlink("/dev/binderfs", "./binderfs" [pid 6355] <... mmap resumed>) = 0x7f0356e00000 [pid 6352] ftruncate(5, 0 [pid 6356] <... symlink resumed>) = 0 [pid 6352] <... ftruncate resumed>) = 0 [pid 5078] <... umount2 resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./210/binderfs", [pid 6356] memfd_create("syzkaller", 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6356] <... memfd_create resumed>) = 3 [pid 6352] exit_group(0 [pid 5077] unlink("./210/binderfs" [pid 6356] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6354] <... write resumed>) = 524288 [pid 6352] <... exit_group resumed>) = ? [pid 5078] umount2("./211/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6356] <... mmap resumed>) = 0x7f0356e00000 [pid 6355] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6354] munmap(0x7f0356e00000, 138412032 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... unlink resumed>) = 0 [pid 6354] <... munmap resumed>) = 0 [pid 6352] +++ exited with 0 +++ [pid 5078] newfstatat(AT_FDCWD, "./211/bus", [pid 5077] getdents64(3, [pid 6354] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6354] <... openat resumed>) = 4 [pid 5078] umount2("./211/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] close(3 [pid 6354] ioctl(4, LOOP_SET_FD, 3 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... close resumed>) = 0 [pid 6356] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6355] <... write resumed>) = 524288 [pid 6354] <... ioctl resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./211/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] rmdir("./210" [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6352, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6354] close(3 [pid 5078] <... openat resumed>) = 4 [pid 5077] <... rmdir resumed>) = 0 [pid 6354] <... close resumed>) = 0 [pid 5077] mkdir("./211", 0777 [pid 6354] close(4 [pid 5078] newfstatat(4, "", [pid 5077] <... mkdir resumed>) = 0 [pid 6356] <... write resumed>) = 524288 [pid 6355] munmap(0x7f0356e00000, 138412032 [pid 6354] <... close resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, [pid 6356] munmap(0x7f0356e00000, 138412032 [pid 6355] <... munmap resumed>) = 0 [pid 6354] mkdir("./bus", 0777 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] <... openat resumed>) = 3 [pid 6356] <... munmap resumed>) = 0 [pid 6355] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6354] <... mkdir resumed>) = 0 [pid 5078] close(4 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 6355] <... openat resumed>) = 4 [pid 6354] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5078] <... close resumed>) = 0 [pid 5075] umount2("./208", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6356] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6355] ioctl(4, LOOP_SET_FD, 3 [pid 5078] rmdir("./211/bus" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 202.775892][ T6354] loop0: detected capacity change from 0 to 1024 [ 202.812862][ T6355] loop3: detected capacity change from 0 to 1024 [pid 6356] <... openat resumed>) = 4 [pid 5075] openat(AT_FDCWD, "./208", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6356] ioctl(4, LOOP_SET_FD, 3 [pid 5075] <... openat resumed>) = 3 [pid 5078] <... rmdir resumed>) = 0 [pid 5075] newfstatat(3, "", [pid 5078] umount2("./211/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] newfstatat(AT_FDCWD, "./211/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] getdents64(3, [pid 5078] unlink("./211/binderfs" [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] umount2("./208/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... unlink resumed>) = 0 [pid 5078] getdents64(3, [pid 6355] <... ioctl resumed>) = 0 [pid 6355] close(3) = 0 [pid 6355] close(4) = 0 [pid 6355] mkdir("./bus", 0777) = 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6356] <... ioctl resumed>) = 0 [pid 5078] close(3 [pid 6356] close(3 [pid 6355] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5078] <... close resumed>) = 0 [pid 6356] <... close resumed>) = 0 [pid 6356] close(4) = 0 [pid 5078] rmdir("./211") = 0 [pid 6356] mkdir("./bus", 0777 [pid 6354] <... mount resumed>) = 0 [pid 6355] <... mount resumed>) = 0 [pid 5078] mkdir("./212", 0777 [pid 6354] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5077] <... ioctl resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 6356] <... mkdir resumed>) = 0 [pid 6355] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6354] <... openat resumed>) = 3 [pid 5078] <... mkdir resumed>) = 0 [pid 5077] close(3 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6354] chdir("./bus" [pid 5075] umount2("./208/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6355] <... openat resumed>) = 3 [pid 5077] <... close resumed>) = 0 [pid 6356] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6354] <... chdir resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6354] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5078] ioctl(3, LOOP_CLR_FD [ 202.821608][ T6356] loop1: detected capacity change from 0 to 1024 [pid 5075] newfstatat(AT_FDCWD, "./208/bus", [pid 6355] chdir("./bus" [pid 6354] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6355] <... chdir resumed>) = 0 [pid 6355] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] umount2("./208/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6355] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6354] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6357 attached [pid 6356] <... mount resumed>) = 0 [pid 6355] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6357 [pid 5075] openat(AT_FDCWD, "./208/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6356] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6354] <... symlink resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 6356] <... openat resumed>) = 3 [pid 5075] newfstatat(4, "", [pid 6356] chdir("./bus" [pid 6355] <... symlink resumed>) = 0 [pid 6354] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6357] set_robust_list(0x55556e32a660, 24 [pid 6356] <... chdir resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6357] <... set_robust_list resumed>) = 0 [pid 6356] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6355] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5075] getdents64(4, [pid 6357] chdir("./211" [pid 6356] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6357] <... chdir resumed>) = 0 [pid 6356] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6357] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] getdents64(4, [pid 6357] <... prctl resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6354] <... creat resumed>) = 4 [pid 6357] setpgid(0, 0 [pid 6356] <... symlink resumed>) = 0 [pid 6355] <... creat resumed>) = 4 [pid 5078] <... ioctl resumed>) = 0 [pid 5075] close(4 [pid 6357] <... setpgid resumed>) = 0 [pid 6356] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6355] rename("./bus", "./file2" [pid 6354] rename("./bus", "./file2" [pid 6357] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5078] close(3 [pid 5075] <... close resumed>) = 0 [pid 6355] <... rename resumed>) = -1 EEXIST (File exists) [pid 5075] rmdir("./208/bus" [pid 6355] memfd_create("syzkaller", 0 [pid 5078] <... close resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 6356] <... creat resumed>) = 4 [pid 6355] <... memfd_create resumed>) = 5 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6357] <... openat resumed>) = 3 [pid 6355] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] umount2("./208/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6354] <... rename resumed>) = -1 EEXIST (File exists) [pid 6357] write(3, "1000", 4 [pid 6356] rename("./bus", "./file2" [pid 6355] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6357] <... write resumed>) = 4 [pid 6356] <... rename resumed>) = -1 EEXIST (File exists) [pid 6355] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6354] memfd_create("syzkaller", 0 [pid 5075] newfstatat(AT_FDCWD, "./208/binderfs", ./strace-static-x86_64: Process 6358 attached [pid 6357] close(3 [pid 6356] memfd_create("syzkaller", 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6354] <... memfd_create resumed>) = 5 [pid 6357] <... close resumed>) = 0 [pid 6357] symlink("/dev/binderfs", "./binderfs" [pid 5075] unlink("./208/binderfs" [pid 6358] set_robust_list(0x55556e32a660, 24 [pid 6356] <... memfd_create resumed>) = 5 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6358 [pid 6358] <... set_robust_list resumed>) = 0 [pid 6356] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... unlink resumed>) = 0 [pid 5075] getdents64(3, [pid 6358] chdir("./212" [pid 6357] <... symlink resumed>) = 0 [pid 6356] <... mmap resumed>) = 0x7f0356e00000 [pid 6354] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6356] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6354] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6358] <... chdir resumed>) = 0 [pid 6357] memfd_create("syzkaller", 0 [pid 5075] close(3 [pid 6358] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] <... close resumed>) = 0 [pid 6358] <... prctl resumed>) = 0 [pid 6358] setpgid(0, 0) = 0 [pid 6358] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6357] <... memfd_create resumed>) = 3 [pid 6354] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] rmdir("./208" [pid 6358] <... openat resumed>) = 3 [pid 6358] write(3, "1000", 4) = 4 [pid 6358] close(3) = 0 [pid 6356] <... write resumed>) = 524288 [pid 6358] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6358] memfd_create("syzkaller", 0 [pid 6357] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6358] <... memfd_create resumed>) = 3 [pid 6358] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6355] <... write resumed>) = 524288 [pid 6358] <... mmap resumed>) = 0x7f0356e00000 [pid 6357] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] <... rmdir resumed>) = 0 [pid 6358] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6357] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] mkdir("./209", 0777 [pid 6355] munmap(0x7f0356e00000, 138412032) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 6355] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6355] close(5 [pid 6357] <... write resumed>) = 524288 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6356] munmap(0x7f0356e00000, 138412032 [pid 5075] <... openat resumed>) = 3 [pid 6356] <... munmap resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6354] <... write resumed>) = 524288 [pid 6356] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6356] close(5 [pid 6357] munmap(0x7f0356e00000, 138412032 [pid 6358] <... write resumed>) = 524288 [pid 6357] <... munmap resumed>) = 0 [pid 6356] <... close resumed>) = 0 [pid 6355] <... close resumed>) = 0 [pid 6355] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6357] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6358] munmap(0x7f0356e00000, 138412032 [pid 6357] <... openat resumed>) = 4 [pid 6356] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6354] munmap(0x7f0356e00000, 138412032 [pid 6358] <... munmap resumed>) = 0 [pid 6357] ioctl(4, LOOP_SET_FD, 3 [pid 6355] <... open resumed>) = 5 [pid 6358] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6355] ftruncate(5, 0 [pid 6358] <... openat resumed>) = 4 [pid 6355] <... ftruncate resumed>) = 0 [pid 6358] ioctl(4, LOOP_SET_FD, 3 [pid 6357] <... ioctl resumed>) = 0 [pid 6356] <... open resumed>) = 5 [pid 6355] exit_group(0 [pid 6354] <... munmap resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 6357] close(3 [pid 6356] ftruncate(5, 0 [pid 6354] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] close(3 [pid 6358] <... ioctl resumed>) = 0 [pid 6357] <... close resumed>) = 0 [pid 6354] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... close resumed>) = 0 [pid 6357] close(4 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6354] close(5 [pid 6357] <... close resumed>) = 0 ./strace-static-x86_64: Process 6359 attached [pid 6358] close(3 [pid 6356] <... ftruncate resumed>) = 0 [pid 6355] <... exit_group resumed>) = ? [pid 6354] <... close resumed>) = 0 [pid 6356] exit_group(0 [pid 6355] +++ exited with 0 +++ [pid 6358] <... close resumed>) = 0 [pid 6356] <... exit_group resumed>) = ? [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6355, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6359] set_robust_list(0x55556e32a660, 24 [pid 6358] close(4 [pid 6356] +++ exited with 0 +++ [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6359 [pid 6359] <... set_robust_list resumed>) = 0 [pid 6358] <... close resumed>) = 0 [pid 6354] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5076] <... restart_syscall resumed>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6356, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6358] mkdir("./bus", 0777 [pid 6359] chdir("./209" [pid 6358] <... mkdir resumed>) = 0 [pid 6359] <... chdir resumed>) = 0 [pid 6358] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6357] mkdir("./bus", 0777 [pid 5076] umount2("./212", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./208", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6359] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6359] <... prctl resumed>) = 0 [pid 6354] <... open resumed>) = 5 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./208", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6359] setpgid(0, 0 [pid 6354] ftruncate(5, 0 [pid 5076] openat(AT_FDCWD, "./212", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... openat resumed>) = 3 [pid 6359] <... setpgid resumed>) = 0 [pid 6354] <... ftruncate resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5074] newfstatat(3, "", [pid 6359] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6357] <... mkdir resumed>) = 0 [pid 6354] exit_group(0 [pid 5076] newfstatat(3, "", [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6359] <... openat resumed>) = 3 [pid 6358] <... mount resumed>) = 0 [pid 6357] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6354] <... exit_group resumed>) = ? [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, [pid 6359] write(3, "1000", 4 [pid 6358] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5076] getdents64(3, [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [ 203.002340][ T6357] loop4: detected capacity change from 0 to 1024 [ 203.028719][ T6358] loop5: detected capacity change from 0 to 1024 [pid 6359] <... write resumed>) = 4 [pid 6358] <... openat resumed>) = 3 [pid 6354] +++ exited with 0 +++ [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] umount2("./208/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6359] close(3 [pid 5076] umount2("./212/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6354, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6359] <... close resumed>) = 0 [pid 6359] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6358] chdir("./bus") = 0 [pid 6358] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6359] memfd_create("syzkaller", 0 [pid 6358] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6358] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5073] umount2("./209", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6359] <... memfd_create resumed>) = 3 [pid 6357] <... mount resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6359] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6358] <... symlink resumed>) = 0 [pid 6357] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5073] openat(AT_FDCWD, "./209", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] umount2("./212/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... openat resumed>) = 3 [pid 6359] <... mmap resumed>) = 0x7f0356e00000 [pid 5073] newfstatat(3, "", [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6358] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6357] <... openat resumed>) = 3 [pid 5076] newfstatat(AT_FDCWD, "./212/bus", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6357] chdir("./bus" [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./208/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] getdents64(3, [pid 5076] umount2("./212/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6357] <... chdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6357] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] openat(AT_FDCWD, "./212/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6359] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6357] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] newfstatat(AT_FDCWD, "./208/bus", [pid 5073] umount2("./209/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6358] <... creat resumed>) = 4 [pid 6357] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5076] <... openat resumed>) = 4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6358] rename("./bus", "./file2" [pid 5076] newfstatat(4, "", [pid 5074] umount2("./208/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6358] <... rename resumed>) = -1 EEXIST (File exists) [pid 6357] <... symlink resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6358] memfd_create("syzkaller", 0 [pid 5076] getdents64(4, [pid 5074] openat(AT_FDCWD, "./208/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6358] <... memfd_create resumed>) = 5 [pid 6357] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] <... openat resumed>) = 4 [pid 6358] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] getdents64(4, [pid 5074] newfstatat(4, "", [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] close(4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... close resumed>) = 0 [pid 6358] <... mmap resumed>) = 0x7f0356e00000 [pid 5074] getdents64(4, [pid 5076] rmdir("./212/bus" [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, [pid 5073] <... umount2 resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] close(4 [pid 6358] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6357] <... creat resumed>) = 4 [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./208/bus" [pid 5076] umount2("./212/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] <... rmdir resumed>) = 0 [pid 6357] rename("./bus", "./file2" [pid 6359] <... write resumed>) = 524288 [pid 5076] newfstatat(AT_FDCWD, "./212/binderfs", [pid 5074] umount2("./208/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6359] munmap(0x7f0356e00000, 138412032 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./209/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6359] <... munmap resumed>) = 0 [pid 6357] <... rename resumed>) = -1 EEXIST (File exists) [pid 5076] unlink("./212/binderfs" [pid 5074] newfstatat(AT_FDCWD, "./208/binderfs", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6357] memfd_create("syzkaller", 0 [pid 5073] newfstatat(AT_FDCWD, "./209/bus", [pid 6357] <... memfd_create resumed>) = 5 [pid 5076] <... unlink resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6359] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6357] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] unlink("./208/binderfs" [pid 5076] getdents64(3, [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6359] <... openat resumed>) = 4 [pid 6357] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5073] umount2("./209/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6359] ioctl(4, LOOP_SET_FD, 3 [pid 6357] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] close(3 [pid 5074] getdents64(3, [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 5074] rmdir("./208") = 0 [pid 5073] openat(AT_FDCWD, "./209/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] <... close resumed>) = 0 [pid 5073] newfstatat(4, "", [pid 5076] rmdir("./212" [pid 5074] mkdir("./209", 0777 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6358] <... write resumed>) = 524288 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5073] getdents64(4, [pid 6358] munmap(0x7f0356e00000, 138412032 [pid 6357] <... write resumed>) = 524288 [pid 5076] mkdir("./213", 0777 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6358] <... munmap resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] getdents64(4, [pid 6359] <... ioctl resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6359] close(3 [pid 5073] close(4 [pid 6358] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] <... close resumed>) = 0 [pid 6359] <... close resumed>) = 0 [pid 6358] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] rmdir("./209/bus" [pid 6359] close(4 [pid 6358] close(5 [pid 5076] <... openat resumed>) = 3 [pid 6359] <... close resumed>) = 0 [pid 6358] <... close resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5073] <... rmdir resumed>) = 0 [pid 6359] mkdir("./bus", 0777 [pid 5073] umount2("./209/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6359] <... mkdir resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6359] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5073] newfstatat(AT_FDCWD, "./209/binderfs", [pid 6357] munmap(0x7f0356e00000, 138412032 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6357] <... munmap resumed>) = 0 [pid 5073] unlink("./209/binderfs" [pid 6358] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5073] <... unlink resumed>) = 0 [pid 6357] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6357] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] close(3) = 0 [pid 6357] close(5) = 0 [pid 5073] rmdir("./209" [pid 6357] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6359] <... mount resumed>) = 0 [pid 6358] <... open resumed>) = 5 [pid 5073] <... rmdir resumed>) = 0 [ 203.154320][ T6359] loop2: detected capacity change from 0 to 1024 [pid 6359] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6358] ftruncate(5, 0 [pid 5073] mkdir("./210", 0777 [pid 6359] <... openat resumed>) = 3 [pid 6359] chdir("./bus" [pid 5073] <... mkdir resumed>) = 0 [pid 6359] <... chdir resumed>) = 0 [pid 6358] <... ftruncate resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6359] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6358] exit_group(0 [pid 6357] <... open resumed>) = 5 [pid 5076] <... ioctl resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 6359] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6358] <... exit_group resumed>) = ? [pid 6357] ftruncate(5, 0 [pid 6358] +++ exited with 0 +++ [pid 6357] <... ftruncate resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6358, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6357] exit_group(0 [pid 5078] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 6359] <... symlink resumed>) = 0 [pid 5078] umount2("./212", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./212", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6357] <... exit_group resumed>) = ? [pid 5078] newfstatat(3, "", [pid 6359] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6357] +++ exited with 0 +++ [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] close(3 [pid 5078] getdents64(3, [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6357, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5076] close(3 [pid 5074] <... close resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] umount2("./212/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] umount2("./211", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./211", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5077] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6361 [pid 5077] umount2("./211/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6360 ./strace-static-x86_64: Process 6361 attached ./strace-static-x86_64: Process 6360 attached [pid 6359] <... creat resumed>) = 4 [pid 6360] set_robust_list(0x55556e32a660, 24 [pid 6361] set_robust_list(0x55556e32a660, 24 [pid 6359] rename("./bus", "./file2" [pid 6361] <... set_robust_list resumed>) = 0 [pid 6361] chdir("./213" [pid 6359] <... rename resumed>) = -1 EEXIST (File exists) [pid 6360] <... set_robust_list resumed>) = 0 [pid 6361] <... chdir resumed>) = 0 [pid 6359] memfd_create("syzkaller", 0 [pid 6360] chdir("./209" [pid 6361] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6359] <... memfd_create resumed>) = 5 [pid 5078] <... umount2 resumed>) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 6361] <... prctl resumed>) = 0 [pid 6361] setpgid(0, 0) = 0 [pid 6360] <... chdir resumed>) = 0 [pid 6361] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6359] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6361] <... openat resumed>) = 3 [pid 6361] write(3, "1000", 4) = 4 [pid 6361] close(3) = 0 [pid 6361] symlink("/dev/binderfs", "./binderfs" [pid 5078] umount2("./212/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6361] <... symlink resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] newfstatat(AT_FDCWD, "./212/bus", [pid 6361] memfd_create("syzkaller", 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] umount2("./211/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6360] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6361] <... memfd_create resumed>) = 3 [pid 6359] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] umount2("./212/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6360] <... prctl resumed>) = 0 [pid 6361] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./211/bus", [pid 6360] setpgid(0, 0 [pid 6361] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] openat(AT_FDCWD, "./212/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6360] <... setpgid resumed>) = 0 [pid 6359] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6360] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5078] <... openat resumed>) = 4 [pid 5078] newfstatat(4, "", [pid 5077] umount2("./211/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6360] <... openat resumed>) = 3 [pid 5073] <... ioctl resumed>) = 0 [pid 6360] write(3, "1000", 4 [pid 6361] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] getdents64(4, [pid 5077] openat(AT_FDCWD, "./211/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6360] <... write resumed>) = 4 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] <... openat resumed>) = 4 [pid 5073] close(3 [pid 6360] close(3 [pid 5073] <... close resumed>) = 0 [pid 6360] <... close resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6361] <... write resumed>) = 524288 [pid 5078] getdents64(4, [pid 5077] newfstatat(4, "", [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6362 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] close(4./strace-static-x86_64: Process 6362 attached [pid 6360] symlink("/dev/binderfs", "./binderfs" [pid 5078] <... close resumed>) = 0 [pid 6362] set_robust_list(0x55556e32a660, 24 [pid 5077] getdents64(4, [pid 5078] rmdir("./212/bus" [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6360] <... symlink resumed>) = 0 [pid 6362] <... set_robust_list resumed>) = 0 [pid 6362] chdir("./210" [pid 5078] <... rmdir resumed>) = 0 [pid 5077] getdents64(4, [pid 6362] <... chdir resumed>) = 0 [pid 5078] umount2("./212/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6362] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6360] memfd_create("syzkaller", 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] newfstatat(AT_FDCWD, "./212/binderfs", [pid 5077] close(4 [pid 6359] <... write resumed>) = 524288 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] <... close resumed>) = 0 [pid 6362] <... prctl resumed>) = 0 [pid 6360] <... memfd_create resumed>) = 3 [pid 6359] munmap(0x7f0356e00000, 138412032 [pid 5078] unlink("./212/binderfs" [pid 5077] rmdir("./211/bus" [pid 6362] setpgid(0, 0 [pid 6360] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6361] munmap(0x7f0356e00000, 138412032 [pid 6359] <... munmap resumed>) = 0 [pid 6362] <... setpgid resumed>) = 0 [pid 6360] <... mmap resumed>) = 0x7f0356e00000 [pid 6362] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6361] <... munmap resumed>) = 0 [pid 6359] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] <... unlink resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5078] getdents64(3, [pid 5077] umount2("./211/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6362] <... openat resumed>) = 3 [pid 6359] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6361] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6359] close(5 [pid 5078] close(3 [pid 5077] newfstatat(AT_FDCWD, "./211/binderfs", [pid 6361] <... openat resumed>) = 4 [pid 5078] <... close resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6362] write(3, "1000", 4 [pid 5078] rmdir("./212" [pid 5077] unlink("./211/binderfs" [pid 6362] <... write resumed>) = 4 [pid 6361] ioctl(4, LOOP_SET_FD, 3 [pid 5078] <... rmdir resumed>) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 5078] mkdir("./213", 0777 [pid 5077] getdents64(3, [pid 5078] <... mkdir resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] close(3) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] rmdir("./211" [pid 5078] <... openat resumed>) = 3 [pid 5077] <... rmdir resumed>) = 0 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5077] mkdir("./212", 0777) = 0 [pid 6362] close(3 [pid 6360] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6362] <... close resumed>) = 0 [pid 6362] symlink("/dev/binderfs", "./binderfs" [pid 6359] <... close resumed>) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6362] <... symlink resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 6362] memfd_create("syzkaller", 0 [pid 6360] <... write resumed>) = 524288 [pid 6361] <... ioctl resumed>) = 0 [pid 6359] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6360] munmap(0x7f0356e00000, 138412032 [pid 6362] <... memfd_create resumed>) = 3 [pid 6362] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6360] <... munmap resumed>) = 0 [pid 6361] close(3) = 0 [pid 6362] <... mmap resumed>) = 0x7f0356e00000 [pid 6361] close(4 [pid 6360] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6361] <... close resumed>) = 0 [pid 6360] <... openat resumed>) = 4 [pid 6362] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6360] ioctl(4, LOOP_SET_FD, 3 [pid 6361] mkdir("./bus", 0777 [pid 6359] <... open resumed>) = 5 [pid 6361] <... mkdir resumed>) = 0 [pid 6359] ftruncate(5, 0 [pid 6362] <... write resumed>) = 524288 [pid 6361] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6362] munmap(0x7f0356e00000, 138412032 [pid 6360] <... ioctl resumed>) = 0 [pid 6359] <... ftruncate resumed>) = 0 [pid 5078] <... ioctl resumed>) = 0 [pid 5077] <... ioctl resumed>) = 0 [pid 6362] <... munmap resumed>) = 0 [pid 6359] exit_group(0) = ? [pid 6359] +++ exited with 0 +++ [pid 6362] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6360] close(3 [pid 6362] <... openat resumed>) = 4 [pid 6360] <... close resumed>) = 0 [pid 6362] ioctl(4, LOOP_SET_FD, 3 [pid 6360] close(4 [ 203.353624][ T6361] loop3: detected capacity change from 0 to 1024 [ 203.392655][ T6360] loop1: detected capacity change from 0 to 1024 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6359, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6360] <... close resumed>) = 0 [pid 5078] close(3 [pid 5077] close(3 [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 6360] mkdir("./bus", 0777 [pid 5078] <... close resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5075] <... restart_syscall resumed>) = 0 [pid 5075] umount2("./209", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./209", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5075] newfstatat(3, "", [pid 6360] <... mkdir resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] umount2("./209/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6360] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, ""./strace-static-x86_64: Process 6364 attached [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6363 [pid 6364] set_robust_list(0x55556e32a660, 24 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6364 [pid 6364] <... set_robust_list resumed>) = 0 [pid 6364] chdir("./212") = 0 [pid 6364] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6364] setpgid(0, 0./strace-static-x86_64: Process 6363 attached [pid 6362] <... ioctl resumed>) = 0 [pid 6360] <... mount resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 6360] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6363] set_robust_list(0x55556e32a660, 24) = 0 [pid 6364] <... setpgid resumed>) = 0 [pid 6362] close(3 [pid 6360] <... openat resumed>) = 3 [pid 6361] <... mount resumed>) = 0 [pid 6362] <... close resumed>) = 0 [pid 6361] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6362] close(4 [ 203.421336][ T6362] loop0: detected capacity change from 0 to 1024 [pid 6363] chdir("./213" [pid 6364] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6362] <... close resumed>) = 0 [pid 6360] chdir("./bus" [pid 6361] <... openat resumed>) = 3 [pid 6363] <... chdir resumed>) = 0 [pid 6362] mkdir("./bus", 0777 [pid 6361] chdir("./bus" [pid 6363] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6364] <... openat resumed>) = 3 [pid 6362] <... mkdir resumed>) = 0 [pid 6360] <... chdir resumed>) = 0 [pid 5075] umount2("./209/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6363] <... prctl resumed>) = 0 [pid 6364] write(3, "1000", 4 [pid 6362] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6360] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6361] <... chdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6363] setpgid(0, 0 [pid 6364] <... write resumed>) = 4 [pid 6360] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6361] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] newfstatat(AT_FDCWD, "./209/bus", [pid 6363] <... setpgid resumed>) = 0 [pid 6364] close(3 [pid 6360] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6363] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6364] <... close resumed>) = 0 [pid 6360] <... symlink resumed>) = 0 [pid 6361] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6361] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6364] symlink("/dev/binderfs", "./binderfs" [pid 6360] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5075] umount2("./209/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6363] <... openat resumed>) = 3 [pid 6361] <... symlink resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6363] write(3, "1000", 4 [pid 6361] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6364] <... symlink resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./209/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6363] <... write resumed>) = 4 [pid 6360] <... creat resumed>) = 4 [pid 5075] <... openat resumed>) = 4 [pid 6363] close(3 [pid 6364] memfd_create("syzkaller", 0 [pid 6360] rename("./bus", "./file2" [pid 5075] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6363] <... close resumed>) = 0 [pid 5075] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6364] <... memfd_create resumed>) = 3 [pid 6362] <... mount resumed>) = 0 [pid 6360] <... rename resumed>) = -1 EEXIST (File exists) [pid 5075] close(4 [pid 6363] symlink("/dev/binderfs", "./binderfs" [pid 6364] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6362] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6360] memfd_create("syzkaller", 0 [pid 5075] <... close resumed>) = 0 [pid 6363] <... symlink resumed>) = 0 [pid 6360] <... memfd_create resumed>) = 5 [pid 5075] rmdir("./209/bus" [pid 6363] memfd_create("syzkaller", 0 [pid 6362] <... openat resumed>) = 3 [pid 6360] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... rmdir resumed>) = 0 [pid 6363] <... memfd_create resumed>) = 3 [pid 6364] <... mmap resumed>) = 0x7f0356e00000 [pid 6362] chdir("./bus" [pid 6360] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] umount2("./209/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6363] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6362] <... chdir resumed>) = 0 [pid 6361] <... creat resumed>) = 4 [pid 6363] <... mmap resumed>) = 0x7f0356e00000 [pid 6362] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6360] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6361] rename("./bus", "./file2" [pid 6364] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6362] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./209/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6362] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5075] unlink("./209/binderfs") = 0 [pid 5075] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 5075] rmdir("./209" [pid 6363] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6362] <... symlink resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5075] mkdir("./210", 0777 [pid 6361] <... rename resumed>) = -1 EEXIST (File exists) [pid 6361] memfd_create("syzkaller", 0 [pid 6362] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6361] <... memfd_create resumed>) = 5 [pid 5075] <... mkdir resumed>) = 0 [pid 6361] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 6362] <... creat resumed>) = 4 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6362] rename("./bus", "./file2") = -1 EEXIST (File exists) [pid 6361] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6362] memfd_create("syzkaller", 0 [pid 6364] <... write resumed>) = 524288 [pid 6362] <... memfd_create resumed>) = 5 [pid 6362] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6364] munmap(0x7f0356e00000, 138412032) = 0 [pid 6360] <... write resumed>) = 524288 [pid 6363] <... write resumed>) = 524288 [pid 6364] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6360] munmap(0x7f0356e00000, 138412032 [pid 6363] munmap(0x7f0356e00000, 138412032 [pid 6364] <... openat resumed>) = 4 [pid 6360] <... munmap resumed>) = 0 [pid 6363] <... munmap resumed>) = 0 [pid 6364] ioctl(4, LOOP_SET_FD, 3 [pid 6362] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6363] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6362] <... write resumed>) = 524288 [pid 6360] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6361] <... write resumed>) = 524288 [pid 6363] <... openat resumed>) = 4 [pid 6362] munmap(0x7f0356e00000, 138412032 [pid 6360] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... ioctl resumed>) = 0 [pid 6363] ioctl(4, LOOP_SET_FD, 3 [pid 6361] munmap(0x7f0356e00000, 138412032) = 0 [pid 6361] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] close(3 [pid 6361] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... close resumed>) = 0 [pid 6362] <... munmap resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6360] close(5 [pid 6361] close(5 [pid 6364] <... ioctl resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6365 ./strace-static-x86_64: Process 6365 attached [pid 6365] set_robust_list(0x55556e32a660, 24 [pid 6364] close(3 [pid 6365] <... set_robust_list resumed>) = 0 [pid 6364] <... close resumed>) = 0 [pid 6365] chdir("./210" [pid 6364] close(4 [pid 6362] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6360] <... close resumed>) = 0 [pid 6361] <... close resumed>) = 0 [pid 6365] <... chdir resumed>) = 0 [pid 6362] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6365] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6365] setpgid(0, 0) = 0 [pid 6365] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6365] write(3, "1000", 4 [pid 6364] <... close resumed>) = 0 [pid 6365] <... write resumed>) = 4 [pid 6365] close(3) = 0 [pid 6365] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6362] close(5 [pid 6364] mkdir("./bus", 0777) = 0 [pid 6365] memfd_create("syzkaller", 0 [pid 6364] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6365] <... memfd_create resumed>) = 3 [pid 6362] <... close resumed>) = 0 [pid 6365] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6363] <... ioctl resumed>) = 0 [pid 6360] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6361] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6365] <... mmap resumed>) = 0x7f0356e00000 [pid 6363] close(3 [ 203.560845][ T6364] loop4: detected capacity change from 0 to 1024 [ 203.575327][ T6363] loop5: detected capacity change from 0 to 1024 [pid 6362] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6363] <... close resumed>) = 0 [pid 6365] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6363] close(4 [pid 6364] <... mount resumed>) = 0 [pid 6362] <... open resumed>) = 5 [pid 6361] <... open resumed>) = 5 [pid 6363] <... close resumed>) = 0 [pid 6362] ftruncate(5, 0 [pid 6360] <... open resumed>) = 5 [pid 6363] mkdir("./bus", 0777 [pid 6361] ftruncate(5, 0 [pid 6363] <... mkdir resumed>) = 0 [pid 6364] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6362] <... ftruncate resumed>) = 0 [pid 6361] <... ftruncate resumed>) = 0 [pid 6360] ftruncate(5, 0) = 0 [pid 6363] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6362] exit_group(0 [pid 6360] exit_group(0 [pid 6361] exit_group(0 [pid 6362] <... exit_group resumed>) = ? [pid 6360] <... exit_group resumed>) = ? [pid 6361] <... exit_group resumed>) = ? [pid 6364] <... openat resumed>) = 3 [pid 6364] chdir("./bus") = 0 [pid 6364] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6364] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6361] +++ exited with 0 +++ [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6361, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6364] <... symlink resumed>) = 0 [pid 6360] +++ exited with 0 +++ [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6360, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5076] umount2("./213", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 6364] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... restart_syscall resumed>) = 0 [pid 6363] <... mount resumed>) = 0 [pid 6362] +++ exited with 0 +++ [pid 5076] openat(AT_FDCWD, "./213", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6365] <... write resumed>) = 524288 [pid 6363] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6364] <... creat resumed>) = 4 [pid 5076] <... openat resumed>) = 3 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6362, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6365] munmap(0x7f0356e00000, 138412032 [pid 6364] rename("./bus", "./file2" [pid 5076] newfstatat(3, "", [pid 6365] <... munmap resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] umount2("./209", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6364] <... rename resumed>) = -1 EEXIST (File exists) [pid 5076] getdents64(3, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./210", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6365] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6363] <... openat resumed>) = 3 [pid 6364] memfd_create("syzkaller", 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] openat(AT_FDCWD, "./209", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6365] <... openat resumed>) = 4 [pid 6363] chdir("./bus" [pid 6364] <... memfd_create resumed>) = 5 [pid 5076] umount2("./213/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... openat resumed>) = 3 [pid 5073] openat(AT_FDCWD, "./210", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6365] ioctl(4, LOOP_SET_FD, 3 [pid 6363] <... chdir resumed>) = 0 [pid 6364] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] newfstatat(3, "", [pid 5073] <... openat resumed>) = 3 [pid 6363] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6364] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] <... umount2 resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] umount2("./210/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6364] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] umount2("./213/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6363] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] umount2("./209/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6363] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5076] newfstatat(AT_FDCWD, "./213/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./213/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./213/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6365] <... ioctl resumed>) = 0 [pid 6363] <... symlink resumed>) = 0 [pid 6365] close(3 [pid 6363] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5076] close(4 [pid 6365] <... close resumed>) = 0 [pid 6365] close(4 [pid 6363] <... creat resumed>) = 4 [pid 5076] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5076] rmdir("./213/bus" [pid 5074] umount2("./209/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6365] <... close resumed>) = 0 [pid 6363] rename("./bus", "./file2" [pid 5076] <... rmdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./213/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] newfstatat(AT_FDCWD, "./209/bus", [pid 5073] umount2("./210/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./213/binderfs", [pid 5074] umount2("./209/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] newfstatat(AT_FDCWD, "./210/bus", [pid 6365] mkdir("./bus", 0777 [pid 6363] <... rename resumed>) = -1 EEXIST (File exists) [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./209/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6365] <... mkdir resumed>) = 0 [pid 6363] memfd_create("syzkaller", 0 [pid 5076] unlink("./213/binderfs" [pid 5074] <... openat resumed>) = 4 [pid 5073] umount2("./210/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6363] <... memfd_create resumed>) = 5 [pid 5076] <... unlink resumed>) = 0 [pid 5074] newfstatat(4, "", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6363] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] openat(AT_FDCWD, "./210/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6365] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6363] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] getdents64(3, [pid 5074] getdents64(4, [pid 5073] <... openat resumed>) = 4 [pid 6364] <... write resumed>) = 524288 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] newfstatat(4, "", [pid 5076] close(3 [pid 5074] getdents64(4, [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6364] munmap(0x7f0356e00000, 138412032 [pid 5076] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] getdents64(4, [pid 6364] <... munmap resumed>) = 0 [pid 5076] rmdir("./213" [pid 5074] close(4 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6363] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./209/bus" [pid 5073] getdents64(4, [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6364] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] mkdir("./214", 0777 [pid 5074] umount2("./209/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] close(4 [pid 6364] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... mkdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./210/bus" [ 203.686260][ T6365] loop2: detected capacity change from 0 to 1024 [pid 5074] newfstatat(AT_FDCWD, "./209/binderfs", [pid 5073] <... rmdir resumed>) = 0 [pid 6365] <... mount resumed>) = 0 [pid 6363] <... write resumed>) = 524288 [pid 6364] close(5 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6365] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6364] <... close resumed>) = 0 [pid 6365] <... openat resumed>) = 3 [pid 6365] chdir("./bus" [pid 6363] munmap(0x7f0356e00000, 138412032 [pid 5076] <... openat resumed>) = 3 [pid 5073] umount2("./210/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6363] <... munmap resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6363] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] unlink("./209/binderfs" [pid 5073] newfstatat(AT_FDCWD, "./210/binderfs", [pid 6363] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... unlink resumed>) = 0 [pid 6365] <... chdir resumed>) = 0 [pid 6363] close(5 [pid 5074] getdents64(3, [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6365] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6363] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] unlink("./210/binderfs" [pid 6365] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6364] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5074] close(3 [pid 5073] <... unlink resumed>) = 0 [pid 6365] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5074] <... close resumed>) = 0 [pid 5073] getdents64(3, [pid 5074] rmdir("./209" [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6365] <... symlink resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] close(3) = 0 [pid 6364] <... open resumed>) = 5 [pid 6365] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5073] rmdir("./210" [pid 6364] ftruncate(5, 0 [pid 5074] mkdir("./210", 0777 [pid 5073] <... rmdir resumed>) = 0 [pid 6365] <... creat resumed>) = 4 [pid 6363] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6364] <... ftruncate resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 6365] rename("./bus", "./file2" [pid 6364] exit_group(0 [pid 5073] mkdir("./211", 0777 [pid 6365] <... rename resumed>) = -1 EEXIST (File exists) [pid 6364] <... exit_group resumed>) = ? [pid 5073] <... mkdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] <... openat resumed>) = 3 [pid 5073] <... openat resumed>) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6364] +++ exited with 0 +++ [pid 6365] memfd_create("syzkaller", 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6364, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 6365] <... memfd_create resumed>) = 5 [pid 6363] <... open resumed>) = 5 [pid 5077] <... restart_syscall resumed>) = 0 [pid 6365] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6363] ftruncate(5, 0 [pid 6365] <... mmap resumed>) = 0x7f0356e00000 [pid 6363] <... ftruncate resumed>) = 0 [pid 5077] umount2("./212", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./212", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5077] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6363] exit_group(0 [pid 5077] umount2("./212/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6363] <... exit_group resumed>) = ? [pid 6365] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6363] +++ exited with 0 +++ [pid 5077] <... umount2 resumed>) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6363, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5077] umount2("./212/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./212/bus", [pid 5078] umount2("./213", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] openat(AT_FDCWD, "./213", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] umount2("./212/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... ioctl resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] close(3 [pid 5074] <... ioctl resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./212/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... openat resumed>) = 3 [pid 5077] <... openat resumed>) = 4 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] newfstatat(4, "", ./strace-static-x86_64: Process 6366 attached [pid 6365] <... write resumed>) = 524288 [pid 5078] newfstatat(3, "", [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] getdents64(4, [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6366 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6366] set_robust_list(0x55556e32a660, 24 [pid 5078] getdents64(3, [pid 5077] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6366] <... set_robust_list resumed>) = 0 [pid 5077] close(4 [pid 6366] chdir("./214" [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] <... close resumed>) = 0 [pid 6366] <... chdir resumed>) = 0 [pid 5077] rmdir("./212/bus" [pid 6366] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5078] umount2("./213/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... rmdir resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 6366] setpgid(0, 0 [pid 5074] close(3 [pid 6366] <... setpgid resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 6366] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5077] umount2("./212/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] close(3 [pid 6365] munmap(0x7f0356e00000, 138412032 [pid 5073] <... close resumed>) = 0 [pid 6365] <... munmap resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6366] <... openat resumed>) = 3 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6367 attached [pid 6366] write(3, "1000", 4 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6367 [pid 6367] set_robust_list(0x55556e32a660, 24 [pid 6366] <... write resumed>) = 4 [pid 5077] newfstatat(AT_FDCWD, "./212/binderfs", [pid 6365] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) ./strace-static-x86_64: Process 6368 attached [pid 6365] close(5 [pid 6368] set_robust_list(0x55556e32a660, 24 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6368 [pid 6368] <... set_robust_list resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6368] chdir("./211" [pid 6366] close(3 [pid 6368] <... chdir resumed>) = 0 [pid 6366] <... close resumed>) = 0 [pid 6365] <... close resumed>) = 0 [pid 5078] <... umount2 resumed>) = 0 [pid 5077] unlink("./212/binderfs" [pid 6367] <... set_robust_list resumed>) = 0 [pid 6368] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6367] chdir("./210" [pid 6366] symlink("/dev/binderfs", "./binderfs" [pid 5077] <... unlink resumed>) = 0 [pid 6367] <... chdir resumed>) = 0 [pid 6368] setpgid(0, 0 [pid 6367] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6366] <... symlink resumed>) = 0 [pid 5077] getdents64(3, [pid 6368] <... setpgid resumed>) = 0 [pid 6367] <... prctl resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6368] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6367] setpgid(0, 0 [pid 6366] memfd_create("syzkaller", 0 [pid 6365] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] umount2("./213/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] close(3 [pid 6368] <... openat resumed>) = 3 [pid 6367] <... setpgid resumed>) = 0 [pid 6366] <... memfd_create resumed>) = 3 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... close resumed>) = 0 [pid 5078] newfstatat(AT_FDCWD, "./213/bus", [pid 6368] write(3, "1000", 4 [pid 6367] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6366] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] rmdir("./212" [pid 6366] <... mmap resumed>) = 0x7f0356e00000 [pid 6368] <... write resumed>) = 4 [pid 6367] <... openat resumed>) = 3 [pid 6365] <... open resumed>) = 5 [pid 5078] umount2("./213/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... rmdir resumed>) = 0 [pid 6368] close(3 [pid 6367] write(3, "1000", 4 [pid 6365] ftruncate(5, 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6368] <... close resumed>) = 0 [pid 6367] <... write resumed>) = 4 [pid 6365] <... ftruncate resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./213/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] mkdir("./213", 0777 [pid 6368] symlink("/dev/binderfs", "./binderfs" [pid 6367] close(3 [pid 6365] exit_group(0 [pid 5078] <... openat resumed>) = 4 [pid 6368] <... symlink resumed>) = 0 [pid 6365] <... exit_group resumed>) = ? [pid 5078] newfstatat(4, "", [pid 6367] <... close resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 6367] symlink("/dev/binderfs", "./binderfs" [pid 6368] memfd_create("syzkaller", 0 [pid 5078] getdents64(4, [pid 6367] <... symlink resumed>) = 0 [pid 6366] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] getdents64(4, [pid 5077] <... openat resumed>) = 3 [pid 6368] <... memfd_create resumed>) = 3 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 6368] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6367] memfd_create("syzkaller", 0 [pid 6365] +++ exited with 0 +++ [pid 5078] close(4) = 0 [pid 6368] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] rmdir("./213/bus" [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6365, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6367] <... memfd_create resumed>) = 3 [pid 5078] <... rmdir resumed>) = 0 [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 6368] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... restart_syscall resumed>) = 0 [pid 6367] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] umount2("./213/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] newfstatat(AT_FDCWD, "./213/binderfs", [pid 5075] umount2("./210", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6367] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./210", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] unlink("./213/binderfs" [pid 5075] <... openat resumed>) = 3 [pid 5078] <... unlink resumed>) = 0 [pid 5075] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(3, [pid 5075] getdents64(3, [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] <... ioctl resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] close(3) = 0 [pid 5075] umount2("./210/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] rmdir("./213" [pid 6367] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... rmdir resumed>) = 0 [pid 6366] <... write resumed>) = 524288 [pid 5078] mkdir("./214", 0777 [pid 6366] munmap(0x7f0356e00000, 138412032) = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 6368] <... write resumed>) = 524288 [pid 6366] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5077] close(3 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] <... close resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6366] ioctl(4, LOOP_SET_FD, 3 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5075] umount2("./210/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./210/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./210/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./210/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6368] munmap(0x7f0356e00000, 138412032 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6369 [pid 5075] <... openat resumed>) = 4 [pid 6368] <... munmap resumed>) = 0 [pid 5075] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6368] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] getdents64(4, [pid 6368] <... openat resumed>) = 4 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6368] ioctl(4, LOOP_SET_FD, 3 [pid 5075] close(4./strace-static-x86_64: Process 6369 attached [pid 6367] <... write resumed>) = 524288 [pid 6369] set_robust_list(0x55556e32a660, 24 [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./210/bus" [pid 6369] <... set_robust_list resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 6369] chdir("./213" [pid 6368] <... ioctl resumed>) = 0 [pid 6367] munmap(0x7f0356e00000, 138412032 [pid 6366] <... ioctl resumed>) = 0 [pid 5075] umount2("./210/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6369] <... chdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6369] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6368] close(3 [pid 5075] newfstatat(AT_FDCWD, "./210/binderfs", [pid 6369] <... prctl resumed>) = 0 [pid 6368] <... close resumed>) = 0 [pid 6369] setpgid(0, 0 [pid 6368] close(4 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6369] <... setpgid resumed>) = 0 [pid 5075] unlink("./210/binderfs" [pid 6369] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6368] <... close resumed>) = 0 [pid 6368] mkdir("./bus", 0777 [pid 6367] <... munmap resumed>) = 0 [pid 6366] close(3 [pid 6369] <... openat resumed>) = 3 [pid 6368] <... mkdir resumed>) = 0 [pid 6366] <... close resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 6369] write(3, "1000", 4 [pid 6368] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6367] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6366] close(4 [pid 5075] getdents64(3, [pid 6369] <... write resumed>) = 4 [pid 6367] <... openat resumed>) = 4 [pid 6366] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6369] close(3 [ 203.938545][ T6366] loop3: detected capacity change from 0 to 1024 [ 203.950277][ T6368] loop0: detected capacity change from 0 to 1024 [pid 5075] close(3 [pid 6369] <... close resumed>) = 0 [pid 6367] ioctl(4, LOOP_SET_FD, 3 [pid 6366] mkdir("./bus", 0777 [pid 5075] <... close resumed>) = 0 [pid 6369] symlink("/dev/binderfs", "./binderfs" [pid 6366] <... mkdir resumed>) = 0 [pid 5078] <... ioctl resumed>) = 0 [pid 6369] <... symlink resumed>) = 0 [pid 6366] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6369] memfd_create("syzkaller", 0 [pid 5078] close(3 [pid 5075] rmdir("./210" [pid 5078] <... close resumed>) = 0 [pid 6369] <... memfd_create resumed>) = 3 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... rmdir resumed>) = 0 [pid 6369] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5075] mkdir("./211", 0777 [pid 6368] <... mount resumed>) = 0 [pid 6366] <... mount resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 6368] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6366] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6369] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6368] <... openat resumed>) = 3 [pid 6366] <... openat resumed>) = 3 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6370 [pid 6368] chdir("./bus") = 0 [pid 6368] openat(AT_FDCWD, "/dev/loop0", O_RDWR./strace-static-x86_64: Process 6370 attached ) = -1 EBUSY (Device or resource busy) [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6370] set_robust_list(0x55556e32a660, 24 [pid 6369] <... write resumed>) = 524288 [pid 6368] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6366] chdir("./bus" [pid 5075] <... openat resumed>) = 3 [pid 6367] <... ioctl resumed>) = 0 [pid 6367] close(3 [pid 6366] <... chdir resumed>) = 0 [pid 6367] <... close resumed>) = 0 [pid 6366] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6368] <... symlink resumed>) = 0 [pid 6367] close(4 [pid 6366] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6367] <... close resumed>) = 0 [pid 6366] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6370] <... set_robust_list resumed>) = 0 [pid 6367] mkdir("./bus", 0777 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6370] chdir("./214" [pid 6367] <... mkdir resumed>) = 0 [pid 6370] <... chdir resumed>) = 0 [pid 6368] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6367] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6366] <... symlink resumed>) = 0 [pid 6370] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6366] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6370] setpgid(0, 0) = 0 [pid 6368] <... creat resumed>) = 4 [pid 6370] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6368] rename("./bus", "./file2" [pid 6367] <... mount resumed>) = 0 [pid 6366] <... creat resumed>) = 4 [pid 6370] <... openat resumed>) = 3 [pid 6368] <... rename resumed>) = -1 EEXIST (File exists) [pid 6369] munmap(0x7f0356e00000, 138412032 [pid 6368] memfd_create("syzkaller", 0 [pid 6367] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6366] rename("./bus", "./file2" [pid 6369] <... munmap resumed>) = 0 [pid 6368] <... memfd_create resumed>) = 5 [pid 6367] <... openat resumed>) = 3 [pid 6366] <... rename resumed>) = -1 EEXIST (File exists) [pid 6368] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6367] chdir("./bus" [pid 6366] memfd_create("syzkaller", 0 [pid 6370] write(3, "1000", 4 [pid 6369] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6368] <... mmap resumed>) = 0x7f0356e00000 [pid 6367] <... chdir resumed>) = 0 [pid 6370] <... write resumed>) = 4 [pid 6366] <... memfd_create resumed>) = 5 [ 203.980379][ T6367] loop1: detected capacity change from 0 to 1024 [pid 6370] close(3 [pid 6369] <... openat resumed>) = 4 [pid 6368] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6367] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6366] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6370] <... close resumed>) = 0 [pid 6369] ioctl(4, LOOP_SET_FD, 3 [pid 6370] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6367] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6366] <... mmap resumed>) = 0x7f0356e00000 [pid 6367] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6366] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... ioctl resumed>) = 0 [pid 6370] memfd_create("syzkaller", 0 [pid 5075] close(3 [pid 6370] <... memfd_create resumed>) = 3 [pid 6367] <... symlink resumed>) = 0 [pid 6370] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6367] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5075] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6370] <... mmap resumed>) = 0x7f0356e00000 [pid 6368] <... write resumed>) = 524288 [pid 6369] <... ioctl resumed>) = 0 [pid 6369] close(3 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6371 [pid 6369] <... close resumed>) = 0 [pid 6367] <... creat resumed>) = 4 [pid 6369] close(4) = 0 [pid 6368] munmap(0x7f0356e00000, 138412032 [pid 6367] rename("./bus", "./file2"./strace-static-x86_64: Process 6371 attached [pid 6370] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6369] mkdir("./bus", 0777 [pid 6368] <... munmap resumed>) = 0 [pid 6367] <... rename resumed>) = -1 EEXIST (File exists) [pid 6366] <... write resumed>) = 524288 [pid 6371] set_robust_list(0x55556e32a660, 24 [pid 6369] <... mkdir resumed>) = 0 [pid 6369] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6368] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6367] memfd_create("syzkaller", 0 [pid 6371] <... set_robust_list resumed>) = 0 [pid 6368] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6368] close(5 [pid 6367] <... memfd_create resumed>) = 5 [pid 6371] chdir("./211" [pid 6367] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6366] munmap(0x7f0356e00000, 138412032) = 0 [pid 6367] <... mmap resumed>) = 0x7f0356e00000 [ 204.042926][ T6369] loop4: detected capacity change from 0 to 1024 [pid 6366] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6371] <... chdir resumed>) = 0 [pid 6367] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6366] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6371] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6366] close(5 [pid 6371] setpgid(0, 0 [pid 6366] <... close resumed>) = 0 [pid 6371] <... setpgid resumed>) = 0 [pid 6369] <... mount resumed>) = 0 [pid 6368] <... close resumed>) = 0 [pid 6369] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6368] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6371] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6370] <... write resumed>) = 524288 [pid 6369] <... openat resumed>) = 3 [pid 6371] <... openat resumed>) = 3 [pid 6370] munmap(0x7f0356e00000, 138412032 [pid 6369] chdir("./bus") = 0 [pid 6369] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6368] <... open resumed>) = 5 [pid 6371] write(3, "1000", 4 [pid 6370] <... munmap resumed>) = 0 [pid 6369] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6371] <... write resumed>) = 4 [pid 6369] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6371] close(3 [pid 6366] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6371] <... close resumed>) = 0 [pid 6370] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6368] ftruncate(5, 0 [pid 6371] symlink("/dev/binderfs", "./binderfs" [pid 6369] <... symlink resumed>) = 0 [pid 6368] <... ftruncate resumed>) = 0 [pid 6370] <... openat resumed>) = 4 [pid 6371] <... symlink resumed>) = 0 [pid 6370] ioctl(4, LOOP_SET_FD, 3 [pid 6369] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6368] exit_group(0) = ? [pid 6368] +++ exited with 0 +++ [pid 6369] <... creat resumed>) = 4 [pid 6366] <... open resumed>) = 5 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6368, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6369] rename("./bus", "./file2" [pid 6366] ftruncate(5, 0) = 0 [pid 6367] <... write resumed>) = 524288 [pid 6367] munmap(0x7f0356e00000, 138412032 [pid 6371] memfd_create("syzkaller", 0 [pid 6369] <... rename resumed>) = -1 EEXIST (File exists) [pid 6367] <... munmap resumed>) = 0 [pid 5073] umount2("./211", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6369] memfd_create("syzkaller", 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6369] <... memfd_create resumed>) = 5 [pid 6366] exit_group(0 [pid 6369] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6366] <... exit_group resumed>) = ? [pid 6369] <... mmap resumed>) = 0x7f0356e00000 [pid 6367] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6366] +++ exited with 0 +++ [pid 5073] openat(AT_FDCWD, "./211", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6371] <... memfd_create resumed>) = 3 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6366, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5073] <... openat resumed>) = 3 [pid 5073] newfstatat(3, "", [pid 6367] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6371] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6367] close(5 [pid 5076] umount2("./214", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] getdents64(3, [pid 6371] <... mmap resumed>) = 0x7f0356e00000 [pid 6367] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] openat(AT_FDCWD, "./214", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6369] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... openat resumed>) = 3 [pid 5076] newfstatat(3, "", [pid 6367] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6371] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6370] <... ioctl resumed>) = 0 [pid 6369] <... write resumed>) = 524288 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] umount2("./211/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6370] close(3 [pid 6369] munmap(0x7f0356e00000, 138412032 [pid 5076] getdents64(3, [pid 6369] <... munmap resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6370] <... close resumed>) = 0 [pid 6370] close(4 [pid 5076] umount2("./214/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6370] <... close resumed>) = 0 [ 204.139857][ T6370] loop5: detected capacity change from 0 to 1024 [pid 6370] mkdir("./bus", 0777) = 0 [pid 6369] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6369] close(5 [pid 6367] <... open resumed>) = 5 [pid 6367] ftruncate(5, 0 [pid 6370] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6367] <... ftruncate resumed>) = 0 [pid 6367] exit_group(0) = ? [pid 6367] +++ exited with 0 +++ [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6367, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6370] <... mount resumed>) = 0 [pid 6369] <... close resumed>) = 0 [pid 5074] umount2("./210", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = 0 [pid 6370] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./210", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6370] <... openat resumed>) = 3 [pid 5074] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6370] chdir("./bus" [pid 5074] getdents64(3, [pid 6370] <... chdir resumed>) = 0 [pid 6370] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6370] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5074] umount2("./210/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6371] <... write resumed>) = 524288 [pid 5076] <... umount2 resumed>) = 0 [pid 6369] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 6370] <... symlink resumed>) = 0 [pid 5076] umount2("./214/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6369] ftruncate(5, 0) = 0 [pid 6369] exit_group(0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6369] <... exit_group resumed>) = ? [pid 6371] munmap(0x7f0356e00000, 138412032 [pid 6369] +++ exited with 0 +++ [pid 5076] newfstatat(AT_FDCWD, "./214/bus", [pid 5073] umount2("./211/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6370] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./214/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] newfstatat(AT_FDCWD, "./211/bus", [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6371] <... munmap resumed>) = 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6369, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5076] openat(AT_FDCWD, "./214/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] umount2("./213", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... openat resumed>) = 4 [pid 5073] umount2("./211/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(4, "", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./213", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] openat(AT_FDCWD, "./211/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6370] <... creat resumed>) = 4 [pid 5077] <... openat resumed>) = 3 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5073] <... openat resumed>) = 4 [pid 5077] newfstatat(3, "", [pid 5076] getdents64(4, [pid 5073] newfstatat(4, "", [pid 6371] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6370] rename("./bus", "./file2" [pid 5077] getdents64(3, [pid 5074] umount2("./210/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6371] <... openat resumed>) = 4 [pid 6370] <... rename resumed>) = -1 EEXIST (File exists) [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6371] ioctl(4, LOOP_SET_FD, 3 [pid 6370] memfd_create("syzkaller", 0 [pid 5077] umount2("./213/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] getdents64(4, [pid 5074] newfstatat(AT_FDCWD, "./210/bus", [pid 5073] getdents64(4, [pid 6370] <... memfd_create resumed>) = 5 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6370] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] umount2("./210/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6370] <... mmap resumed>) = 0x7f0356e00000 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./210/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5074] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6370] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] getdents64(4, [pid 6370] <... write resumed>) = 524288 [pid 5074] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] close(4) = 0 [pid 5076] close(4 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] rmdir("./210/bus" [pid 5073] close(4 [pid 5076] <... close resumed>) = 0 [pid 5076] rmdir("./214/bus" [pid 5073] <... close resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] rmdir("./211/bus" [pid 5074] umount2("./210/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./210/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5076] umount2("./214/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./211/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./214/binderfs", [pid 5073] newfstatat(AT_FDCWD, "./211/binderfs", [pid 6371] <... ioctl resumed>) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./210/binderfs" [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6371] close(3 [pid 5076] unlink("./214/binderfs" [pid 6371] <... close resumed>) = 0 [pid 5073] unlink("./211/binderfs" [pid 6371] close(4 [pid 5077] umount2("./213/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... unlink resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 6371] <... close resumed>) = 0 [pid 5076] getdents64(3, [pid 5073] getdents64(3, [pid 6371] mkdir("./bus", 0777 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6371] <... mkdir resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] getdents64(3, [ 204.263201][ T6371] loop2: detected capacity change from 0 to 1024 [pid 5073] close(3 [pid 6371] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6370] munmap(0x7f0356e00000, 138412032 [pid 5077] newfstatat(AT_FDCWD, "./213/bus", [pid 5076] close(3 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] <... close resumed>) = 0 [pid 6370] <... munmap resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... close resumed>) = 0 [pid 5074] close(3 [pid 5073] rmdir("./211" [pid 5077] umount2("./213/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... close resumed>) = 0 [pid 6370] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] rmdir("./210" [pid 5073] <... rmdir resumed>) = 0 [pid 6370] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] openat(AT_FDCWD, "./213/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] rmdir("./214" [pid 5074] <... rmdir resumed>) = 0 [pid 5073] mkdir("./212", 0777 [pid 6370] close(5 [pid 5077] <... openat resumed>) = 4 [pid 5074] mkdir("./211", 0777 [pid 5077] newfstatat(4, "", [pid 5076] <... rmdir resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 6371] <... mount resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] mkdir("./215", 0777 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] <... mkdir resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5073] <... openat resumed>) = 3 [pid 6371] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6371] <... openat resumed>) = 3 [pid 6370] <... close resumed>) = 0 [pid 5077] getdents64(4, [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] <... openat resumed>) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5077] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] close(4) = 0 [pid 5077] rmdir("./213/bus" [pid 6371] chdir("./bus" [pid 5077] <... rmdir resumed>) = 0 [pid 5077] umount2("./213/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6371] <... chdir resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6370] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] newfstatat(AT_FDCWD, "./213/binderfs", [pid 6371] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] unlink("./213/binderfs") = 0 [pid 6371] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] close(3) = 0 [pid 5077] rmdir("./213" [pid 6371] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6370] <... open resumed>) = 5 [pid 5077] <... rmdir resumed>) = 0 [pid 6371] <... symlink resumed>) = 0 [pid 6371] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5077] mkdir("./214", 0777 [pid 6370] ftruncate(5, 0 [pid 5077] <... mkdir resumed>) = 0 [pid 6370] <... ftruncate resumed>) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6370] exit_group(0 [pid 5077] <... openat resumed>) = 3 [pid 6370] <... exit_group resumed>) = ? [pid 5077] ioctl(3, LOOP_CLR_FD [pid 6370] +++ exited with 0 +++ [pid 5077] <... ioctl resumed>) = 0 [pid 5077] close(3 [pid 6371] <... creat resumed>) = 4 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6370, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6371] rename("./bus", "./file2" [pid 5077] <... close resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556e32a650) = 6372 ./strace-static-x86_64: Process 6372 attached [pid 6371] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] umount2("./214", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6372] set_robust_list(0x55556e32a660, 24) = 0 [pid 6372] chdir("./214") = 0 [pid 6372] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6371] memfd_create("syzkaller", 0 [pid 5078] openat(AT_FDCWD, "./214", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... ioctl resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 6371] <... memfd_create resumed>) = 5 [pid 5078] <... openat resumed>) = 3 [pid 5073] close(3 [pid 6371] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... close resumed>) = 0 [pid 6371] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] close(3 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... close resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6372] <... prctl resumed>) = 0 [pid 6372] setpgid(0, 0 [pid 5074] close(3./strace-static-x86_64: Process 6373 attached [pid 6372] <... setpgid resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 6373] set_robust_list(0x55556e32a660, 24 [pid 6372] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5078] newfstatat(3, "", [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6373] <... set_robust_list resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6373 [pid 6373] chdir("./215" [pid 5078] getdents64(3, [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6374 [pid 6372] <... openat resumed>) = 3 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 ./strace-static-x86_64: Process 6375 attached [pid 5078] umount2("./214/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6374 attached [pid 6375] set_robust_list(0x55556e32a660, 24 [pid 6373] <... chdir resumed>) = 0 [pid 6372] write(3, "1000", 4 [pid 6371] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6375 [pid 6374] set_robust_list(0x55556e32a660, 24 [pid 6375] <... set_robust_list resumed>) = 0 [pid 6373] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6375] chdir("./211" [pid 6374] <... set_robust_list resumed>) = 0 [pid 6373] <... prctl resumed>) = 0 [pid 6374] chdir("./212" [pid 6373] setpgid(0, 0 [pid 6372] <... write resumed>) = 4 [pid 6374] <... chdir resumed>) = 0 [pid 6373] <... setpgid resumed>) = 0 [pid 6372] close(3 [pid 6375] <... chdir resumed>) = 0 [pid 6373] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6372] <... close resumed>) = 0 [pid 6375] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6373] <... openat resumed>) = 3 [pid 6372] symlink("/dev/binderfs", "./binderfs" [pid 6374] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6375] <... prctl resumed>) = 0 [pid 6372] <... symlink resumed>) = 0 [pid 6374] <... prctl resumed>) = 0 [pid 6375] setpgid(0, 0 [pid 6372] memfd_create("syzkaller", 0 [pid 6375] <... setpgid resumed>) = 0 [pid 6374] setpgid(0, 0 [pid 6375] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6373] write(3, "1000", 4 [pid 6372] <... memfd_create resumed>) = 3 [pid 6372] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6373] <... write resumed>) = 4 [pid 6372] <... mmap resumed>) = 0x7f0356e00000 [pid 6374] <... setpgid resumed>) = 0 [pid 6375] <... openat resumed>) = 3 [pid 6373] close(3 [pid 6372] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6374] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6375] write(3, "1000", 4 [pid 6373] <... close resumed>) = 0 [pid 5078] <... umount2 resumed>) = 0 [pid 6375] <... write resumed>) = 4 [pid 5078] umount2("./214/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6373] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6373] memfd_create("syzkaller", 0 [pid 6371] <... write resumed>) = 524288 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6375] close(3 [pid 6371] munmap(0x7f0356e00000, 138412032 [pid 6375] <... close resumed>) = 0 [pid 6374] <... openat resumed>) = 3 [pid 6375] symlink("/dev/binderfs", "./binderfs" [pid 6371] <... munmap resumed>) = 0 [pid 5078] newfstatat(AT_FDCWD, "./214/bus", [pid 6374] write(3, "1000", 4 [pid 6375] <... symlink resumed>) = 0 [pid 6372] <... write resumed>) = 524288 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] umount2("./214/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6373] <... memfd_create resumed>) = 3 [pid 6371] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6375] memfd_create("syzkaller", 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6374] <... write resumed>) = 4 [pid 6374] close(3 [pid 6375] <... memfd_create resumed>) = 3 [pid 6373] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6371] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] openat(AT_FDCWD, "./214/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6373] <... mmap resumed>) = 0x7f0356e00000 [pid 6371] close(5 [pid 5078] <... openat resumed>) = 4 [pid 6374] <... close resumed>) = 0 [pid 6374] symlink("/dev/binderfs", "./binderfs" [pid 6375] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6373] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6371] <... close resumed>) = 0 [pid 5078] newfstatat(4, "", [pid 6374] <... symlink resumed>) = 0 [pid 6375] <... mmap resumed>) = 0x7f0356e00000 [pid 6373] <... write resumed>) = 524288 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6371] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] getdents64(4, [pid 6372] munmap(0x7f0356e00000, 138412032 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6372] <... munmap resumed>) = 0 [pid 5078] getdents64(4, [pid 6372] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6372] <... openat resumed>) = 4 [pid 6372] ioctl(4, LOOP_SET_FD, 3 [pid 6371] <... open resumed>) = 5 [pid 5078] close(4 [pid 6374] memfd_create("syzkaller", 0 [pid 6375] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6372] <... ioctl resumed>) = 0 [pid 6371] ftruncate(5, 0 [pid 5078] <... close resumed>) = 0 [pid 5078] rmdir("./214/bus" [pid 6374] <... memfd_create resumed>) = 3 [pid 6375] <... write resumed>) = 524288 [pid 6371] <... ftruncate resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 6373] munmap(0x7f0356e00000, 138412032 [pid 6371] exit_group(0 [pid 6373] <... munmap resumed>) = 0 [pid 6371] <... exit_group resumed>) = ? [pid 6373] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6371] +++ exited with 0 +++ [pid 6373] <... openat resumed>) = 4 [pid 6373] ioctl(4, LOOP_SET_FD, 3 [pid 6374] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6375] munmap(0x7f0356e00000, 138412032 [pid 5078] umount2("./214/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6371, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6374] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 6372] close(3) = 0 [pid 6372] close(4) = 0 [pid 6372] mkdir("./bus", 0777 [pid 6375] <... munmap resumed>) = 0 [pid 6372] <... mkdir resumed>) = 0 [pid 5078] newfstatat(AT_FDCWD, "./214/binderfs", [pid 5075] <... restart_syscall resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] unlink("./214/binderfs" [pid 5075] umount2("./211", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6372] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5078] <... unlink resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./211", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6374] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6375] openat(AT_FDCWD, "/dev/loop1", O_RDWR [ 204.508337][ T6372] loop4: detected capacity change from 0 to 1024 [ 204.532762][ T6373] loop3: detected capacity change from 0 to 1024 [pid 5078] getdents64(3, [pid 5075] <... openat resumed>) = 3 [pid 6375] <... openat resumed>) = 4 [pid 6373] <... ioctl resumed>) = 0 [pid 6372] <... mount resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] newfstatat(3, "", [pid 6375] ioctl(4, LOOP_SET_FD, 3 [pid 6372] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] close(3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6372] <... openat resumed>) = 3 [pid 6372] chdir("./bus") = 0 [pid 6372] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5075] getdents64(3, [pid 5078] <... close resumed>) = 0 [pid 6373] close(3 [pid 6372] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] rmdir("./214" [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6373] <... close resumed>) = 0 [pid 6372] <... symlink resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5075] umount2("./211/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] mkdir("./215", 0777 [pid 6373] close(4) = 0 [pid 6373] mkdir("./bus", 0777 [pid 6372] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6373] <... mkdir resumed>) = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 6372] <... creat resumed>) = 4 [pid 6374] <... write resumed>) = 524288 [pid 6372] rename("./bus", "./file2") = -1 EEXIST (File exists) [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6373] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6374] munmap(0x7f0356e00000, 138412032 [pid 6375] <... ioctl resumed>) = 0 [pid 6372] memfd_create("syzkaller", 0 [pid 5078] <... openat resumed>) = 3 [pid 5075] umount2("./211/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6374] <... munmap resumed>) = 0 [pid 6375] close(3 [pid 6373] <... mount resumed>) = 0 [pid 6372] <... memfd_create resumed>) = 5 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 6375] <... close resumed>) = 0 [pid 6375] close(4 [pid 6373] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 204.557471][ T6375] loop1: detected capacity change from 0 to 1024 [pid 5075] newfstatat(AT_FDCWD, "./211/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./211/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6375] <... close resumed>) = 0 [pid 6373] <... openat resumed>) = 3 [pid 5075] openat(AT_FDCWD, "./211/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6375] mkdir("./bus", 0777 [pid 6373] chdir("./bus" [pid 6372] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... openat resumed>) = 4 [pid 6375] <... mkdir resumed>) = 0 [pid 6373] <... chdir resumed>) = 0 [pid 6372] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] newfstatat(4, "", [pid 6374] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6375] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6373] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6373] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] getdents64(4, [pid 6373] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6374] <... openat resumed>) = 4 [pid 6373] <... symlink resumed>) = 0 [pid 6372] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6374] ioctl(4, LOOP_SET_FD, 3 [pid 6375] <... mount resumed>) = 0 [pid 6373] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6372] <... write resumed>) = 524288 [pid 5075] getdents64(4, [pid 6375] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] close(4) = 0 [pid 5075] rmdir("./211/bus") = 0 [pid 5075] umount2("./211/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./211/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./211/binderfs") = 0 [pid 5075] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 5075] rmdir("./211" [pid 6374] <... ioctl resumed>) = 0 [pid 6375] <... openat resumed>) = 3 [pid 5075] <... rmdir resumed>) = 0 [pid 6375] chdir("./bus" [pid 5075] mkdir("./212", 0777 [pid 6374] close(3 [pid 6375] <... chdir resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 6374] <... close resumed>) = 0 [pid 6375] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6372] munmap(0x7f0356e00000, 138412032 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6374] close(4 [pid 6375] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6374] <... close resumed>) = 0 [pid 6375] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6374] mkdir("./bus", 0777 [pid 6372] <... munmap resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 6374] <... mkdir resumed>) = 0 [pid 6375] <... symlink resumed>) = 0 [pid 6375] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6374] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6373] <... creat resumed>) = 4 [pid 6372] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6372] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6373] rename("./bus", "./file2" [pid 6372] close(5) = 0 [pid 6374] <... mount resumed>) = 0 [pid 6375] <... creat resumed>) = 4 [pid 6373] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] <... ioctl resumed>) = 0 [pid 6373] memfd_create("syzkaller", 0 [pid 6372] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6374] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6375] rename("./bus", "./file2" [pid 6373] <... memfd_create resumed>) = 5 [pid 6374] <... openat resumed>) = 3 [pid 6373] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [ 204.616869][ T6374] loop0: detected capacity change from 0 to 1024 [pid 6374] chdir("./bus" [pid 6375] <... rename resumed>) = -1 EEXIST (File exists) [pid 6374] <... chdir resumed>) = 0 [pid 6375] memfd_create("syzkaller", 0 [pid 6373] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6372] <... open resumed>) = 5 [pid 5078] close(3 [pid 5075] <... ioctl resumed>) = 0 [pid 6374] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6375] <... memfd_create resumed>) = 5 [pid 6372] ftruncate(5, 0 [pid 6375] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6374] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6375] <... mmap resumed>) = 0x7f0356e00000 [pid 6374] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6375] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6372] <... ftruncate resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6372] exit_group(0 [pid 5075] close(3 [pid 6372] <... exit_group resumed>) = ? [pid 5075] <... close resumed>) = 0 [pid 6372] +++ exited with 0 +++ [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6374] <... symlink resumed>) = 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6372, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- ./strace-static-x86_64: Process 6377 attached ./strace-static-x86_64: Process 6376 attached [pid 6374] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6373] <... write resumed>) = 524288 [pid 5077] umount2("./214", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6377 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6376 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./214", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6377] set_robust_list(0x55556e32a660, 24 [pid 5077] newfstatat(3, "", [pid 6377] <... set_robust_list resumed>) = 0 [pid 6373] munmap(0x7f0356e00000, 138412032 [pid 6377] chdir("./212" [pid 6373] <... munmap resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6377] <... chdir resumed>) = 0 [pid 5077] getdents64(3, [pid 6376] set_robust_list(0x55556e32a660, 24 [pid 6377] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6374] <... creat resumed>) = 4 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6377] <... prctl resumed>) = 0 [pid 6373] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5077] umount2("./214/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6376] <... set_robust_list resumed>) = 0 [pid 6377] setpgid(0, 0 [pid 6374] rename("./bus", "./file2" [pid 6373] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6377] <... setpgid resumed>) = 0 [pid 6373] close(5 [pid 6376] chdir("./215" [pid 6377] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6374] <... rename resumed>) = -1 EEXIST (File exists) [pid 6373] <... close resumed>) = 0 [pid 6377] <... openat resumed>) = 3 [pid 6376] <... chdir resumed>) = 0 [pid 6377] write(3, "1000", 4 [pid 6374] memfd_create("syzkaller", 0 [pid 6376] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6377] <... write resumed>) = 4 [pid 6374] <... memfd_create resumed>) = 5 [pid 6377] close(3 [pid 6374] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6376] <... prctl resumed>) = 0 [pid 6377] <... close resumed>) = 0 [pid 6374] <... mmap resumed>) = 0x7f0356e00000 [pid 6376] setpgid(0, 0 [pid 6377] symlink("/dev/binderfs", "./binderfs" [pid 6374] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6375] <... write resumed>) = 524288 [pid 6376] <... setpgid resumed>) = 0 [pid 6377] <... symlink resumed>) = 0 [pid 6377] memfd_create("syzkaller", 0) = 3 [pid 6376] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6377] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6373] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6376] <... openat resumed>) = 3 [pid 6377] <... mmap resumed>) = 0x7f0356e00000 [pid 6375] munmap(0x7f0356e00000, 138412032 [pid 6373] <... open resumed>) = 5 [pid 5077] <... umount2 resumed>) = 0 [pid 6376] write(3, "1000", 4 [pid 6377] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] umount2("./214/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6376] <... write resumed>) = 4 [pid 6376] close(3 [pid 6374] <... write resumed>) = 524288 [pid 6375] <... munmap resumed>) = 0 [pid 6373] ftruncate(5, 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6376] <... close resumed>) = 0 [pid 6375] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6373] <... ftruncate resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./214/bus", [pid 6375] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6376] symlink("/dev/binderfs", "./binderfs" [pid 6375] close(5 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6376] <... symlink resumed>) = 0 [pid 6375] <... close resumed>) = 0 [pid 6373] exit_group(0 [pid 5077] umount2("./214/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6373] <... exit_group resumed>) = ? [pid 6376] memfd_create("syzkaller", 0 [pid 6373] +++ exited with 0 +++ [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6373, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5077] openat(AT_FDCWD, "./214/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6376] <... memfd_create resumed>) = 3 [pid 6376] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] <... openat resumed>) = 4 [pid 6376] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] newfstatat(4, "", [pid 5076] umount2("./215", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6374] munmap(0x7f0356e00000, 138412032 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6377] <... write resumed>) = 524288 [pid 6374] <... munmap resumed>) = 0 [pid 5077] getdents64(4, [pid 5076] openat(AT_FDCWD, "./215", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6376] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6377] munmap(0x7f0356e00000, 138412032 [pid 6374] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6375] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6377] <... munmap resumed>) = 0 [pid 6374] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] getdents64(4, [pid 5076] <... openat resumed>) = 3 [pid 6374] close(5 [pid 5076] newfstatat(3, "", [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6374] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] close(4 [pid 6377] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5077] <... close resumed>) = 0 [pid 5076] getdents64(3, [pid 6377] <... openat resumed>) = 4 [pid 5077] rmdir("./214/bus" [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6377] ioctl(4, LOOP_SET_FD, 3 [pid 5076] umount2("./215/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... rmdir resumed>) = 0 [pid 5077] umount2("./214/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6374] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] newfstatat(AT_FDCWD, "./214/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] unlink("./214/binderfs") = 0 [pid 5077] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] close(3) = 0 [pid 6376] <... write resumed>) = 524288 [pid 5077] rmdir("./214" [pid 6375] <... open resumed>) = 5 [pid 5077] <... rmdir resumed>) = 0 [pid 5077] mkdir("./215", 0777 [pid 6376] munmap(0x7f0356e00000, 138412032 [pid 6375] ftruncate(5, 0 [pid 5077] <... mkdir resumed>) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 6376] <... munmap resumed>) = 0 [pid 6376] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6375] <... ftruncate resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 6376] <... openat resumed>) = 4 [pid 6375] exit_group(0 [pid 6374] <... open resumed>) = 5 [pid 6375] <... exit_group resumed>) = ? [pid 6377] <... ioctl resumed>) = 0 [pid 6374] ftruncate(5, 0 [pid 6377] close(3 [pid 6374] <... ftruncate resumed>) = 0 [pid 6377] <... close resumed>) = 0 [pid 6374] exit_group(0 [pid 6377] close(4 [pid 6374] <... exit_group resumed>) = ? [ 204.794160][ T6377] loop2: detected capacity change from 0 to 1024 [pid 6377] <... close resumed>) = 0 [pid 6374] +++ exited with 0 +++ [pid 6375] +++ exited with 0 +++ [pid 6376] ioctl(4, LOOP_SET_FD, 3 [pid 5076] umount2("./215/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6377] mkdir("./bus", 0777 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6377] <... mkdir resumed>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6375, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5074] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 6377] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5074] umount2("./211", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./211", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, [pid 5076] newfstatat(AT_FDCWD, "./215/bus", [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6374, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./211/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./212", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./215/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./215/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] openat(AT_FDCWD, "./212", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... openat resumed>) = 4 [pid 5073] <... openat resumed>) = 3 [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] newfstatat(3, "", [pid 5076] getdents64(4, [pid 6376] <... ioctl resumed>) = 0 [pid 6377] <... mount resumed>) = 0 [pid 5077] <... ioctl resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] <... umount2 resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6376] close(3 [pid 5076] getdents64(4, [pid 5073] getdents64(3, [pid 6376] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6376] close(4 [pid 5076] close(4 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6376] <... close resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5074] umount2("./211/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6376] mkdir("./bus", 0777 [pid 5076] rmdir("./215/bus" [pid 5073] umount2("./212/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6377] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6376] <... mkdir resumed>) = 0 [pid 6377] <... openat resumed>) = 3 [pid 5074] newfstatat(AT_FDCWD, "./211/bus", [pid 6377] chdir("./bus" [pid 6376] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6377] <... chdir resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6377] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5077] close(3 [pid 6377] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... close resumed>) = 0 [pid 5076] umount2("./215/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./211/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6377] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6376] <... mount resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6376] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5076] newfstatat(AT_FDCWD, "./215/binderfs", [pid 6377] <... symlink resumed>) = 0 [pid 6376] <... openat resumed>) = 3 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6378 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] openat(AT_FDCWD, "./211/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6376] chdir("./bus" [pid 5076] unlink("./215/binderfs" [pid 5074] <... openat resumed>) = 4 [pid 6377] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5074] newfstatat(4, "", ./strace-static-x86_64: Process 6378 attached [pid 6376] <... chdir resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6378] set_robust_list(0x55556e32a660, 24 [pid 5076] getdents64(3, [pid 5074] getdents64(4, [pid 6378] <... set_robust_list resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6378] chdir("./215" [pid 6376] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] getdents64(4, [pid 6378] <... chdir resumed>) = 0 [pid 6376] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] close(3 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [ 204.844068][ T6376] loop5: detected capacity change from 0 to 1024 [pid 5073] <... umount2 resumed>) = 0 [pid 6378] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6376] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6377] <... creat resumed>) = 4 [pid 5076] <... close resumed>) = 0 [pid 5074] close(4 [pid 5073] umount2("./212/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6378] <... prctl resumed>) = 0 [pid 6377] rename("./bus", "./file2" [pid 5074] <... close resumed>) = 0 [pid 5076] rmdir("./215" [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6378] setpgid(0, 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] rmdir("./211/bus" [pid 5073] newfstatat(AT_FDCWD, "./212/bus", [pid 6378] <... setpgid resumed>) = 0 [pid 6378] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6376] <... symlink resumed>) = 0 [pid 5076] mkdir("./216", 0777 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6376] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6378] <... openat resumed>) = 3 [pid 5076] <... mkdir resumed>) = 0 [pid 5074] umount2("./211/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./212/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6378] write(3, "1000", 4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6378] <... write resumed>) = 4 [pid 5074] newfstatat(AT_FDCWD, "./211/binderfs", [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6378] close(3 [pid 5074] unlink("./211/binderfs" [pid 5073] openat(AT_FDCWD, "./212/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6378] <... close resumed>) = 0 [pid 6376] <... creat resumed>) = 4 [pid 6377] <... rename resumed>) = -1 EEXIST (File exists) [pid 5076] <... openat resumed>) = 3 [pid 5074] <... unlink resumed>) = 0 [pid 5073] <... openat resumed>) = 4 [pid 5073] newfstatat(4, "", [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6376] rename("./bus", "./file2" [pid 5073] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] close(4 [pid 5074] close(3 [pid 5073] <... close resumed>) = 0 [pid 6377] memfd_create("syzkaller", 0 [pid 5074] <... close resumed>) = 0 [pid 5073] rmdir("./212/bus" [pid 6376] <... rename resumed>) = -1 EEXIST (File exists) [pid 6377] <... memfd_create resumed>) = 5 [pid 5074] rmdir("./211" [pid 6376] memfd_create("syzkaller", 0 [pid 6377] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 6378] symlink("/dev/binderfs", "./binderfs" [pid 6377] <... mmap resumed>) = 0x7f0356e00000 [pid 5074] mkdir("./212", 0777 [pid 5073] umount2("./212/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6378] <... symlink resumed>) = 0 [pid 6376] <... memfd_create resumed>) = 5 [pid 5074] <... mkdir resumed>) = 0 [pid 6378] memfd_create("syzkaller", 0 [pid 6376] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... openat resumed>) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD) = 0 [pid 5074] close(3) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6379 attached [pid 6378] <... memfd_create resumed>) = 3 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6379 [pid 6379] set_robust_list(0x55556e32a660, 24 [pid 6378] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6378] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6376] <... mmap resumed>) = 0x7f0356e00000 [pid 5073] newfstatat(AT_FDCWD, "./212/binderfs", [pid 6379] <... set_robust_list resumed>) = 0 [pid 6379] chdir("./212") = 0 [pid 6379] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6379] setpgid(0, 0) = 0 [pid 6379] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6376] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6377] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6378] <... write resumed>) = 524288 [pid 6377] <... write resumed>) = 524288 [pid 5073] unlink("./212/binderfs" [pid 6379] write(3, "1000", 4) = 4 [pid 6379] close(3) = 0 [pid 6379] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6379] memfd_create("syzkaller", 0 [pid 5073] <... unlink resumed>) = 0 [pid 6379] <... memfd_create resumed>) = 3 [pid 6379] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6379] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... ioctl resumed>) = 0 [pid 5073] getdents64(3, [pid 6378] munmap(0x7f0356e00000, 138412032 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6378] <... munmap resumed>) = 0 [pid 5073] close(3) = 0 [pid 6378] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6376] <... write resumed>) = 524288 [pid 5073] rmdir("./212" [pid 6378] <... openat resumed>) = 4 [pid 6378] ioctl(4, LOOP_SET_FD, 3 [pid 6376] munmap(0x7f0356e00000, 138412032 [pid 6377] munmap(0x7f0356e00000, 138412032 [pid 5076] close(3 [pid 5073] <... rmdir resumed>) = 0 [pid 6379] <... write resumed>) = 524288 [pid 6376] <... munmap resumed>) = 0 [pid 6377] <... munmap resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5073] mkdir("./213", 0777 [pid 6376] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6377] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... mkdir resumed>) = 0 [pid 6377] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 6378] <... ioctl resumed>) = 0 [pid 6376] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6377] close(5 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6378] close(3 [pid 6377] <... close resumed>) = 0 [pid 6376] close(5 [pid 6379] munmap(0x7f0356e00000, 138412032 [pid 6378] <... close resumed>) = 0 [pid 6376] <... close resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6380 ./strace-static-x86_64: Process 6380 attached [pid 6379] <... munmap resumed>) = 0 [pid 6377] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6380] set_robust_list(0x55556e32a660, 24 [pid 6379] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6379] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 6380] <... set_robust_list resumed>) = 0 [pid 6379] ioctl(4, LOOP_CLR_FD) = 0 [pid 6378] close(4 [pid 6380] chdir("./216" [pid 6378] <... close resumed>) = 0 [pid 6378] mkdir("./bus", 0777) = 0 [pid 6380] <... chdir resumed>) = 0 [pid 6378] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6380] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6376] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6377] <... open resumed>) = 5 [ 204.992952][ T6378] loop4: detected capacity change from 0 to 1024 [pid 6380] setpgid(0, 0) = 0 [pid 6379] ioctl(4, LOOP_SET_FD, 3 [pid 6377] ftruncate(5, 0 [pid 6380] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6379] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 6378] <... mount resumed>) = 0 [pid 6379] close(4 [pid 6378] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6377] <... ftruncate resumed>) = 0 [pid 6380] <... openat resumed>) = 3 [pid 6376] <... open resumed>) = 5 [pid 6377] exit_group(0 [pid 6376] ftruncate(5, 0 [pid 6378] <... openat resumed>) = 3 [pid 6378] chdir("./bus") = 0 [pid 6378] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6378] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6379] <... close resumed>) = 0 [pid 6378] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6376] <... ftruncate resumed>) = 0 [pid 6377] <... exit_group resumed>) = ? [pid 6380] write(3, "1000", 4 [pid 6376] exit_group(0 [pid 6377] +++ exited with 0 +++ [pid 6380] <... write resumed>) = 4 [pid 6376] <... exit_group resumed>) = ? [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6377, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5075] umount2("./212", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6379] close(3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./212", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6380] close(3 [pid 6376] +++ exited with 0 +++ [pid 5075] <... openat resumed>) = 3 [pid 6380] <... close resumed>) = 0 [pid 6379] <... close resumed>) = 0 [pid 6378] <... creat resumed>) = 4 [pid 5073] <... ioctl resumed>) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6376, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] newfstatat(3, "", [pid 5073] close(3 [pid 6378] rename("./bus", "./file2" [pid 5078] umount2("./215", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(3, [pid 5078] openat(AT_FDCWD, "./215", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] <... close resumed>) = 0 [pid 6380] symlink("/dev/binderfs", "./binderfs" [pid 5078] <... openat resumed>) = 3 [pid 5075] umount2("./212/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6380] <... symlink resumed>) = 0 [pid 6378] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] getdents64(3, [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6380] memfd_create("syzkaller", 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6379] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6378] memfd_create("syzkaller", 0 [pid 5078] umount2("./215/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6381 attached [pid 6380] <... memfd_create resumed>) = 3 [pid 6379] <... symlink resumed>) = 0 [pid 6378] <... memfd_create resumed>) = 5 [pid 6381] set_robust_list(0x55556e32a660, 24 [pid 6380] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6379] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6378] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6381 [pid 6381] <... set_robust_list resumed>) = 0 [pid 6378] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] umount2("./212/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6378] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6379] <... creat resumed>) = 3 [pid 5075] newfstatat(AT_FDCWD, "./212/bus", [pid 6381] chdir("./213" [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6380] <... mmap resumed>) = 0x7f0356e00000 [pid 6379] rename("./bus", "./file2" [pid 5075] umount2("./212/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6381] <... chdir resumed>) = 0 [pid 6380] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6379] <... rename resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6381] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5078] <... umount2 resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./212/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6381] <... prctl resumed>) = 0 [pid 6381] setpgid(0, 0 [pid 6380] <... write resumed>) = 524288 [pid 5075] <... openat resumed>) = 4 [pid 6381] <... setpgid resumed>) = 0 [pid 6381] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] newfstatat(4, "", [pid 6381] <... openat resumed>) = 3 [pid 6378] <... write resumed>) = 524288 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6379] memfd_create("syzkaller", 0 [pid 5075] getdents64(4, [pid 6381] write(3, "1000", 4 [pid 6379] <... memfd_create resumed>) = 4 [pid 5078] umount2("./215/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6381] <... write resumed>) = 4 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(4, [pid 6381] close(3) = 0 [pid 6380] munmap(0x7f0356e00000, 138412032 [pid 6379] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] newfstatat(AT_FDCWD, "./215/bus", [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6381] symlink("/dev/binderfs", "./binderfs" [pid 6379] <... mmap resumed>) = 0x7f0356e00000 [pid 6381] <... symlink resumed>) = 0 [pid 6380] <... munmap resumed>) = 0 [pid 6379] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] close(4 [pid 6381] memfd_create("syzkaller", 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... close resumed>) = 0 [pid 5078] umount2("./215/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] rmdir("./212/bus") = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./212/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] openat(AT_FDCWD, "./215/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./212/binderfs", [pid 5078] <... openat resumed>) = 4 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] newfstatat(4, "", [pid 5075] unlink("./212/binderfs" [pid 6380] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6381] <... memfd_create resumed>) = 3 [pid 5075] <... unlink resumed>) = 0 [pid 6381] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6380] <... openat resumed>) = 4 [pid 5075] getdents64(3, [pid 6381] <... mmap resumed>) = 0x7f0356e00000 [pid 6380] ioctl(4, LOOP_SET_FD, 3 [pid 6379] <... write resumed>) = 524288 [pid 6378] munmap(0x7f0356e00000, 138412032 [pid 5078] getdents64(4, [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 6378] <... munmap resumed>) = 0 [pid 5075] rmdir("./212") = 0 [pid 6381] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, [pid 5075] mkdir("./213", 0777 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5078] close(4) = 0 [pid 5078] rmdir("./215/bus" [pid 6378] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] <... rmdir resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 6378] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] umount2("./215/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6378] close(5 [pid 5078] newfstatat(AT_FDCWD, "./215/binderfs", [pid 5075] <... ioctl resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] close(3 [pid 6380] <... ioctl resumed>) = 0 [pid 5078] unlink("./215/binderfs" [pid 5075] <... close resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5078] close(3 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6382 [pid 5078] <... close resumed>) = 0 [pid 5078] rmdir("./215") = 0 [ 205.209313][ T6380] loop3: detected capacity change from 0 to 1024 ./strace-static-x86_64: Process 6382 attached [pid 6378] <... close resumed>) = 0 [pid 5078] mkdir("./216", 0777 [pid 6382] set_robust_list(0x55556e32a660, 24 [pid 6378] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] <... mkdir resumed>) = 0 [pid 6382] <... set_robust_list resumed>) = 0 [pid 6379] munmap(0x7f0356e00000, 138412032 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 6382] chdir("./213" [pid 6379] <... munmap resumed>) = 0 [pid 6382] <... chdir resumed>) = 0 [pid 6381] <... write resumed>) = 524288 [pid 6380] close(3 [pid 6378] <... open resumed>) = 5 [pid 6382] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6379] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5078] ioctl(3, LOOP_CLR_FD [pid 6382] <... prctl resumed>) = 0 [pid 6379] <... openat resumed>) = 5 [pid 5078] <... ioctl resumed>) = 0 [pid 6380] <... close resumed>) = 0 [pid 6382] setpgid(0, 0 [pid 6380] close(4 [pid 6379] ioctl(5, LOOP_SET_FD, 4 [pid 5078] close(3 [pid 6380] <... close resumed>) = 0 [pid 6382] <... setpgid resumed>) = 0 [pid 6381] munmap(0x7f0356e00000, 138412032 [pid 6380] mkdir("./bus", 0777 [pid 5078] <... close resumed>) = 0 [pid 6382] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6378] ftruncate(5, 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6380] <... mkdir resumed>) = 0 [pid 6381] <... munmap resumed>) = 0 [pid 6380] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6378] <... ftruncate resumed>) = 0 [pid 6378] exit_group(0 [pid 6382] <... openat resumed>) = 3 [pid 6378] <... exit_group resumed>) = ? [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6383 [pid 6382] write(3, "1000", 4 [pid 6378] +++ exited with 0 +++ [pid 6382] <... write resumed>) = 4 [pid 6382] close(3 [pid 6379] <... ioctl resumed>) = 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6378, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6382] <... close resumed>) = 0 [pid 6379] close(4 [pid 5077] umount2("./215", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6383 attached [pid 6382] symlink("/dev/binderfs", "./binderfs" [pid 6381] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6379] <... close resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6383] set_robust_list(0x55556e32a660, 24 [pid 6382] <... symlink resumed>) = 0 [pid 6379] close(5 [pid 5077] openat(AT_FDCWD, "./215", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6381] <... openat resumed>) = 4 [pid 6383] <... set_robust_list resumed>) = 0 [ 205.251666][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 205.251686][ T28] audit: type=1800 audit(1710613087.354:1287): pid=6378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 205.283904][ T6379] loop1: detected capacity change from 0 to 1024 [pid 6382] memfd_create("syzkaller", 0 [pid 6379] <... close resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 6381] ioctl(4, LOOP_SET_FD, 3 [pid 6383] chdir("./216" [pid 6382] <... memfd_create resumed>) = 3 [pid 6379] mkdir("./file1", 0777 [pid 5077] newfstatat(3, "", [pid 6383] <... chdir resumed>) = 0 [pid 6382] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6379] <... mkdir resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6383] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6382] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] getdents64(3, [pid 6383] <... prctl resumed>) = 0 [pid 6382] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6383] setpgid(0, 0 [pid 6379] mount("/dev/loop1", "./file1", "hfsplus", MS_NOATIME|MS_SILENT|MS_STRICTATIME, "" [pid 5077] umount2("./215/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6383] <... setpgid resumed>) = 0 [pid 6380] <... mount resumed>) = 0 [pid 6380] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6383] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6380] <... openat resumed>) = 3 [pid 6383] <... openat resumed>) = 3 [pid 6380] chdir("./bus") = 0 [pid 6380] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6383] write(3, "1000", 4 [pid 6381] <... ioctl resumed>) = 0 [pid 6380] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... umount2 resumed>) = 0 [pid 6383] <... write resumed>) = 4 [pid 6383] close(3) = 0 [pid 6383] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6381] close(3 [pid 6382] <... write resumed>) = 524288 [pid 6380] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6379] <... mount resumed>) = 0 [pid 6383] memfd_create("syzkaller", 0) = 3 [pid 6381] <... close resumed>) = 0 [pid 6383] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6383] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6381] close(4 [pid 6380] <... symlink resumed>) = 0 [pid 6379] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6382] munmap(0x7f0356e00000, 138412032 [pid 6381] <... close resumed>) = 0 [pid 6379] <... openat resumed>) = 4 [ 205.334976][ T6381] loop0: detected capacity change from 0 to 1024 [pid 5077] umount2("./215/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6382] <... munmap resumed>) = 0 [pid 6381] mkdir("./bus", 0777 [pid 6379] chdir("./file1" [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6382] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5077] newfstatat(AT_FDCWD, "./215/bus", [pid 6382] <... openat resumed>) = 4 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6382] ioctl(4, LOOP_SET_FD, 3 [pid 5077] umount2("./215/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6380] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6383] <... write resumed>) = 524288 [pid 6382] <... ioctl resumed>) = 0 [pid 6381] <... mkdir resumed>) = 0 [pid 6379] <... chdir resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./215/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6382] close(3 [pid 6381] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6379] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5077] <... openat resumed>) = 4 [pid 6382] <... close resumed>) = 0 [pid 6379] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] newfstatat(4, "", [pid 6382] close(4 [pid 6379] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6382] <... close resumed>) = 0 [pid 5077] getdents64(4, [pid 6382] mkdir("./bus", 0777 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6382] <... mkdir resumed>) = 0 [pid 5077] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6382] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5077] close(4 [pid 6380] <... creat resumed>) = 4 [pid 5077] <... close resumed>) = 0 [pid 5077] rmdir("./215/bus" [pid 6380] rename("./bus", "./file2" [pid 5077] <... rmdir resumed>) = 0 [pid 6380] <... rename resumed>) = -1 EEXIST (File exists) [pid 6379] <... open resumed>) = 5 [ 205.388660][ T6382] loop2: detected capacity change from 0 to 1024 [pid 5077] umount2("./215/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6382] <... mount resumed>) = 0 [pid 6380] memfd_create("syzkaller", 0 [pid 6379] ftruncate(5, 0 [pid 6382] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6383] munmap(0x7f0356e00000, 138412032 [pid 6382] chdir("./bus" [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6382] <... chdir resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./215/binderfs", [pid 6382] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6383] <... munmap resumed>) = 0 [pid 5077] unlink("./215/binderfs") = 0 [pid 5077] getdents64(3, [pid 6382] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6382] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5077] close(3 [pid 6383] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] <... close resumed>) = 0 [pid 6383] <... openat resumed>) = 4 [ 205.425226][ T28] audit: type=1800 audit(1710613087.524:1288): pid=6379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 205.449315][ T6379] [ 205.451680][ T6379] ====================================================== [ 205.458699][ T6379] WARNING: possible circular locking dependency detected [ 205.465712][ T6379] 6.8.0-syzkaller-08951-gfe46a7dd189e #0 Not tainted [ 205.472383][ T6379] ------------------------------------------------------ [ 205.479394][ T6379] syz-executor910/6379 is trying to acquire lock: [ 205.485800][ T6379] ffff88801e5800b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_file_truncate+0x811/0xb50 [ 205.495680][ T6379] [ 205.495680][ T6379] but task is already holding lock: [ 205.503040][ T6379] ffff88802eab3048 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_truncate+0x2da/0xb50 [ 205.514209][ T6379] [ 205.514209][ T6379] which lock already depends on the new lock. [ 205.514209][ T6379] [ 205.524621][ T6379] [ 205.524621][ T6379] the existing dependency chain (in reverse order) is: [ 205.533640][ T6379] [ 205.533640][ T6379] -> #1 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}: [ 205.542693][ T6379] lock_acquire+0x1e4/0x530 [ 205.547726][ T6379] __mutex_lock+0x136/0xd70 [ 205.552794][ T6379] hfsplus_file_extend+0x21b/0x1b70 [ 205.558539][ T6379] hfsplus_bmap_reserve+0x105/0x4e0 [ 205.564284][ T6379] hfsplus_rename_cat+0x1d0/0x1050 [ 205.569941][ T6379] hfsplus_rename+0x12e/0x1c0 [ 205.575156][ T6379] vfs_rename+0xbdd/0xf00 [ 205.580021][ T6379] do_renameat2+0xd94/0x13f0 [ 205.585145][ T6379] __x64_sys_rename+0x86/0xa0 [ 205.590357][ T6379] do_syscall_64+0xfd/0x240 [ 205.595389][ T6379] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 205.601831][ T6379] [ 205.601831][ T6379] -> #0 (&tree->tree_lock){+.+.}-{3:3}: [ 205.609594][ T6379] validate_chain+0x18cb/0x58e0 [ 205.614981][ T6379] __lock_acquire+0x1346/0x1fd0 [ 205.620365][ T6379] lock_acquire+0x1e4/0x530 [ 205.625392][ T6379] __mutex_lock+0x136/0xd70 [ 205.630422][ T6379] hfsplus_file_truncate+0x811/0xb50 [ 205.636236][ T6379] hfsplus_setattr+0x1ce/0x280 [ 205.641523][ T6379] notify_change+0xb9f/0xe70 [ 205.646643][ T6379] do_ftruncate+0x46b/0x590 [ 205.651679][ T6379] __x64_sys_ftruncate+0x95/0xf0 [ 205.657149][ T6379] do_syscall_64+0xfd/0x240 [ 205.662206][ T6379] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 205.668628][ T6379] [ 205.668628][ T6379] other info that might help us debug this: [ 205.668628][ T6379] [ 205.678850][ T6379] Possible unsafe locking scenario: [ 205.678850][ T6379] [ 205.686291][ T6379] CPU0 CPU1 [ 205.691651][ T6379] ---- ---- [ 205.697016][ T6379] lock(&HFSPLUS_I(inode)->extents_lock); [ 205.702830][ T6379] lock(&tree->tree_lock); [ 205.709857][ T6379] lock(&HFSPLUS_I(inode)->extents_lock); [ 205.718188][ T6379] lock(&tree->tree_lock); [ 205.722696][ T6379] [ 205.722696][ T6379] *** DEADLOCK *** [ 205.722696][ T6379] [ 205.730833][ T6379] 3 locks held by syz-executor910/6379: [ 205.736376][ T6379] #0: ffff88801b694420 (sb_writers#9){.+.+}-{0:0}, at: do_ftruncate+0x294/0x590 [ 205.745555][ T6379] #1: ffff88802eab3240 (&sb->s_type->i_mutex_key#15){+.+.}-{3:3}, at: do_ftruncate+0x457/0x590 [ 205.756033][ T6379] #2: ffff88802eab3048 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_truncate+0x2da/0xb50 [ 205.767627][ T6379] [ 205.767627][ T6379] stack backtrace: [ 205.773511][ T6379] CPU: 1 PID: 6379 Comm: syz-executor910 Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e #0 [ 205.783572][ T6379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 205.793626][ T6379] Call Trace: [ 205.796910][ T6379] [ 205.799869][ T6379] dump_stack_lvl+0x241/0x360 [ 205.804569][ T6379] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.809792][ T6379] ? srso_return_thunk+0x5/0x5f [ 205.814650][ T6379] ? print_circular_bug+0x130/0x1a0 [ 205.819862][ T6379] check_noncircular+0x36a/0x4a0 [ 205.824812][ T6379] ? __pfx_check_noncircular+0x10/0x10 [ 205.830279][ T6379] ? srso_return_thunk+0x5/0x5f [ 205.835137][ T6379] ? lockdep_lock+0x123/0x2b0 [ 205.839834][ T6379] ? srso_return_thunk+0x5/0x5f [ 205.844690][ T6379] ? _find_first_zero_bit+0xd4/0x100 [ 205.850008][ T6379] validate_chain+0x18cb/0x58e0 [ 205.854880][ T6379] ? debug_object_activate+0x3e4/0x510 [ 205.860355][ T6379] ? __pfx_validate_chain+0x10/0x10 [ 205.865570][ T6379] ? srso_return_thunk+0x5/0x5f [ 205.870432][ T6379] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 205.876775][ T6379] ? srso_return_thunk+0x5/0x5f [ 205.881632][ T6379] ? look_up_lock_class+0x77/0x160 [ 205.886762][ T6379] ? srso_return_thunk+0x5/0x5f [ 205.891618][ T6379] ? register_lock_class+0x102/0x980 [ 205.896911][ T6379] ? __pfx_register_lock_class+0x10/0x10 [ 205.902548][ T6379] ? do_raw_spin_unlock+0x13c/0x8b0 [ 205.907762][ T6379] ? srso_return_thunk+0x5/0x5f [ 205.912620][ T6379] ? mark_lock+0x9a/0x350 [ 205.916956][ T6379] ? srso_return_thunk+0x5/0x5f [ 205.921824][ T6379] __lock_acquire+0x1346/0x1fd0 [ 205.926691][ T6379] lock_acquire+0x1e4/0x530 [ 205.931200][ T6379] ? hfsplus_file_truncate+0x811/0xb50 [ 205.936671][ T6379] ? __pfx_lock_acquire+0x10/0x10 [ 205.941700][ T6379] ? __pfx___might_resched+0x10/0x10 [ 205.947169][ T6379] ? srso_return_thunk+0x5/0x5f [ 205.952031][ T6379] ? __mutex_unlock_slowpath+0x21d/0x750 [ 205.957673][ T6379] ? hfsplus_block_free+0x3da/0x4e0 [ 205.962890][ T6379] __mutex_lock+0x136/0xd70 [ 205.967399][ T6379] ? hfsplus_file_truncate+0x811/0xb50 [ 205.972862][ T6379] ? srso_return_thunk+0x5/0x5f [ 205.977723][ T6379] ? hfsplus_file_truncate+0x811/0xb50 [ 205.983187][ T6379] ? __pfx___mutex_lock+0x10/0x10 [ 205.988231][ T6379] ? hfsplus_free_extents+0x47e/0xae0 [ 205.993611][ T6379] hfsplus_file_truncate+0x811/0xb50 [ 205.998909][ T6379] ? srso_return_thunk+0x5/0x5f [ 206.003772][ T6379] ? __pfx_hfsplus_file_truncate+0x10/0x10 [ 206.009586][ T6379] ? unmap_mapping_range+0xf8/0x290 [ 206.014834][ T6379] ? __pfx_unmap_mapping_range+0x10/0x10 [ 206.020504][ T6379] ? setattr_prepare+0x1f5/0xb20 [ 206.025452][ T6379] ? srso_return_thunk+0x5/0x5f [ 206.030316][ T6379] ? truncate_setsize+0xcf/0xf0 [ 206.035184][ T6379] hfsplus_setattr+0x1ce/0x280 [ 206.039960][ T6379] ? __pfx_hfsplus_setattr+0x10/0x10 [ 206.045256][ T6379] notify_change+0xb9f/0xe70 [ 206.049884][ T6379] do_ftruncate+0x46b/0x590 [ 206.054403][ T6379] ? lockdep_hardirqs_on+0x99/0x150 [ 206.059624][ T6379] ? __pfx_do_ftruncate+0x10/0x10 [ 206.064756][ T6379] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 206.071096][ T6379] ? srso_return_thunk+0x5/0x5f [ 206.075962][ T6379] __x64_sys_ftruncate+0x95/0xf0 [ 206.080924][ T6379] do_syscall_64+0xfd/0x240 [ 206.085438][ T6379] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 206.091344][ T6379] RIP: 0033:0x7f035f325459 [ 206.095763][ T6379] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 21 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 206.115378][ T6379] RSP: 002b:00007fffc9285578 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 206.123802][ T6379] RAX: ffffffffffffffda RBX: 0031656c69662f2e RCX: 00007f035f325459 [ 206.131778][ T6379] RDX: 0000000000000057 RSI: 0000000000000000 RDI: 0000000000000005 [pid 5077] rmdir("./215" [pid 6383] ioctl(4, LOOP_SET_FD, 3 [pid 6382] <... symlink resumed>) = 0 [pid 6380] <... memfd_create resumed>) = 5 [pid 5077] <... rmdir resumed>) = 0 [pid 6383] <... ioctl resumed>) = 0 [pid 6382] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5077] mkdir("./216", 0777 [pid 6383] close(3 [pid 5077] <... mkdir resumed>) = 0 [pid 6383] <... close resumed>) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6383] close(4 [pid 5077] <... openat resumed>) = 3 [pid 6383] <... close resumed>) = 0 [pid 5077] ioctl(3, LOOP_CLR_FD) = 0 [pid 6383] mkdir("./bus", 0777 [pid 5077] close(3) = 0 [pid 6383] <... mkdir resumed>) = 0 [pid 6383] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6382] <... creat resumed>) = 4 [pid 6382] rename("./bus", "./file2" [pid 6380] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6384 [ 206.139754][ T6379] RBP: 0073756c70736668 R08: 00000000200003c0 R09: 00007fffc92855b0 [ 206.147731][ T6379] R10: 0000000000000640 R11: 0000000000000246 R12: 00007fffc928559c [ 206.155701][ T6379] R13: 00000000000000d4 R14: 431bde82d7b634db R15: 00007fffc92855d0 [ 206.163686][ T6379] [ 206.177652][ T6383] loop5: detected capacity change from 0 to 1024 [pid 6380] <... mmap resumed>) = 0x7f0356e00000 ./strace-static-x86_64: Process 6384 attached [pid 6384] set_robust_list(0x55556e32a660, 24) = 0 [pid 6384] chdir("./216") = 0 [pid 6384] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6384] setpgid(0, 0) = 0 [pid 6384] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6384] write(3, "1000", 4) = 4 [pid 6384] close(3) = 0 [pid 6384] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6384] memfd_create("syzkaller", 0) = 3 [pid 6384] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6384] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6383] <... mount resumed>) = 0 [pid 6382] <... rename resumed>) = -1 EEXIST (File exists) [pid 6381] <... mount resumed>) = 0 [pid 6380] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6379] <... ftruncate resumed>) = 0 [pid 6383] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6382] memfd_create("syzkaller", 0) = 5 [pid 6382] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6382] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6384] <... write resumed>) = 524288 [pid 6383] <... openat resumed>) = 3 [pid 6382] <... write resumed>) = 524288 [pid 6381] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6380] <... write resumed>) = 524288 [pid 6379] exit_group(0 [pid 6383] chdir("./bus" [pid 6381] <... openat resumed>) = 3 [pid 6380] munmap(0x7f0356e00000, 138412032 [pid 6379] <... exit_group resumed>) = ? [pid 6383] <... chdir resumed>) = 0 [pid 6381] chdir("./bus" [pid 6380] <... munmap resumed>) = 0 [pid 6379] +++ exited with 0 +++ [pid 6380] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6379, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6380] close(5 [pid 6383] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6381] <... chdir resumed>) = 0 [pid 6380] <... close resumed>) = 0 [pid 6383] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6381] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] umount2("./212", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./212", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] newfstatat(3, "", [pid 6380] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, 0x55556e32b6f0 /* 6 entries */, 32768) = 416 [pid 5074] umount2("./212/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./212/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./212/binderfs" [pid 6382] munmap(0x7f0356e00000, 138412032 [pid 5074] <... unlink resumed>) = 0 [pid 6382] <... munmap resumed>) = 0 [pid 5074] umount2("./212/file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./212/file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFLNK|0777, st_size=5, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./212/file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6383] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6381] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] umount2("./212/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./212/file2", [pid 6381] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5074] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6384] munmap(0x7f0356e00000, 138412032 [pid 5074] unlink("./212/file2" [pid 6384] <... munmap resumed>) = 0 [pid 6383] <... symlink resumed>) = 0 [pid 6381] <... symlink resumed>) = 0 [pid 6380] <... open resumed>) = 5 [pid 5074] <... unlink resumed>) = 0 [pid 6381] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5074] umount2("./212/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6382] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6380] ftruncate(5, 0 [pid 6382] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6380] <... ftruncate resumed>) = 0 [pid 6382] close(5 [pid 6380] exit_group(0 [pid 6383] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6382] <... close resumed>) = 0 [pid 6380] <... exit_group resumed>) = ? [pid 6380] +++ exited with 0 +++ [pid 6384] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6383] <... creat resumed>) = 4 [pid 6382] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6381] <... creat resumed>) = 4 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6380, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5074] <... umount2 resumed>) = 0 [pid 6384] <... openat resumed>) = 4 [pid 6383] rename("./bus", "./file2" [pid 6381] rename("./bus", "./file2" [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 6384] ioctl(4, LOOP_SET_FD, 3 [pid 6382] <... open resumed>) = 5 [pid 5074] umount2("./212/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6383] <... rename resumed>) = -1 EEXIST (File exists) [pid 6382] ftruncate(5, 0 [pid 6381] <... rename resumed>) = -1 EEXIST (File exists) [pid 5076] <... restart_syscall resumed>) = 0 [pid 6382] <... ftruncate resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6383] memfd_create("syzkaller", 0 [pid 6382] exit_group(0 [pid 6381] memfd_create("syzkaller", 0 [pid 6382] <... exit_group resumed>) = ? [pid 5074] newfstatat(AT_FDCWD, "./212/file1", [pid 6383] <... memfd_create resumed>) = 5 [pid 6382] +++ exited with 0 +++ [pid 6381] <... memfd_create resumed>) = 5 [pid 5076] umount2("./216", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6383] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6381] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6383] <... mmap resumed>) = 0x7f0356e00000 [pid 6381] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./212/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6382, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... restart_syscall resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./212/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6381] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] openat(AT_FDCWD, "./216", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] newfstatat(4, "", [pid 5075] umount2("./213", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6383] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] getdents64(4, [pid 5076] newfstatat(3, "", [pid 5075] openat(AT_FDCWD, "./213", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5074] getdents64(4, [pid 5076] getdents64(3, [pid 5075] newfstatat(3, "", [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] close(4 [pid 5076] umount2("./216/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] getdents64(3, [pid 5074] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] rmdir("./212/file1" [pid 6384] <... ioctl resumed>) = 0 [pid 5075] umount2("./213/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... rmdir resumed>) = 0 [pid 6384] close(3 [pid 5074] getdents64(3, [pid 6384] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6384] close(4 [pid 5074] close(3 [pid 6384] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 6384] mkdir("./bus", 0777 [pid 5074] rmdir("./212" [pid 6384] <... mkdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5076] umount2("./216/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./213/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] mkdir("./213", 0777 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... mkdir resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./213/bus", [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5075] umount2("./213/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 206.300687][ T28] audit: type=1800 audit(1710613088.404:1289): pid=6380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 206.340174][ T6384] loop4: detected capacity change from 0 to 1024 [pid 6384] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5075] openat(AT_FDCWD, "./213/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6383] <... write resumed>) = 524288 [pid 6381] <... write resumed>) = 524288 [pid 5076] newfstatat(AT_FDCWD, "./216/bus", [pid 5075] <... openat resumed>) = 4 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] newfstatat(4, "", [pid 6383] munmap(0x7f0356e00000, 138412032 [pid 6381] munmap(0x7f0356e00000, 138412032 [pid 5076] umount2("./216/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6383] <... munmap resumed>) = 0 [pid 6381] <... munmap resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./216/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] getdents64(4, [pid 5076] <... openat resumed>) = 4 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, [pid 6383] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6381] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] getdents64(4, [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6384] <... mount resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] close(4 [pid 6384] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6381] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] getdents64(4, [pid 5075] <... close resumed>) = 0 [pid 6383] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6384] <... openat resumed>) = 3 [pid 5075] rmdir("./213/bus" [pid 6384] chdir("./bus" [pid 5075] <... rmdir resumed>) = 0 [pid 6384] <... chdir resumed>) = 0 [pid 5075] umount2("./213/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6384] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6383] close(5 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] close(4 [pid 6384] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] newfstatat(AT_FDCWD, "./213/binderfs", [pid 6384] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6383] <... close resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] rmdir("./216/bus" [pid 6384] <... symlink resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] unlink("./213/binderfs" [pid 5076] umount2("./216/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6384] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6381] close(5 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... unlink resumed>) = 0 [pid 6384] <... creat resumed>) = 4 [pid 5076] newfstatat(AT_FDCWD, "./216/binderfs", [pid 5075] getdents64(3, [pid 6384] rename("./bus", "./file2" [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] unlink("./216/binderfs" [pid 6384] <... rename resumed>) = -1 EEXIST (File exists) [pid 5076] <... unlink resumed>) = 0 [pid 5075] close(3 [pid 5076] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] <... close resumed>) = 0 [pid 5076] close(3) = 0 [pid 5075] rmdir("./213" [pid 5076] rmdir("./216") = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5076] mkdir("./217", 0777 [ 206.381237][ T28] audit: type=1800 audit(1710613088.444:1290): pid=6382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop2" ino=20 res=0 errno=0 [pid 5075] mkdir("./214", 0777 [pid 6384] memfd_create("syzkaller", 0 [pid 6381] <... close resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 6384] <... memfd_create resumed>) = 5 [pid 6383] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5076] <... openat resumed>) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6384] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5074] close(3 [pid 6384] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6383] <... open resumed>) = 5 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5074] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6383] ftruncate(5, 0 [pid 6381] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5076] <... ioctl resumed>) = 0 [pid 5076] close(3 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6385 [pid 6383] <... ftruncate resumed>) = 0 [pid 5076] <... close resumed>) = 0 ./strace-static-x86_64: Process 6385 attached [pid 6385] set_robust_list(0x55556e32a660, 24 [pid 6384] <... write resumed>) = 524288 [pid 6383] exit_group(0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6385] <... set_robust_list resumed>) = 0 [pid 6385] chdir("./213") = 0 [pid 6385] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6385] setpgid(0, 0) = 0 [pid 6385] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6385] write(3, "1000", 4) = 4 [pid 6385] close(3) = 0 [pid 6385] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6385] memfd_create("syzkaller", 0) = 3 [pid 6385] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6385] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6383] <... exit_group resumed>) = ? [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6386 [pid 6384] munmap(0x7f0356e00000, 138412032 [pid 6383] +++ exited with 0 +++ ./strace-static-x86_64: Process 6386 attached [pid 6384] <... munmap resumed>) = 0 [pid 6381] <... open resumed>) = 5 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6383, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6386] set_robust_list(0x55556e32a660, 24 [pid 6381] ftruncate(5, 0 [pid 5078] umount2("./216", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6386] <... set_robust_list resumed>) = 0 [pid 6381] <... ftruncate resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./216", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6386] chdir("./217" [pid 5078] <... openat resumed>) = 3 [pid 6386] <... chdir resumed>) = 0 [pid 5078] newfstatat(3, "", [pid 6386] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6381] exit_group(0 [pid 6386] <... prctl resumed>) = 0 [pid 6384] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] getdents64(3, [pid 6381] <... exit_group resumed>) = ? [pid 6386] setpgid(0, 0 [pid 6384] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] <... ioctl resumed>) = 0 [pid 6384] close(5 [pid 5078] umount2("./216/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] close(3 [pid 6386] <... setpgid resumed>) = 0 [pid 6384] <... close resumed>) = 0 [pid 6381] +++ exited with 0 +++ [pid 5075] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6381, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6386] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6387 ./strace-static-x86_64: Process 6387 attached [pid 6386] <... openat resumed>) = 3 [pid 6387] set_robust_list(0x55556e32a660, 24 [pid 6386] write(3, "1000", 4 [pid 6384] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6385] <... write resumed>) = 524288 [pid 6386] <... write resumed>) = 4 [pid 6385] munmap(0x7f0356e00000, 138412032 [pid 6386] close(3) = 0 [pid 5073] umount2("./213", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6386] symlink("/dev/binderfs", "./binderfs" [pid 6385] <... munmap resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./213", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", [pid 6386] <... symlink resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, [pid 6386] memfd_create("syzkaller", 0 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6385] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] umount2("./213/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6386] <... memfd_create resumed>) = 3 [pid 6385] <... openat resumed>) = 4 [pid 6385] ioctl(4, LOOP_SET_FD, 3 [pid 6386] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6385] <... ioctl resumed>) = 0 [pid 6387] <... set_robust_list resumed>) = 0 [pid 6387] chdir("./214" [pid 6384] <... open resumed>) = 5 [pid 6387] <... chdir resumed>) = 0 [pid 6387] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6387] setpgid(0, 0 [pid 6386] <... mmap resumed>) = 0x7f0356e00000 [pid 6387] <... setpgid resumed>) = 0 [pid 6387] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6387] write(3, "1000", 4 [pid 5078] <... umount2 resumed>) = 0 [pid 6387] <... write resumed>) = 4 [pid 6387] close(3 [pid 6386] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6385] close(3 [pid 6384] ftruncate(5, 0 [pid 5078] umount2("./216/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6387] <... close resumed>) = 0 [pid 6385] <... close resumed>) = 0 [pid 6384] <... ftruncate resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6387] symlink("/dev/binderfs", "./binderfs" [pid 6385] close(4 [pid 6387] <... symlink resumed>) = 0 [pid 6385] <... close resumed>) = 0 [pid 6387] memfd_create("syzkaller", 0 [pid 6385] mkdir("./bus", 0777 [pid 6387] <... memfd_create resumed>) = 3 [pid 6385] <... mkdir resumed>) = 0 [pid 6387] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6387] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6386] <... write resumed>) = 524288 [pid 6384] exit_group(0 [pid 5078] newfstatat(AT_FDCWD, "./216/bus", [pid 6385] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6384] <... exit_group resumed>) = ? [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6387] <... write resumed>) = 524288 [pid 6384] +++ exited with 0 +++ [pid 5078] umount2("./216/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = 0 [pid 6385] <... mount resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6384, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6385] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [ 206.520651][ T28] audit: type=1800 audit(1710613088.564:1291): pid=6383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 206.542329][ T5086] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 206.556998][ T6385] loop1: detected capacity change from 0 to 1024 [pid 5078] openat(AT_FDCWD, "./216/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6385] <... openat resumed>) = 3 [pid 5078] <... openat resumed>) = 4 [pid 5073] umount2("./213/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6385] chdir("./bus" [pid 5078] newfstatat(4, "", [pid 6385] <... chdir resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] umount2("./216", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6385] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] getdents64(4, [pid 5073] newfstatat(AT_FDCWD, "./213/bus", [pid 6387] munmap(0x7f0356e00000, 138412032 [pid 6385] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] openat(AT_FDCWD, "./216", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6387] <... munmap resumed>) = 0 [pid 6386] munmap(0x7f0356e00000, 138412032 [pid 6385] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6387] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6386] <... munmap resumed>) = 0 [pid 6385] <... symlink resumed>) = 0 [pid 5078] getdents64(4, [pid 5077] <... openat resumed>) = 3 [pid 5073] umount2("./213/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6385] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6387] <... openat resumed>) = 4 [pid 6385] <... creat resumed>) = 4 [pid 6385] rename("./bus", "./file2" [ 206.604865][ T28] audit: type=1800 audit(1710613088.594:1292): pid=6381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 206.628159][ T28] audit: type=1800 audit(1710613088.664:1293): pid=6384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop4" ino=20 res=0 errno=0 [pid 6387] ioctl(4, LOOP_SET_FD, 3 [pid 6386] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6385] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] newfstatat(3, "", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6386] <... openat resumed>) = 4 [pid 6385] memfd_create("syzkaller", 0 [pid 5078] close(4 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] openat(AT_FDCWD, "./213/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6386] ioctl(4, LOOP_SET_FD, 3 [pid 6385] <... memfd_create resumed>) = 5 [pid 5078] <... close resumed>) = 0 [pid 5077] getdents64(3, [pid 5073] <... openat resumed>) = 4 [pid 6386] <... ioctl resumed>) = 0 [pid 5078] rmdir("./216/bus" [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] newfstatat(4, "", [pid 6386] close(3 [pid 5078] <... rmdir resumed>) = 0 [pid 5077] umount2("./216/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6386] <... close resumed>) = 0 [pid 5078] umount2("./216/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] getdents64(4, [pid 6386] close(4 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6386] <... close resumed>) = 0 [pid 6385] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] newfstatat(AT_FDCWD, "./216/binderfs", [pid 5073] getdents64(4, [pid 6386] mkdir("./bus", 0777 [pid 6385] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6386] <... mkdir resumed>) = 0 [pid 6385] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] unlink("./216/binderfs" [pid 5073] close(4 [pid 6386] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5078] <... unlink resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5078] getdents64(3, [pid 5073] rmdir("./213/bus" [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5078] close(3 [pid 5073] umount2("./213/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] rmdir("./216" [pid 5073] newfstatat(AT_FDCWD, "./213/binderfs", [pid 5078] <... rmdir resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] mkdir("./217", 0777 [pid 5073] unlink("./213/binderfs" [pid 6387] <... ioctl resumed>) = 0 [pid 6386] <... mount resumed>) = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 6386] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] getdents64(3, [pid 6387] close(3 [pid 6386] <... openat resumed>) = 3 [pid 6385] <... write resumed>) = 524288 [pid 5078] <... openat resumed>) = 3 [pid 5077] <... umount2 resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6387] <... close resumed>) = 0 [pid 6386] chdir("./bus" [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5077] umount2("./216/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6386] <... chdir resumed>) = 0 [pid 5073] close(3 [pid 6386] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5073] <... close resumed>) = 0 [pid 6386] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5073] rmdir("./213" [pid 6386] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... rmdir resumed>) = 0 [pid 6387] close(4 [pid 6386] <... creat resumed>) = 4 [pid 5077] newfstatat(AT_FDCWD, "./216/bus", [pid 6386] rename("./bus", "./file2" [pid 5073] mkdir("./214", 0777 [pid 6387] <... close resumed>) = 0 [pid 6386] <... rename resumed>) = -1 EEXIST (File exists) [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 6387] mkdir("./bus", 0777 [pid 6386] memfd_create("syzkaller", 0 [pid 5077] umount2("./216/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6387] <... mkdir resumed>) = 0 [pid 6386] <... memfd_create resumed>) = 5 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... openat resumed>) = 3 [pid 6387] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6386] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] openat(AT_FDCWD, "./216/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6386] <... mmap resumed>) = 0x7f0356e00000 [ 206.650071][ T6387] loop2: detected capacity change from 0 to 1024 [ 206.658952][ T6386] loop3: detected capacity change from 0 to 1024 [pid 5077] <... openat resumed>) = 4 [pid 5077] newfstatat(4, "", [pid 6386] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] <... ioctl resumed>) = 0 [pid 5077] getdents64(4, [pid 5078] close(3) = 0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556e32a650) = 6388 ./strace-static-x86_64: Process 6388 attached [pid 6385] munmap(0x7f0356e00000, 138412032 [pid 6388] set_robust_list(0x55556e32a660, 24 [pid 6385] <... munmap resumed>) = 0 [pid 6388] <... set_robust_list resumed>) = 0 [pid 6385] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6388] chdir("./217" [pid 6385] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6388] <... chdir resumed>) = 0 [pid 6385] close(5 [pid 6388] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6388] setpgid(0, 0) = 0 [pid 6388] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6385] <... close resumed>) = 0 [pid 6386] <... write resumed>) = 524288 [pid 6388] write(3, "1000", 4) = 4 [pid 6388] close(3) = 0 [pid 6388] symlink("/dev/binderfs", "./binderfs" [pid 5077] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] close(4 [pid 6388] <... symlink resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5077] rmdir("./216/bus" [pid 5073] <... ioctl resumed>) = 0 [pid 6388] memfd_create("syzkaller", 0 [pid 6386] munmap(0x7f0356e00000, 138412032 [pid 5077] <... rmdir resumed>) = 0 [pid 6386] <... munmap resumed>) = 0 [pid 5077] umount2("./216/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6388] <... memfd_create resumed>) = 3 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] close(3 [pid 6388] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6386] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5077] newfstatat(AT_FDCWD, "./216/binderfs", [pid 5073] <... close resumed>) = 0 [pid 6388] <... mmap resumed>) = 0x7f0356e00000 [pid 6386] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6385] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6386] close(5 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 6389 attached [pid 6386] <... close resumed>) = 0 [pid 5077] unlink("./216/binderfs" [pid 6388] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... unlink resumed>) = 0 [pid 6389] set_robust_list(0x55556e32a660, 24 [pid 6385] <... open resumed>) = 5 [pid 6389] <... set_robust_list resumed>) = 0 [pid 6385] ftruncate(5, 0 [pid 6389] chdir("./214" [pid 6385] <... ftruncate resumed>) = 0 [pid 6389] <... chdir resumed>) = 0 [pid 6385] exit_group(0 [pid 6389] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6385] <... exit_group resumed>) = ? [pid 6389] <... prctl resumed>) = 0 [pid 6387] <... mount resumed>) = 0 [pid 6385] +++ exited with 0 +++ [pid 6389] setpgid(0, 0 [pid 5077] getdents64(3, [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6385, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6387] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6389 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6389] <... setpgid resumed>) = 0 [pid 6388] <... write resumed>) = 524288 [pid 6387] <... openat resumed>) = 3 [pid 6386] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] close(3 [pid 6389] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6387] chdir("./bus" [pid 5077] <... close resumed>) = 0 [pid 5074] umount2("./213", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6389] write(3, "1000", 4) = 4 [pid 6389] close(3) = 0 [pid 6389] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6389] memfd_create("syzkaller", 0) = 3 [pid 6389] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6387] <... chdir resumed>) = 0 [pid 5077] rmdir("./216" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6387] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5077] <... rmdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./213", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6387] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6386] <... open resumed>) = 5 [pid 5077] mkdir("./217", 0777 [pid 6389] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6388] munmap(0x7f0356e00000, 138412032) = 0 [pid 6388] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 206.774256][ T28] audit: type=1800 audit(1710613088.874:1294): pid=6385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop1" ino=20 res=0 errno=0 [pid 6388] ioctl(4, LOOP_SET_FD, 3 [pid 6387] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6386] ftruncate(5, 0 [pid 5077] <... mkdir resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 6386] <... ftruncate resumed>) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] newfstatat(3, "", [pid 6389] munmap(0x7f0356e00000, 138412032 [pid 6387] <... symlink resumed>) = 0 [pid 6386] exit_group(0 [pid 5077] <... openat resumed>) = 3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5074] getdents64(3, [pid 6387] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6386] <... exit_group resumed>) = ? [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6386] +++ exited with 0 +++ [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6386, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5074] umount2("./213/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5076] umount2("./217", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./217", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5076] newfstatat(3, "", [pid 6387] <... creat resumed>) = 4 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6387] rename("./bus", "./file2" [pid 5076] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] umount2("./217/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6387] <... rename resumed>) = -1 EEXIST (File exists) [pid 6387] memfd_create("syzkaller", 0) = 5 [pid 6387] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6388] <... ioctl resumed>) = 0 [pid 6389] <... munmap resumed>) = 0 [pid 6387] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... umount2 resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5076] umount2("./217/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./217/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./217/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./217/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] close(4) = 0 [pid 5076] rmdir("./217/bus") = 0 [pid 5076] umount2("./217/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6387] <... write resumed>) = 524288 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./213/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] newfstatat(AT_FDCWD, "./217/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./217/binderfs") = 0 [pid 5076] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3) = 0 [pid 5076] rmdir("./217") = 0 [pid 5076] mkdir("./218", 0777 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6389] openat(AT_FDCWD, "/dev/loop0", O_RDWR [ 206.809027][ T28] audit: type=1800 audit(1710613088.914:1295): pid=6386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 206.821926][ T6388] loop5: detected capacity change from 0 to 1024 [pid 6388] close(3 [pid 5076] <... mkdir resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./213/bus", [pid 6389] <... openat resumed>) = 4 [pid 6388] <... close resumed>) = 0 [pid 6387] munmap(0x7f0356e00000, 138412032 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6389] ioctl(4, LOOP_SET_FD, 3 [pid 6388] close(4 [pid 5076] <... openat resumed>) = 3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6388] <... close resumed>) = 0 [pid 6387] <... munmap resumed>) = 0 [pid 5074] umount2("./213/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6388] mkdir("./bus", 0777 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6388] <... mkdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6387] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6388] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5074] openat(AT_FDCWD, "./213/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6387] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... ioctl resumed>) = 0 [pid 5074] <... openat resumed>) = 4 [pid 6389] <... ioctl resumed>) = 0 [pid 6389] close(3) = 0 [pid 6389] close(4) = 0 [pid 6389] mkdir("./bus", 0777) = 0 [pid 6387] close(5 [pid 5074] newfstatat(4, "", [pid 5076] <... ioctl resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] close(3 [pid 5076] close(3 [pid 5074] getdents64(4, [pid 5077] <... close resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6390 [pid 6389] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5074] getdents64(4, ./strace-static-x86_64: Process 6391 attached 0x55556e333730 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6390 attached [pid 6390] set_robust_list(0x55556e32a660, 24) = 0 [pid 6390] chdir("./218" [pid 5074] close(4) = 0 [pid 5074] rmdir("./213/bus" [pid 6390] <... chdir resumed>) = 0 [pid 6390] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6390] setpgid(0, 0) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5074] umount2("./213/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./213/binderfs", [pid 6390] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6391 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6391] set_robust_list(0x55556e32a660, 24 [pid 5074] unlink("./213/binderfs" [pid 6391] <... set_robust_list resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 6387] <... close resumed>) = 0 [pid 6391] chdir("./217" [pid 6390] <... openat resumed>) = 3 [pid 6387] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5074] getdents64(3, [pid 6390] write(3, "1000", 4) = 4 [pid 6390] close(3 [pid 6391] <... chdir resumed>) = 0 [pid 6390] <... close resumed>) = 0 [pid 6388] <... mount resumed>) = 0 [pid 6387] <... open resumed>) = 5 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6391] prctl(PR_SET_PDEATHSIG, SIGKILL [ 206.877894][ T6389] loop0: detected capacity change from 0 to 1024 [pid 6390] symlink("/dev/binderfs", "./binderfs" [pid 6388] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5074] close(3 [pid 6391] <... prctl resumed>) = 0 [pid 6389] <... mount resumed>) = 0 [pid 6387] ftruncate(5, 0 [pid 6389] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6389] chdir("./bus") = 0 [pid 6389] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6389] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6390] <... symlink resumed>) = 0 [pid 6388] <... openat resumed>) = 3 [pid 6388] chdir("./bus") = 0 [pid 6388] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6390] memfd_create("syzkaller", 0 [pid 6388] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6390] <... memfd_create resumed>) = 3 [pid 6390] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6390] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6391] setpgid(0, 0 [pid 6389] <... symlink resumed>) = 0 [pid 6388] <... symlink resumed>) = 0 [pid 6387] <... ftruncate resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 6389] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6388] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6387] exit_group(0 [pid 5074] rmdir("./213") = 0 [pid 6387] <... exit_group resumed>) = ? [pid 6391] <... setpgid resumed>) = 0 [pid 6389] <... creat resumed>) = 4 [pid 6389] rename("./bus", "./file2" [pid 6391] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6389] <... rename resumed>) = -1 EEXIST (File exists) [pid 6387] +++ exited with 0 +++ [pid 5074] mkdir("./214", 0777 [pid 6389] memfd_create("syzkaller", 0) = 5 [pid 6389] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6387, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6391] <... openat resumed>) = 3 [pid 6389] <... mmap resumed>) = 0x7f0356e00000 [pid 6388] <... creat resumed>) = 4 [pid 5074] <... openat resumed>) = 3 [pid 6391] write(3, "1000", 4 [pid 6389] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6388] rename("./bus", "./file2" [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5075] umount2("./214", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6391] <... write resumed>) = 4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6391] close(3 [pid 5075] openat(AT_FDCWD, "./214", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6391] <... close resumed>) = 0 [pid 6388] <... rename resumed>) = -1 EEXIST (File exists) [pid 5075] <... openat resumed>) = 3 [pid 6391] symlink("/dev/binderfs", "./binderfs" [pid 5075] newfstatat(3, "", [pid 6388] memfd_create("syzkaller", 0 [pid 6391] <... symlink resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6391] memfd_create("syzkaller", 0 [pid 5075] getdents64(3, [pid 6391] <... memfd_create resumed>) = 3 [pid 6390] <... write resumed>) = 524288 [pid 6388] <... memfd_create resumed>) = 5 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] umount2("./214/bus", MNT_DETACH|UMOUNT_NOFOLLOW [ 206.932835][ T28] audit: type=1800 audit(1710613089.034:1296): pid=6387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop2" ino=20 res=0 errno=0 [pid 6391] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6388] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6391] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6388] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6389] <... write resumed>) = 524288 [pid 6390] munmap(0x7f0356e00000, 138412032 [pid 6389] munmap(0x7f0356e00000, 138412032 [pid 6390] <... munmap resumed>) = 0 [pid 6390] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6389] <... munmap resumed>) = 0 [pid 6390] <... openat resumed>) = 4 [pid 6389] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6390] ioctl(4, LOOP_SET_FD, 3 [pid 6391] <... write resumed>) = 524288 [pid 6389] close(5 [pid 6388] <... write resumed>) = 524288 [pid 6391] munmap(0x7f0356e00000, 138412032) = 0 [pid 6391] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6391] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6388] munmap(0x7f0356e00000, 138412032) = 0 [pid 6388] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6388] close(5 [pid 6389] <... close resumed>) = 0 [pid 6388] <... close resumed>) = 0 [pid 6391] close(3 [pid 6390] <... ioctl resumed>) = 0 [pid 6389] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6388] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5075] <... umount2 resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5074] close(3) = 0 [pid 6391] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6390] close(3 [pid 6389] <... open resumed>) = 5 [pid 6388] <... open resumed>) = 5 [ 207.007571][ T6390] loop3: detected capacity change from 0 to 1024 [ 207.019767][ T6391] loop4: detected capacity change from 0 to 1024 [pid 5075] umount2("./214/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6391] close(4 [pid 6390] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6391] <... close resumed>) = 0 [pid 6388] ftruncate(5, 0./strace-static-x86_64: Process 6392 attached [pid 6391] mkdir("./bus", 0777 [pid 6390] close(4 [pid 6389] ftruncate(5, 0 [pid 5075] newfstatat(AT_FDCWD, "./214/bus", [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6392 [pid 6392] set_robust_list(0x55556e32a660, 24 [pid 6391] <... mkdir resumed>) = 0 [pid 6390] <... close resumed>) = 0 [pid 6389] <... ftruncate resumed>) = 0 [pid 6388] <... ftruncate resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6392] <... set_robust_list resumed>) = 0 [pid 6392] chdir("./214" [pid 6390] mkdir("./bus", 0777 [pid 6389] exit_group(0 [pid 6388] exit_group(0 [pid 5075] umount2("./214/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6392] <... chdir resumed>) = 0 [pid 6391] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6390] <... mkdir resumed>) = 0 [pid 6389] <... exit_group resumed>) = ? [pid 6388] <... exit_group resumed>) = ? [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6392] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5075] openat(AT_FDCWD, "./214/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6392] setpgid(0, 0 [pid 5075] <... openat resumed>) = 4 [pid 6390] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5075] newfstatat(4, "", [pid 6392] <... setpgid resumed>) = 0 [pid 6392] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, [pid 6392] <... openat resumed>) = 3 [pid 6388] +++ exited with 0 +++ [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6391] <... mount resumed>) = 0 [pid 6390] <... mount resumed>) = 0 [pid 6389] +++ exited with 0 +++ [pid 6391] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6390] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6388, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5075] getdents64(4, [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6389, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6392] write(3, "1000", 4 [pid 6391] <... openat resumed>) = 3 [pid 6390] <... openat resumed>) = 3 [pid 6392] <... write resumed>) = 4 [pid 6391] chdir("./bus" [pid 6390] chdir("./bus" [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6392] close(3 [pid 6391] <... chdir resumed>) = 0 [pid 6390] <... chdir resumed>) = 0 [pid 5075] close(4 [pid 5073] umount2("./214", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6392] <... close resumed>) = 0 [pid 6391] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6390] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6392] symlink("/dev/binderfs", "./binderfs" [pid 6391] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6390] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] rmdir("./214/bus" [pid 5073] openat(AT_FDCWD, "./214", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6392] <... symlink resumed>) = 0 [pid 6391] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6390] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] umount2("./217", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... rmdir resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 6392] memfd_create("syzkaller", 0 [pid 6391] <... symlink resumed>) = 0 [pid 6390] <... symlink resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(3, "", [pid 6392] <... memfd_create resumed>) = 3 [pid 5078] openat(AT_FDCWD, "./217", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] <... openat resumed>) = 3 [pid 6392] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] getdents64(3, [pid 6392] <... mmap resumed>) = 0x7f0356e00000 [pid 6391] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6390] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] newfstatat(3, "", [pid 5075] umount2("./214/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] umount2("./214/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] getdents64(3, [pid 6392] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] newfstatat(AT_FDCWD, "./214/binderfs", [pid 5078] umount2("./217/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6391] <... creat resumed>) = 4 [pid 5075] unlink("./214/binderfs" [pid 5073] <... umount2 resumed>) = 0 [pid 6392] <... write resumed>) = 524288 [pid 6391] rename("./bus", "./file2" [pid 6390] <... creat resumed>) = 4 [pid 6392] munmap(0x7f0356e00000, 138412032 [pid 6390] rename("./bus", "./file2" [pid 5078] <... umount2 resumed>) = 0 [pid 6391] <... rename resumed>) = -1 EEXIST (File exists) [pid 6390] <... rename resumed>) = -1 EEXIST (File exists) [pid 5075] <... unlink resumed>) = 0 [pid 5073] umount2("./214/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6390] memfd_create("syzkaller", 0) = 5 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6390] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] newfstatat(AT_FDCWD, "./214/bus", [pid 6392] <... munmap resumed>) = 0 [pid 6391] memfd_create("syzkaller", 0 [pid 6390] <... mmap resumed>) = 0x7f0356e00000 [pid 6392] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] getdents64(3, [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6392] <... openat resumed>) = 4 [pid 6390] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] umount2("./217/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] umount2("./214/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6392] ioctl(4, LOOP_SET_FD, 3 [pid 6391] <... memfd_create resumed>) = 5 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] close(3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6391] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] newfstatat(AT_FDCWD, "./217/bus", [pid 5075] <... close resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./214/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6391] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] rmdir("./214" [pid 5073] <... openat resumed>) = 4 [pid 6391] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] newfstatat(4, "", [pid 6391] <... write resumed>) = 524288 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, [pid 5078] umount2("./217/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... rmdir resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./214/bus") = 0 [pid 5073] umount2("./214/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./214/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./214/binderfs") = 0 [pid 5073] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./214" [pid 6391] munmap(0x7f0356e00000, 138412032 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] mkdir("./215", 0777 [pid 5073] <... rmdir resumed>) = 0 [pid 6391] <... munmap resumed>) = 0 [pid 5073] mkdir("./215", 0777 [pid 5078] openat(AT_FDCWD, "./217/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... mkdir resumed>) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 6391] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5078] <... openat resumed>) = 4 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6391] close(5 [pid 6392] <... ioctl resumed>) = 0 [pid 5078] newfstatat(4, "", [pid 5075] <... openat resumed>) = 3 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6392] close(3 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6392] <... close resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5078] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] <... openat resumed>) = 3 [pid 6392] close(4 [pid 5078] getdents64(4, [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6392] <... close resumed>) = 0 [pid 6391] <... close resumed>) = 0 [pid 6392] mkdir("./bus", 0777 [pid 6390] <... write resumed>) = 524288 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6391] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6392] <... mkdir resumed>) = 0 [pid 6390] munmap(0x7f0356e00000, 138412032 [pid 5078] close(4 [pid 6391] <... open resumed>) = 5 [pid 6390] <... munmap resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 6391] ftruncate(5, 0 [pid 5078] rmdir("./217/bus" [pid 6391] <... ftruncate resumed>) = 0 [pid 6391] exit_group(0 [pid 5078] <... rmdir resumed>) = 0 [pid 6391] <... exit_group resumed>) = ? [pid 5078] umount2("./217/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6392] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6391] +++ exited with 0 +++ [pid 6390] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6391, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5078] newfstatat(AT_FDCWD, "./217/binderfs", [pid 5077] umount2("./217", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6392] <... mount resumed>) = 0 [pid 6390] close(5 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./217", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 207.148647][ T6392] loop1: detected capacity change from 0 to 1024 [pid 5077] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] umount2("./217/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6392] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5075] <... ioctl resumed>) = 0 [pid 5073] close(3) = 0 [pid 6392] <... openat resumed>) = 3 [pid 5075] close(3 [pid 5078] unlink("./217/binderfs" [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6393 attached [pid 6393] set_robust_list(0x55556e32a660, 24 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6393 [pid 6393] <... set_robust_list resumed>) = 0 [pid 6390] <... close resumed>) = 0 [pid 6392] chdir("./bus" [pid 6393] chdir("./215" [pid 5078] <... unlink resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 6393] <... chdir resumed>) = 0 [pid 6393] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6393] setpgid(0, 0) = 0 [pid 6393] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6393] write(3, "1000", 4) = 4 [pid 6393] close(3) = 0 [pid 6393] symlink("/dev/binderfs", "./binderfs" [pid 6392] <... chdir resumed>) = 0 [pid 5078] getdents64(3, [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6393] <... symlink resumed>) = 0 [pid 6392] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6393] memfd_create("syzkaller", 0) = 3 [pid 6393] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6393] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6392] <... openat resumed>) = -1 EBUSY (Device or resource busy) ./strace-static-x86_64: Process 6394 attached [pid 6390] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] close(3 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6394 [pid 5078] <... close resumed>) = 0 [pid 5078] rmdir("./217" [pid 6394] set_robust_list(0x55556e32a660, 24 [pid 6392] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6394] <... set_robust_list resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 6394] chdir("./215") = 0 [pid 6392] <... symlink resumed>) = 0 [pid 5078] mkdir("./218", 0777) = 0 [pid 6394] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6392] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6394] <... prctl resumed>) = 0 [pid 6390] <... open resumed>) = 5 [pid 6394] setpgid(0, 0) = 0 [pid 6394] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6392] <... creat resumed>) = 4 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6394] <... openat resumed>) = 3 [pid 6392] rename("./bus", "./file2" [pid 6390] ftruncate(5, 0 [pid 6394] write(3, "1000", 4 [pid 5078] <... openat resumed>) = 3 [pid 6394] <... write resumed>) = 4 [pid 6393] <... write resumed>) = 524288 [pid 6392] <... rename resumed>) = -1 EEXIST (File exists) [pid 6390] <... ftruncate resumed>) = 0 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 6394] close(3) = 0 [pid 6392] memfd_create("syzkaller", 0 [pid 6390] exit_group(0 [pid 5077] <... umount2 resumed>) = 0 [pid 5077] umount2("./217/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6394] symlink("/dev/binderfs", "./binderfs" [pid 6390] <... exit_group resumed>) = ? [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6394] <... symlink resumed>) = 0 [pid 6393] munmap(0x7f0356e00000, 138412032) = 0 [pid 6393] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6394] memfd_create("syzkaller", 0 [pid 6393] <... openat resumed>) = 4 [pid 6392] <... memfd_create resumed>) = 5 [pid 6390] +++ exited with 0 +++ [pid 5077] newfstatat(AT_FDCWD, "./217/bus", [pid 6394] <... memfd_create resumed>) = 3 [pid 6392] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6394] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6392] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] umount2("./217/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6390, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=2 /* 0.02 s */} --- [pid 6394] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./217/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] umount2("./218", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(4, "", [pid 6393] ioctl(4, LOOP_SET_FD, 3 [pid 6394] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6392] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] openat(AT_FDCWD, "./218", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] <... openat resumed>) = 3 [pid 5077] getdents64(4, [pid 5076] newfstatat(3, "", [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] close(4 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] <... close resumed>) = 0 [pid 5077] rmdir("./217/bus" [pid 5076] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] umount2("./218/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6392] <... write resumed>) = 524288 [pid 5077] umount2("./217/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = 0 [pid 5076] umount2("./218/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6394] <... write resumed>) = 524288 [pid 6392] munmap(0x7f0356e00000, 138412032 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./218/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./218/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./218/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, [pid 5078] <... ioctl resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./217/binderfs", [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, [pid 6392] <... munmap resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6394] munmap(0x7f0356e00000, 138412032 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6392] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6394] <... munmap resumed>) = 0 [pid 6392] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] unlink("./217/binderfs" [pid 6394] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6392] close(5 [pid 5076] close(4) = 0 [pid 6393] <... ioctl resumed>) = 0 [pid 5076] rmdir("./218/bus" [pid 6394] <... openat resumed>) = 4 [pid 6393] close(3 [pid 5077] <... unlink resumed>) = 0 [pid 6394] ioctl(4, LOOP_SET_FD, 3 [pid 5077] getdents64(3, [pid 5076] <... rmdir resumed>) = 0 [pid 6393] <... close resumed>) = 0 [pid 6393] close(4) = 0 [pid 5076] umount2("./218/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6393] mkdir("./bus", 0777 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6393] <... mkdir resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./218/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./218/binderfs" [pid 6394] <... ioctl resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 6394] close(3 [pid 6393] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6392] <... close resumed>) = 0 [pid 5078] close(3 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] close(3) = 0 [pid 5077] rmdir("./217" [pid 6394] <... close resumed>) = 0 [pid 6392] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] <... close resumed>) = 0 [pid 5076] getdents64(3, [pid 6394] close(4 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] <... rmdir resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6395 attached [pid 6394] <... close resumed>) = 0 [pid 6393] <... mount resumed>) = 0 [pid 5077] mkdir("./218", 0777 [pid 5076] close(3 [pid 6395] set_robust_list(0x55556e32a660, 24 [pid 6393] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5077] <... mkdir resumed>) = 0 [pid 6395] <... set_robust_list resumed>) = 0 [pid 6394] mkdir("./bus", 0777 [pid 6393] <... openat resumed>) = 3 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] <... close resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5076] rmdir("./218" [pid 5077] ioctl(3, LOOP_CLR_FD [pid 6395] chdir("./218" [pid 6394] <... mkdir resumed>) = 0 [pid 6393] chdir("./bus" [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6395 [pid 6393] <... chdir resumed>) = 0 [pid 6395] <... chdir resumed>) = 0 [pid 6393] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] <... rmdir resumed>) = 0 [pid 6395] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6393] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6392] <... open resumed>) = 5 [pid 5076] mkdir("./219", 0777 [pid 6395] <... prctl resumed>) = 0 [pid 6395] setpgid(0, 0 [pid 6394] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5076] <... mkdir resumed>) = 0 [pid 6395] <... setpgid resumed>) = 0 [pid 6392] ftruncate(5, 0 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6395] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6393] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6392] <... ftruncate resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 6392] exit_group(0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6395] <... openat resumed>) = 3 [pid 6392] <... exit_group resumed>) = ? [pid 6395] write(3, "1000", 4 [pid 6393] <... symlink resumed>) = 0 [pid 6392] +++ exited with 0 +++ [pid 6395] <... write resumed>) = 4 [pid 6393] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6395] close(3) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6392, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [ 207.265394][ T6393] loop0: detected capacity change from 0 to 1024 [ 207.297916][ T6394] loop2: detected capacity change from 0 to 1024 [pid 5074] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 6395] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6393] <... creat resumed>) = 4 [pid 6393] rename("./bus", "./file2" [pid 6395] memfd_create("syzkaller", 0 [pid 5074] umount2("./214", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6395] <... memfd_create resumed>) = 3 [pid 6394] <... mount resumed>) = 0 [pid 6393] <... rename resumed>) = -1 EEXIST (File exists) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6394] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5074] openat(AT_FDCWD, "./214", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6395] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6394] <... openat resumed>) = 3 [pid 6393] memfd_create("syzkaller", 0 [pid 5074] <... openat resumed>) = 3 [pid 6395] <... mmap resumed>) = 0x7f0356e00000 [pid 6394] chdir("./bus") = 0 [pid 5074] newfstatat(3, "", [pid 6394] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6394] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6394] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5074] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] umount2("./214/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6395] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6393] <... memfd_create resumed>) = 5 [pid 6394] <... symlink resumed>) = 0 [pid 6393] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6394] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6393] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... ioctl resumed>) = 0 [pid 6395] <... write resumed>) = 524288 [pid 5074] <... umount2 resumed>) = 0 [pid 5077] close(3 [pid 6395] munmap(0x7f0356e00000, 138412032) = 0 [pid 6395] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6395] ioctl(4, LOOP_SET_FD, 3 [pid 6393] <... write resumed>) = 524288 [pid 5077] <... close resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5074] umount2("./214/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6395] <... ioctl resumed>) = 0 [pid 6394] <... creat resumed>) = 4 [pid 6393] munmap(0x7f0356e00000, 138412032 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] close(3 [pid 6395] close(3 [pid 6394] rename("./bus", "./file2" [pid 5076] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6396 attached [pid 6395] <... close resumed>) = 0 [pid 6394] <... rename resumed>) = -1 EEXIST (File exists) [pid 6393] <... munmap resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6396] set_robust_list(0x55556e32a660, 24 [pid 6395] close(4 [pid 6394] memfd_create("syzkaller", 0 [pid 6393] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6396 [pid 5074] newfstatat(AT_FDCWD, "./214/bus", ./strace-static-x86_64: Process 6397 attached [pid 6396] <... set_robust_list resumed>) = 0 [pid 6395] <... close resumed>) = 0 [pid 6394] <... memfd_create resumed>) = 5 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6397 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6397] set_robust_list(0x55556e32a660, 24 [pid 6396] chdir("./218" [pid 6395] mkdir("./bus", 0777 [pid 6394] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6393] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] umount2("./214/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6397] <... set_robust_list resumed>) = 0 [pid 6396] <... chdir resumed>) = 0 [pid 6395] <... mkdir resumed>) = 0 [pid 6394] <... mmap resumed>) = 0x7f0356e00000 [pid 6393] close(5 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6397] chdir("./219" [pid 6396] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6395] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6394] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] openat(AT_FDCWD, "./214/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6397] <... chdir resumed>) = 0 [pid 6396] <... prctl resumed>) = 0 [pid 6394] <... write resumed>) = 524288 [pid 6393] <... close resumed>) = 0 [pid 5074] <... openat resumed>) = 4 [pid 6397] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6396] setpgid(0, 0 [pid 6397] <... prctl resumed>) = 0 [pid 6396] <... setpgid resumed>) = 0 [pid 6397] setpgid(0, 0 [pid 6396] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] newfstatat(4, "", [pid 6397] <... setpgid resumed>) = 0 [pid 6397] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6396] <... openat resumed>) = 3 [pid 6393] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, [pid 6397] <... openat resumed>) = 3 [pid 6396] write(3, "1000", 4 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, [pid 6396] <... write resumed>) = 4 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6396] close(3 [pid 5074] close(4 [pid 6396] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 6396] symlink("/dev/binderfs", "./binderfs" [pid 6393] <... open resumed>) = 5 [ 207.383767][ T6395] loop5: detected capacity change from 0 to 1024 [pid 5074] rmdir("./214/bus") = 0 [pid 6395] <... mount resumed>) = 0 [pid 5074] umount2("./214/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6395] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6397] write(3, "1000", 4 [pid 6395] <... openat resumed>) = 3 [pid 6393] ftruncate(5, 0 [pid 6395] chdir("./bus" [pid 6394] munmap(0x7f0356e00000, 138412032 [pid 5074] newfstatat(AT_FDCWD, "./214/binderfs", [pid 6395] <... chdir resumed>) = 0 [pid 6394] <... munmap resumed>) = 0 [pid 6395] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6394] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6395] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6394] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6395] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6394] close(5 [pid 5074] unlink("./214/binderfs" [pid 6397] <... write resumed>) = 4 [pid 6394] <... close resumed>) = 0 [pid 6393] <... ftruncate resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 6397] close(3) = 0 [pid 6395] <... symlink resumed>) = 0 [pid 6393] exit_group(0 [pid 5074] getdents64(3, [pid 6396] <... symlink resumed>) = 0 [pid 6395] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6397] symlink("/dev/binderfs", "./binderfs" [pid 6396] memfd_create("syzkaller", 0 [pid 6393] <... exit_group resumed>) = ? [pid 5074] close(3) = 0 [pid 5074] rmdir("./214") = 0 [pid 5074] mkdir("./215", 0777 [pid 6397] <... symlink resumed>) = 0 [pid 6396] <... memfd_create resumed>) = 3 [pid 6393] +++ exited with 0 +++ [pid 5074] <... mkdir resumed>) = 0 [pid 6397] memfd_create("syzkaller", 0 [pid 6396] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6393, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6397] <... memfd_create resumed>) = 3 [pid 6396] <... mmap resumed>) = 0x7f0356e00000 [pid 6395] <... creat resumed>) = 4 [pid 6395] rename("./bus", "./file2" [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6397] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6396] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6395] <... rename resumed>) = -1 EEXIST (File exists) [pid 6394] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5074] <... openat resumed>) = 3 [pid 5073] umount2("./215", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6397] <... mmap resumed>) = 0x7f0356e00000 [pid 6395] memfd_create("syzkaller", 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./215", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6395] <... memfd_create resumed>) = 5 [pid 6395] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... openat resumed>) = 3 [pid 6395] <... mmap resumed>) = 0x7f0356e00000 [pid 6395] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6394] <... open resumed>) = 5 [pid 6397] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6394] ftruncate(5, 0 [pid 5073] umount2("./215/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6394] <... ftruncate resumed>) = 0 [pid 6394] exit_group(0 [pid 6395] <... write resumed>) = 524288 [pid 6394] <... exit_group resumed>) = ? [pid 6396] <... write resumed>) = 524288 [pid 6394] +++ exited with 0 +++ [pid 6395] munmap(0x7f0356e00000, 138412032) = 0 [pid 6395] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6394, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6397] <... write resumed>) = 524288 [pid 6396] munmap(0x7f0356e00000, 138412032 [pid 5073] <... umount2 resumed>) = 0 [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 6397] munmap(0x7f0356e00000, 138412032 [pid 6395] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... restart_syscall resumed>) = 0 [pid 5073] umount2("./215/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6397] <... munmap resumed>) = 0 [pid 6395] close(5 [pid 5075] umount2("./215", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./215", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(AT_FDCWD, "./215/bus", [pid 6396] <... munmap resumed>) = 0 [pid 5075] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6397] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6396] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6395] <... close resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 6397] <... openat resumed>) = 4 [pid 6396] <... openat resumed>) = 4 [pid 6395] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5075] getdents64(3, [pid 5073] umount2("./215/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6396] ioctl(4, LOOP_SET_FD, 3 [pid 5075] umount2("./215/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] openat(AT_FDCWD, "./215/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6397] ioctl(4, LOOP_SET_FD, 3 [pid 6396] <... ioctl resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5073] <... openat resumed>) = 4 [pid 5075] umount2("./215/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] newfstatat(4, "", [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./215/bus", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] getdents64(4, [pid 6395] <... open resumed>) = 5 [pid 5075] umount2("./215/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] close(4 [pid 5075] openat(AT_FDCWD, "./215/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... close resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 5074] close(3 [pid 5073] rmdir("./215/bus" [pid 6395] ftruncate(5, 0 [pid 5074] <... close resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 6395] <... ftruncate resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556e32a650) = 6398 [pid 6395] exit_group(0) = ? [pid 6395] +++ exited with 0 +++ ./strace-static-x86_64: Process 6398 attached [pid 6398] set_robust_list(0x55556e32a660, 24) = 0 [pid 6398] chdir("./215") = 0 [pid 6398] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6398] setpgid(0, 0) = 0 [pid 6398] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6398] write(3, "1000", 4) = 4 [pid 6398] close(3) = 0 [pid 6398] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5073] umount2("./215/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6395, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5078] umount2("./218", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./218", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6398] memfd_create("syzkaller", 0 [pid 5078] <... openat resumed>) = 3 [pid 5073] newfstatat(AT_FDCWD, "./215/binderfs", [pid 6398] <... memfd_create resumed>) = 3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] newfstatat(3, "", [pid 6398] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6397] <... ioctl resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(3, [pid 5075] newfstatat(4, "", [pid 5073] unlink("./215/binderfs" [pid 6397] close(3) = 0 [pid 6397] close(4) = 0 [pid 6397] mkdir("./bus", 0777) = 0 [pid 6398] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6397] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5073] <... unlink resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] getdents64(4, [pid 5078] umount2("./218/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] close(3) = 0 [pid 5073] rmdir("./215" [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] <... rmdir resumed>) = 0 [pid 5075] getdents64(4, [pid 5073] mkdir("./216", 0777 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 5075] close(4) = 0 [pid 6397] <... mount resumed>) = 0 [pid 6396] close(3 [pid 5078] <... umount2 resumed>) = 0 [pid 5075] rmdir("./215/bus" [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6397] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5075] <... rmdir resumed>) = 0 [pid 6397] chdir("./bus" [pid 5073] <... openat resumed>) = 3 [pid 6396] <... close resumed>) = 0 [pid 5075] umount2("./215/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6397] <... chdir resumed>) = 0 [pid 6396] close(4 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6397] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6396] <... close resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./215/binderfs", [pid 6398] <... write resumed>) = 524288 [pid 6397] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6396] mkdir("./bus", 0777 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6396] <... mkdir resumed>) = 0 [pid 5075] unlink("./215/binderfs" [pid 6396] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5078] umount2("./218/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6398] munmap(0x7f0356e00000, 138412032 [pid 6397] <... symlink resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... unlink resumed>) = 0 [pid 6398] <... munmap resumed>) = 0 [pid 5078] newfstatat(AT_FDCWD, "./218/bus", [pid 6397] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [ 207.517647][ T6396] loop4: detected capacity change from 0 to 1024 [ 207.524978][ T6397] loop3: detected capacity change from 0 to 1024 [pid 5078] umount2("./218/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6398] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6397] <... creat resumed>) = 4 [pid 6396] <... mount resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] close(3 [pid 5078] openat(AT_FDCWD, "./218/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6396] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5075] <... close resumed>) = 0 [pid 6398] <... openat resumed>) = 4 [pid 6396] <... openat resumed>) = 3 [pid 5078] <... openat resumed>) = 4 [pid 5075] rmdir("./215" [pid 6398] ioctl(4, LOOP_SET_FD, 3 [pid 6397] rename("./bus", "./file2" [pid 6396] chdir("./bus" [pid 5078] newfstatat(4, "", [pid 5075] <... rmdir resumed>) = 0 [pid 6396] <... chdir resumed>) = 0 [pid 5075] mkdir("./216", 0777 [pid 6396] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(4, [pid 5075] <... mkdir resumed>) = 0 [pid 6396] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5078] close(4 [pid 5075] <... openat resumed>) = 3 [pid 6396] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5078] <... close resumed>) = 0 [pid 5078] rmdir("./218/bus" [pid 6397] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] <... rmdir resumed>) = 0 [pid 6397] memfd_create("syzkaller", 0) = 5 [pid 6397] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5078] umount2("./218/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] newfstatat(AT_FDCWD, "./218/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] unlink("./218/binderfs") = 0 [pid 6396] <... symlink resumed>) = 0 [pid 5078] getdents64(3, [pid 6396] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5078] close(3) = 0 [pid 5078] rmdir("./218") = 0 [pid 5078] mkdir("./219", 0777) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 6397] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6396] <... creat resumed>) = 4 [pid 6398] <... ioctl resumed>) = 0 [pid 6398] close(3) = 0 [pid 6398] close(4) = 0 [pid 6398] mkdir("./bus", 0777) = 0 [pid 6398] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5073] <... ioctl resumed>) = 0 [pid 6396] rename("./bus", "./file2" [pid 6398] <... mount resumed>) = 0 [pid 6398] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6398] chdir("./bus") = 0 [pid 6398] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6398] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6397] <... write resumed>) = 524288 [pid 6396] <... rename resumed>) = -1 EEXIST (File exists) [pid 5073] close(3 [ 207.587016][ T6398] loop1: detected capacity change from 0 to 1024 [pid 6397] munmap(0x7f0356e00000, 138412032) = 0 [pid 6398] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6396] memfd_create("syzkaller", 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 6396] <... memfd_create resumed>) = 5 [pid 5075] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6397] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6396] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6396] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 6400 attached ./strace-static-x86_64: Process 6399 attached [pid 6398] <... creat resumed>) = 4 [pid 6397] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6396] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] close(3 [pid 6399] set_robust_list(0x55556e32a660, 24 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6399 [pid 6399] <... set_robust_list resumed>) = 0 [pid 6400] set_robust_list(0x55556e32a660, 24) = 0 [pid 6399] chdir("./216" [pid 6398] rename("./bus", "./file2" [pid 5078] <... close resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6400] chdir("./216" [pid 6399] <... chdir resumed>) = 0 [pid 6398] <... rename resumed>) = -1 EEXIST (File exists) [pid 6397] close(5 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6400 [pid 6399] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6398] memfd_create("syzkaller", 0 [pid 6397] <... close resumed>) = 0 [pid 6400] <... chdir resumed>) = 0 [pid 6399] <... prctl resumed>) = 0 [pid 6398] <... memfd_create resumed>) = 5 [pid 6400] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6399] setpgid(0, 0 [pid 6398] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 6401 attached [pid 6400] <... prctl resumed>) = 0 [pid 6399] <... setpgid resumed>) = 0 [pid 6398] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6401 [pid 6401] set_robust_list(0x55556e32a660, 24 [pid 6400] setpgid(0, 0 [pid 6399] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6398] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6401] <... set_robust_list resumed>) = 0 [pid 6400] <... setpgid resumed>) = 0 [pid 6399] <... openat resumed>) = 3 [pid 6401] chdir("./219" [pid 6400] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6399] write(3, "1000", 4 [pid 6396] <... write resumed>) = 524288 [pid 6399] <... write resumed>) = 4 [pid 6400] <... openat resumed>) = 3 [pid 6399] close(3) = 0 [pid 6399] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6398] <... write resumed>) = 524288 [pid 6397] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6401] <... chdir resumed>) = 0 [pid 6400] write(3, "1000", 4 [pid 6396] munmap(0x7f0356e00000, 138412032 [pid 6401] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6400] <... write resumed>) = 4 [pid 6399] memfd_create("syzkaller", 0 [pid 6396] <... munmap resumed>) = 0 [pid 6401] setpgid(0, 0 [pid 6400] close(3 [pid 6401] <... setpgid resumed>) = 0 [pid 6400] <... close resumed>) = 0 [pid 6399] <... memfd_create resumed>) = 3 [pid 6396] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6400] symlink("/dev/binderfs", "./binderfs" [pid 6399] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6401] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6400] <... symlink resumed>) = 0 [pid 6399] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6396] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6396] close(5 [pid 6400] memfd_create("syzkaller", 0 [pid 6401] <... openat resumed>) = 3 [pid 6400] <... memfd_create resumed>) = 3 [pid 6397] <... open resumed>) = 5 [pid 6396] <... close resumed>) = 0 [pid 6401] write(3, "1000", 4 [pid 6400] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6401] <... write resumed>) = 4 [pid 6401] close(3) = 0 [pid 6397] ftruncate(5, 0) = 0 [pid 6397] exit_group(0) = ? [pid 6397] +++ exited with 0 +++ [pid 6398] munmap(0x7f0356e00000, 138412032 [pid 6401] symlink("/dev/binderfs", "./binderfs" [pid 6398] <... munmap resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6397, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 6401] <... symlink resumed>) = 0 [pid 6399] <... write resumed>) = 524288 [pid 6398] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] <... restart_syscall resumed>) = 0 [pid 6396] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5076] umount2("./219", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./219", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5076] newfstatat(3, "", [pid 6398] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6398] close(5 [pid 5076] getdents64(3, [pid 6401] memfd_create("syzkaller", 0 [pid 6400] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6399] munmap(0x7f0356e00000, 138412032 [pid 6401] <... memfd_create resumed>) = 3 [pid 6401] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6399] <... munmap resumed>) = 0 [pid 6401] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6399] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5076] umount2("./219/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6399] ioctl(4, LOOP_SET_FD, 3 [pid 6396] <... open resumed>) = 5 [pid 6401] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6400] <... write resumed>) = 524288 [pid 6398] <... close resumed>) = 0 [pid 6396] ftruncate(5, 0 [pid 6399] <... ioctl resumed>) = 0 [pid 6401] <... write resumed>) = 524288 [pid 6400] munmap(0x7f0356e00000, 138412032 [pid 6398] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6396] <... ftruncate resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 6399] close(3 [pid 5076] umount2("./219/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6399] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6399] close(4 [pid 5076] newfstatat(AT_FDCWD, "./219/bus", [pid 6399] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6399] mkdir("./bus", 0777 [pid 5076] umount2("./219/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6401] munmap(0x7f0356e00000, 138412032 [pid 6400] <... munmap resumed>) = 0 [pid 6399] <... mkdir resumed>) = 0 [pid 6396] exit_group(0 [pid 6401] <... munmap resumed>) = 0 [pid 6400] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6398] <... open resumed>) = 5 [pid 6396] <... exit_group resumed>) = ? [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6398] ftruncate(5, 0 [pid 5076] openat(AT_FDCWD, "./219/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6399] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6400] <... openat resumed>) = 4 [pid 6398] <... ftruncate resumed>) = 0 [pid 6396] +++ exited with 0 +++ [pid 6401] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6400] ioctl(4, LOOP_SET_FD, 3 [pid 5076] <... openat resumed>) = 4 [pid 6401] <... openat resumed>) = 4 [pid 6400] <... ioctl resumed>) = 0 [pid 6399] <... mount resumed>) = 0 [pid 6398] exit_group(0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6396, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5076] newfstatat(4, "", [pid 6401] ioctl(4, LOOP_SET_FD, 3 [pid 6399] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6398] <... exit_group resumed>) = ? [pid 5077] umount2("./218", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6400] close(3 [pid 6399] <... openat resumed>) = 3 [pid 6398] +++ exited with 0 +++ [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6400] <... close resumed>) = 0 [pid 6399] chdir("./bus" [pid 5076] getdents64(4, [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6398, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 6400] close(4 [pid 6399] <... chdir resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6400] <... close resumed>) = 0 [pid 6399] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5077] openat(AT_FDCWD, "./218", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] umount2("./215", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6400] mkdir("./bus", 0777 [pid 6399] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5077] <... openat resumed>) = 3 [pid 5076] getdents64(4, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6399] <... symlink resumed>) = 0 [pid 5077] newfstatat(3, "", [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] openat(AT_FDCWD, "./215", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6401] <... ioctl resumed>) = 0 [pid 6400] <... mkdir resumed>) = 0 [pid 6399] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] close(4 [pid 5074] <... openat resumed>) = 3 [pid 5077] getdents64(3, [pid 5076] <... close resumed>) = 0 [pid 5074] newfstatat(3, "", [pid 6399] <... creat resumed>) = 4 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] rmdir("./219/bus" [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6399] rename("./bus", "./file2" [pid 5077] umount2("./218/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... rmdir resumed>) = 0 [pid 5074] getdents64(3, [pid 6401] close(3 [pid 6400] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] umount2("./219/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./215/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6401] <... close resumed>) = 0 [pid 6399] <... rename resumed>) = -1 EEXIST (File exists) [pid 5077] <... umount2 resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = 0 [pid 6401] close(4 [pid 6399] memfd_create("syzkaller", 0 [pid 5076] newfstatat(AT_FDCWD, "./219/binderfs", [pid 6401] <... close resumed>) = 0 [pid 6400] <... mount resumed>) = 0 [pid 6399] <... memfd_create resumed>) = 5 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./215/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6401] mkdir("./bus", 0777 [pid 6400] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6399] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] unlink("./219/binderfs" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6401] <... mkdir resumed>) = 0 [pid 6400] <... openat resumed>) = 3 [pid 6399] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] umount2("./218/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... unlink resumed>) = 0 [pid 6400] chdir("./bus" [pid 5074] newfstatat(AT_FDCWD, "./215/bus", [pid 6401] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6400] <... chdir resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6400] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5077] newfstatat(AT_FDCWD, "./218/bus", [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6401] <... mount resumed>) = 0 [pid 6400] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6399] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3) = 0 [pid 5074] umount2("./215/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] rmdir("./219" [pid 5074] openat(AT_FDCWD, "./215/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... rmdir resumed>) = 0 [pid 5074] <... openat resumed>) = 4 [pid 5074] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [ 207.730730][ T6399] loop2: detected capacity change from 0 to 1024 [ 207.757838][ T6400] loop0: detected capacity change from 0 to 1024 [ 207.765613][ T6401] loop5: detected capacity change from 0 to 1024 [pid 5074] getdents64(4, [pid 5076] mkdir("./220", 0777 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6401] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6400] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6401] <... openat resumed>) = 3 [pid 6400] <... symlink resumed>) = 0 [pid 6399] <... write resumed>) = 524288 [pid 5077] umount2("./218/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... mkdir resumed>) = 0 [pid 5074] close(4 [pid 6401] chdir("./bus" [pid 6400] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6401] <... chdir resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./218/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6401] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6400] <... creat resumed>) = 4 [pid 5077] <... openat resumed>) = 4 [pid 5074] <... close resumed>) = 0 [pid 6401] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6400] rename("./bus", "./file2" [pid 5077] newfstatat(4, "", [pid 5074] rmdir("./215/bus" [pid 6401] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6400] <... rename resumed>) = -1 EEXIST (File exists) [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5077] getdents64(4, [pid 5074] umount2("./215/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6400] memfd_create("syzkaller", 0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6400] <... memfd_create resumed>) = 5 [pid 5077] getdents64(4, [pid 5074] newfstatat(AT_FDCWD, "./215/binderfs", [pid 6401] <... symlink resumed>) = 0 [pid 6400] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] close(4 [pid 5076] <... openat resumed>) = 3 [pid 5074] unlink("./215/binderfs" [pid 5077] <... close resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5074] <... unlink resumed>) = 0 [pid 5077] rmdir("./218/bus" [pid 5074] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 5074] rmdir("./215" [pid 5077] <... rmdir resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 6400] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] umount2("./218/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] mkdir("./216", 0777 [pid 5077] newfstatat(AT_FDCWD, "./218/binderfs", [pid 5074] <... mkdir resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6399] munmap(0x7f0356e00000, 138412032 [pid 5077] unlink("./218/binderfs" [pid 6401] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5077] <... unlink resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 6399] <... munmap resumed>) = 0 [pid 5077] getdents64(3, [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6399] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5077] close(3 [pid 6399] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... close resumed>) = 0 [pid 5077] rmdir("./218") = 0 [pid 6399] close(5 [pid 6401] <... creat resumed>) = 4 [pid 6400] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6399] <... close resumed>) = 0 [pid 6401] rename("./bus", "./file2" [pid 5077] mkdir("./219", 0777 [pid 6399] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6401] <... rename resumed>) = -1 EEXIST (File exists) [pid 6400] <... write resumed>) = 524288 [pid 5077] <... mkdir resumed>) = 0 [pid 6401] memfd_create("syzkaller", 0 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6401] <... memfd_create resumed>) = 5 [pid 6400] munmap(0x7f0356e00000, 138412032 [pid 5077] <... openat resumed>) = 3 [pid 6401] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 6401] <... mmap resumed>) = 0x7f0356e00000 [pid 6400] <... munmap resumed>) = 0 [pid 6399] <... open resumed>) = 5 [pid 6400] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6399] ftruncate(5, 0 [pid 6400] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6399] <... ftruncate resumed>) = 0 [pid 6400] close(5 [pid 6399] exit_group(0) = ? [pid 6400] <... close resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 6401] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6399] +++ exited with 0 +++ [pid 5076] close(3 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6399, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5074] <... ioctl resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6402 attached [pid 6401] <... write resumed>) = 524288 [pid 6400] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5074] close(3 [pid 6402] set_robust_list(0x55556e32a660, 24 [pid 6401] munmap(0x7f0356e00000, 138412032 [pid 5074] <... close resumed>) = 0 [pid 6402] <... set_robust_list resumed>) = 0 [pid 6401] <... munmap resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6402] chdir("./220" [pid 6401] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6400] <... open resumed>) = 5 [pid 6402] <... chdir resumed>) = 0 [pid 5075] umount2("./216", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6402] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6401] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6400] ftruncate(5, 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6402] <... prctl resumed>) = 0 [pid 6401] close(5 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6402 [pid 5075] openat(AT_FDCWD, "./216", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6402] setpgid(0, 0 [pid 6400] <... ftruncate resumed>) = 0 [pid 6402] <... setpgid resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6403 [pid 6402] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6400] exit_group(0 [pid 5075] newfstatat(3, "", [pid 6402] <... openat resumed>) = 3 [pid 6400] <... exit_group resumed>) = ? [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 6403 attached [pid 6402] write(3, "1000", 4 [pid 5075] getdents64(3, [pid 6402] <... write resumed>) = 4 [pid 6402] close(3 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6403] set_robust_list(0x55556e32a660, 24) = 0 [pid 5075] umount2("./216/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6402] <... close resumed>) = 0 [pid 6402] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6402] memfd_create("syzkaller", 0) = 3 [pid 6402] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6402] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6400] +++ exited with 0 +++ [pid 5077] <... ioctl resumed>) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6400, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6401] <... close resumed>) = 0 [pid 5073] umount2("./216", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./216", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6403] chdir("./216" [pid 5073] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] umount2("./216/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6403] <... chdir resumed>) = 0 [pid 6403] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] <... umount2 resumed>) = 0 [pid 6403] <... prctl resumed>) = 0 [pid 6403] setpgid(0, 0) = 0 [pid 6401] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] close(3 [pid 5075] umount2("./216/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6403] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5077] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6404 attached [pid 6403] <... openat resumed>) = 3 [pid 5075] newfstatat(AT_FDCWD, "./216/bus", [pid 6402] <... write resumed>) = 524288 [pid 6401] <... open resumed>) = 5 [pid 5073] <... umount2 resumed>) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6404 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6404] set_robust_list(0x55556e32a660, 24 [pid 6403] write(3, "1000", 4 [pid 6401] ftruncate(5, 0 [pid 5075] umount2("./216/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6404] <... set_robust_list resumed>) = 0 [pid 6403] <... write resumed>) = 4 [pid 6404] chdir("./219" [pid 6403] close(3 [pid 6401] <... ftruncate resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6404] <... chdir resumed>) = 0 [pid 6403] <... close resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./216/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6404] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6403] symlink("/dev/binderfs", "./binderfs" [pid 6404] <... prctl resumed>) = 0 [pid 6404] setpgid(0, 0 [pid 5075] <... openat resumed>) = 4 [pid 6404] <... setpgid resumed>) = 0 [pid 6403] <... symlink resumed>) = 0 [pid 6401] exit_group(0 [pid 6404] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5073] umount2("./216/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6403] memfd_create("syzkaller", 0 [pid 6404] <... openat resumed>) = 3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6403] <... memfd_create resumed>) = 3 [pid 6401] <... exit_group resumed>) = ? [pid 5075] newfstatat(4, "", [pid 5073] newfstatat(AT_FDCWD, "./216/bus", [pid 6404] write(3, "1000", 4 [pid 6403] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6403] <... mmap resumed>) = 0x7f0356e00000 [pid 5073] umount2("./216/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./216/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6404] <... write resumed>) = 4 [pid 5075] getdents64(4, [pid 5073] <... openat resumed>) = 4 [pid 6404] close(3 [pid 6403] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6402] munmap(0x7f0356e00000, 138412032 [pid 6401] +++ exited with 0 +++ [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] newfstatat(4, "", [pid 6404] <... close resumed>) = 0 [pid 6403] <... write resumed>) = 524288 [pid 6402] <... munmap resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./216/bus") = 0 [pid 6402] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] umount2("./216/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6402] <... openat resumed>) = 4 [pid 5073] newfstatat(AT_FDCWD, "./216/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6402] ioctl(4, LOOP_SET_FD, 3 [pid 5073] unlink("./216/binderfs" [pid 6404] symlink("/dev/binderfs", "./binderfs" [pid 6403] munmap(0x7f0356e00000, 138412032 [pid 6402] <... ioctl resumed>) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6401, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6403] <... munmap resumed>) = 0 [pid 5075] close(4 [pid 6404] <... symlink resumed>) = 0 [pid 6402] close(3 [pid 5073] <... unlink resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 6404] memfd_create("syzkaller", 0 [pid 6403] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6402] <... close resumed>) = 0 [pid 5075] rmdir("./216/bus" [pid 5073] getdents64(3, [pid 6404] <... memfd_create resumed>) = 3 [pid 6402] close(4 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3 [pid 5075] <... rmdir resumed>) = 0 [pid 6402] <... close resumed>) = 0 [pid 6404] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... close resumed>) = 0 [pid 6402] mkdir("./bus", 0777 [pid 5073] rmdir("./216" [pid 6404] <... mmap resumed>) = 0x7f0356e00000 [pid 5073] <... rmdir resumed>) = 0 [pid 5073] mkdir("./217", 0777 [pid 6402] <... mkdir resumed>) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6404] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6402] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5075] umount2("./216/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./219", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6403] <... openat resumed>) = 4 [pid 5073] <... openat resumed>) = 3 [pid 6403] ioctl(4, LOOP_SET_FD, 3 [pid 6402] <... mount resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./219", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5078] <... openat resumed>) = 3 [pid 6403] <... ioctl resumed>) = 0 [pid 6402] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] newfstatat(3, "", [pid 5075] newfstatat(AT_FDCWD, "./216/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6403] close(3 [pid 6402] <... openat resumed>) = 3 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] unlink("./216/binderfs" [pid 6403] <... close resumed>) = 0 [pid 6402] chdir("./bus" [pid 5078] getdents64(3, [pid 5075] <... unlink resumed>) = 0 [pid 6403] close(4 [pid 6402] <... chdir resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] getdents64(3, [pid 6403] <... close resumed>) = 0 [pid 5078] umount2("./219/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6403] mkdir("./bus", 0777 [pid 6402] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] close(3 [pid 6403] <... mkdir resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 6402] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6404] <... write resumed>) = 524288 [pid 6402] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5075] rmdir("./216" [pid 6403] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5075] <... rmdir resumed>) = 0 [pid 6404] munmap(0x7f0356e00000, 138412032 [pid 6402] <... symlink resumed>) = 0 [pid 5078] <... umount2 resumed>) = 0 [pid 5075] mkdir("./217", 0777 [pid 6404] <... munmap resumed>) = 0 [pid 6403] <... mount resumed>) = 0 [pid 6402] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] umount2("./219/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... mkdir resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6404] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6403] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] newfstatat(AT_FDCWD, "./219/bus", [pid 5075] <... openat resumed>) = 3 [pid 6404] <... openat resumed>) = 4 [pid 6403] <... openat resumed>) = 3 [pid 6402] <... creat resumed>) = 4 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6404] ioctl(4, LOOP_SET_FD, 3 [pid 6403] chdir("./bus" [pid 6402] rename("./bus", "./file2" [pid 5078] umount2("./219/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6403] <... chdir resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 207.972198][ T6402] loop3: detected capacity change from 0 to 1024 [ 207.996993][ T6403] loop1: detected capacity change from 0 to 1024 [pid 5078] openat(AT_FDCWD, "./219/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5078] newfstatat(4, "", [pid 6403] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6402] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5078] close(4) = 0 [pid 5078] rmdir("./219/bus" [pid 6402] memfd_create("syzkaller", 0 [pid 6403] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6402] <... memfd_create resumed>) = 5 [pid 6403] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6402] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5078] <... rmdir resumed>) = 0 [pid 6404] <... ioctl resumed>) = 0 [pid 6403] <... symlink resumed>) = 0 [pid 6402] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... ioctl resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 6403] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] umount2("./219/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] newfstatat(AT_FDCWD, "./219/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6404] close(3 [pid 6403] <... creat resumed>) = 4 [pid 6402] <... write resumed>) = 524288 [pid 5078] unlink("./219/binderfs" [pid 5073] close(3 [pid 6404] <... close resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6404] close(4 [pid 5075] close(3 [pid 6404] <... close resumed>) = 0 [pid 6404] mkdir("./bus", 0777 [pid 5075] <... close resumed>) = 0 [pid 6403] rename("./bus", "./file2" [pid 6404] <... mkdir resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] getdents64(3, [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6405 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5078] close(3) = 0 ./strace-static-x86_64: Process 6405 attached [ 208.031353][ T6404] loop4: detected capacity change from 0 to 1024 [pid 5078] rmdir("./219") = 0 [pid 6405] set_robust_list(0x55556e32a660, 24 [pid 5078] mkdir("./220", 0777 [pid 6405] <... set_robust_list resumed>) = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 6405] chdir("./217" [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 6405] <... chdir resumed>) = 0 [pid 6405] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6405] setpgid(0, 0) = 0 [pid 6405] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6405] write(3, "1000", 4 [pid 6404] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6405] <... write resumed>) = 4 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6406 [pid 6405] close(3) = 0 [pid 6405] symlink("/dev/binderfs", "./binderfs") = 0 ./strace-static-x86_64: Process 6406 attached [pid 6405] memfd_create("syzkaller", 0 [pid 6404] <... mount resumed>) = 0 [pid 6403] <... rename resumed>) = -1 EEXIST (File exists) [pid 6402] munmap(0x7f0356e00000, 138412032 [pid 6406] set_robust_list(0x55556e32a660, 24 [pid 6404] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6403] memfd_create("syzkaller", 0 [pid 6405] <... memfd_create resumed>) = 3 [pid 6406] <... set_robust_list resumed>) = 0 [pid 6405] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6404] <... openat resumed>) = 3 [pid 6403] <... memfd_create resumed>) = 5 [pid 6402] <... munmap resumed>) = 0 [pid 6405] <... mmap resumed>) = 0x7f0356e00000 [pid 6405] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6406] chdir("./217" [pid 6404] chdir("./bus" [pid 6403] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6402] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6406] <... chdir resumed>) = 0 [pid 6404] <... chdir resumed>) = 0 [pid 6403] <... mmap resumed>) = 0x7f0356e00000 [pid 6402] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6406] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6405] <... write resumed>) = 524288 [pid 6404] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6403] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6402] close(5 [pid 6406] <... prctl resumed>) = 0 [pid 6404] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6403] <... write resumed>) = 524288 [pid 6402] <... close resumed>) = 0 [pid 6406] setpgid(0, 0 [pid 6404] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6406] <... setpgid resumed>) = 0 [pid 6406] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6404] <... symlink resumed>) = 0 [pid 6402] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6406] <... openat resumed>) = 3 [pid 6405] munmap(0x7f0356e00000, 138412032 [pid 6404] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6402] <... open resumed>) = 5 [pid 5078] <... ioctl resumed>) = 0 [pid 6405] <... munmap resumed>) = 0 [pid 6404] <... creat resumed>) = 4 [pid 6402] ftruncate(5, 0 [pid 5078] close(3 [pid 6405] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6404] rename("./bus", "./file2" [pid 6402] <... ftruncate resumed>) = 0 [pid 6406] write(3, "1000", 4 [pid 6405] <... openat resumed>) = 4 [pid 6404] <... rename resumed>) = -1 EEXIST (File exists) [pid 6402] exit_group(0 [pid 5078] <... close resumed>) = 0 [pid 6406] <... write resumed>) = 4 [pid 6405] ioctl(4, LOOP_SET_FD, 3 [pid 6404] memfd_create("syzkaller", 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6406] close(3 [pid 6403] munmap(0x7f0356e00000, 138412032 [pid 6402] <... exit_group resumed>) = ? [pid 6402] +++ exited with 0 +++ [pid 6406] <... close resumed>) = 0 [pid 6403] <... munmap resumed>) = 0 [pid 6406] symlink("/dev/binderfs", "./binderfs" [pid 6403] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6406] <... symlink resumed>) = 0 [pid 6403] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6406] memfd_create("syzkaller", 0 [pid 6404] <... memfd_create resumed>) = 5 [pid 6403] close(5 [pid 6404] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6406] <... memfd_create resumed>) = 3 [pid 6404] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6402, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5076] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 6407 attached [pid 6406] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... restart_syscall resumed>) = 0 [pid 6406] <... mmap resumed>) = 0x7f0356e00000 [pid 6406] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6407] set_robust_list(0x55556e32a660, 24 [pid 6403] <... close resumed>) = 0 [pid 6407] <... set_robust_list resumed>) = 0 [pid 6407] chdir("./220" [pid 5076] umount2("./220", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6407] <... chdir resumed>) = 0 [pid 6407] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6407] <... prctl resumed>) = 0 [pid 6407] setpgid(0, 0 [pid 5076] openat(AT_FDCWD, "./220", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6407 [pid 6407] <... setpgid resumed>) = 0 [pid 6407] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6405] <... ioctl resumed>) = 0 [pid 6404] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... openat resumed>) = 3 [pid 6407] <... openat resumed>) = 3 [pid 6405] close(3 [pid 6404] <... write resumed>) = 524288 [pid 6403] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5076] newfstatat(3, "", [pid 6405] <... close resumed>) = 0 [pid 6407] write(3, "1000", 4 [pid 6405] close(4 [pid 6407] <... write resumed>) = 4 [pid 6405] <... close resumed>) = 0 [pid 6407] close(3 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6407] <... close resumed>) = 0 [pid 5076] getdents64(3, [pid 6407] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6403] <... open resumed>) = 5 [pid 6403] ftruncate(5, 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6407] memfd_create("syzkaller", 0 [pid 6403] <... ftruncate resumed>) = 0 [pid 5076] umount2("./220/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6407] <... memfd_create resumed>) = 3 [pid 6403] exit_group(0) = ? [pid 6403] +++ exited with 0 +++ [pid 6407] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6403, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6407] <... mmap resumed>) = 0x7f0356e00000 [pid 6405] mkdir("./bus", 0777) = 0 [pid 5074] umount2("./216", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./216", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6404] munmap(0x7f0356e00000, 138412032 [pid 5074] newfstatat(3, "", [pid 6407] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6404] <... munmap resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] umount2("./216/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6406] <... write resumed>) = 524288 [pid 6405] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6407] <... write resumed>) = 524288 [pid 6406] munmap(0x7f0356e00000, 138412032 [pid 6404] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6407] munmap(0x7f0356e00000, 138412032 [pid 6406] <... munmap resumed>) = 0 [pid 6404] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6406] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6407] <... munmap resumed>) = 0 [pid 6406] <... openat resumed>) = 4 [ 208.162192][ T6405] loop0: detected capacity change from 0 to 1024 [pid 6406] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6405] <... mount resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 6405] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6407] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6405] <... openat resumed>) = 3 [pid 6404] close(5 [pid 6407] <... openat resumed>) = 4 [pid 6405] chdir("./bus" [pid 6404] <... close resumed>) = 0 [pid 5076] umount2("./220/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./216/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6407] ioctl(4, LOOP_SET_FD, 3 [pid 6405] <... chdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6406] close(3 [pid 6405] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6404] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./216/bus", [pid 6406] <... close resumed>) = 0 [pid 6405] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6405] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5076] newfstatat(AT_FDCWD, "./220/bus", [pid 5074] umount2("./216/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6406] close(4 [pid 6405] <... symlink resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6406] <... close resumed>) = 0 [pid 6405] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5076] umount2("./220/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] openat(AT_FDCWD, "./216/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6406] mkdir("./bus", 0777 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... openat resumed>) = 4 [pid 6407] <... ioctl resumed>) = 0 [pid 6406] <... mkdir resumed>) = 0 [pid 6405] <... creat resumed>) = 4 [pid 6404] <... open resumed>) = 5 [pid 5074] newfstatat(4, "", [pid 6407] close(3 [pid 5076] openat(AT_FDCWD, "./220/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6407] <... close resumed>) = 0 [pid 6405] rename("./bus", "./file2" [pid 6404] ftruncate(5, 0 [pid 5076] <... openat resumed>) = 4 [pid 5074] getdents64(4, [pid 6407] close(4 [pid 6406] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6405] <... rename resumed>) = -1 EEXIST (File exists) [pid 6404] <... ftruncate resumed>) = 0 [pid 5076] newfstatat(4, "", [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6407] <... close resumed>) = 0 [pid 6405] memfd_create("syzkaller", 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, [pid 6407] mkdir("./bus", 0777 [pid 6405] <... memfd_create resumed>) = 5 [pid 6404] exit_group(0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] getdents64(4, [pid 5074] close(4 [pid 6407] <... mkdir resumed>) = 0 [pid 6405] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] <... close resumed>) = 0 [pid 6407] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6405] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] getdents64(4, [pid 6404] <... exit_group resumed>) = ? [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] rmdir("./216/bus" [pid 6405] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6404] +++ exited with 0 +++ [pid 5076] close(4 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6404, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 5074] <... rmdir resumed>) = 0 [pid 5077] <... restart_syscall resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5076] rmdir("./220/bus" [pid 5074] umount2("./216/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6406] <... mount resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] umount2("./219", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] newfstatat(AT_FDCWD, "./216/binderfs", [pid 6406] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] openat(AT_FDCWD, "./219", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] umount2("./220/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] unlink("./216/binderfs" [pid 6407] <... mount resumed>) = 0 [pid 6406] <... openat resumed>) = 3 [pid 6405] <... write resumed>) = 524288 [pid 5077] <... openat resumed>) = 3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... unlink resumed>) = 0 [ 208.216295][ T6406] loop2: detected capacity change from 0 to 1024 [ 208.229573][ T6407] loop5: detected capacity change from 0 to 1024 [pid 6407] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6406] chdir("./bus" [pid 5077] newfstatat(3, "", [pid 6407] <... openat resumed>) = 3 [pid 5074] getdents64(3, [pid 6407] chdir("./bus" [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] newfstatat(AT_FDCWD, "./220/binderfs", [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6407] <... chdir resumed>) = 0 [pid 5077] getdents64(3, [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] close(3 [pid 6407] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6406] <... chdir resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] unlink("./220/binderfs" [pid 5074] <... close resumed>) = 0 [pid 6407] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] umount2("./219/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... unlink resumed>) = 0 [pid 5074] rmdir("./216" [pid 5076] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5076] rmdir("./220" [pid 5074] mkdir("./217", 0777 [pid 5076] <... rmdir resumed>) = 0 [pid 5076] mkdir("./221", 0777) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6407] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6406] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] <... openat resumed>) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5074] <... openat resumed>) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6407] <... symlink resumed>) = 0 [pid 6406] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6405] munmap(0x7f0356e00000, 138412032 [pid 5077] <... umount2 resumed>) = 0 [pid 6407] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6406] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5077] umount2("./219/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./219/bus", [pid 6405] <... munmap resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6407] <... creat resumed>) = 4 [pid 5077] umount2("./219/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./219/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5077] newfstatat(4, "", [pid 6405] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] getdents64(4, [pid 6407] rename("./bus", "./file2" [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] getdents64(4, [pid 6405] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6407] <... rename resumed>) = -1 EEXIST (File exists) [pid 6405] close(5 [pid 5077] close(4) = 0 [pid 5077] rmdir("./219/bus" [pid 6407] memfd_create("syzkaller", 0 [pid 5077] <... rmdir resumed>) = 0 [pid 6407] <... memfd_create resumed>) = 5 [pid 6406] <... symlink resumed>) = 0 [pid 6407] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] umount2("./219/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6407] <... mmap resumed>) = 0x7f0356e00000 [pid 6406] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6405] <... close resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6405] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] newfstatat(AT_FDCWD, "./219/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] unlink("./219/binderfs") = 0 [pid 6407] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6406] <... creat resumed>) = 4 [pid 6405] <... open resumed>) = 5 [pid 5077] getdents64(3, [pid 5076] <... ioctl resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 6406] rename("./bus", "./file2" [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6405] ftruncate(5, 0 [pid 5077] close(3 [pid 6406] <... rename resumed>) = -1 EEXIST (File exists) [pid 6405] <... ftruncate resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5076] close(3 [pid 6406] memfd_create("syzkaller", 0 [pid 5077] rmdir("./219" [pid 5076] <... close resumed>) = 0 [pid 6407] <... write resumed>) = 524288 [pid 6406] <... memfd_create resumed>) = 5 [pid 6405] exit_group(0 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] close(3 [pid 6406] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6405] <... exit_group resumed>) = ? [pid 5077] mkdir("./220", 0777 [pid 5074] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6406] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] <... mkdir resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6408 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 6408 attached ) = 3 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6409 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 6408] set_robust_list(0x55556e32a660, 24 [pid 6407] munmap(0x7f0356e00000, 138412032./strace-static-x86_64: Process 6409 attached [pid 6408] <... set_robust_list resumed>) = 0 [pid 6407] <... munmap resumed>) = 0 [pid 6409] set_robust_list(0x55556e32a660, 24 [pid 6408] chdir("./221" [pid 6407] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6409] <... set_robust_list resumed>) = 0 [pid 6408] <... chdir resumed>) = 0 [pid 6409] chdir("./217" [pid 6408] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6407] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6405] +++ exited with 0 +++ [pid 6408] <... prctl resumed>) = 0 [pid 6407] close(5 [pid 6409] <... chdir resumed>) = 0 [pid 6408] setpgid(0, 0 [pid 6406] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6405, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6409] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6408] <... setpgid resumed>) = 0 [pid 6409] <... prctl resumed>) = 0 [pid 6408] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6407] <... close resumed>) = 0 [pid 5073] umount2("./217", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6408] <... openat resumed>) = 3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6409] setpgid(0, 0 [pid 6408] write(3, "1000", 4 [pid 5073] openat(AT_FDCWD, "./217", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6409] <... setpgid resumed>) = 0 [pid 6408] <... write resumed>) = 4 [pid 5073] <... openat resumed>) = 3 [pid 6409] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6408] close(3 [pid 5073] newfstatat(3, "", [pid 6408] <... close resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6409] <... openat resumed>) = 3 [pid 6408] symlink("/dev/binderfs", "./binderfs" [pid 6407] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5073] getdents64(3, [pid 6409] write(3, "1000", 4 [pid 6408] <... symlink resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6409] <... write resumed>) = 4 [pid 6408] memfd_create("syzkaller", 0 [pid 6407] <... open resumed>) = 5 [pid 6406] <... write resumed>) = 524288 [pid 5073] umount2("./217/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6409] close(3 [pid 6408] <... memfd_create resumed>) = 3 [pid 6407] ftruncate(5, 0 [pid 6406] munmap(0x7f0356e00000, 138412032 [pid 6409] <... close resumed>) = 0 [pid 6408] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6407] <... ftruncate resumed>) = 0 [pid 6409] symlink("/dev/binderfs", "./binderfs" [pid 6408] <... mmap resumed>) = 0x7f0356e00000 [pid 6407] exit_group(0 [pid 6409] <... symlink resumed>) = 0 [pid 6408] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... umount2 resumed>) = 0 [pid 6407] <... exit_group resumed>) = ? [pid 6407] +++ exited with 0 +++ [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6407, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6409] memfd_create("syzkaller", 0 [pid 6406] <... munmap resumed>) = 0 [pid 5073] umount2("./217/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6409] <... memfd_create resumed>) = 3 [pid 5078] umount2("./220", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6409] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./220", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6409] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... openat resumed>) = 3 [pid 5078] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] umount2("./220/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6408] <... write resumed>) = 524288 [pid 6408] munmap(0x7f0356e00000, 138412032 [pid 6409] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6406] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] <... umount2 resumed>) = 0 [pid 5077] <... ioctl resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6406] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] newfstatat(AT_FDCWD, "./217/bus", [pid 6406] close(5 [pid 6408] <... munmap resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./217/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./220/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6408] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6408] <... openat resumed>) = 4 [pid 5078] newfstatat(AT_FDCWD, "./220/bus", [pid 6408] ioctl(4, LOOP_SET_FD, 3 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] close(3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6406] <... close resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5078] umount2("./220/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./220/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5078] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6409] <... write resumed>) = 524288 [pid 5078] getdents64(4, [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] openat(AT_FDCWD, "./217/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, [pid 5073] <... openat resumed>) = 4 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5078] close(4 [pid 5073] newfstatat(4, "", [pid 5078] <... close resumed>) = 0 [pid 6409] munmap(0x7f0356e00000, 138412032 [pid 6406] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] rmdir("./220/bus" [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6410 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5073] getdents64(4, [pid 5078] umount2("./220/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 6410 attached [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6410] set_robust_list(0x55556e32a660, 24 [pid 6409] <... munmap resumed>) = 0 [pid 5078] newfstatat(AT_FDCWD, "./220/binderfs", [pid 5073] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] close(4 [pid 6410] <... set_robust_list resumed>) = 0 [pid 6409] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6408] <... ioctl resumed>) = 0 [pid 6406] <... open resumed>) = 5 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... close resumed>) = 0 [pid 6410] chdir("./220" [pid 6409] <... openat resumed>) = 4 [pid 6406] ftruncate(5, 0 [pid 5078] unlink("./220/binderfs" [pid 5073] rmdir("./217/bus" [pid 6410] <... chdir resumed>) = 0 [pid 6409] ioctl(4, LOOP_SET_FD, 3 [pid 6406] <... ftruncate resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 6410] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6408] close(3 [pid 5078] getdents64(3, [pid 6410] <... prctl resumed>) = 0 [pid 6408] <... close resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6410] setpgid(0, 0 [pid 6408] close(4 [pid 5078] close(3 [pid 6410] <... setpgid resumed>) = 0 [pid 6408] <... close resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 6410] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6408] mkdir("./bus", 0777 [pid 5078] rmdir("./220" [pid 6410] <... openat resumed>) = 3 [pid 6408] <... mkdir resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5073] umount2("./217/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6410] write(3, "1000", 4 [pid 6408] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6406] exit_group(0 [pid 5078] mkdir("./221", 0777 [pid 6410] <... write resumed>) = 4 [pid 5078] <... mkdir resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6410] close(3 [pid 6406] <... exit_group resumed>) = ? [pid 5073] newfstatat(AT_FDCWD, "./217/binderfs", [pid 6410] <... close resumed>) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6410] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6410] memfd_create("syzkaller", 0 [pid 5078] <... openat resumed>) = 3 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 6410] <... memfd_create resumed>) = 3 [pid 5073] unlink("./217/binderfs" [pid 6410] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5073] <... unlink resumed>) = 0 [pid 5073] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6406] +++ exited with 0 +++ [pid 5073] close(3 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6406, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5073] <... close resumed>) = 0 [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 5073] rmdir("./217" [pid 6408] <... mount resumed>) = 0 [pid 5075] <... restart_syscall resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 6408] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6408] chdir("./bus") = 0 [pid 6408] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6408] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6408] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 4 [pid 6408] rename("./bus", "./file2" [pid 5075] umount2("./217", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] mkdir("./218", 0777 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6408] <... rename resumed>) = -1 EEXIST (File exists) [pid 5075] openat(AT_FDCWD, "./217", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... mkdir resumed>) = 0 [pid 6408] memfd_create("syzkaller", 0) = 5 [pid 5075] <... openat resumed>) = 3 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6408] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6409] <... ioctl resumed>) = 0 [pid 6408] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] newfstatat(3, "", [pid 5073] <... openat resumed>) = 3 [pid 6409] close(3) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6410] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6409] close(4 [pid 5075] getdents64(3, [pid 6409] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6409] mkdir("./bus", 0777 [pid 5075] umount2("./217/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6409] <... mkdir resumed>) = 0 [pid 6410] <... write resumed>) = 524288 [pid 6409] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6408] <... write resumed>) = 524288 [pid 5075] <... umount2 resumed>) = 0 [ 208.401048][ T6408] loop3: detected capacity change from 0 to 1024 [ 208.433789][ T6409] loop1: detected capacity change from 0 to 1024 [pid 5075] umount2("./217/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6410] munmap(0x7f0356e00000, 138412032 [pid 6409] <... mount resumed>) = 0 [pid 6408] munmap(0x7f0356e00000, 138412032 [pid 5078] <... ioctl resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6409] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6409] chdir("./bus") = 0 [pid 6409] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6409] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6410] <... munmap resumed>) = 0 [pid 6408] <... munmap resumed>) = 0 [pid 6410] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5073] <... ioctl resumed>) = 0 [pid 6409] <... symlink resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./217/bus", [pid 6410] ioctl(4, LOOP_SET_FD, 3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] close(3 [pid 5075] umount2("./217/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... close resumed>) = 0 [pid 6408] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6409] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5075] openat(AT_FDCWD, "./217/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6411 [pid 5075] <... openat resumed>) = 4 [pid 5078] close(3 [pid 5075] newfstatat(4, "", [pid 6408] close(5 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, [pid 5078] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] getdents64(4, ./strace-static-x86_64: Process 6411 attached [pid 6409] <... creat resumed>) = 4 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6411] set_robust_list(0x55556e32a660, 24 [pid 6409] rename("./bus", "./file2" [pid 5075] close(4) = 0 [pid 5075] rmdir("./217/bus"./strace-static-x86_64: Process 6412 attached [pid 6411] <... set_robust_list resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 6412] set_robust_list(0x55556e32a660, 24 [pid 6411] chdir("./218" [pid 6412] <... set_robust_list resumed>) = 0 [pid 6411] <... chdir resumed>) = 0 [pid 6412] chdir("./221" [pid 6411] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6412 [pid 5075] umount2("./217/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6412] <... chdir resumed>) = 0 [pid 6411] <... prctl resumed>) = 0 [pid 6409] <... rename resumed>) = -1 EEXIST (File exists) [pid 6411] setpgid(0, 0 [pid 6409] memfd_create("syzkaller", 0 [pid 6411] <... setpgid resumed>) = 0 [pid 6409] <... memfd_create resumed>) = 5 [pid 6411] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6409] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6408] <... close resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./217/binderfs", [pid 6411] <... openat resumed>) = 3 [pid 6409] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6408] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6412] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6411] write(3, "1000", 4 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./217/binderfs" [pid 6412] setpgid(0, 0 [pid 6411] <... write resumed>) = 4 [pid 6412] <... setpgid resumed>) = 0 [pid 6411] close(3 [pid 6412] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6411] <... close resumed>) = 0 [pid 6412] <... openat resumed>) = 3 [pid 6411] symlink("/dev/binderfs", "./binderfs" [pid 5075] <... unlink resumed>) = 0 [pid 6412] write(3, "1000", 4 [pid 6411] <... symlink resumed>) = 0 [pid 6408] <... open resumed>) = 5 [pid 6412] <... write resumed>) = 4 [pid 5075] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6412] close(3 [pid 6411] memfd_create("syzkaller", 0 [pid 6410] <... ioctl resumed>) = 0 [pid 6408] ftruncate(5, 0 [pid 6412] <... close resumed>) = 0 [pid 6411] <... memfd_create resumed>) = 3 [pid 6410] close(3 [pid 6408] <... ftruncate resumed>) = 0 [pid 5075] close(3 [pid 6412] symlink("/dev/binderfs", "./binderfs" [pid 6411] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6410] <... close resumed>) = 0 [pid 6412] <... symlink resumed>) = 0 [pid 6411] <... mmap resumed>) = 0x7f0356e00000 [pid 6410] close(4 [pid 6408] exit_group(0 [pid 5075] <... close resumed>) = 0 [pid 6412] memfd_create("syzkaller", 0 [pid 6411] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6410] <... close resumed>) = 0 [pid 6408] <... exit_group resumed>) = ? [pid 5075] rmdir("./217" [pid 6412] <... memfd_create resumed>) = 3 [pid 6410] mkdir("./bus", 0777 [pid 6409] <... write resumed>) = 524288 [pid 5075] <... rmdir resumed>) = 0 [pid 6412] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6410] <... mkdir resumed>) = 0 [pid 6412] <... mmap resumed>) = 0x7f0356e00000 [pid 6410] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [ 208.501725][ T6410] loop4: detected capacity change from 0 to 1024 [pid 5075] mkdir("./218", 0777 [pid 6411] <... write resumed>) = 524288 [pid 6410] <... mount resumed>) = 0 [pid 6408] +++ exited with 0 +++ [pid 5075] <... mkdir resumed>) = 0 [pid 6410] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6408, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6410] <... openat resumed>) = 3 [pid 6410] chdir("./bus") = 0 [pid 6412] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6410] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6409] munmap(0x7f0356e00000, 138412032 [pid 5076] umount2("./221", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6410] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6409] <... munmap resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6410] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5076] openat(AT_FDCWD, "./221", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] <... openat resumed>) = 3 [pid 5075] <... openat resumed>) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5076] newfstatat(3, "", [pid 6409] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6409] close(5 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, [pid 6409] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] umount2("./221/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6410] <... symlink resumed>) = 0 [pid 6410] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6411] munmap(0x7f0356e00000, 138412032 [pid 6412] <... write resumed>) = 524288 [pid 6411] <... munmap resumed>) = 0 [pid 6412] munmap(0x7f0356e00000, 138412032 [pid 6410] <... creat resumed>) = 4 [pid 6409] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6412] <... munmap resumed>) = 0 [pid 6411] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6410] rename("./bus", "./file2" [pid 6411] <... openat resumed>) = 4 [pid 6412] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6411] ioctl(4, LOOP_SET_FD, 3 [pid 6412] ioctl(4, LOOP_SET_FD, 3 [pid 6410] <... rename resumed>) = -1 EEXIST (File exists) [pid 6409] <... open resumed>) = 5 [pid 5076] <... umount2 resumed>) = 0 [pid 6410] memfd_create("syzkaller", 0 [pid 6409] ftruncate(5, 0) = 0 [pid 5076] umount2("./221/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./221/bus", [pid 6410] <... memfd_create resumed>) = 5 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6410] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] umount2("./221/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... ioctl resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6409] exit_group(0 [pid 5076] openat(AT_FDCWD, "./221/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6409] <... exit_group resumed>) = ? [pid 5076] <... openat resumed>) = 4 [pid 6409] +++ exited with 0 +++ [pid 5076] newfstatat(4, "", [pid 5075] close(3 [pid 6410] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6410] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] getdents64(4, [pid 5075] <... close resumed>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6409, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5074] umount2("./217", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./217", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] umount2("./217/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] close(4) = 0 ./strace-static-x86_64: Process 6413 attached [pid 5076] rmdir("./221/bus" [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6413 [pid 5074] <... umount2 resumed>) = 0 [pid 6413] set_robust_list(0x55556e32a660, 24 [pid 6411] <... ioctl resumed>) = 0 [pid 6411] close(3) = 0 [pid 6411] close(4) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 6413] <... set_robust_list resumed>) = 0 [pid 6411] mkdir("./bus", 0777 [pid 6413] chdir("./218" [pid 6411] <... mkdir resumed>) = 0 [pid 6413] <... chdir resumed>) = 0 [pid 5076] umount2("./221/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6413] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6413] setpgid(0, 0 [pid 5076] newfstatat(AT_FDCWD, "./221/binderfs", [pid 5074] umount2("./217/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6413] <... setpgid resumed>) = 0 [pid 6412] <... ioctl resumed>) = 0 [pid 6411] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6413] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6412] close(3 [pid 6410] <... write resumed>) = 524288 [pid 6413] <... openat resumed>) = 3 [pid 6412] <... close resumed>) = 0 [pid 6411] <... mount resumed>) = 0 [pid 5076] unlink("./221/binderfs" [pid 5074] newfstatat(AT_FDCWD, "./217/bus", [pid 6411] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6412] close(4 [pid 6411] <... openat resumed>) = 3 [pid 6410] munmap(0x7f0356e00000, 138412032 [pid 5076] <... unlink resumed>) = 0 [pid 5074] umount2("./217/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6412] <... close resumed>) = 0 [pid 6411] chdir("./bus" [pid 6410] <... munmap resumed>) = 0 [pid 5076] getdents64(3, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6413] write(3, "1000", 4 [pid 6412] mkdir("./bus", 0777 [pid 6411] <... chdir resumed>) = 0 [pid 6411] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5074] openat(AT_FDCWD, "./217/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6413] <... write resumed>) = 4 [pid 6412] <... mkdir resumed>) = 0 [pid 6411] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6410] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] <... openat resumed>) = 4 [pid 6413] close(3 [pid 5076] close(3 [pid 6413] <... close resumed>) = 0 [pid 5074] newfstatat(4, "", [pid 6413] symlink("/dev/binderfs", "./binderfs" [pid 6410] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... close resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 208.593147][ T6411] loop0: detected capacity change from 0 to 1024 [ 208.604291][ T6412] loop5: detected capacity change from 0 to 1024 [pid 6410] close(5 [pid 5074] getdents64(4, [pid 5076] rmdir("./221" [pid 6413] <... symlink resumed>) = 0 [pid 6412] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6411] <... symlink resumed>) = 0 [pid 6410] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6411] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5074] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] close(4) = 0 [pid 5074] rmdir("./217/bus") = 0 [pid 5074] umount2("./217/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./217/binderfs", [pid 6411] <... creat resumed>) = 4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./217/binderfs") = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6411] rename("./bus", "./file2" [pid 5074] close(3 [pid 6413] memfd_create("syzkaller", 0 [pid 6411] <... rename resumed>) = -1 EEXIST (File exists) [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./217" [pid 6413] <... memfd_create resumed>) = 3 [pid 5074] <... rmdir resumed>) = 0 [pid 6413] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] mkdir("./222", 0777 [pid 6412] <... mount resumed>) = 0 [pid 5074] mkdir("./218", 0777 [pid 6413] <... mmap resumed>) = 0x7f0356e00000 [pid 6412] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6411] memfd_create("syzkaller", 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 6412] <... openat resumed>) = 3 [pid 6411] <... memfd_create resumed>) = 5 [pid 6410] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6412] chdir("./bus" [pid 6411] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6412] <... chdir resumed>) = 0 [pid 6411] <... mmap resumed>) = 0x7f0356e00000 [pid 6412] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5076] <... openat resumed>) = 3 [pid 6412] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6412] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6411] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6410] <... open resumed>) = 5 [pid 5074] <... openat resumed>) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6412] <... symlink resumed>) = 0 [pid 6410] ftruncate(5, 0) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6412] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6410] exit_group(0 [pid 6411] <... write resumed>) = 524288 [pid 6410] <... exit_group resumed>) = ? [pid 6413] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6410] +++ exited with 0 +++ [pid 6412] <... creat resumed>) = 4 [pid 6412] rename("./bus", "./file2") = -1 EEXIST (File exists) [pid 6412] memfd_create("syzkaller", 0) = 5 [pid 6412] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6410, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5077] umount2("./220", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./220", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6411] munmap(0x7f0356e00000, 138412032 [pid 6413] <... write resumed>) = 524288 [pid 6412] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... openat resumed>) = 3 [pid 6411] <... munmap resumed>) = 0 [pid 6413] munmap(0x7f0356e00000, 138412032 [pid 6411] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5077] newfstatat(3, "", [pid 6413] <... munmap resumed>) = 0 [pid 6412] <... write resumed>) = 524288 [pid 6411] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6413] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6411] close(5 [pid 5077] getdents64(3, [pid 6413] <... openat resumed>) = 4 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6413] ioctl(4, LOOP_SET_FD, 3 [pid 5077] umount2("./220/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... ioctl resumed>) = 0 [pid 6412] munmap(0x7f0356e00000, 138412032) = 0 [pid 6411] <... close resumed>) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5074] close(3 [pid 6412] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6411] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] umount2("./220/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... close resumed>) = 0 [pid 6412] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... ioctl resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] newfstatat(AT_FDCWD, "./220/bus", ./strace-static-x86_64: Process 6414 attached [pid 6412] close(5 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] close(3 [pid 6411] <... open resumed>) = 5 [pid 5077] umount2("./220/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... close resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6414 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6414] set_robust_list(0x55556e32a660, 24 [pid 6411] ftruncate(5, 0 [pid 5077] openat(AT_FDCWD, "./220/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6413] <... ioctl resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6415 [pid 6411] <... ftruncate resumed>) = 0 [pid 6413] close(3 [pid 5077] <... openat resumed>) = 4 [pid 5077] newfstatat(4, "", [pid 6413] <... close resumed>) = 0 [pid 6413] close(4 [pid 6414] <... set_robust_list resumed>) = 0 [pid 6411] exit_group(0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6414] chdir("./218" [pid 6413] <... close resumed>) = 0 [pid 6411] <... exit_group resumed>) = ? [pid 5077] getdents64(4, ./strace-static-x86_64: Process 6415 attached [pid 6414] <... chdir resumed>) = 0 [pid 6412] <... close resumed>) = 0 [pid 6411] +++ exited with 0 +++ [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6414] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5077] getdents64(4, [pid 6414] <... prctl resumed>) = 0 [pid 6412] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] close(4 [pid 6414] setpgid(0, 0 [pid 6413] mkdir("./bus", 0777 [pid 5077] <... close resumed>) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6411, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6415] set_robust_list(0x55556e32a660, 24 [pid 6413] <... mkdir resumed>) = 0 [pid 5077] rmdir("./220/bus" [pid 5073] umount2("./218", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./218", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... rmdir resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5077] umount2("./220/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6415] <... set_robust_list resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./220/binderfs", [pid 5073] newfstatat(3, "", [pid 6415] chdir("./222" [pid 6414] <... setpgid resumed>) = 0 [pid 6412] <... open resumed>) = 5 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] unlink("./220/binderfs" [pid 6412] ftruncate(5, 0 [pid 6413] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5073] getdents64(3, [pid 6414] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6412] <... ftruncate resumed>) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] umount2("./218/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6412] exit_group(0 [pid 6415] <... chdir resumed>) = 0 [pid 6414] <... openat resumed>) = 3 [pid 5077] getdents64(3, [pid 6415] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6415] <... prctl resumed>) = 0 [pid 6412] <... exit_group resumed>) = ? [pid 5077] close(3 [pid 6415] setpgid(0, 0) = 0 [ 208.715926][ T6413] loop2: detected capacity change from 0 to 1024 [pid 6415] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5077] <... close resumed>) = 0 [pid 6415] <... openat resumed>) = 3 [pid 6414] write(3, "1000", 4 [pid 6413] <... mount resumed>) = 0 [pid 6412] +++ exited with 0 +++ [pid 5077] rmdir("./220" [pid 5073] <... umount2 resumed>) = 0 [pid 6415] write(3, "1000", 4 [pid 6414] <... write resumed>) = 4 [pid 6415] <... write resumed>) = 4 [pid 5073] umount2("./218/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6415] close(3) = 0 [pid 6415] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6414] close(3 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6412, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5077] <... rmdir resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6414] <... close resumed>) = 0 [pid 5078] umount2("./221", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] newfstatat(AT_FDCWD, "./218/bus", [pid 6415] memfd_create("syzkaller", 0) = 3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6415] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6414] symlink("/dev/binderfs", "./binderfs" [pid 5078] openat(AT_FDCWD, "./221", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] umount2("./218/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6415] <... mmap resumed>) = 0x7f0356e00000 [pid 6414] <... symlink resumed>) = 0 [pid 6413] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] <... openat resumed>) = 3 [pid 5077] mkdir("./221", 0777 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6414] memfd_create("syzkaller", 0 [pid 6413] <... openat resumed>) = 3 [pid 5078] newfstatat(3, "", [pid 5073] openat(AT_FDCWD, "./218/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6413] chdir("./bus") = 0 [pid 5073] <... openat resumed>) = 4 [pid 6413] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5073] newfstatat(4, "", [pid 6413] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6415] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6413] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6414] <... memfd_create resumed>) = 3 [pid 5077] <... mkdir resumed>) = 0 [pid 5073] getdents64(4, [pid 6414] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6413] <... symlink resumed>) = 0 [pid 6413] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6414] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] getdents64(3, [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] <... openat resumed>) = 3 [pid 5078] umount2("./221/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6413] <... creat resumed>) = 4 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 6413] rename("./bus", "./file2") = -1 EEXIST (File exists) [pid 6413] memfd_create("syzkaller", 0) = 5 [pid 6413] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5073] getdents64(4, [pid 6413] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./218/bus") = 0 [pid 6415] <... write resumed>) = 524288 [pid 5073] umount2("./218/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6414] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6415] munmap(0x7f0356e00000, 138412032 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./218/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6415] <... munmap resumed>) = 0 [pid 6413] <... write resumed>) = 524288 [pid 6415] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6414] <... write resumed>) = 524288 [pid 5078] <... umount2 resumed>) = 0 [pid 5073] unlink("./218/binderfs" [pid 6413] munmap(0x7f0356e00000, 138412032) = 0 [pid 6415] <... openat resumed>) = 4 [pid 6414] munmap(0x7f0356e00000, 138412032 [pid 6413] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] umount2("./221/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... ioctl resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 6414] <... munmap resumed>) = 0 [pid 6413] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6415] ioctl(4, LOOP_SET_FD, 3 [pid 5073] getdents64(3, [pid 6414] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6413] close(5 [pid 5078] newfstatat(AT_FDCWD, "./221/bus", [pid 6414] <... openat resumed>) = 4 [pid 6413] <... close resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6414] ioctl(4, LOOP_SET_FD, 3 [pid 5078] umount2("./221/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./221/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5078] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6415] <... ioctl resumed>) = 0 [pid 6413] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] getdents64(4, [pid 5077] close(3 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6415] close(3 [pid 6414] <... ioctl resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5073] close(3 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./218" [pid 6415] <... close resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6416 [pid 5073] <... rmdir resumed>) = 0 [pid 6415] close(4 [pid 5078] close(4 [pid 5073] mkdir("./219", 0777./strace-static-x86_64: Process 6416 attached [pid 6415] <... close resumed>) = 0 [pid 6414] close(3 [pid 5078] <... close resumed>) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 6416] set_robust_list(0x55556e32a660, 24 [pid 6415] mkdir("./bus", 0777 [pid 6414] <... close resumed>) = 0 [pid 5078] rmdir("./221/bus" [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6416] <... set_robust_list resumed>) = 0 [pid 6415] <... mkdir resumed>) = 0 [pid 6414] close(4 [pid 5078] <... rmdir resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 6416] chdir("./221" [pid 6414] <... close resumed>) = 0 [pid 6416] <... chdir resumed>) = 0 [pid 6414] mkdir("./bus", 0777 [pid 6413] <... open resumed>) = 5 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6416] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6415] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6413] ftruncate(5, 0 [pid 5078] umount2("./221/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6416] <... prctl resumed>) = 0 [pid 6414] <... mkdir resumed>) = 0 [pid 6413] <... ftruncate resumed>) = 0 [pid 6416] setpgid(0, 0 [pid 6415] <... mount resumed>) = 0 [pid 6414] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6413] exit_group(0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6416] <... setpgid resumed>) = 0 [pid 6415] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6413] <... exit_group resumed>) = ? [pid 5078] newfstatat(AT_FDCWD, "./221/binderfs", [pid 6416] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6415] chdir("./bus" [pid 6414] <... mount resumed>) = 0 [pid 6413] +++ exited with 0 +++ [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6416] write(3, "1000", 4 [pid 6415] <... chdir resumed>) = 0 [pid 6414] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] unlink("./221/binderfs" [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6413, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 6416] <... write resumed>) = 4 [pid 6415] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6414] <... openat resumed>) = 3 [pid 5078] <... unlink resumed>) = 0 [pid 6416] close(3 [pid 6415] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6416] <... close resumed>) = 0 [pid 6415] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6416] symlink("/dev/binderfs", "./binderfs" [pid 6414] chdir("./bus" [pid 5075] umount2("./218", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6416] <... symlink resumed>) = 0 [pid 6415] <... symlink resumed>) = 0 [pid 6414] <... chdir resumed>) = 0 [pid 5078] getdents64(3, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6414] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] openat(AT_FDCWD, "./218", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6416] memfd_create("syzkaller", 0 [pid 6415] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] close(3 [pid 6414] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6416] <... memfd_create resumed>) = 3 [pid 6414] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5075] <... openat resumed>) = 3 [pid 5078] <... close resumed>) = 0 [pid 5078] rmdir("./221" [pid 5075] newfstatat(3, "", [pid 6416] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 208.851380][ T6415] loop3: detected capacity change from 0 to 1024 [ 208.856966][ T6414] loop1: detected capacity change from 0 to 1024 [pid 5075] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6416] <... mmap resumed>) = 0x7f0356e00000 [pid 6415] <... creat resumed>) = 4 [pid 6414] <... symlink resumed>) = 0 [pid 5078] mkdir("./222", 0777 [pid 5075] umount2("./218/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6416] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6415] rename("./bus", "./file2" [pid 6414] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] <... mkdir resumed>) = 0 [pid 6415] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6415] memfd_create("syzkaller", 0) = 5 [pid 5078] <... openat resumed>) = 3 [pid 6415] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 6415] <... mmap resumed>) = 0x7f0356e00000 [pid 6414] <... creat resumed>) = 4 [pid 6414] rename("./bus", "./file2") = -1 EEXIST (File exists) [pid 5075] <... umount2 resumed>) = 0 [pid 5075] umount2("./218/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6416] <... write resumed>) = 524288 [pid 6415] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6414] memfd_create("syzkaller", 0 [pid 5075] newfstatat(AT_FDCWD, "./218/bus", [pid 5073] <... ioctl resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./218/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... ioctl resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./218/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6414] <... memfd_create resumed>) = 5 [pid 5075] <... openat resumed>) = 4 [pid 5075] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6414] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, [pid 5073] close(3 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] <... close resumed>) = 0 [pid 5075] close(4 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6415] <... write resumed>) = 524288 [pid 5075] <... close resumed>) = 0 [pid 6414] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] rmdir("./218/bus") = 0 [pid 5075] umount2("./218/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6417 [pid 5078] close(3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6416] munmap(0x7f0356e00000, 138412032 [pid 6414] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] newfstatat(AT_FDCWD, "./218/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./218/binderfs") = 0 [pid 5078] <... close resumed>) = 0 [pid 5075] getdents64(3, [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6417 attached [pid 6416] <... munmap resumed>) = 0 [pid 5075] close(3) = 0 [pid 5075] rmdir("./218") = 0 ./strace-static-x86_64: Process 6418 attached [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6418 [pid 5075] mkdir("./219", 0777) = 0 [pid 6418] set_robust_list(0x55556e32a660, 24 [pid 6417] set_robust_list(0x55556e32a660, 24 [pid 6416] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6415] munmap(0x7f0356e00000, 138412032 [pid 6417] <... set_robust_list resumed>) = 0 [pid 6416] <... openat resumed>) = 4 [pid 6418] <... set_robust_list resumed>) = 0 [pid 6416] ioctl(4, LOOP_SET_FD, 3 [pid 6415] <... munmap resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6417] chdir("./219" [pid 6418] chdir("./222" [pid 5075] <... openat resumed>) = 3 [pid 6418] <... chdir resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6418] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6418] setpgid(0, 0) = 0 [pid 6418] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6416] <... ioctl resumed>) = 0 [pid 6417] <... chdir resumed>) = 0 [pid 6415] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6418] write(3, "1000", 4) = 4 [pid 6418] close(3) = 0 [pid 6417] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6415] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6418] symlink("/dev/binderfs", "./binderfs" [pid 6417] <... prctl resumed>) = 0 [pid 6416] close(3 [pid 6415] close(5 [pid 6414] <... write resumed>) = 524288 [pid 6418] <... symlink resumed>) = 0 [pid 6417] setpgid(0, 0 [pid 6418] memfd_create("syzkaller", 0 [pid 6417] <... setpgid resumed>) = 0 [pid 6418] <... memfd_create resumed>) = 3 [pid 6418] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6417] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6418] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6417] <... openat resumed>) = 3 [pid 6415] <... close resumed>) = 0 [pid 6414] munmap(0x7f0356e00000, 138412032 [pid 6417] write(3, "1000", 4) = 4 [pid 6416] <... close resumed>) = 0 [pid 6414] <... munmap resumed>) = 0 [pid 6415] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6417] close(3 [pid 6416] close(4 [pid 6414] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6417] <... close resumed>) = 0 [pid 6416] <... close resumed>) = 0 [pid 6417] symlink("/dev/binderfs", "./binderfs" [pid 6416] mkdir("./bus", 0777 [pid 6414] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6417] <... symlink resumed>) = 0 [pid 6416] <... mkdir resumed>) = 0 [pid 6414] close(5 [pid 6417] memfd_create("syzkaller", 0 [pid 6416] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6415] <... open resumed>) = 5 [pid 6414] <... close resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 6417] <... memfd_create resumed>) = 3 [pid 6418] <... write resumed>) = 524288 [pid 6417] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6415] ftruncate(5, 0 [pid 5075] close(3) = 0 [pid 6415] <... ftruncate resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6417] <... mmap resumed>) = 0x7f0356e00000 [pid 6415] exit_group(0 [pid 6418] munmap(0x7f0356e00000, 138412032 [pid 6415] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 6419 attached [pid 6419] set_robust_list(0x55556e32a660, 24) = 0 [pid 6418] <... munmap resumed>) = 0 [pid 6419] chdir("./219") = 0 [pid 6417] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6419] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6418] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6419 [pid 6419] <... prctl resumed>) = 0 [pid 6418] <... openat resumed>) = 4 [pid 6419] setpgid(0, 0) = 0 [pid 6419] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6418] ioctl(4, LOOP_SET_FD, 3 [pid 6415] +++ exited with 0 +++ [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6415, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [ 208.978052][ T6416] loop4: detected capacity change from 0 to 1024 [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 6416] <... mount resumed>) = 0 [pid 6414] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5076] <... restart_syscall resumed>) = 0 [pid 6419] <... openat resumed>) = 3 [pid 6419] write(3, "1000", 4) = 4 [pid 6419] close(3 [pid 5076] umount2("./222", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6419] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6419] symlink("/dev/binderfs", "./binderfs" [pid 5076] openat(AT_FDCWD, "./222", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6419] <... symlink resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 6419] memfd_create("syzkaller", 0 [pid 6417] <... write resumed>) = 524288 [pid 6416] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5076] newfstatat(3, "", [pid 6419] <... memfd_create resumed>) = 3 [pid 6414] <... open resumed>) = 5 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6419] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6416] <... openat resumed>) = 3 [pid 6419] <... mmap resumed>) = 0x7f0356e00000 [pid 6419] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6417] munmap(0x7f0356e00000, 138412032 [pid 6416] chdir("./bus" [pid 6414] ftruncate(5, 0 [pid 6417] <... munmap resumed>) = 0 [pid 6416] <... chdir resumed>) = 0 [pid 6414] <... ftruncate resumed>) = 0 [pid 5076] getdents64(3, [pid 6416] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6414] exit_group(0 [pid 6417] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6414] <... exit_group resumed>) = ? [pid 6416] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] umount2("./222/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6417] <... openat resumed>) = 4 [pid 6419] <... write resumed>) = 524288 [pid 6417] ioctl(4, LOOP_SET_FD, 3 [pid 6416] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6414] +++ exited with 0 +++ [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6414, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5074] umount2("./218", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./218", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6416] <... symlink resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5074] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] umount2("./218/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6418] <... ioctl resumed>) = 0 [pid 6418] close(3) = 0 [pid 6418] close(4) = 0 [pid 6418] mkdir("./bus", 0777) = 0 [pid 6419] munmap(0x7f0356e00000, 138412032 [pid 6418] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6419] <... munmap resumed>) = 0 [pid 6416] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5076] umount2("./222/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6419] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6419] <... openat resumed>) = 4 [pid 6419] ioctl(4, LOOP_SET_FD, 3 [pid 5076] newfstatat(AT_FDCWD, "./222/bus", [pid 6416] <... creat resumed>) = 4 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6416] rename("./bus", "./file2" [pid 5076] umount2("./222/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6418] <... mount resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 209.037001][ T6418] loop5: detected capacity change from 0 to 1024 [ 209.067478][ T6417] loop0: detected capacity change from 0 to 1024 [pid 6418] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6417] <... ioctl resumed>) = 0 [pid 6416] <... rename resumed>) = -1 EEXIST (File exists) [pid 5076] openat(AT_FDCWD, "./222/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6417] close(3 [pid 6416] memfd_create("syzkaller", 0) = 5 [pid 5074] <... umount2 resumed>) = 0 [pid 6416] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... openat resumed>) = 4 [pid 6417] <... close resumed>) = 0 [pid 5074] umount2("./218/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./218/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./218/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./218/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5074] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, [pid 6418] chdir("./bus" [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6418] <... chdir resumed>) = 0 [pid 5074] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] close(4) = 0 [pid 5074] rmdir("./218/bus") = 0 [pid 6417] close(4 [pid 6418] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6416] <... mmap resumed>) = 0x7f0356e00000 [pid 5074] umount2("./218/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6417] <... close resumed>) = 0 [pid 6418] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6418] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5074] newfstatat(AT_FDCWD, "./218/binderfs", [pid 6417] mkdir("./bus", 0777 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./218/binderfs") = 0 [pid 6417] <... mkdir resumed>) = 0 [pid 5074] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3 [pid 6417] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./218" [pid 5076] newfstatat(4, "", [pid 5074] <... rmdir resumed>) = 0 [pid 5074] mkdir("./219", 0777 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5076] getdents64(4, [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6416] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] <... openat resumed>) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5076] getdents64(4, [pid 6418] <... symlink resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] close(4 [pid 6419] <... ioctl resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 6418] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5076] rmdir("./222/bus" [pid 6419] close(3) = 0 [pid 6419] close(4 [pid 6417] <... mount resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 6419] <... close resumed>) = 0 [pid 6419] mkdir("./bus", 0777) = 0 [pid 6419] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5076] umount2("./222/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6417] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6417] chdir("./bus" [pid 5076] newfstatat(AT_FDCWD, "./222/binderfs", [pid 6417] <... chdir resumed>) = 0 [pid 6418] <... creat resumed>) = 4 [pid 6417] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6418] rename("./bus", "./file2" [pid 6417] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] unlink("./222/binderfs" [pid 6418] <... rename resumed>) = -1 EEXIST (File exists) [pid 6419] <... mount resumed>) = 0 [pid 6417] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6416] <... write resumed>) = 524288 [pid 5076] <... unlink resumed>) = 0 [pid 6419] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5076] getdents64(3, [pid 6419] chdir("./bus") = 0 [pid 6418] memfd_create("syzkaller", 0 [pid 6417] <... symlink resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6419] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6418] <... memfd_create resumed>) = 5 [pid 6416] munmap(0x7f0356e00000, 138412032 [pid 5076] close(3 [pid 6419] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6418] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6417] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6416] <... munmap resumed>) = 0 [pid 5076] <... close resumed>) = 0 [ 209.093172][ T6419] loop2: detected capacity change from 0 to 1024 [pid 6419] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6418] <... mmap resumed>) = 0x7f0356e00000 [pid 6417] <... creat resumed>) = 4 [pid 6416] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] rmdir("./222" [pid 5074] <... ioctl resumed>) = 0 [pid 6418] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6416] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... rmdir resumed>) = 0 [pid 5076] mkdir("./223", 0777 [pid 6417] rename("./bus", "./file2" [pid 6419] <... symlink resumed>) = 0 [pid 6419] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6417] <... rename resumed>) = -1 EEXIST (File exists) [pid 6416] close(5 [pid 5076] <... mkdir resumed>) = 0 [pid 6417] memfd_create("syzkaller", 0 [pid 6418] <... write resumed>) = 524288 [pid 5074] close(3 [pid 6417] <... memfd_create resumed>) = 5 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6417] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... openat resumed>) = 3 [pid 5074] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6417] <... mmap resumed>) = 0x7f0356e00000 [pid 6416] <... close resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 6420 attached [pid 6420] set_robust_list(0x55556e32a660, 24) = 0 [pid 6420] chdir("./219") = 0 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6420 [pid 6420] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6420] setpgid(0, 0) = 0 [pid 6420] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6420] write(3, "1000", 4) = 4 [pid 6420] close(3) = 0 [pid 6420] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6420] memfd_create("syzkaller", 0 [pid 6418] munmap(0x7f0356e00000, 138412032 [pid 6420] <... memfd_create resumed>) = 3 [pid 6418] <... munmap resumed>) = 0 [pid 6417] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6420] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6419] <... creat resumed>) = 4 [pid 6418] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6416] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6420] <... mmap resumed>) = 0x7f0356e00000 [pid 6419] rename("./bus", "./file2" [pid 6418] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6416] <... open resumed>) = 5 [pid 6416] ftruncate(5, 0 [pid 6419] <... rename resumed>) = -1 EEXIST (File exists) [pid 6418] close(5 [pid 6416] <... ftruncate resumed>) = 0 [pid 6419] memfd_create("syzkaller", 0 [pid 6416] exit_group(0 [pid 6419] <... memfd_create resumed>) = 5 [pid 6419] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6416] <... exit_group resumed>) = ? [pid 6419] <... mmap resumed>) = 0x7f0356e00000 [pid 6419] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6416] +++ exited with 0 +++ [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6416, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6420] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6418] <... close resumed>) = 0 [pid 6417] <... write resumed>) = 524288 [pid 5077] umount2("./221", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./221", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5077] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] umount2("./221/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6418] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] <... umount2 resumed>) = 0 [pid 5077] umount2("./221/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6420] <... write resumed>) = 524288 [pid 6419] <... write resumed>) = 524288 [pid 6417] munmap(0x7f0356e00000, 138412032 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... ioctl resumed>) = 0 [pid 6417] <... munmap resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./221/bus", [pid 6417] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6420] munmap(0x7f0356e00000, 138412032) = 0 [pid 6417] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] umount2("./221/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6419] munmap(0x7f0356e00000, 138412032 [pid 6418] <... open resumed>) = 5 [pid 6417] close(5 [pid 5077] openat(AT_FDCWD, "./221/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] close(3 [pid 6418] ftruncate(5, 0 [pid 5077] <... openat resumed>) = 4 [pid 5076] <... close resumed>) = 0 [pid 6420] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6418] <... ftruncate resumed>) = 0 [pid 5077] newfstatat(4, "", [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6420] <... openat resumed>) = 4 [pid 6418] exit_group(0 [pid 6420] ioctl(4, LOOP_SET_FD, 3 [pid 6418] <... exit_group resumed>) = ? [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 6421 attached [pid 6419] <... munmap resumed>) = 0 [pid 6418] +++ exited with 0 +++ [pid 5077] getdents64(4, [pid 6421] set_robust_list(0x55556e32a660, 24 [pid 6419] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6417] <... close resumed>) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6418, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6421 [pid 6417] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] getdents64(4, [pid 6421] <... set_robust_list resumed>) = 0 [pid 6419] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] umount2("./222", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./222", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6421] chdir("./223" [pid 6419] close(5 [pid 5078] <... openat resumed>) = 3 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6421] <... chdir resumed>) = 0 [pid 5078] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] umount2("./222/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6421] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6420] <... ioctl resumed>) = 0 [pid 5077] close(4 [pid 6421] <... prctl resumed>) = 0 [pid 6420] close(3 [pid 6419] <... close resumed>) = 0 [pid 6417] <... open resumed>) = 5 [pid 5078] <... umount2 resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 6421] setpgid(0, 0 [pid 6420] <... close resumed>) = 0 [pid 6417] ftruncate(5, 0 [pid 5077] rmdir("./221/bus" [pid 6419] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6421] <... setpgid resumed>) = 0 [pid 6417] <... ftruncate resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 6420] close(4 [pid 6417] exit_group(0 [pid 6421] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6420] <... close resumed>) = 0 [pid 6417] <... exit_group resumed>) = ? [pid 5078] umount2("./222/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] umount2("./221/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6421] write(3, "1000", 4 [pid 6419] <... open resumed>) = 5 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6421] <... write resumed>) = 4 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./221/binderfs", [pid 6421] close(3 [pid 5078] newfstatat(AT_FDCWD, "./222/bus", [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6421] <... close resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] unlink("./221/binderfs" [pid 6421] symlink("/dev/binderfs", "./binderfs" [pid 5077] <... unlink resumed>) = 0 [pid 6421] <... symlink resumed>) = 0 [pid 6420] mkdir("./bus", 0777 [pid 6419] ftruncate(5, 0 [pid 6417] +++ exited with 0 +++ [pid 5077] getdents64(3, [pid 6421] memfd_create("syzkaller", 0 [pid 6419] <... ftruncate resumed>) = 0 [pid 5078] umount2("./222/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] close(3 [pid 6421] <... memfd_create resumed>) = 3 [pid 6420] <... mkdir resumed>) = 0 [pid 6419] exit_group(0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... close resumed>) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6417, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6420] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5078] openat(AT_FDCWD, "./222/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] rmdir("./221" [pid 6421] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... openat resumed>) = 4 [pid 5073] umount2("./219", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6421] <... mmap resumed>) = 0x7f0356e00000 [pid 6420] <... mount resumed>) = 0 [pid 6419] <... exit_group resumed>) = ? [pid 5078] newfstatat(4, "", [pid 5077] <... rmdir resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6420] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5073] openat(AT_FDCWD, "./219", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... openat resumed>) = 3 [pid 6420] <... openat resumed>) = 3 [pid 5078] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, [pid 5077] mkdir("./222", 0777 [pid 6420] chdir("./bus" [pid 5073] newfstatat(3, "", [pid 6420] <... chdir resumed>) = 0 [pid 6420] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6421] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6420] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] close(4 [pid 6420] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5073] getdents64(3, [pid 5078] <... close resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] rmdir("./222/bus" [pid 5073] umount2("./219/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6420] <... symlink resumed>) = 0 [pid 6419] +++ exited with 0 +++ [pid 5078] <... rmdir resumed>) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5078] umount2("./222/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6421] <... write resumed>) = 524288 [pid 6420] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6419, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5073] <... umount2 resumed>) = 0 [pid 6421] munmap(0x7f0356e00000, 138412032 [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 5078] newfstatat(AT_FDCWD, "./222/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 209.242619][ T6420] loop1: detected capacity change from 0 to 1024 [pid 5078] unlink("./222/binderfs" [pid 6421] <... munmap resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5078] getdents64(3, [pid 6421] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6420] <... creat resumed>) = 4 [pid 5075] <... restart_syscall resumed>) = 0 [pid 5073] umount2("./219/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6420] rename("./bus", "./file2" [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5078] close(3) = 0 [pid 5078] rmdir("./222" [pid 6420] <... rename resumed>) = -1 EEXIST (File exists) [pid 5075] umount2("./219", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6420] memfd_create("syzkaller", 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6421] <... openat resumed>) = 4 [pid 6420] <... memfd_create resumed>) = 5 [pid 5078] <... rmdir resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./219", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] newfstatat(AT_FDCWD, "./219/bus", [pid 6421] ioctl(4, LOOP_SET_FD, 3 [pid 6420] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... openat resumed>) = 3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6420] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] mkdir("./223", 0777) = 0 [pid 6421] <... ioctl resumed>) = 0 [pid 6420] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] newfstatat(3, "", [pid 5073] umount2("./219/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6421] close(3 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... openat resumed>) = 3 [pid 5075] getdents64(3, [pid 5073] openat(AT_FDCWD, "./219/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] <... openat resumed>) = 4 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5075] umount2("./219/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] newfstatat(4, "", [pid 6421] <... close resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6421] close(4 [pid 5073] getdents64(4, [pid 6421] <... close resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6421] mkdir("./bus", 0777 [pid 5073] close(4 [pid 6421] <... mkdir resumed>) = 0 [pid 6420] <... write resumed>) = 524288 [pid 5073] <... close resumed>) = 0 [pid 6421] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6420] munmap(0x7f0356e00000, 138412032 [pid 5073] rmdir("./219/bus") = 0 [pid 5073] umount2("./219/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./219/binderfs", [pid 6420] <... munmap resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./219/binderfs" [pid 6420] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] <... unlink resumed>) = 0 [pid 5073] getdents64(3, [pid 6420] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6420] close(5 [pid 5073] close(3) = 0 [pid 5073] rmdir("./219") = 0 [pid 5073] mkdir("./220", 0777) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6421] <... mount resumed>) = 0 [pid 5075] umount2("./219/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6421] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6421] <... openat resumed>) = 3 [pid 6420] <... close resumed>) = 0 [pid 5077] <... ioctl resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./219/bus", [pid 5073] <... openat resumed>) = 3 [pid 6421] chdir("./bus" [pid 6420] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] close(3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6421] <... chdir resumed>) = 0 [pid 5075] umount2("./219/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6421] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5077] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6421] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] openat(AT_FDCWD, "./219/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5075] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 6422 attached [pid 5075] getdents64(4, [pid 6422] set_robust_list(0x55556e32a660, 24 [pid 6420] <... open resumed>) = 5 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6421] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6422] <... set_robust_list resumed>) = 0 [pid 6420] ftruncate(5, 0 [pid 5075] getdents64(4, [pid 6421] <... symlink resumed>) = 0 [pid 6420] <... ftruncate resumed>) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6422 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6421] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6420] exit_group(0 [pid 5075] close(4 [pid 6420] <... exit_group resumed>) = ? [pid 6422] chdir("./222" [pid 6420] +++ exited with 0 +++ [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./219/bus" [pid 6422] <... chdir resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6420, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6422] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5078] <... ioctl resumed>) = 0 [pid 5075] umount2("./219/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6422] <... prctl resumed>) = 0 [pid 6422] setpgid(0, 0 [pid 6421] <... creat resumed>) = 4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6422] <... setpgid resumed>) = 0 [pid 5078] close(3 [pid 5074] umount2("./219", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6421] rename("./bus", "./file2" [pid 5075] newfstatat(AT_FDCWD, "./219/binderfs", [pid 6422] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5078] <... close resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6421] <... rename resumed>) = -1 EEXIST (File exists) [pid 5075] unlink("./219/binderfs" [pid 6422] <... openat resumed>) = 3 [pid 6421] memfd_create("syzkaller", 0 [pid 5075] <... unlink resumed>) = 0 [pid 6421] <... memfd_create resumed>) = 5 [pid 5075] getdents64(3, [pid 6421] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6421] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] close(3./strace-static-x86_64: Process 6423 attached [pid 6422] write(3, "1000", 4 [pid 6421] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... close resumed>) = 0 [ 209.317965][ T6421] loop3: detected capacity change from 0 to 1024 [pid 5074] openat(AT_FDCWD, "./219", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6423] set_robust_list(0x55556e32a660, 24 [pid 6422] <... write resumed>) = 4 [pid 6421] <... write resumed>) = 524288 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6423 [pid 5075] rmdir("./219" [pid 5074] <... openat resumed>) = 3 [pid 5074] newfstatat(3, "", [pid 6423] <... set_robust_list resumed>) = 0 [pid 6422] close(3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6423] chdir("./223" [pid 6422] <... close resumed>) = 0 [pid 5074] getdents64(3, [pid 6422] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6422] memfd_create("syzkaller", 0 [pid 5075] mkdir("./220", 0777 [pid 6422] <... memfd_create resumed>) = 3 [pid 5075] <... mkdir resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6422] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5075] <... openat resumed>) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6421] munmap(0x7f0356e00000, 138412032) = 0 [pid 6421] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6421] close(5 [pid 6423] <... chdir resumed>) = 0 [pid 6421] <... close resumed>) = 0 [pid 5074] umount2("./219/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6423] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6423] setpgid(0, 0 [pid 6422] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6423] <... setpgid resumed>) = 0 [pid 6421] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5073] <... ioctl resumed>) = 0 [pid 6423] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6421] <... open resumed>) = 5 [pid 6423] write(3, "1000", 4) = 4 [pid 6423] close(3) = 0 [pid 6423] symlink("/dev/binderfs", "./binderfs" [pid 6421] ftruncate(5, 0 [pid 6423] <... symlink resumed>) = 0 [pid 6423] memfd_create("syzkaller", 0 [pid 6421] <... ftruncate resumed>) = 0 [pid 6423] <... memfd_create resumed>) = 3 [pid 5073] close(3 [pid 6423] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5074] umount2("./219/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6423] <... mmap resumed>) = 0x7f0356e00000 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] newfstatat(AT_FDCWD, "./219/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6421] exit_group(0 [pid 5074] umount2("./219/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./219/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6421] <... exit_group resumed>) = ? [pid 6422] <... write resumed>) = 524288 [pid 5074] <... openat resumed>) = 4 [pid 5074] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 6424 attached [pid 6422] munmap(0x7f0356e00000, 138412032 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6424 [pid 6424] set_robust_list(0x55556e32a660, 24 [pid 5074] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] close(4) = 0 [pid 5074] rmdir("./219/bus" [pid 6422] <... munmap resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 6422] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] umount2("./219/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6422] <... openat resumed>) = 4 [pid 6421] +++ exited with 0 +++ [pid 6424] <... set_robust_list resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6424] chdir("./220" [pid 6423] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6422] ioctl(4, LOOP_SET_FD, 3 [pid 5074] newfstatat(AT_FDCWD, "./219/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6424] <... chdir resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6421, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5075] <... ioctl resumed>) = 0 [pid 5074] unlink("./219/binderfs") = 0 [pid 5074] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3 [pid 6424] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] umount2("./223", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./219") = 0 [pid 5074] mkdir("./220", 0777) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5075] close(3 [pid 6424] <... prctl resumed>) = 0 [pid 6423] <... write resumed>) = 524288 [pid 6422] <... ioctl resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... close resumed>) = 0 [pid 6424] setpgid(0, 0 [pid 6422] close(3 [pid 5076] openat(AT_FDCWD, "./223", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6424] <... setpgid resumed>) = 0 [pid 6422] <... close resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 6422] close(4 [pid 6424] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6423] munmap(0x7f0356e00000, 138412032 [pid 6422] <... close resumed>) = 0 [pid 5076] newfstatat(3, "", [pid 6422] mkdir("./bus", 0777./strace-static-x86_64: Process 6425 attached [pid 6424] <... openat resumed>) = 3 [pid 6423] <... munmap resumed>) = 0 [pid 6422] <... mkdir resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6422] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5076] getdents64(3, [pid 6425] set_robust_list(0x55556e32a660, 24 [pid 6424] write(3, "1000", 4 [pid 6423] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6425 [pid 6425] <... set_robust_list resumed>) = 0 [pid 6424] <... write resumed>) = 4 [pid 6423] <... openat resumed>) = 4 [pid 5076] umount2("./223/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6425] chdir("./220" [pid 6424] close(3 [pid 6423] ioctl(4, LOOP_SET_FD, 3 [pid 6424] <... close resumed>) = 0 [pid 6425] <... chdir resumed>) = 0 [pid 6424] symlink("/dev/binderfs", "./binderfs" [pid 6425] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6424] <... symlink resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5074] close(3) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6425] <... prctl resumed>) = 0 [pid 6425] setpgid(0, 0) = 0 [pid 6425] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6424] memfd_create("syzkaller", 0 [pid 6425] write(3, "1000", 4 [pid 6424] <... memfd_create resumed>) = 3 [pid 6422] <... mount resumed>) = 0 [pid 6425] <... write resumed>) = 4 [pid 6424] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6422] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6425] close(3 [pid 6424] <... mmap resumed>) = 0x7f0356e00000 [pid 6422] <... openat resumed>) = 3 [pid 5076] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 6426 attached [pid 6425] <... close resumed>) = 0 [pid 6424] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6422] chdir("./bus" [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6426 [pid 6425] symlink("/dev/binderfs", "./binderfs" [pid 6423] <... ioctl resumed>) = 0 [pid 6426] set_robust_list(0x55556e32a660, 24) = 0 [pid 6425] <... symlink resumed>) = 0 [pid 6423] close(3 [pid 6426] chdir("./220" [pid 6425] memfd_create("syzkaller", 0 [pid 6423] <... close resumed>) = 0 [pid 6422] <... chdir resumed>) = 0 [pid 6423] close(4 [pid 6422] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6425] <... memfd_create resumed>) = 3 [pid 6423] <... close resumed>) = 0 [pid 6422] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6425] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6422] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6423] mkdir("./bus", 0777 [pid 6425] <... mmap resumed>) = 0x7f0356e00000 [pid 6426] <... chdir resumed>) = 0 [pid 6426] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] umount2("./223/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6426] <... prctl resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6426] setpgid(0, 0 [pid 5076] newfstatat(AT_FDCWD, "./223/bus", [pid 6426] <... setpgid resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6426] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] umount2("./223/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6426] <... openat resumed>) = 3 [pid 6425] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6423] <... mkdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6426] write(3, "1000", 4 [pid 5076] openat(AT_FDCWD, "./223/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6426] <... write resumed>) = 4 [pid 5076] <... openat resumed>) = 4 [pid 6426] close(3 [pid 5076] newfstatat(4, "", [pid 6426] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 209.450749][ T6422] loop4: detected capacity change from 0 to 1024 [ 209.482384][ T6423] loop5: detected capacity change from 0 to 1024 [pid 6426] symlink("/dev/binderfs", "./binderfs" [pid 6425] <... write resumed>) = 524288 [pid 6424] <... write resumed>) = 524288 [pid 6423] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6422] <... symlink resumed>) = 0 [pid 5076] getdents64(4, [pid 6426] <... symlink resumed>) = 0 [pid 6422] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6426] memfd_create("syzkaller", 0 [pid 5076] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] close(4) = 0 [pid 5076] rmdir("./223/bus") = 0 [pid 6426] <... memfd_create resumed>) = 3 [pid 5076] umount2("./223/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./223/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6426] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5076] unlink("./223/binderfs") = 0 [pid 6424] munmap(0x7f0356e00000, 138412032 [pid 5076] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3) = 0 [pid 5076] rmdir("./223" [pid 6424] <... munmap resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 6424] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] mkdir("./224", 0777 [pid 6424] <... openat resumed>) = 4 [pid 6422] <... creat resumed>) = 4 [pid 6425] munmap(0x7f0356e00000, 138412032 [pid 6426] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6424] ioctl(4, LOOP_SET_FD, 3 [pid 6423] <... mount resumed>) = 0 [pid 6422] rename("./bus", "./file2" [pid 5076] <... mkdir resumed>) = 0 [pid 6423] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6426] <... write resumed>) = 524288 [pid 6423] chdir("./bus" [pid 5076] <... openat resumed>) = 3 [pid 6423] <... chdir resumed>) = 0 [pid 6423] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6423] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6425] <... munmap resumed>) = 0 [pid 6423] <... symlink resumed>) = 0 [pid 6423] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6425] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6422] <... rename resumed>) = -1 EEXIST (File exists) [pid 6422] memfd_create("syzkaller", 0 [pid 6425] <... openat resumed>) = 4 [pid 6422] <... memfd_create resumed>) = 5 [pid 6426] munmap(0x7f0356e00000, 138412032 [pid 6422] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6423] <... creat resumed>) = 4 [pid 6422] <... mmap resumed>) = 0x7f0356e00000 [pid 6426] <... munmap resumed>) = 0 [pid 6423] rename("./bus", "./file2") = -1 EEXIST (File exists) [pid 6423] memfd_create("syzkaller", 0 [pid 6426] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6422] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6426] <... openat resumed>) = 4 [pid 6425] ioctl(4, LOOP_SET_FD, 3 [pid 6423] <... memfd_create resumed>) = 5 [pid 6424] <... ioctl resumed>) = 0 [pid 6426] ioctl(4, LOOP_SET_FD, 3 [pid 6425] <... ioctl resumed>) = 0 [pid 6424] close(3 [pid 6423] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6422] <... write resumed>) = 524288 [pid 6425] close(3 [pid 6424] <... close resumed>) = 0 [pid 6422] munmap(0x7f0356e00000, 138412032 [pid 6425] <... close resumed>) = 0 [pid 6424] close(4 [pid 6422] <... munmap resumed>) = 0 [pid 6425] close(4 [pid 6424] <... close resumed>) = 0 [pid 6423] <... mmap resumed>) = 0x7f0356e00000 [pid 6422] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6425] <... close resumed>) = 0 [pid 6424] mkdir("./bus", 0777 [pid 6423] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6422] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6422] close(5 [pid 6424] <... mkdir resumed>) = 0 [pid 6422] <... close resumed>) = 0 [pid 6425] mkdir("./bus", 0777 [pid 6424] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6422] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6423] <... write resumed>) = 524288 [pid 6423] munmap(0x7f0356e00000, 138412032 [pid 6425] <... mkdir resumed>) = 0 [pid 6423] <... munmap resumed>) = 0 [pid 6423] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6426] <... ioctl resumed>) = 0 [pid 6425] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6424] <... mount resumed>) = 0 [pid 6422] <... open resumed>) = 5 [pid 6424] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6422] ftruncate(5, 0 [pid 6424] <... openat resumed>) = 3 [pid 6424] chdir("./bus" [pid 6422] <... ftruncate resumed>) = 0 [pid 6424] <... chdir resumed>) = 0 [pid 6424] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6423] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6422] exit_group(0 [pid 6426] close(3 [pid 6423] close(5 [pid 6422] <... exit_group resumed>) = ? [pid 6424] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6426] <... close resumed>) = 0 [pid 6424] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6426] close(4) = 0 [pid 6426] mkdir("./bus", 0777 [pid 6422] +++ exited with 0 +++ [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6422, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 6426] <... mkdir resumed>) = 0 [pid 5077] <... restart_syscall resumed>) = 0 [pid 6424] <... symlink resumed>) = 0 [pid 5077] umount2("./222", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./222", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5077] newfstatat(3, "", [pid 6424] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 6426] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [ 209.560222][ T6424] loop0: detected capacity change from 0 to 1024 [ 209.584034][ T6425] loop2: detected capacity change from 0 to 1024 [ 209.584425][ T6426] loop1: detected capacity change from 0 to 1024 [pid 5077] getdents64(3, [pid 6425] <... mount resumed>) = 0 [pid 6424] <... creat resumed>) = 4 [pid 6423] <... close resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] close(3 [pid 6425] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5077] umount2("./222/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6425] <... openat resumed>) = 3 [pid 6424] rename("./bus", "./file2" [pid 6425] chdir("./bus") = 0 [pid 5076] <... close resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6425] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6424] <... rename resumed>) = -1 EEXIST (File exists) [pid 5077] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 6427 attached [pid 6426] <... mount resumed>) = 0 [pid 6425] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6424] memfd_create("syzkaller", 0 [pid 6423] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] umount2("./222/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6427] set_robust_list(0x55556e32a660, 24 [pid 6426] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6424] <... memfd_create resumed>) = 5 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6427 [pid 6427] <... set_robust_list resumed>) = 0 [pid 6424] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] newfstatat(AT_FDCWD, "./222/bus", [pid 6427] chdir("./224" [pid 6423] <... open resumed>) = 5 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6427] <... chdir resumed>) = 0 [pid 6426] <... openat resumed>) = 3 [pid 6424] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] umount2("./222/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6427] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6427] <... prctl resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./222/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6427] setpgid(0, 0 [pid 5077] <... openat resumed>) = 4 [pid 6427] <... setpgid resumed>) = 0 [pid 5077] newfstatat(4, "", [pid 6427] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6424] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6427] <... openat resumed>) = 3 [pid 6426] chdir("./bus" [pid 6425] <... symlink resumed>) = 0 [pid 6423] ftruncate(5, 0 [pid 5077] getdents64(4, [pid 6427] write(3, "1000", 4 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6427] <... write resumed>) = 4 [pid 5077] getdents64(4, [pid 6427] close(3 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6427] <... close resumed>) = 0 [pid 6426] <... chdir resumed>) = 0 [pid 6425] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6423] <... ftruncate resumed>) = 0 [pid 5077] close(4) = 0 [pid 5077] rmdir("./222/bus" [pid 6427] symlink("/dev/binderfs", "./binderfs" [pid 6426] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5077] <... rmdir resumed>) = 0 [pid 6427] <... symlink resumed>) = 0 [pid 5077] umount2("./222/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6427] memfd_create("syzkaller", 0 [pid 6426] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6423] exit_group(0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6427] <... memfd_create resumed>) = 3 [pid 5077] newfstatat(AT_FDCWD, "./222/binderfs", [pid 6423] <... exit_group resumed>) = ? [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6427] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] unlink("./222/binderfs" [pid 6427] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] <... unlink resumed>) = 0 [pid 6425] <... creat resumed>) = 4 [pid 6426] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6425] rename("./bus", "./file2" [pid 6424] <... write resumed>) = 524288 [pid 6423] +++ exited with 0 +++ [pid 6427] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] getdents64(3, [pid 6424] munmap(0x7f0356e00000, 138412032 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6423, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5078] umount2("./223", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6425] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] close(3 [pid 6425] memfd_create("syzkaller", 0 [pid 5078] openat(AT_FDCWD, "./223", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... close resumed>) = 0 [pid 5077] rmdir("./222" [pid 6425] <... memfd_create resumed>) = 5 [pid 5078] <... openat resumed>) = 3 [pid 5077] <... rmdir resumed>) = 0 [pid 5077] mkdir("./223", 0777) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5078] newfstatat(3, "", [pid 6425] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6425] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6424] <... munmap resumed>) = 0 [pid 5078] umount2("./223/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6426] <... symlink resumed>) = 0 [pid 6424] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6424] close(5 [pid 6427] <... write resumed>) = 524288 [pid 6426] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6425] <... write resumed>) = 524288 [pid 6424] <... close resumed>) = 0 [pid 5078] <... umount2 resumed>) = 0 [pid 6427] munmap(0x7f0356e00000, 138412032) = 0 [pid 6425] munmap(0x7f0356e00000, 138412032 [pid 6424] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] umount2("./223/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6425] <... munmap resumed>) = 0 [pid 6425] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6427] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6425] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] newfstatat(AT_FDCWD, "./223/bus", [pid 6427] <... openat resumed>) = 4 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6426] <... creat resumed>) = 4 [pid 6427] ioctl(4, LOOP_SET_FD, 3 [pid 6425] close(5 [pid 6424] <... open resumed>) = 5 [pid 5078] umount2("./223/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6426] rename("./bus", "./file2" [pid 6425] <... close resumed>) = 0 [pid 6424] ftruncate(5, 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./223/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6424] <... ftruncate resumed>) = 0 [pid 5078] newfstatat(4, "", [pid 6426] <... rename resumed>) = -1 EEXIST (File exists) [pid 6424] exit_group(0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6426] memfd_create("syzkaller", 0 [pid 6424] <... exit_group resumed>) = ? [pid 5078] getdents64(4, [pid 6426] <... memfd_create resumed>) = 5 [pid 6424] +++ exited with 0 +++ [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6426] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] getdents64(4, [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6424, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6426] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5078] close(4 [pid 5077] <... ioctl resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5078] rmdir("./223/bus") = 0 [pid 5073] umount2("./220", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./220", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", [pid 6427] <... ioctl resumed>) = 0 [pid 6425] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] umount2("./223/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] close(3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6427] close(3 [pid 5077] <... close resumed>) = 0 [pid 6427] <... close resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6426] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] getdents64(3, ./strace-static-x86_64: Process 6428 attached [pid 6427] close(4 [pid 6426] <... write resumed>) = 524288 [pid 6425] <... open resumed>) = 5 [pid 5078] newfstatat(AT_FDCWD, "./223/binderfs", [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6428] set_robust_list(0x55556e32a660, 24 [pid 6425] ftruncate(5, 0 [pid 6428] <... set_robust_list resumed>) = 0 [pid 6427] <... close resumed>) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6428 [pid 6427] mkdir("./bus", 0777 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./220/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6428] chdir("./223" [pid 6427] <... mkdir resumed>) = 0 [pid 6425] <... ftruncate resumed>) = 0 [pid 5078] unlink("./223/binderfs" [pid 6427] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6425] exit_group(0 [pid 5078] <... unlink resumed>) = 0 [pid 6425] <... exit_group resumed>) = ? [pid 5078] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5078] close(3) = 0 [pid 5078] rmdir("./223") = 0 [pid 5078] mkdir("./224", 0777) = 0 [pid 6428] <... chdir resumed>) = 0 [pid 6428] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6428] setpgid(0, 0 [pid 6427] <... mount resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 6428] <... setpgid resumed>) = 0 [pid 6427] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6428] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6427] chdir("./bus" [pid 5078] <... openat resumed>) = 3 [pid 6425] +++ exited with 0 +++ [pid 6427] <... chdir resumed>) = 0 [pid 6427] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6426] munmap(0x7f0356e00000, 138412032 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6425, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6427] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6426] <... munmap resumed>) = 0 [pid 6426] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6427] <... symlink resumed>) = 0 [pid 6426] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6428] <... openat resumed>) = 3 [pid 6427] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6426] close(5 [pid 5075] umount2("./220", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./220/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6426] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./220/bus", [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6428] write(3, "1000", 4 [pid 5075] openat(AT_FDCWD, "./220", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 209.742170][ T6427] loop3: detected capacity change from 0 to 1024 [pid 5073] umount2("./220/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./220/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] newfstatat(3, "", [pid 5073] getdents64(4, [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6427] <... creat resumed>) = 4 [pid 5075] getdents64(3, [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./220/bus" [pid 6427] rename("./bus", "./file2" [pid 5075] umount2("./220/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... rmdir resumed>) = 0 [pid 5073] umount2("./220/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6426] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6427] <... rename resumed>) = -1 EEXIST (File exists) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6427] memfd_create("syzkaller", 0 [pid 6428] <... write resumed>) = 4 [pid 6427] <... memfd_create resumed>) = 5 [pid 5073] newfstatat(AT_FDCWD, "./220/binderfs", [pid 6428] close(3 [pid 6427] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6426] <... open resumed>) = 5 [pid 6428] <... close resumed>) = 0 [pid 6427] <... mmap resumed>) = 0x7f0356e00000 [pid 6426] ftruncate(5, 0 [pid 5073] unlink("./220/binderfs" [pid 6428] symlink("/dev/binderfs", "./binderfs" [pid 6426] <... ftruncate resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 6426] exit_group(0 [pid 6428] <... symlink resumed>) = 0 [pid 6426] <... exit_group resumed>) = ? [pid 6428] memfd_create("syzkaller", 0 [pid 6426] +++ exited with 0 +++ [pid 5073] getdents64(3, [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6426, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5074] umount2("./220", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] rmdir("./220" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6428] <... memfd_create resumed>) = 3 [pid 5074] openat(AT_FDCWD, "./220", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... rmdir resumed>) = 0 [pid 6428] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... openat resumed>) = 3 [pid 5074] newfstatat(3, "", [pid 6428] <... mmap resumed>) = 0x7f0356e00000 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6427] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] getdents64(3, [pid 5073] mkdir("./221", 0777) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] umount2("./220/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6428] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6427] <... write resumed>) = 524288 [pid 5078] <... ioctl resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5075] umount2("./220/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./220/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./220/bus", [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6427] munmap(0x7f0356e00000, 138412032 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] newfstatat(AT_FDCWD, "./220/bus", [pid 5073] <... openat resumed>) = 3 [pid 5075] umount2("./220/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6427] <... munmap resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5075] openat(AT_FDCWD, "./220/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6427] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] <... openat resumed>) = 4 [pid 6427] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] newfstatat(4, "", [pid 5074] umount2("./220/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6427] close(5 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] close(3 [pid 6428] <... write resumed>) = 524288 [pid 6427] <... close resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5075] getdents64(4, [pid 5074] openat(AT_FDCWD, "./220/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6428] munmap(0x7f0356e00000, 138412032 [pid 6427] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] <... openat resumed>) = 4 ./strace-static-x86_64: Process 6429 attached [pid 6429] set_robust_list(0x55556e32a660, 24 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6429 [pid 5075] getdents64(4, [pid 5074] newfstatat(4, "", [pid 6429] <... set_robust_list resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6429] chdir("./224" [pid 5075] close(4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 6429] <... chdir resumed>) = 0 [pid 6428] <... munmap resumed>) = 0 [pid 6427] <... open resumed>) = 5 [pid 5075] <... close resumed>) = 0 [pid 5074] getdents64(4, [pid 6429] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6427] ftruncate(5, 0 [pid 5075] rmdir("./220/bus" [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6429] setpgid(0, 0 [pid 6428] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6427] <... ftruncate resumed>) = 0 [pid 6429] <... setpgid resumed>) = 0 [pid 6427] exit_group(0 [pid 5074] getdents64(4, [pid 6427] <... exit_group resumed>) = ? [pid 5073] close(3 [pid 6429] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6428] <... openat resumed>) = 4 [pid 6427] +++ exited with 0 +++ [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] <... close resumed>) = 0 [pid 5074] close(4 [pid 6428] ioctl(4, LOOP_SET_FD, 3 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6427, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] umount2("./220/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... close resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556e32a650) = 6430 ./strace-static-x86_64: Process 6430 attached [pid 6430] set_robust_list(0x55556e32a660, 24) = 0 [pid 6430] chdir("./221") = 0 [pid 6430] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6430] setpgid(0, 0) = 0 [pid 6430] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] rmdir("./220/bus" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6430] <... openat resumed>) = 3 [pid 6430] write(3, "1000", 4 [pid 5074] <... rmdir resumed>) = 0 [pid 5076] umount2("./224", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] newfstatat(AT_FDCWD, "./220/binderfs", [pid 6430] <... write resumed>) = 4 [pid 6429] <... openat resumed>) = 3 [pid 6430] close(3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6430] <... close resumed>) = 0 [pid 6429] write(3, "1000", 4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] unlink("./220/binderfs" [pid 5074] umount2("./220/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6430] symlink("/dev/binderfs", "./binderfs" [pid 6429] <... write resumed>) = 4 [pid 5076] openat(AT_FDCWD, "./224", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6430] <... symlink resumed>) = 0 [pid 6429] close(3 [pid 5075] <... unlink resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6430] memfd_create("syzkaller", 0 [pid 6429] <... close resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5075] getdents64(3, [pid 5074] newfstatat(AT_FDCWD, "./220/binderfs", [pid 6429] symlink("/dev/binderfs", "./binderfs" [pid 5076] newfstatat(3, "", [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6430] <... memfd_create resumed>) = 3 [pid 6430] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6429] <... symlink resumed>) = 0 [pid 5075] close(3 [pid 5074] unlink("./220/binderfs" [pid 6430] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... close resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5076] getdents64(3, [pid 5075] rmdir("./220" [pid 5074] getdents64(3, [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6430] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] umount2("./224/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 5074] rmdir("./220" [pid 5075] mkdir("./221", 0777 [pid 5074] <... rmdir resumed>) = 0 [pid 5074] mkdir("./221", 0777 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] <... openat resumed>) = 3 [pid 5074] <... openat resumed>) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6429] memfd_create("syzkaller", 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6429] <... memfd_create resumed>) = 3 [pid 6429] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6430] <... write resumed>) = 524288 [pid 6429] <... mmap resumed>) = 0x7f0356e00000 [pid 6428] <... ioctl resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5076] umount2("./224/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6430] munmap(0x7f0356e00000, 138412032 [pid 6428] close(3 [pid 6430] <... munmap resumed>) = 0 [pid 6428] <... close resumed>) = 0 [pid 6429] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6428] close(4 [pid 5076] newfstatat(AT_FDCWD, "./224/bus", [pid 5074] <... ioctl resumed>) = 0 [pid 6430] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6428] <... close resumed>) = 0 [pid 6428] mkdir("./bus", 0777 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6428] <... mkdir resumed>) = 0 [pid 5074] close(3 [pid 5076] umount2("./224/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... close resumed>) = 0 [pid 6428] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 209.876145][ T6428] loop4: detected capacity change from 0 to 1024 [pid 6430] <... openat resumed>) = 4 [pid 6429] <... write resumed>) = 524288 [pid 5076] openat(AT_FDCWD, "./224/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6430] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6431 attached [pid 6431] set_robust_list(0x55556e32a660, 24) = 0 [pid 6431] chdir("./221") = 0 [pid 6431] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6431] setpgid(0, 0) = 0 [pid 6431] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6431] write(3, "1000", 4) = 4 [pid 6431] close(3) = 0 [pid 6431] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6431] memfd_create("syzkaller", 0 [pid 5076] <... openat resumed>) = 4 [pid 6431] <... memfd_create resumed>) = 3 [pid 6428] <... mount resumed>) = 0 [pid 6431] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6428] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6431] <... mmap resumed>) = 0x7f0356e00000 [pid 6428] <... openat resumed>) = 3 [pid 6428] chdir("./bus") = 0 [pid 6428] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6428] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6428] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6431] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6428] <... creat resumed>) = 4 [pid 5076] newfstatat(4, "", [pid 6428] rename("./bus", "./file2" [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6431 [pid 5076] getdents64(4, [pid 6428] <... rename resumed>) = -1 EEXIST (File exists) [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6428] memfd_create("syzkaller", 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5076] getdents64(4, [pid 6430] <... ioctl resumed>) = 0 [pid 6429] munmap(0x7f0356e00000, 138412032 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6431] <... write resumed>) = 524288 [pid 6428] <... memfd_create resumed>) = 5 [pid 5075] close(3 [pid 6428] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] close(4 [pid 6428] <... mmap resumed>) = 0x7f0356e00000 [pid 6428] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6431] munmap(0x7f0356e00000, 138412032) = 0 [pid 6431] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6430] close(3 [pid 6429] <... munmap resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 6431] <... openat resumed>) = 4 [pid 6430] <... close resumed>) = 0 [ 209.935228][ T6430] loop0: detected capacity change from 0 to 1024 [pid 6429] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6431] ioctl(4, LOOP_SET_FD, 3 [pid 5076] rmdir("./224/bus" [pid 6430] close(4 [pid 6429] <... openat resumed>) = 4 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6430] <... close resumed>) = 0 [pid 6429] ioctl(4, LOOP_SET_FD, 3 [pid 5076] <... rmdir resumed>) = 0 [pid 6430] mkdir("./bus", 0777./strace-static-x86_64: Process 6432 attached [pid 6432] set_robust_list(0x55556e32a660, 24) = 0 [pid 6432] chdir("./221") = 0 [pid 6432] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6428] <... write resumed>) = 524288 [pid 6432] <... prctl resumed>) = 0 [pid 6428] munmap(0x7f0356e00000, 138412032 [pid 6432] setpgid(0, 0 [pid 6428] <... munmap resumed>) = 0 [pid 6428] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6431] <... ioctl resumed>) = 0 [pid 6428] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6431] close(3 [pid 6428] close(5 [pid 6432] <... setpgid resumed>) = 0 [pid 6431] <... close resumed>) = 0 [pid 6430] <... mkdir resumed>) = 0 [pid 6429] <... ioctl resumed>) = 0 [pid 6428] <... close resumed>) = 0 [pid 5076] umount2("./224/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6432 [pid 6432] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6430] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6432] <... openat resumed>) = 3 [pid 6432] write(3, "1000", 4 [pid 6431] close(4 [pid 6432] <... write resumed>) = 4 [pid 6431] <... close resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./224/binderfs", [pid 6432] close(3 [pid 6431] mkdir("./bus", 0777 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6432] <... close resumed>) = 0 [pid 6431] <... mkdir resumed>) = 0 [pid 5076] unlink("./224/binderfs" [pid 6432] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6432] memfd_create("syzkaller", 0 [pid 5076] <... unlink resumed>) = 0 [pid 6432] <... memfd_create resumed>) = 3 [pid 5076] getdents64(3, [pid 6432] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6432] <... mmap resumed>) = 0x7f0356e00000 [pid 6432] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] close(3) = 0 [pid 6431] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6428] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6430] <... mount resumed>) = 0 [pid 5076] rmdir("./224" [pid 6430] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5076] <... rmdir resumed>) = 0 [pid 6430] <... openat resumed>) = 3 [pid 6430] chdir("./bus") = 0 [pid 6430] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5076] mkdir("./225", 0777 [pid 6430] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 6430] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6428] <... open resumed>) = 5 [pid 6428] ftruncate(5, 0) = 0 [pid 6428] exit_group(0 [pid 6431] <... mount resumed>) = 0 [pid 6431] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6431] <... openat resumed>) = 3 [pid 6431] chdir("./bus" [pid 6428] <... exit_group resumed>) = ? [pid 5076] <... openat resumed>) = 3 [pid 6431] <... chdir resumed>) = 0 [pid 6431] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6431] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6430] <... creat resumed>) = 4 [pid 6429] close(3 [pid 6428] +++ exited with 0 +++ [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6432] <... write resumed>) = 524288 [ 209.978096][ T6431] loop1: detected capacity change from 0 to 1024 [ 209.996819][ T6429] loop5: detected capacity change from 0 to 1024 [pid 6430] rename("./bus", "./file2" [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6428, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6432] munmap(0x7f0356e00000, 138412032 [pid 6430] <... rename resumed>) = -1 EEXIST (File exists) [pid 6429] <... close resumed>) = 0 [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 6430] memfd_create("syzkaller", 0 [pid 6429] close(4 [pid 5077] <... restart_syscall resumed>) = 0 [pid 6432] <... munmap resumed>) = 0 [pid 6431] <... symlink resumed>) = 0 [pid 6429] <... close resumed>) = 0 [pid 6429] mkdir("./bus", 0777 [pid 6431] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6432] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5077] umount2("./223", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6432] <... openat resumed>) = 4 [pid 6430] <... memfd_create resumed>) = 5 [pid 6432] ioctl(4, LOOP_SET_FD, 3 [pid 6430] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6429] <... mkdir resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6430] <... mmap resumed>) = 0x7f0356e00000 [pid 6431] <... creat resumed>) = 4 [pid 5077] openat(AT_FDCWD, "./223", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6431] rename("./bus", "./file2" [pid 5077] <... openat resumed>) = 3 [pid 6429] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6432] <... ioctl resumed>) = 0 [pid 6431] <... rename resumed>) = -1 EEXIST (File exists) [pid 6430] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6429] <... mount resumed>) = 0 [pid 5077] newfstatat(3, "", [pid 6431] memfd_create("syzkaller", 0 [pid 6429] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6431] <... memfd_create resumed>) = 5 [pid 6431] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6429] <... openat resumed>) = 3 [pid 5077] getdents64(3, [pid 6429] chdir("./bus" [pid 6432] close(3 [pid 6431] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6430] <... write resumed>) = 524288 [pid 6429] <... chdir resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6429] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] umount2("./223/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6432] <... close resumed>) = 0 [pid 6432] close(4) = 0 [pid 6432] mkdir("./bus", 0777) = 0 [pid 6432] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6429] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6429] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5077] <... umount2 resumed>) = 0 [pid 6429] <... symlink resumed>) = 0 [pid 6430] munmap(0x7f0356e00000, 138412032 [pid 5077] umount2("./223/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6429] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./223/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6430] <... munmap resumed>) = 0 [pid 5077] umount2("./223/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6430] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./223/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6432] <... mount resumed>) = 0 [pid 5077] <... openat resumed>) = 4 [pid 6432] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5077] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6431] <... write resumed>) = 524288 [pid 6431] munmap(0x7f0356e00000, 138412032 [pid 5077] getdents64(4, [pid 6432] <... openat resumed>) = 3 [pid 6431] <... munmap resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6432] chdir("./bus" [pid 6431] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6430] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6429] <... creat resumed>) = 4 [pid 5077] getdents64(4, [pid 6430] close(5 [pid 6429] rename("./bus", "./file2" [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6432] <... chdir resumed>) = 0 [pid 6432] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6432] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6431] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6431] close(5 [pid 6429] <... rename resumed>) = -1 EEXIST (File exists) [pid 6429] memfd_create("syzkaller", 0 [pid 5077] close(4 [pid 6431] <... close resumed>) = 0 [pid 6429] <... memfd_create resumed>) = 5 [pid 5077] <... close resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [ 210.045284][ T6432] loop2: detected capacity change from 0 to 1024 [pid 6432] <... symlink resumed>) = 0 [pid 6432] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6430] <... close resumed>) = 0 [pid 6431] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6430] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6429] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] rmdir("./223/bus" [pid 5076] close(3) = 0 [pid 6429] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6429] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6432] <... creat resumed>) = 4 [pid 5077] umount2("./223/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6432] rename("./bus", "./file2" [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6433 attached [pid 5077] newfstatat(AT_FDCWD, "./223/binderfs", [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6433 [pid 6430] <... open resumed>) = 5 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6433] set_robust_list(0x55556e32a660, 24 [pid 6432] <... rename resumed>) = -1 EEXIST (File exists) [pid 6431] <... open resumed>) = 5 [pid 6430] ftruncate(5, 0 [pid 5077] unlink("./223/binderfs" [pid 6431] ftruncate(5, 0 [pid 6430] <... ftruncate resumed>) = 0 [pid 6429] <... write resumed>) = 524288 [pid 5077] <... unlink resumed>) = 0 [pid 6433] <... set_robust_list resumed>) = 0 [pid 6433] chdir("./225" [pid 6431] <... ftruncate resumed>) = 0 [pid 6431] exit_group(0 [pid 6430] exit_group(0 [pid 6431] <... exit_group resumed>) = ? [pid 5077] getdents64(3, [pid 6433] <... chdir resumed>) = 0 [pid 6432] memfd_create("syzkaller", 0 [pid 6433] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6432] <... memfd_create resumed>) = 5 [pid 6433] <... prctl resumed>) = 0 [pid 6432] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6433] setpgid(0, 0 [pid 6432] <... mmap resumed>) = 0x7f0356e00000 [pid 6432] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6431] +++ exited with 0 +++ [pid 6430] <... exit_group resumed>) = ? [pid 6429] munmap(0x7f0356e00000, 138412032 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6433] <... setpgid resumed>) = 0 [pid 5077] close(3 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6431, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6433] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6430] +++ exited with 0 +++ [pid 6429] <... munmap resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 6429] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] rmdir("./223" [pid 5074] umount2("./221", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6433] <... openat resumed>) = 3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6430, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5077] <... rmdir resumed>) = 0 [pid 6433] write(3, "1000", 4 [pid 6429] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] mkdir("./224", 0777 [pid 5074] openat(AT_FDCWD, "./221", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6433] <... write resumed>) = 4 [pid 5074] <... openat resumed>) = 3 [pid 6433] close(3 [pid 5074] newfstatat(3, "", [pid 6433] <... close resumed>) = 0 [pid 6433] symlink("/dev/binderfs", "./binderfs" [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6433] <... symlink resumed>) = 0 [pid 6429] close(5 [pid 5077] <... mkdir resumed>) = 0 [pid 6433] memfd_create("syzkaller", 0 [pid 5074] getdents64(3, [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6433] <... memfd_create resumed>) = 3 [pid 5077] <... openat resumed>) = 3 [pid 5074] umount2("./221/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./221", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6433] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6432] <... write resumed>) = 524288 [pid 6429] <... close resumed>) = 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6433] <... mmap resumed>) = 0x7f0356e00000 [pid 5073] openat(AT_FDCWD, "./221", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, [pid 6429] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5074] <... umount2 resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] umount2("./221/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6433] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] umount2("./221/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./221/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./221/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./221/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6432] munmap(0x7f0356e00000, 138412032) = 0 [pid 6429] <... open resumed>) = 5 [pid 5074] <... openat resumed>) = 4 [pid 5074] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6429] ftruncate(5, 0 [pid 5074] getdents64(4, [pid 6432] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6429] <... ftruncate resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6432] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6429] exit_group(0 [pid 5074] getdents64(4, [pid 6432] close(5) = 0 [pid 6429] <... exit_group resumed>) = ? [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5074] close(4 [pid 6433] <... write resumed>) = 524288 [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./221/bus" [pid 6433] munmap(0x7f0356e00000, 138412032 [pid 5073] umount2("./221/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6433] <... munmap resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6433] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5073] newfstatat(AT_FDCWD, "./221/bus", [pid 6433] ioctl(4, LOOP_SET_FD, 3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] <... ioctl resumed>) = 0 [pid 5074] umount2("./221/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6432] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5073] umount2("./221/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6429] +++ exited with 0 +++ [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6429, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5073] openat(AT_FDCWD, "./221/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] newfstatat(AT_FDCWD, "./221/binderfs", [pid 5073] <... openat resumed>) = 4 [pid 5073] newfstatat(4, "", [pid 6432] <... open resumed>) = 5 [pid 5078] umount2("./224", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] unlink("./221/binderfs" [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... unlink resumed>) = 0 [pid 5073] getdents64(4, [pid 6432] ftruncate(5, 0 [pid 5078] openat(AT_FDCWD, "./224", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] getdents64(3, [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6432] <... ftruncate resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] getdents64(4, [pid 5074] close(3 [pid 6432] exit_group(0 [pid 5078] newfstatat(3, "", [pid 5074] <... close resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] rmdir("./221" [pid 6432] <... exit_group resumed>) = ? [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] close(4 [pid 5078] getdents64(3, [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5074] mkdir("./222", 0777 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] rmdir("./221/bus" [pid 5078] umount2("./224/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... mkdir resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5077] close(3) = 0 [pid 5073] umount2("./221/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6434 attached [pid 5078] <... umount2 resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5073] newfstatat(AT_FDCWD, "./221/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./221/binderfs" [pid 6432] +++ exited with 0 +++ [pid 5073] <... unlink resumed>) = 0 [pid 5073] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./221" [pid 6434] set_robust_list(0x55556e32a660, 24 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6434 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] <... rmdir resumed>) = 0 [pid 6434] <... set_robust_list resumed>) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6432, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6434] chdir("./224" [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 6434] <... chdir resumed>) = 0 [pid 5075] <... restart_syscall resumed>) = 0 [pid 5073] mkdir("./222", 0777 [pid 6434] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5073] <... mkdir resumed>) = 0 [pid 6433] <... ioctl resumed>) = 0 [pid 5078] umount2("./224/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6433] close(3) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6433] close(4 [pid 5078] newfstatat(AT_FDCWD, "./224/bus", [pid 5075] umount2("./221", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6433] <... close resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6433] mkdir("./bus", 0777 [pid 5078] umount2("./224/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "./221", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... openat resumed>) = 3 [pid 6433] <... mkdir resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5075] <... openat resumed>) = 3 [pid 5075] newfstatat(3, "", [pid 5078] openat(AT_FDCWD, "./224/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6434] <... prctl resumed>) = 0 [pid 5078] <... openat resumed>) = 4 [pid 5075] getdents64(3, [pid 6434] setpgid(0, 0 [pid 6433] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5078] newfstatat(4, "", [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(4, [pid 5075] umount2("./221/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6434] <... setpgid resumed>) = 0 [pid 6434] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5078] getdents64(4, [pid 6434] <... openat resumed>) = 3 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6433] <... mount resumed>) = 0 [pid 5078] close(4 [pid 6433] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] <... close resumed>) = 0 [pid 6434] write(3, "1000", 4 [pid 6433] <... openat resumed>) = 3 [pid 6434] <... write resumed>) = 4 [pid 6433] chdir("./bus" [pid 5078] rmdir("./224/bus" [pid 5075] <... umount2 resumed>) = 0 [pid 6433] <... chdir resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 6433] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5078] umount2("./224/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6434] close(3) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6434] symlink("/dev/binderfs", "./binderfs" [pid 5078] newfstatat(AT_FDCWD, "./224/binderfs", [pid 6433] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] unlink("./224/binderfs" [pid 6433] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] <... unlink resumed>) = 0 [pid 5075] umount2("./221/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] getdents64(3, [pid 5075] newfstatat(AT_FDCWD, "./221/bus", [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] close(3 [pid 6434] <... symlink resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5075] umount2("./221/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6434] memfd_create("syzkaller", 0 [pid 6433] <... symlink resumed>) = 0 [pid 5078] rmdir("./224" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6434] <... memfd_create resumed>) = 3 [pid 5078] <... rmdir resumed>) = 0 [pid 6434] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5075] openat(AT_FDCWD, "./221/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6433] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5075] <... openat resumed>) = 4 [pid 5078] mkdir("./225", 0777 [pid 5075] newfstatat(4, "", [pid 5078] <... mkdir resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6433] <... creat resumed>) = 4 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] getdents64(4, [pid 6434] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6433] rename("./bus", "./file2" [pid 5078] <... openat resumed>) = 3 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6433] <... rename resumed>) = -1 EEXIST (File exists) [ 210.190296][ T6433] loop3: detected capacity change from 0 to 1024 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5075] getdents64(4, [pid 6433] memfd_create("syzkaller", 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6433] <... memfd_create resumed>) = 5 [pid 5075] close(4 [pid 6433] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... close resumed>) = 0 [pid 6433] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] rmdir("./221/bus") = 0 [pid 6433] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] umount2("./221/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./221/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./221/binderfs") = 0 [pid 5075] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 5075] rmdir("./221") = 0 [pid 5075] mkdir("./222", 0777) = 0 [pid 6434] <... write resumed>) = 524288 [pid 6433] <... write resumed>) = 524288 [pid 5074] <... ioctl resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6433] munmap(0x7f0356e00000, 138412032) = 0 [pid 5074] close(3 [pid 6433] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5074] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6433] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6433] close(5) = 0 [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6434] munmap(0x7f0356e00000, 138412032) = 0 ./strace-static-x86_64: Process 6435 attached [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6435 [pid 6435] set_robust_list(0x55556e32a660, 24 [pid 6434] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 6436 attached [pid 6436] set_robust_list(0x55556e32a660, 24) = 0 [pid 5078] <... ioctl resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6436 [pid 6436] chdir("./222" [pid 6435] <... set_robust_list resumed>) = 0 [pid 6434] <... openat resumed>) = 4 [pid 6433] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5075] <... ioctl resumed>) = 0 [pid 6436] <... chdir resumed>) = 0 [pid 6435] chdir("./222" [pid 6434] ioctl(4, LOOP_SET_FD, 3 [pid 5078] close(3 [pid 6435] <... chdir resumed>) = 0 [pid 6436] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5078] <... close resumed>) = 0 [pid 6436] <... prctl resumed>) = 0 [pid 6433] <... open resumed>) = 5 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6437 attached [pid 6436] setpgid(0, 0 [pid 6435] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6434] <... ioctl resumed>) = 0 [pid 6433] ftruncate(5, 0 [pid 6437] set_robust_list(0x55556e32a660, 24 [pid 6435] <... prctl resumed>) = 0 [pid 6434] close(3 [pid 6437] <... set_robust_list resumed>) = 0 [pid 6437] chdir("./225" [pid 6435] setpgid(0, 0 [pid 6434] <... close resumed>) = 0 [pid 6437] <... chdir resumed>) = 0 [pid 6435] <... setpgid resumed>) = 0 [pid 6437] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6434] close(4) = 0 [pid 6436] <... setpgid resumed>) = 0 [pid 6433] <... ftruncate resumed>) = 0 [pid 5075] close(3) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6434] mkdir("./bus", 0777 [pid 6437] <... prctl resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6438 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6437 [pid 6434] <... mkdir resumed>) = 0 [pid 6437] setpgid(0, 0) = 0 [pid 6437] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6436] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6433] exit_group(0) = ? [pid 6434] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6433] +++ exited with 0 +++ [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6433, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5076] umount2("./225", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6438 attached [pid 6436] <... openat resumed>) = 3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./225", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6438] set_robust_list(0x55556e32a660, 24 [pid 6437] <... openat resumed>) = 3 [pid 6436] write(3, "1000", 4 [pid 6438] <... set_robust_list resumed>) = 0 [pid 6436] <... write resumed>) = 4 [pid 6437] write(3, "1000", 4) = 4 [pid 5076] <... openat resumed>) = 3 [pid 6437] close(3 [pid 6438] chdir("./222" [pid 6436] close(3 [pid 6438] <... chdir resumed>) = 0 [pid 6437] <... close resumed>) = 0 [pid 6436] <... close resumed>) = 0 [pid 6438] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6437] symlink("/dev/binderfs", "./binderfs" [pid 6436] symlink("/dev/binderfs", "./binderfs" [pid 6435] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] newfstatat(3, "", [pid 6438] <... prctl resumed>) = 0 [pid 6436] <... symlink resumed>) = 0 [pid 6435] <... openat resumed>) = 3 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6438] setpgid(0, 0 [pid 6436] memfd_create("syzkaller", 0 [pid 5076] getdents64(3, [pid 6438] <... setpgid resumed>) = 0 [pid 6436] <... memfd_create resumed>) = 3 [pid 6435] write(3, "1000", 4 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6438] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6437] <... symlink resumed>) = 0 [pid 6436] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6435] <... write resumed>) = 4 [pid 5076] umount2("./225/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6435] close(3 [pid 6438] <... openat resumed>) = 3 [pid 6436] <... mmap resumed>) = 0x7f0356e00000 [pid 6435] <... close resumed>) = 0 [pid 6438] write(3, "1000", 4 [pid 6437] memfd_create("syzkaller", 0 [pid 6436] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6435] symlink("/dev/binderfs", "./binderfs" [pid 6434] <... mount resumed>) = 0 [pid 6438] <... write resumed>) = 4 [pid 6434] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6438] close(3) = 0 [pid 6434] <... openat resumed>) = 3 [pid 6438] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6435] <... symlink resumed>) = 0 [pid 6434] chdir("./bus" [pid 6437] <... memfd_create resumed>) = 3 [pid 6435] memfd_create("syzkaller", 0 [pid 6434] <... chdir resumed>) = 0 [pid 6434] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6438] memfd_create("syzkaller", 0 [pid 6437] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6435] <... memfd_create resumed>) = 3 [pid 6434] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6438] <... memfd_create resumed>) = 3 [pid 6437] <... mmap resumed>) = 0x7f0356e00000 [pid 6435] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6434] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6438] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6438] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6436] <... write resumed>) = 524288 [pid 5076] <... umount2 resumed>) = 0 [pid 6434] <... symlink resumed>) = 0 [pid 6438] <... write resumed>) = 524288 [pid 6437] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6435] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6434] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5076] umount2("./225/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6436] munmap(0x7f0356e00000, 138412032) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./225/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./225/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./225/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6438] munmap(0x7f0356e00000, 138412032 [pid 6436] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] <... openat resumed>) = 4 [pid 6438] <... munmap resumed>) = 0 [pid 6436] <... openat resumed>) = 4 [ 210.318919][ T6434] loop4: detected capacity change from 0 to 1024 [ 210.321626][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 210.321643][ T28] audit: type=1800 audit(1710613092.424:1342): pid=6433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop3" ino=20 res=0 errno=0 [pid 6438] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6436] ioctl(4, LOOP_SET_FD, 3 [pid 6438] <... openat resumed>) = 4 [pid 6435] <... write resumed>) = 524288 [pid 6434] <... creat resumed>) = 4 [pid 5076] newfstatat(4, "", [pid 6438] ioctl(4, LOOP_SET_FD, 3 [pid 6434] rename("./bus", "./file2" [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6438] <... ioctl resumed>) = 0 [pid 6436] <... ioctl resumed>) = 0 [pid 6438] close(3 [pid 6436] close(3 [pid 6438] <... close resumed>) = 0 [pid 6434] <... rename resumed>) = -1 EEXIST (File exists) [pid 5076] getdents64(4, [pid 6438] close(4 [pid 6436] <... close resumed>) = 0 [pid 6434] memfd_create("syzkaller", 0 [pid 6438] <... close resumed>) = 0 [pid 6436] close(4 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6434] <... memfd_create resumed>) = 5 [pid 6438] mkdir("./bus", 0777 [pid 6437] <... write resumed>) = 524288 [pid 6435] munmap(0x7f0356e00000, 138412032 [pid 5076] getdents64(4, [pid 6438] <... mkdir resumed>) = 0 [pid 6437] munmap(0x7f0356e00000, 138412032 [pid 6436] <... close resumed>) = 0 [pid 6434] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6438] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6436] mkdir("./bus", 0777 [pid 6434] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] close(4 [pid 6437] <... munmap resumed>) = 0 [pid 6436] <... mkdir resumed>) = 0 [pid 6435] <... munmap resumed>) = 0 [pid 6436] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5076] <... close resumed>) = 0 [pid 6435] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] rmdir("./225/bus" [pid 6437] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6435] <... openat resumed>) = 4 [pid 6438] <... mount resumed>) = 0 [pid 6437] <... openat resumed>) = 4 [pid 6436] <... mount resumed>) = 0 [pid 6434] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... rmdir resumed>) = 0 [pid 6438] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6437] ioctl(4, LOOP_SET_FD, 3 [pid 6436] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6438] <... openat resumed>) = 3 [pid 6436] <... openat resumed>) = 3 [pid 6438] chdir("./bus" [pid 6436] chdir("./bus" [pid 6438] <... chdir resumed>) = 0 [pid 6436] <... chdir resumed>) = 0 [pid 6438] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6436] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6438] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6436] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 210.395924][ T6436] loop0: detected capacity change from 0 to 1024 [ 210.403694][ T6438] loop2: detected capacity change from 0 to 1024 [pid 6438] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6436] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6434] <... write resumed>) = 524288 [pid 6436] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 4 [pid 6436] rename("./bus", "./file2") = -1 EEXIST (File exists) [pid 6436] memfd_create("syzkaller", 0) = 5 [pid 6436] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6438] <... symlink resumed>) = 0 [pid 6437] <... ioctl resumed>) = 0 [pid 6436] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6435] ioctl(4, LOOP_SET_FD, 3 [pid 6434] munmap(0x7f0356e00000, 138412032 [pid 5076] umount2("./225/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6437] close(3 [pid 6438] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 4 [pid 6438] rename("./bus", "./file2") = -1 EEXIST (File exists) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6437] <... close resumed>) = 0 [pid 6436] <... write resumed>) = 524288 [pid 6435] <... ioctl resumed>) = 0 [pid 6434] <... munmap resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./225/binderfs", [pid 6437] close(4 [pid 6436] munmap(0x7f0356e00000, 138412032 [pid 6434] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6437] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6437] mkdir("./bus", 0777 [pid 6434] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6438] memfd_create("syzkaller", 0) = 5 [pid 6438] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6436] <... munmap resumed>) = 0 [pid 6437] <... mkdir resumed>) = 0 [pid 6437] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6434] close(5 [pid 5076] unlink("./225/binderfs" [pid 6438] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6436] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6437] <... mount resumed>) = 0 [pid 6435] close(3 [pid 6434] <... close resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 6438] <... write resumed>) = 524288 [pid 6437] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6436] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6435] <... close resumed>) = 0 [pid 5076] getdents64(3, [pid 6437] <... openat resumed>) = 3 [pid 6437] chdir("./bus" [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3 [pid 6435] close(4 [pid 5076] <... close resumed>) = 0 [pid 6435] <... close resumed>) = 0 [pid 5076] rmdir("./225" [pid 6435] mkdir("./bus", 0777) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5076] mkdir("./226", 0777 [pid 6436] close(5 [pid 6435] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5076] <... mkdir resumed>) = 0 [pid 6436] <... close resumed>) = 0 [pid 6438] munmap(0x7f0356e00000, 138412032 [pid 6437] <... chdir resumed>) = 0 [pid 6435] <... mount resumed>) = 0 [pid 6434] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [ 210.441701][ T6437] loop5: detected capacity change from 0 to 1024 [ 210.462750][ T6435] loop1: detected capacity change from 0 to 1024 [pid 6435] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5076] <... openat resumed>) = 3 [pid 6438] <... munmap resumed>) = 0 [pid 6437] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6435] <... openat resumed>) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6436] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6435] chdir("./bus" [pid 6438] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6437] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6438] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6437] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6438] close(5 [pid 6437] <... symlink resumed>) = 0 [pid 6435] <... chdir resumed>) = 0 [pid 6435] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6436] <... open resumed>) = 5 [pid 6435] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6434] <... open resumed>) = 5 [pid 6435] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6438] <... close resumed>) = 0 [pid 6437] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6436] ftruncate(5, 0 [pid 6434] ftruncate(5, 0 [pid 6438] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 6437] <... creat resumed>) = 4 [pid 6436] <... ftruncate resumed>) = 0 [pid 6435] <... symlink resumed>) = 0 [pid 6434] <... ftruncate resumed>) = 0 [pid 6438] ftruncate(5, 0 [pid 6437] rename("./bus", "./file2" [pid 6436] exit_group(0 [pid 6438] <... ftruncate resumed>) = 0 [pid 6437] <... rename resumed>) = -1 EEXIST (File exists) [pid 6434] exit_group(0 [pid 6438] exit_group(0 [pid 6437] memfd_create("syzkaller", 0 [pid 6436] <... exit_group resumed>) = ? [pid 6434] <... exit_group resumed>) = ? [pid 6438] <... exit_group resumed>) = ? [pid 6437] <... memfd_create resumed>) = 5 [pid 6435] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6434] +++ exited with 0 +++ [pid 6437] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6434, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6437] <... mmap resumed>) = 0x7f0356e00000 [pid 6437] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] umount2("./224", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6438] +++ exited with 0 +++ [pid 6436] +++ exited with 0 +++ [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./224", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6436, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5077] newfstatat(3, "", [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] <... restart_syscall resumed>) = 0 [pid 5077] umount2("./224/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6435] <... creat resumed>) = 4 [pid 6435] rename("./bus", "./file2" [pid 5073] umount2("./222", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./222", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6435] <... rename resumed>) = -1 EEXIST (File exists) [pid 5073] <... openat resumed>) = 3 [pid 5073] newfstatat(3, "", [pid 6435] memfd_create("syzkaller", 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6438, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6435] <... memfd_create resumed>) = 5 [pid 5073] getdents64(3, [pid 6435] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6435] <... mmap resumed>) = 0x7f0356e00000 [pid 5073] umount2("./222/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6435] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6437] <... write resumed>) = 524288 [ 210.533203][ T28] audit: type=1800 audit(1710613092.634:1343): pid=6436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 210.555661][ T28] audit: type=1800 audit(1710613092.634:1344): pid=6434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop4" ino=20 res=0 errno=0 [pid 6437] munmap(0x7f0356e00000, 138412032 [pid 5077] <... umount2 resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5075] umount2("./222", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6437] <... munmap resumed>) = 0 [pid 5077] umount2("./224/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] close(3 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./222", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] newfstatat(AT_FDCWD, "./224/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... close resumed>) = 0 [pid 5077] umount2("./224/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... openat resumed>) = 3 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(3, "", [pid 5077] openat(AT_FDCWD, "./224/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6437] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6435] <... write resumed>) = 524288 [pid 5077] <... openat resumed>) = 4 [pid 5075] getdents64(3, [pid 5077] newfstatat(4, "", [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6437] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6435] munmap(0x7f0356e00000, 138412032 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] <... umount2 resumed>) = 0 [pid 5077] getdents64(4, [pid 5075] umount2("./222/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] getdents64(4, [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6439 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6439 attached [pid 6437] close(5 [pid 6435] <... munmap resumed>) = 0 [pid 5077] close(4 [pid 5075] <... umount2 resumed>) = 0 [pid 5073] umount2("./222/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6435] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5077] <... close resumed>) = 0 [pid 5075] umount2("./222/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] rmdir("./224/bus" [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./222/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./222/bus", [pid 5077] umount2("./224/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./222/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] openat(AT_FDCWD, "./222/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5075] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] newfstatat(AT_FDCWD, "./224/binderfs", [pid 5075] getdents64(4, [pid 5073] umount2("./222/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6435] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] unlink("./224/binderfs" [pid 5075] getdents64(4, [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... unlink resumed>) = 0 [pid 5077] getdents64(3, [pid 5073] openat(AT_FDCWD, "./222/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] close(4 [pid 5073] <... openat resumed>) = 4 [pid 5077] close(3 [pid 5073] newfstatat(4, "", [pid 5077] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5077] rmdir("./224" [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] rmdir("./222/bus" [pid 5077] <... rmdir resumed>) = 0 [pid 5073] getdents64(4, [pid 5077] mkdir("./225", 0777 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] <... rmdir resumed>) = 0 [pid 6439] set_robust_list(0x55556e32a660, 24 [pid 6437] <... close resumed>) = 0 [pid 6435] close(5 [pid 5077] <... mkdir resumed>) = 0 [pid 5075] umount2("./222/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] getdents64(4, [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] newfstatat(AT_FDCWD, "./222/binderfs", [pid 5073] close(4 [pid 5077] <... openat resumed>) = 3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5075] unlink("./222/binderfs" [pid 5073] <... close resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [ 210.584773][ T28] audit: type=1800 audit(1710613092.664:1345): pid=6438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop2" ino=20 res=0 errno=0 [pid 5073] rmdir("./222/bus" [pid 5075] getdents64(3, [pid 6439] <... set_robust_list resumed>) = 0 [pid 6437] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6435] <... close resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5073] umount2("./222/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 5075] rmdir("./222" [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./222/binderfs", [pid 6439] chdir("./226" [pid 5075] <... rmdir resumed>) = 0 [pid 6439] <... chdir resumed>) = 0 [pid 5075] mkdir("./223", 0777 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6439] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6437] <... open resumed>) = 5 [pid 5075] <... mkdir resumed>) = 0 [pid 5073] unlink("./222/binderfs" [pid 6437] ftruncate(5, 0 [pid 6439] setpgid(0, 0 [pid 5073] <... unlink resumed>) = 0 [pid 6439] <... setpgid resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6439] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] <... openat resumed>) = 3 [pid 5073] getdents64(3, [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6439] <... openat resumed>) = 3 [pid 6439] write(3, "1000", 4 [pid 6437] <... ftruncate resumed>) = 0 [pid 6435] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5073] close(3 [pid 6439] <... write resumed>) = 4 [pid 6437] exit_group(0 [pid 6435] <... open resumed>) = 5 [pid 6439] close(3 [pid 6437] <... exit_group resumed>) = ? [pid 6435] ftruncate(5, 0 [pid 6439] <... close resumed>) = 0 [pid 6437] +++ exited with 0 +++ [pid 6435] <... ftruncate resumed>) = 0 [pid 5077] <... ioctl resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 6435] exit_group(0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6437, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6439] symlink("/dev/binderfs", "./binderfs" [pid 6435] <... exit_group resumed>) = ? [pid 6439] <... symlink resumed>) = 0 [pid 6435] +++ exited with 0 +++ [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6435, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5078] umount2("./225", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./222", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] openat(AT_FDCWD, "./225", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... openat resumed>) = 3 [pid 5074] openat(AT_FDCWD, "./222", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] newfstatat(3, "", [pid 5074] <... openat resumed>) = 3 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] newfstatat(3, "", [pid 6439] memfd_create("syzkaller", 0 [pid 5078] getdents64(3, [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] getdents64(3, [pid 5078] umount2("./225/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] umount2("./222/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6439] <... memfd_create resumed>) = 3 [pid 6439] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6439] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... umount2 resumed>) = 0 [pid 5077] close(3 [pid 5074] <... umount2 resumed>) = 0 [pid 5073] rmdir("./222" [pid 5078] umount2("./225/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... close resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] umount2("./222/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] newfstatat(AT_FDCWD, "./225/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] umount2("./225/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] newfstatat(AT_FDCWD, "./222/bus", [pid 5073] <... rmdir resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] openat(AT_FDCWD, "./225/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] umount2("./222/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... openat resumed>) = 4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6440 attached [pid 6439] <... write resumed>) = 524288 [pid 5078] newfstatat(4, "", [pid 5074] openat(AT_FDCWD, "./222/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] mkdir("./223", 0777 [pid 6440] set_robust_list(0x55556e32a660, 24 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6440 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... openat resumed>) = 4 [pid 5078] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] newfstatat(4, "", [pid 6440] <... set_robust_list resumed>) = 0 [pid 5078] getdents64(4, [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] getdents64(4, [pid 6440] chdir("./225" [pid 5078] close(4 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6440] <... chdir resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5074] getdents64(4, [pid 6440] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5078] rmdir("./225/bus" [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] <... openat resumed>) = 3 [pid 6440] <... prctl resumed>) = 0 [pid 6439] munmap(0x7f0356e00000, 138412032 [pid 5078] <... rmdir resumed>) = 0 [pid 5074] close(4 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6440] setpgid(0, 0 [pid 5078] umount2("./225/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... close resumed>) = 0 [pid 6440] <... setpgid resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] rmdir("./222/bus" [pid 6440] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6439] <... munmap resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 6440] <... openat resumed>) = 3 [pid 5074] <... rmdir resumed>) = 0 [pid 6440] write(3, "1000", 4) = 4 [pid 6440] close(3 [ 210.660375][ T28] audit: type=1800 audit(1710613092.764:1346): pid=6437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 210.685903][ T28] audit: type=1800 audit(1710613092.774:1347): pid=6435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop1" ino=20 res=0 errno=0 [pid 6439] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5078] newfstatat(AT_FDCWD, "./225/binderfs", [pid 5074] umount2("./222/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6440] <... close resumed>) = 0 [pid 6439] <... openat resumed>) = 4 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] close(3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6440] symlink("/dev/binderfs", "./binderfs" [pid 6439] ioctl(4, LOOP_SET_FD, 3 [pid 5078] unlink("./225/binderfs" [pid 6440] <... symlink resumed>) = 0 [pid 6440] memfd_create("syzkaller", 0) = 3 [pid 6440] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5075] <... close resumed>) = 0 [pid 6440] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... unlink resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./222/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] getdents64(3, [pid 6439] <... ioctl resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6439] close(3) = 0 [pid 6440] <... write resumed>) = 524288 ./strace-static-x86_64: Process 6441 attached [pid 6439] close(4 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] unlink("./222/binderfs" [pid 5073] <... ioctl resumed>) = 0 [pid 6441] set_robust_list(0x55556e32a660, 24 [pid 6439] <... close resumed>) = 0 [pid 5078] close(3 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6441 [pid 6439] mkdir("./bus", 0777 [pid 5078] <... close resumed>) = 0 [pid 5078] rmdir("./225" [pid 6441] <... set_robust_list resumed>) = 0 [pid 6440] munmap(0x7f0356e00000, 138412032 [pid 6439] <... mkdir resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5073] close(3 [pid 6441] chdir("./223" [pid 6440] <... munmap resumed>) = 0 [pid 6439] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5078] mkdir("./226", 0777 [pid 5074] getdents64(3, [pid 6441] <... chdir resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 6440] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6441] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6440] <... openat resumed>) = 4 [pid 5078] <... mkdir resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6441] <... prctl resumed>) = 0 [pid 6440] ioctl(4, LOOP_SET_FD, 3 [pid 6441] setpgid(0, 0 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] close(3 [pid 6441] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 6442 attached [pid 6441] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6439] <... mount resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5074] <... close resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6442 [pid 6442] set_robust_list(0x55556e32a660, 24 [pid 6441] <... openat resumed>) = 3 [pid 6439] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5074] rmdir("./222" [pid 6439] <... openat resumed>) = 3 [pid 6442] <... set_robust_list resumed>) = 0 [pid 6442] chdir("./223" [pid 5074] <... rmdir resumed>) = 0 [pid 6442] <... chdir resumed>) = 0 [pid 6439] chdir("./bus" [pid 5074] mkdir("./223", 0777 [pid 6442] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6439] <... chdir resumed>) = 0 [pid 6442] <... prctl resumed>) = 0 [pid 6439] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6442] setpgid(0, 0) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 6442] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6439] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6441] write(3, "1000", 4 [pid 6442] <... openat resumed>) = 3 [pid 6441] <... write resumed>) = 4 [pid 6439] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5074] <... openat resumed>) = 3 [pid 6442] write(3, "1000", 4 [pid 6441] close(3 [pid 6442] <... write resumed>) = 4 [pid 6441] <... close resumed>) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6442] close(3 [pid 6441] symlink("/dev/binderfs", "./binderfs" [pid 6442] <... close resumed>) = 0 [pid 6442] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6441] <... symlink resumed>) = 0 [pid 6442] memfd_create("syzkaller", 0 [pid 6440] <... ioctl resumed>) = 0 [pid 6442] <... memfd_create resumed>) = 3 [pid 6442] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6440] close(3 [pid 6442] <... mmap resumed>) = 0x7f0356e00000 [pid 6441] memfd_create("syzkaller", 0 [pid 6440] <... close resumed>) = 0 [pid 6439] <... symlink resumed>) = 0 [pid 6442] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6441] <... memfd_create resumed>) = 3 [pid 6440] close(4 [pid 6441] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6439] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6441] <... mmap resumed>) = 0x7f0356e00000 [pid 6440] <... close resumed>) = 0 [pid 6440] mkdir("./bus", 0777) = 0 [ 210.749123][ T6439] loop3: detected capacity change from 0 to 1024 [ 210.781126][ T6440] loop4: detected capacity change from 0 to 1024 [pid 6441] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6440] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6439] <... creat resumed>) = 4 [pid 6440] <... mount resumed>) = 0 [pid 6440] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6439] rename("./bus", "./file2" [pid 6440] <... openat resumed>) = 3 [pid 6440] chdir("./bus") = 0 [pid 6440] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6440] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6439] <... rename resumed>) = -1 EEXIST (File exists) [pid 6440] <... symlink resumed>) = 0 [pid 6440] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 4 [pid 6440] rename("./bus", "./file2") = -1 EEXIST (File exists) [pid 6440] memfd_create("syzkaller", 0 [pid 6439] memfd_create("syzkaller", 0 [pid 6440] <... memfd_create resumed>) = 5 [pid 6440] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6440] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6439] <... memfd_create resumed>) = 5 [pid 6439] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6441] <... write resumed>) = 524288 [pid 6442] <... write resumed>) = 524288 [pid 6441] munmap(0x7f0356e00000, 138412032 [pid 6440] <... write resumed>) = 524288 [pid 6439] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... ioctl resumed>) = 0 [pid 6442] munmap(0x7f0356e00000, 138412032 [pid 5078] <... ioctl resumed>) = 0 [pid 6442] <... munmap resumed>) = 0 [pid 6441] <... munmap resumed>) = 0 [pid 6442] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6442] ioctl(4, LOOP_SET_FD, 3 [pid 6441] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] close(3 [pid 5074] close(3 [pid 6441] <... openat resumed>) = 4 [pid 6439] <... write resumed>) = 524288 [pid 5078] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 6441] ioctl(4, LOOP_SET_FD, 3 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6440] munmap(0x7f0356e00000, 138412032) = 0 [pid 6440] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6440] close(5./strace-static-x86_64: Process 6443 attached ) = 0 [pid 6439] munmap(0x7f0356e00000, 138412032) = 0 ./strace-static-x86_64: Process 6444 attached [pid 6439] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6444] set_robust_list(0x55556e32a660, 24 [pid 6439] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6444] <... set_robust_list resumed>) = 0 [pid 6439] close(5 [pid 6444] chdir("./223" [pid 6443] set_robust_list(0x55556e32a660, 24 [pid 6439] <... close resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6444 [pid 6443] <... set_robust_list resumed>) = 0 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6443 [pid 6444] <... chdir resumed>) = 0 [pid 6444] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6443] chdir("./226" [pid 6444] <... prctl resumed>) = 0 [pid 6444] setpgid(0, 0) = 0 [pid 6444] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6442] <... ioctl resumed>) = 0 [pid 6440] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6444] write(3, "1000", 4 [pid 6443] <... chdir resumed>) = 0 [pid 6442] close(3 [pid 6444] <... write resumed>) = 4 [pid 6442] <... close resumed>) = 0 [pid 6444] close(3) = 0 [pid 6443] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6442] close(4 [pid 6444] symlink("/dev/binderfs", "./binderfs" [pid 6443] <... prctl resumed>) = 0 [pid 6442] <... close resumed>) = 0 [pid 6442] mkdir("./bus", 0777 [pid 6440] <... open resumed>) = 5 [pid 6439] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6444] <... symlink resumed>) = 0 [pid 6443] setpgid(0, 0 [pid 6442] <... mkdir resumed>) = 0 [pid 6441] <... ioctl resumed>) = 0 [pid 6440] ftruncate(5, 0 [pid 6439] <... open resumed>) = 5 [pid 6440] <... ftruncate resumed>) = 0 [pid 6439] ftruncate(5, 0 [pid 6443] <... setpgid resumed>) = 0 [pid 6441] close(3 [pid 6439] <... ftruncate resumed>) = 0 [ 210.860180][ T6442] loop0: detected capacity change from 0 to 1024 [ 210.875580][ T6441] loop2: detected capacity change from 0 to 1024 [pid 6439] exit_group(0 [pid 6444] memfd_create("syzkaller", 0 [pid 6443] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6442] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6441] <... close resumed>) = 0 [pid 6440] exit_group(0 [pid 6439] <... exit_group resumed>) = ? [pid 6444] <... memfd_create resumed>) = 3 [pid 6443] <... openat resumed>) = 3 [pid 6441] close(4 [pid 6444] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6443] write(3, "1000", 4 [pid 6441] <... close resumed>) = 0 [pid 6439] +++ exited with 0 +++ [pid 6441] mkdir("./bus", 0777 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6439, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 6443] <... write resumed>) = 4 [pid 6442] <... mount resumed>) = 0 [pid 6441] <... mkdir resumed>) = 0 [pid 6440] <... exit_group resumed>) = ? [pid 6443] close(3) = 0 [pid 5076] umount2("./226", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6443] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6443] <... symlink resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./226", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6443] memfd_create("syzkaller", 0 [pid 5076] <... openat resumed>) = 3 [pid 6443] <... memfd_create resumed>) = 3 [pid 5076] newfstatat(3, "", [pid 6443] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6443] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] getdents64(3, [pid 6443] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] umount2("./226/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6442] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6440] +++ exited with 0 +++ [pid 6442] <... openat resumed>) = 3 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6440, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6442] chdir("./bus" [pid 6441] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5076] <... umount2 resumed>) = 0 [pid 6444] <... mmap resumed>) = 0x7f0356e00000 [pid 6443] <... write resumed>) = 524288 [pid 6442] <... chdir resumed>) = 0 [ 210.903438][ T28] audit: type=1800 audit(1710613093.004:1348): pid=6440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 210.925585][ T28] audit: type=1800 audit(1710613093.004:1349): pid=6439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop3" ino=20 res=0 errno=0 [pid 6444] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6443] munmap(0x7f0356e00000, 138412032 [pid 6442] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6441] <... mount resumed>) = 0 [pid 5077] umount2("./225", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./226/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6442] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6441] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6442] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5077] openat(AT_FDCWD, "./225", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6442] <... symlink resumed>) = 0 [pid 6441] <... openat resumed>) = 3 [pid 5077] <... openat resumed>) = 3 [pid 5076] newfstatat(AT_FDCWD, "./226/bus", [pid 6442] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6441] chdir("./bus" [pid 5077] newfstatat(3, "", [pid 6443] <... munmap resumed>) = 0 [pid 6442] <... creat resumed>) = 4 [pid 6441] <... chdir resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6442] rename("./bus", "./file2" [pid 5077] getdents64(3, [pid 6443] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6442] <... rename resumed>) = -1 EEXIST (File exists) [pid 6443] <... openat resumed>) = 4 [pid 6442] memfd_create("syzkaller", 0 [pid 6441] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5077] umount2("./225/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./226/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6443] ioctl(4, LOOP_SET_FD, 3 [pid 6442] <... memfd_create resumed>) = 5 [pid 6441] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6444] <... write resumed>) = 524288 [pid 6443] <... ioctl resumed>) = 0 [pid 6442] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6443] close(3 [pid 6442] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] openat(AT_FDCWD, "./226/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6443] <... close resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6441] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5077] umount2("./225/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] getdents64(4, [pid 6443] close(4 [pid 6442] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6441] <... symlink resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6443] <... close resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./225/bus", [pid 5076] getdents64(4, [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] umount2("./225/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] close(4 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... close resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./225/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] rmdir("./226/bus" [pid 6443] mkdir("./bus", 0777 [pid 6442] <... write resumed>) = 524288 [pid 5077] <... openat resumed>) = 4 [pid 5076] <... rmdir resumed>) = 0 [pid 6441] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5077] newfstatat(4, "", [pid 5076] umount2("./226/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6444] munmap(0x7f0356e00000, 138412032 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6444] <... munmap resumed>) = 0 [pid 6443] <... mkdir resumed>) = 0 [pid 5077] getdents64(4, [pid 5076] newfstatat(AT_FDCWD, "./226/binderfs", [pid 6443] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6442] munmap(0x7f0356e00000, 138412032 [pid 6441] <... creat resumed>) = 4 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6444] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6441] rename("./bus", "./file2" [pid 5077] getdents64(4, [pid 5076] unlink("./226/binderfs" [pid 6444] <... openat resumed>) = 4 [pid 6442] <... munmap resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 6444] ioctl(4, LOOP_SET_FD, 3 [pid 6443] <... mount resumed>) = 0 [pid 6442] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6441] <... rename resumed>) = -1 EEXIST (File exists) [pid 5077] close(4 [pid 5076] getdents64(3, [pid 6443] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6442] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6441] memfd_create("syzkaller", 0 [pid 5077] <... close resumed>) = 0 [pid 6443] <... openat resumed>) = 3 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6443] chdir("./bus" [pid 6442] close(5 [pid 6443] <... chdir resumed>) = 0 [pid 6442] <... close resumed>) = 0 [pid 6443] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6443] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5076] close(3 [pid 6443] <... symlink resumed>) = 0 [pid 5077] rmdir("./225/bus" [pid 5076] <... close resumed>) = 0 [pid 6442] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [ 210.990706][ T6443] loop5: detected capacity change from 0 to 1024 [ 211.025064][ T6444] loop1: detected capacity change from 0 to 1024 [pid 5076] rmdir("./226" [pid 6443] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6444] <... ioctl resumed>) = 0 [pid 6442] <... open resumed>) = 5 [pid 6441] <... memfd_create resumed>) = 5 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 6442] ftruncate(5, 0 [pid 5077] umount2("./225/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6444] close(3 [pid 6441] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6442] <... ftruncate resumed>) = 0 [pid 6444] <... close resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6441] <... mmap resumed>) = 0x7f0356e00000 [pid 6444] close(4) = 0 [pid 6444] mkdir("./bus", 0777 [pid 5076] mkdir("./227", 0777 [pid 5077] newfstatat(AT_FDCWD, "./225/binderfs", [pid 6444] <... mkdir resumed>) = 0 [pid 6442] exit_group(0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6442] <... exit_group resumed>) = ? [pid 6444] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6441] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6444] <... mount resumed>) = 0 [pid 6443] <... creat resumed>) = 4 [pid 6442] +++ exited with 0 +++ [pid 5077] unlink("./225/binderfs" [pid 5076] <... mkdir resumed>) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6442, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5077] <... unlink resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5077] getdents64(3, [pid 6444] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] <... openat resumed>) = 3 [pid 6444] <... openat resumed>) = 3 [pid 6444] chdir("./bus") = 0 [pid 5077] close(3 [pid 5073] umount2("./223", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6444] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5077] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6444] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5077] rmdir("./225" [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5073] openat(AT_FDCWD, "./223", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6444] <... symlink resumed>) = 0 [pid 6443] rename("./bus", "./file2" [pid 5077] <... rmdir resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 6444] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6441] <... write resumed>) = 524288 [pid 5073] newfstatat(3, "", [pid 5077] mkdir("./226", 0777 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6441] munmap(0x7f0356e00000, 138412032 [pid 6444] <... creat resumed>) = 4 [pid 6443] <... rename resumed>) = -1 EEXIST (File exists) [pid 5077] <... mkdir resumed>) = 0 [pid 5073] getdents64(3, [pid 6443] memfd_create("syzkaller", 0 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6444] rename("./bus", "./file2" [pid 6443] <... memfd_create resumed>) = 5 [pid 5077] <... openat resumed>) = 3 [ 211.037117][ T28] audit: type=1800 audit(1710613093.144:1350): pid=6442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop0" ino=20 res=0 errno=0 [pid 5073] umount2("./223/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6443] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 6443] <... mmap resumed>) = 0x7f0356e00000 [pid 6444] <... rename resumed>) = -1 EEXIST (File exists) [pid 6443] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6441] <... munmap resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 6444] memfd_create("syzkaller", 0) = 5 [pid 6441] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5073] umount2("./223/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6444] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6441] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6444] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6443] <... write resumed>) = 524288 [pid 6441] close(5 [pid 5073] newfstatat(AT_FDCWD, "./223/bus", [pid 6444] <... write resumed>) = 524288 [pid 6443] munmap(0x7f0356e00000, 138412032 [pid 5076] <... ioctl resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] close(3 [pid 6444] munmap(0x7f0356e00000, 138412032 [pid 6443] <... munmap resumed>) = 0 [pid 6441] <... close resumed>) = 0 [pid 5077] <... ioctl resumed>) = 0 [pid 5073] umount2("./223/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./223/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, [pid 6443] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6443] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... close resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6443] close(5 [pid 5073] close(4) = 0 [pid 5073] rmdir("./223/bus") = 0 [pid 6441] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000./strace-static-x86_64: Process 6445 attached [pid 6445] set_robust_list(0x55556e32a660, 24 [pid 6444] <... munmap resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6445 [pid 6445] <... set_robust_list resumed>) = 0 [pid 6445] chdir("./227" [pid 5073] umount2("./223/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] close(3 [pid 5073] newfstatat(AT_FDCWD, "./223/binderfs", [pid 6445] <... chdir resumed>) = 0 [pid 6445] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6444] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6441] <... open resumed>) = 5 [pid 5077] <... close resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6445] <... prctl resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6446 attached [pid 6445] setpgid(0, 0 [pid 6444] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6443] <... close resumed>) = 0 [pid 6441] ftruncate(5, 0 [pid 5073] unlink("./223/binderfs" [pid 6446] set_robust_list(0x55556e32a660, 24 [pid 6445] <... setpgid resumed>) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6446 [pid 6446] <... set_robust_list resumed>) = 0 [pid 6443] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6446] chdir("./226" [pid 6445] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6446] <... chdir resumed>) = 0 [pid 6446] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6445] <... openat resumed>) = 3 [pid 6446] <... prctl resumed>) = 0 [pid 6445] write(3, "1000", 4 [pid 6446] setpgid(0, 0 [pid 6444] close(5 [pid 6443] <... open resumed>) = 5 [pid 6441] <... ftruncate resumed>) = 0 [pid 6445] <... write resumed>) = 4 [pid 5073] <... unlink resumed>) = 0 [pid 6446] <... setpgid resumed>) = 0 [pid 6445] close(3 [pid 6444] <... close resumed>) = 0 [pid 6443] ftruncate(5, 0 [pid 6441] exit_group(0 [pid 5073] getdents64(3, [pid 6446] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6445] <... close resumed>) = 0 [pid 6444] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6443] <... ftruncate resumed>) = 0 [pid 6441] <... exit_group resumed>) = ? [pid 6446] <... openat resumed>) = 3 [pid 6445] symlink("/dev/binderfs", "./binderfs" [pid 6443] exit_group(0 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6446] write(3, "1000", 4 [pid 6445] <... symlink resumed>) = 0 [pid 6443] <... exit_group resumed>) = ? [pid 6446] <... write resumed>) = 4 [pid 6445] memfd_create("syzkaller", 0 [pid 6444] <... open resumed>) = 5 [pid 6443] +++ exited with 0 +++ [pid 6441] +++ exited with 0 +++ [pid 5073] close(3 [pid 6446] close(3 [pid 6445] <... memfd_create resumed>) = 3 [pid 6444] ftruncate(5, 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6443, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5073] <... close resumed>) = 0 [pid 6446] <... close resumed>) = 0 [pid 6445] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6444] <... ftruncate resumed>) = 0 [pid 5073] rmdir("./223" [pid 6446] symlink("/dev/binderfs", "./binderfs" [pid 6445] <... mmap resumed>) = 0x7f0356e00000 [pid 6444] exit_group(0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6441, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6444] <... exit_group resumed>) = ? [pid 5073] <... rmdir resumed>) = 0 [pid 6444] +++ exited with 0 +++ [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 5073] mkdir("./224", 0777 [pid 6446] <... symlink resumed>) = 0 [pid 6445] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... restart_syscall resumed>) = 0 [pid 5073] <... mkdir resumed>) = 0 [ 211.158338][ T28] audit: type=1800 audit(1710613093.264:1351): pid=6441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop2" ino=20 res=0 errno=0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6446] memfd_create("syzkaller", 0 [pid 6445] <... write resumed>) = 524288 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6444, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6446] <... memfd_create resumed>) = 3 [pid 5074] umount2("./223", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... openat resumed>) = 3 [pid 6446] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6445] munmap(0x7f0356e00000, 138412032 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6446] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] umount2("./223", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./223", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] umount2("./226", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "./223", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6445] <... munmap resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... openat resumed>) = 3 [pid 5074] <... openat resumed>) = 3 [pid 5078] openat(AT_FDCWD, "./226", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] newfstatat(3, "", [pid 5074] newfstatat(3, "", [pid 6446] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6445] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5078] <... openat resumed>) = 3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6445] <... openat resumed>) = 4 [pid 5078] newfstatat(3, "", [pid 5075] getdents64(3, [pid 5074] getdents64(3, [pid 6445] ioctl(4, LOOP_SET_FD, 3 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6446] <... write resumed>) = 524288 [pid 5078] getdents64(3, [pid 6446] munmap(0x7f0356e00000, 138412032 [pid 6445] <... ioctl resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] umount2("./223/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./223/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6446] <... munmap resumed>) = 0 [pid 6445] close(3) = 0 [pid 6445] close(4 [pid 6446] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6445] <... close resumed>) = 0 [pid 5078] umount2("./226/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 6446] <... openat resumed>) = 4 [pid 5075] umount2("./223/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6446] ioctl(4, LOOP_SET_FD, 3 [pid 6445] mkdir("./bus", 0777 [pid 5078] <... umount2 resumed>) = 0 [pid 5074] umount2("./223/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... ioctl resumed>) = 0 [pid 6445] <... mkdir resumed>) = 0 [pid 5078] umount2("./226/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] newfstatat(AT_FDCWD, "./226/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] newfstatat(AT_FDCWD, "./223/bus", [pid 5074] newfstatat(AT_FDCWD, "./223/bus", [pid 5078] umount2("./226/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6445] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5075] umount2("./223/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./223/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./223/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] openat(AT_FDCWD, "./223/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... openat resumed>) = 4 [pid 5074] <... openat resumed>) = 4 [pid 5075] newfstatat(4, "", [pid 5074] newfstatat(4, "", [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] close(3 [pid 5075] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, [pid 5073] <... close resumed>) = 0 [pid 5075] getdents64(4, [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] getdents64(4, [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] close(4 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5078] openat(AT_FDCWD, "./226/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... close resumed>) = 0 [pid 5074] close(4./strace-static-x86_64: Process 6447 attached [pid 6446] <... ioctl resumed>) = 0 [pid 5078] <... openat resumed>) = 4 [pid 5075] rmdir("./223/bus" [pid 5074] <... close resumed>) = 0 [pid 6447] set_robust_list(0x55556e32a660, 24 [pid 6446] close(3 [pid 5078] newfstatat(4, "", [pid 5075] <... rmdir resumed>) = 0 [pid 5074] rmdir("./223/bus" [pid 6447] <... set_robust_list resumed>) = 0 [pid 6446] <... close resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6447 [pid 6447] chdir("./224" [pid 6446] close(4 [pid 5078] getdents64(4, [pid 5075] umount2("./223/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... rmdir resumed>) = 0 [pid 6447] <... chdir resumed>) = 0 [pid 6446] <... close resumed>) = 0 [pid 6447] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6446] mkdir("./bus", 0777 [pid 6445] <... mount resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./223/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6447] <... prctl resumed>) = 0 [pid 5078] getdents64(4, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] newfstatat(AT_FDCWD, "./223/binderfs", [pid 6446] <... mkdir resumed>) = 0 [pid 5078] close(4 [pid 6447] setpgid(0, 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6447] <... setpgid resumed>) = 0 [pid 6446] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6445] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6447] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6445] <... openat resumed>) = 3 [pid 5078] <... close resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./223/binderfs", [pid 5074] unlink("./223/binderfs" [pid 6447] <... openat resumed>) = 3 [pid 6446] <... mount resumed>) = 0 [pid 6445] chdir("./bus" [pid 5078] rmdir("./226/bus" [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 6447] write(3, "1000", 4 [pid 6446] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6445] <... chdir resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5075] unlink("./223/binderfs" [pid 5074] getdents64(3, [pid 6446] <... openat resumed>) = 3 [pid 6445] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5078] umount2("./226/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... unlink resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6447] <... write resumed>) = 4 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(3, [pid 5074] close(3 [pid 6446] chdir("./bus" [pid 6445] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] newfstatat(AT_FDCWD, "./226/binderfs", [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] <... close resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] close(3 [ 211.229041][ T6445] loop3: detected capacity change from 0 to 1024 [ 211.262860][ T6446] loop4: detected capacity change from 0 to 1024 [pid 5074] rmdir("./223" [pid 6446] <... chdir resumed>) = 0 [pid 6445] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] unlink("./226/binderfs" [pid 5075] <... close resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 6447] close(3 [pid 6446] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6445] <... symlink resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 6446] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6445] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6447] <... close resumed>) = 0 [pid 6446] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5075] rmdir("./223" [pid 5078] getdents64(3, [pid 5075] <... rmdir resumed>) = 0 [pid 5074] mkdir("./224", 0777 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6447] symlink("/dev/binderfs", "./binderfs" [pid 5078] close(3 [pid 5075] mkdir("./224", 0777 [pid 6446] <... symlink resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 6447] <... symlink resumed>) = 0 [pid 6446] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] rmdir("./226" [pid 5075] <... mkdir resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5078] mkdir("./227", 0777 [pid 6447] memfd_create("syzkaller", 0 [pid 6445] <... creat resumed>) = 4 [pid 5078] <... mkdir resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6445] rename("./bus", "./file2" [pid 5075] <... openat resumed>) = 3 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6447] <... memfd_create resumed>) = 3 [pid 6446] <... creat resumed>) = 4 [pid 6445] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] <... openat resumed>) = 3 [pid 6447] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6446] rename("./bus", "./file2" [pid 6445] memfd_create("syzkaller", 0 [pid 5078] <... openat resumed>) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6447] <... mmap resumed>) = 0x7f0356e00000 [pid 6446] <... rename resumed>) = -1 EEXIST (File exists) [pid 6445] <... memfd_create resumed>) = 5 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 6446] memfd_create("syzkaller", 0) = 5 [pid 6445] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6446] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6445] <... mmap resumed>) = 0x7f0356e00000 [pid 6446] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6447] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6445] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6446] <... write resumed>) = 524288 [pid 6446] munmap(0x7f0356e00000, 138412032 [pid 6447] <... write resumed>) = 524288 [pid 6445] <... write resumed>) = 524288 [pid 6447] munmap(0x7f0356e00000, 138412032) = 0 [pid 6446] <... munmap resumed>) = 0 [pid 6445] munmap(0x7f0356e00000, 138412032 [pid 6447] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6446] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6445] <... munmap resumed>) = 0 [pid 6447] <... openat resumed>) = 4 [pid 6446] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6445] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6446] close(5 [pid 6447] ioctl(4, LOOP_SET_FD, 3 [pid 6445] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6446] <... close resumed>) = 0 [pid 6446] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6445] close(5) = 0 [pid 6445] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6447] <... ioctl resumed>) = 0 [pid 6447] close(3) = 0 [pid 6447] close(4) = 0 [pid 6446] <... open resumed>) = 5 [pid 6445] <... open resumed>) = 5 [pid 6447] mkdir("./bus", 0777 [pid 6446] ftruncate(5, 0 [pid 6445] ftruncate(5, 0) = 0 [pid 6445] exit_group(0 [pid 6446] <... ftruncate resumed>) = 0 [pid 6447] <... mkdir resumed>) = 0 [pid 6445] <... exit_group resumed>) = ? [pid 6445] +++ exited with 0 +++ [pid 5078] <... ioctl resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6445, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5076] umount2("./227", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6447] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6446] exit_group(0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./227", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6446] <... exit_group resumed>) = ? [pid 5076] <... openat resumed>) = 3 [pid 5074] <... ioctl resumed>) = 0 [pid 6446] +++ exited with 0 +++ [pid 5078] close(3 [pid 5076] newfstatat(3, "", [pid 5075] <... ioctl resumed>) = 0 [pid 5074] close(3 [pid 5078] <... close resumed>) = 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6446, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... close resumed>) = 0 [pid 5076] getdents64(3, [pid 5075] close(3 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6448 attached [pid 6448] set_robust_list(0x55556e32a660, 24 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6448] <... set_robust_list resumed>) = 0 [pid 6448] chdir("./227") = 0 [ 211.367706][ T6447] loop0: detected capacity change from 0 to 1024 [pid 6448] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6448] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 6449 attached [pid 6448] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] umount2("./227/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6449 [pid 6448] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6450 attached [pid 6449] set_robust_list(0x55556e32a660, 24 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6448 [pid 5077] umount2("./226", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6450] set_robust_list(0x55556e32a660, 24 [pid 6449] <... set_robust_list resumed>) = 0 [pid 6450] <... set_robust_list resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6447] <... mount resumed>) = 0 [pid 6450] chdir("./224") = 0 [pid 6450] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6450] setpgid(0, 0) = 0 [pid 6448] write(3, "1000", 4) = 4 [pid 6450] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6448] close(3 [pid 6450] <... openat resumed>) = 3 [pid 6449] chdir("./224" [pid 6448] <... close resumed>) = 0 [pid 6447] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5077] openat(AT_FDCWD, "./226", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... umount2 resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6450 [pid 6450] write(3, "1000", 4 [pid 6449] <... chdir resumed>) = 0 [pid 6450] <... write resumed>) = 4 [pid 6449] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6448] symlink("/dev/binderfs", "./binderfs" [pid 6447] <... openat resumed>) = 3 [pid 5077] <... openat resumed>) = 3 [pid 5076] umount2("./227/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] newfstatat(3, "", [pid 6447] chdir("./bus" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] newfstatat(AT_FDCWD, "./227/bus", [pid 6447] <... chdir resumed>) = 0 [pid 6449] <... prctl resumed>) = 0 [pid 5077] getdents64(3, [pid 6447] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6449] setpgid(0, 0 [pid 6450] close(3 [pid 6449] <... setpgid resumed>) = 0 [pid 6448] <... symlink resumed>) = 0 [pid 6447] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6448] memfd_create("syzkaller", 0 [pid 5076] umount2("./227/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6449] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6450] <... close resumed>) = 0 [pid 6448] <... memfd_create resumed>) = 3 [pid 6447] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5077] umount2("./226/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6450] symlink("/dev/binderfs", "./binderfs" [pid 6448] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6450] <... symlink resumed>) = 0 [pid 6448] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] openat(AT_FDCWD, "./227/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6448] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... openat resumed>) = 4 [pid 5076] newfstatat(4, "", [pid 6450] memfd_create("syzkaller", 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6450] <... memfd_create resumed>) = 3 [pid 6449] <... openat resumed>) = 3 [pid 6447] <... symlink resumed>) = 0 [pid 5076] getdents64(4, [pid 6450] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6449] write(3, "1000", 4 [pid 6447] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6450] <... mmap resumed>) = 0x7f0356e00000 [pid 6449] <... write resumed>) = 4 [pid 6447] <... creat resumed>) = 4 [pid 5077] <... umount2 resumed>) = 0 [pid 5076] getdents64(4, [pid 6448] <... write resumed>) = 524288 [pid 6447] rename("./bus", "./file2" [pid 6448] munmap(0x7f0356e00000, 138412032 [pid 6447] <... rename resumed>) = -1 EEXIST (File exists) [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6448] <... munmap resumed>) = 0 [pid 6447] memfd_create("syzkaller", 0 [pid 5076] close(4 [pid 6449] close(3 [pid 6447] <... memfd_create resumed>) = 5 [pid 6449] <... close resumed>) = 0 [pid 6448] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6447] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... close resumed>) = 0 [pid 6450] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6449] symlink("/dev/binderfs", "./binderfs" [pid 6448] <... openat resumed>) = 4 [pid 6447] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] umount2("./226/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6449] <... symlink resumed>) = 0 [pid 6448] ioctl(4, LOOP_SET_FD, 3 [pid 6447] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] rmdir("./227/bus" [pid 6450] <... write resumed>) = 524288 [pid 6449] memfd_create("syzkaller", 0 [pid 6448] <... ioctl resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6449] <... memfd_create resumed>) = 3 [pid 5076] <... rmdir resumed>) = 0 [pid 5076] umount2("./227/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./227/binderfs", [pid 5077] newfstatat(AT_FDCWD, "./226/bus", [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6449] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./227/binderfs" [pid 6450] munmap(0x7f0356e00000, 138412032 [pid 6449] <... mmap resumed>) = 0x7f0356e00000 [pid 6448] close(3 [pid 5077] umount2("./226/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... unlink resumed>) = 0 [pid 6450] <... munmap resumed>) = 0 [pid 6447] <... write resumed>) = 524288 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] getdents64(3, [pid 6447] munmap(0x7f0356e00000, 138412032 [pid 5077] openat(AT_FDCWD, "./226/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6450] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6448] <... close resumed>) = 0 [pid 6447] <... munmap resumed>) = 0 [pid 5077] <... openat resumed>) = 4 [pid 5076] close(3 [pid 6450] <... openat resumed>) = 4 [pid 6449] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6450] ioctl(4, LOOP_SET_FD, 3 [pid 5077] newfstatat(4, "", [pid 5076] <... close resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] rmdir("./227" [pid 5077] getdents64(4, [pid 6449] <... write resumed>) = 524288 [pid 6448] close(4 [pid 6447] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] <... rmdir resumed>) = 0 [pid 6449] munmap(0x7f0356e00000, 138412032 [pid 6448] <... close resumed>) = 0 [pid 6447] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] getdents64(4, [pid 5076] mkdir("./228", 0777 [pid 6449] <... munmap resumed>) = 0 [pid 6448] mkdir("./bus", 0777 [pid 6447] close(5 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 6448] <... mkdir resumed>) = 0 [pid 6447] <... close resumed>) = 0 [pid 5077] close(4 [pid 6448] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5077] <... close resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6449] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5077] rmdir("./226/bus" [pid 5076] <... openat resumed>) = 3 [pid 6449] <... openat resumed>) = 4 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6449] ioctl(4, LOOP_SET_FD, 3 [pid 6450] <... ioctl resumed>) = 0 [pid 6450] close(3) = 0 [pid 5077] umount2("./226/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6450] close(4 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./226/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6450] <... close resumed>) = 0 [pid 6450] mkdir("./bus", 0777 [pid 6449] <... ioctl resumed>) = 0 [pid 6448] <... mount resumed>) = 0 [pid 6447] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] unlink("./226/binderfs" [pid 6450] <... mkdir resumed>) = 0 [pid 6448] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5077] <... unlink resumed>) = 0 [pid 6448] <... openat resumed>) = 3 [pid 5077] getdents64(3, [pid 6448] chdir("./bus" [pid 6447] <... open resumed>) = 5 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6450] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6448] <... chdir resumed>) = 0 [pid 5077] close(3 [pid 6448] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6447] ftruncate(5, 0 [pid 5077] <... close resumed>) = 0 [pid 6449] close(3 [pid 6448] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6447] <... ftruncate resumed>) = 0 [pid 5077] rmdir("./226" [pid 6449] <... close resumed>) = 0 [pid 6448] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6447] exit_group(0 [pid 5077] <... rmdir resumed>) = 0 [pid 6450] <... mount resumed>) = 0 [ 211.479408][ T6448] loop5: detected capacity change from 0 to 1024 [ 211.508671][ T6450] loop2: detected capacity change from 0 to 1024 [ 211.522705][ T6449] loop1: detected capacity change from 0 to 1024 [pid 6449] close(4 [pid 5077] mkdir("./227", 0777 [pid 6450] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6449] <... close resumed>) = 0 [pid 6448] <... symlink resumed>) = 0 [pid 6447] <... exit_group resumed>) = ? [pid 6450] <... openat resumed>) = 3 [pid 6448] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5077] <... mkdir resumed>) = 0 [pid 6450] chdir("./bus" [pid 6449] mkdir("./bus", 0777 [pid 6450] <... chdir resumed>) = 0 [pid 6449] <... mkdir resumed>) = 0 [pid 6447] +++ exited with 0 +++ [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6447, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5077] <... openat resumed>) = 3 [pid 6450] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] <... ioctl resumed>) = 0 [pid 6450] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6449] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6448] <... creat resumed>) = 4 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 6450] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6448] rename("./bus", "./file2" [pid 6450] <... symlink resumed>) = 0 [pid 5073] umount2("./224", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6450] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./224", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6448] <... rename resumed>) = -1 EEXIST (File exists) [pid 5073] newfstatat(3, "", [pid 6448] memfd_create("syzkaller", 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6448] <... memfd_create resumed>) = 5 [pid 5076] close(3 [pid 5073] getdents64(3, [pid 6448] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... close resumed>) = 0 [pid 6448] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6450] <... creat resumed>) = 4 [pid 6450] rename("./bus", "./file2" [pid 5073] umount2("./224/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6450] <... rename resumed>) = -1 EEXIST (File exists) [pid 6448] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6451 ./strace-static-x86_64: Process 6451 attached [pid 6451] set_robust_list(0x55556e32a660, 24 [pid 6449] <... mount resumed>) = 0 [pid 6449] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6451] <... set_robust_list resumed>) = 0 [pid 6449] <... openat resumed>) = 3 [pid 6451] chdir("./228") = 0 [pid 6449] chdir("./bus" [pid 6451] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6449] <... chdir resumed>) = 0 [pid 6449] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6451] <... prctl resumed>) = 0 [pid 6449] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6450] memfd_create("syzkaller", 0 [pid 5073] <... umount2 resumed>) = 0 [pid 6451] setpgid(0, 0 [pid 6448] <... write resumed>) = 524288 [pid 6448] munmap(0x7f0356e00000, 138412032 [pid 6451] <... setpgid resumed>) = 0 [pid 6450] <... memfd_create resumed>) = 5 [pid 6449] <... symlink resumed>) = 0 [pid 5073] umount2("./224/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6449] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6448] <... munmap resumed>) = 0 [pid 6448] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6451] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6450] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6449] <... creat resumed>) = 4 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6451] <... openat resumed>) = 3 [pid 6450] <... mmap resumed>) = 0x7f0356e00000 [pid 6449] rename("./bus", "./file2" [pid 6448] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... ioctl resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./224/bus", [pid 6448] close(5 [pid 6450] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./224/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./224/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6449] <... rename resumed>) = -1 EEXIST (File exists) [pid 5077] close(3 [pid 5073] <... openat resumed>) = 4 [pid 5077] <... close resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] newfstatat(4, "", [pid 6451] write(3, "1000", 4 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6451] <... write resumed>) = 4 [pid 5073] getdents64(4, [pid 6451] close(3 [pid 6449] memfd_create("syzkaller", 0) = 5 [pid 6451] <... close resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6449] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6448] <... close resumed>) = 0 [pid 6451] symlink("/dev/binderfs", "./binderfs" [pid 5073] getdents64(4, ./strace-static-x86_64: Process 6452 attached [pid 6449] <... mmap resumed>) = 0x7f0356e00000 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6452] set_robust_list(0x55556e32a660, 24 [pid 6451] <... symlink resumed>) = 0 [pid 6449] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6452] <... set_robust_list resumed>) = 0 [pid 5073] close(4 [pid 6452] chdir("./227" [pid 6451] memfd_create("syzkaller", 0 [pid 6452] <... chdir resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 6452] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6452] setpgid(0, 0) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6452 [pid 6452] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5073] rmdir("./224/bus" [pid 6452] <... openat resumed>) = 3 [pid 5073] <... rmdir resumed>) = 0 [pid 6452] write(3, "1000", 4 [pid 6451] <... memfd_create resumed>) = 3 [pid 6448] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5073] umount2("./224/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6452] <... write resumed>) = 4 [pid 6451] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6450] <... write resumed>) = 524288 [pid 6449] <... write resumed>) = 524288 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6452] close(3 [pid 6451] <... mmap resumed>) = 0x7f0356e00000 [pid 6450] munmap(0x7f0356e00000, 138412032 [pid 5073] newfstatat(AT_FDCWD, "./224/binderfs", [pid 6452] <... close resumed>) = 0 [pid 6452] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./224/binderfs") = 0 [pid 5073] getdents64(3, [pid 6452] memfd_create("syzkaller", 0 [pid 6450] <... munmap resumed>) = 0 [pid 6448] <... open resumed>) = 5 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3 [pid 6452] <... memfd_create resumed>) = 3 [pid 6448] ftruncate(5, 0 [pid 5073] <... close resumed>) = 0 [pid 6452] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6448] <... ftruncate resumed>) = 0 [pid 5073] rmdir("./224" [pid 6452] <... mmap resumed>) = 0x7f0356e00000 [pid 6448] exit_group(0 [pid 5073] <... rmdir resumed>) = 0 [pid 6450] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6452] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6451] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6450] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6448] <... exit_group resumed>) = ? [pid 5073] mkdir("./225", 0777 [pid 6450] close(5 [pid 5073] <... mkdir resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6448] +++ exited with 0 +++ [pid 6449] munmap(0x7f0356e00000, 138412032) = 0 [pid 6452] <... write resumed>) = 524288 [pid 6451] <... write resumed>) = 524288 [pid 6450] <... close resumed>) = 0 [pid 6449] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6448, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5073] <... openat resumed>) = 3 [pid 6452] munmap(0x7f0356e00000, 138412032 [pid 6451] munmap(0x7f0356e00000, 138412032 [pid 6450] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6449] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6452] <... munmap resumed>) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6452] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6449] close(5 [pid 6452] <... openat resumed>) = 4 [pid 6451] <... munmap resumed>) = 0 [pid 6451] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6452] ioctl(4, LOOP_SET_FD, 3 [pid 5078] umount2("./227", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6451] ioctl(4, LOOP_SET_FD, 3 [pid 6450] <... open resumed>) = 5 [pid 6449] <... close resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6450] ftruncate(5, 0 [pid 5078] openat(AT_FDCWD, "./227", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5078] newfstatat(3, "", [pid 6450] <... ftruncate resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] umount2("./227/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6452] <... ioctl resumed>) = 0 [pid 6451] <... ioctl resumed>) = 0 [pid 6450] exit_group(0 [pid 6449] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6452] close(3 [pid 6451] close(3 [pid 6450] <... exit_group resumed>) = ? [pid 6452] <... close resumed>) = 0 [pid 6451] <... close resumed>) = 0 [pid 6450] +++ exited with 0 +++ [pid 6452] close(4 [pid 6451] close(4 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6450, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6452] <... close resumed>) = 0 [pid 6451] <... close resumed>) = 0 [pid 6452] mkdir("./bus", 0777 [pid 6451] mkdir("./bus", 0777 [pid 5075] umount2("./224", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./224", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5075] newfstatat(3, "", [pid 6451] <... mkdir resumed>) = 0 [pid 6449] <... open resumed>) = 5 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6452] <... mkdir resumed>) = 0 [pid 6451] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6449] ftruncate(5, 0 [pid 5075] getdents64(3, [pid 6452] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6449] <... ftruncate resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] umount2("./224/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6452] <... mount resumed>) = 0 [pid 6449] exit_group(0 [pid 5078] <... umount2 resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 6452] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6449] <... exit_group resumed>) = ? [pid 5075] umount2("./224/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./224/bus", [pid 6452] <... openat resumed>) = 3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6452] chdir("./bus") = 0 [pid 6452] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5075] umount2("./224/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6452] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6449] +++ exited with 0 +++ [pid 5078] umount2("./227/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "./224/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... ioctl resumed>) = 0 [pid 6452] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6449, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] <... openat resumed>) = 4 [pid 5074] umount2("./224", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] newfstatat(AT_FDCWD, "./227/bus", [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./224", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5075] newfstatat(4, "", [pid 5074] newfstatat(3, "", [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] umount2("./227/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] getdents64(4, [pid 6451] <... mount resumed>) = 0 [pid 5074] getdents64(3, [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6452] <... symlink resumed>) = 0 [pid 6451] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] openat(AT_FDCWD, "./227/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] getdents64(4, [pid 5074] umount2("./224/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6451] <... openat resumed>) = 3 [pid 5078] <... openat resumed>) = 4 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] close(3 [pid 6451] chdir("./bus" [pid 5078] newfstatat(4, "", [pid 5075] close(4 [pid 6451] <... chdir resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... close resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 6451] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5078] getdents64(4, [pid 5075] rmdir("./224/bus" [pid 6452] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6451] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] <... rmdir resumed>) = 0 [pid 6451] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"./strace-static-x86_64: Process 6453 attached [pid 6453] set_robust_list(0x55556e32a660, 24 [pid 5075] umount2("./224/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6453] <... set_robust_list resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./224/binderfs", [pid 6453] chdir("./225" [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] getdents64(4, [pid 5075] unlink("./224/binderfs" [pid 6453] <... chdir resumed>) = 0 [pid 6452] <... creat resumed>) = 4 [pid 6451] <... symlink resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 6453] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6452] rename("./bus", "./file2" [pid 6451] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] close(4 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6453 [pid 6453] <... prctl resumed>) = 0 [pid 5075] getdents64(3, [pid 6453] setpgid(0, 0 [pid 5078] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 6453] <... setpgid resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6453] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6452] <... rename resumed>) = -1 EEXIST (File exists) [pid 6451] <... creat resumed>) = 4 [pid 5078] rmdir("./227/bus" [pid 5075] close(3 [pid 6452] memfd_create("syzkaller", 0 [pid 5075] <... close resumed>) = 0 [pid 6453] <... openat resumed>) = 3 [pid 5078] <... rmdir resumed>) = 0 [pid 5075] rmdir("./224" [pid 6452] <... memfd_create resumed>) = 5 [pid 6451] rename("./bus", "./file2" [pid 5078] umount2("./227/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... rmdir resumed>) = 0 [pid 6453] write(3, "1000", 4 [pid 6452] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6451] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 211.684672][ T6451] loop3: detected capacity change from 0 to 1024 [ 211.691300][ T6452] loop4: detected capacity change from 0 to 1024 [pid 5074] umount2("./224/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6453] <... write resumed>) = 4 [pid 6452] <... mmap resumed>) = 0x7f0356e00000 [pid 6451] memfd_create("syzkaller", 0 [pid 5078] newfstatat(AT_FDCWD, "./227/binderfs", [pid 5075] mkdir("./225", 0777 [pid 6453] close(3 [pid 6451] <... memfd_create resumed>) = 5 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6453] <... close resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./224/bus", [pid 6453] symlink("/dev/binderfs", "./binderfs" [pid 6452] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6451] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] unlink("./227/binderfs" [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6451] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... unlink resumed>) = 0 [pid 6453] <... symlink resumed>) = 0 [pid 5078] getdents64(3, [pid 5075] <... openat resumed>) = 3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] umount2("./224/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./224/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5074] newfstatat(4, "", [pid 6453] memfd_create("syzkaller", 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6453] <... memfd_create resumed>) = 3 [pid 5074] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] close(4 [pid 6453] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] close(3 [pid 5074] <... close resumed>) = 0 [pid 6453] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... close resumed>) = 0 [pid 5074] rmdir("./224/bus" [pid 6453] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... rmdir resumed>) = 0 [pid 5074] umount2("./224/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./224/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./224/binderfs") = 0 [pid 5074] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 5074] rmdir("./224" [pid 6451] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] rmdir("./227" [pid 5074] <... rmdir resumed>) = 0 [pid 5074] mkdir("./225", 0777 [pid 5078] <... rmdir resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 6453] <... write resumed>) = 524288 [pid 6452] <... write resumed>) = 524288 [pid 5078] mkdir("./228", 0777 [pid 6452] munmap(0x7f0356e00000, 138412032 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6453] munmap(0x7f0356e00000, 138412032 [pid 6452] <... munmap resumed>) = 0 [pid 6451] <... write resumed>) = 524288 [pid 5078] <... mkdir resumed>) = 0 [pid 6453] <... munmap resumed>) = 0 [pid 6451] munmap(0x7f0356e00000, 138412032 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6452] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6451] <... munmap resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 6452] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6451] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6453] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6452] close(5 [pid 6451] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6451] close(5 [pid 6453] <... openat resumed>) = 4 [pid 6452] <... close resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5075] close(3) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556e32a650) = 6454 ./strace-static-x86_64: Process 6454 attached [pid 6453] ioctl(4, LOOP_SET_FD, 3 [pid 6454] set_robust_list(0x55556e32a660, 24 [pid 6451] <... close resumed>) = 0 [pid 6451] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6454] <... set_robust_list resumed>) = 0 [pid 6452] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6451] <... open resumed>) = 5 [pid 6451] ftruncate(5, 0 [pid 6454] chdir("./225" [pid 6451] <... ftruncate resumed>) = 0 [pid 6454] <... chdir resumed>) = 0 [pid 6451] exit_group(0 [pid 6454] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6451] <... exit_group resumed>) = ? [pid 6454] <... prctl resumed>) = 0 [pid 6453] <... ioctl resumed>) = 0 [pid 6452] <... open resumed>) = 5 [pid 5074] <... ioctl resumed>) = 0 [pid 6454] setpgid(0, 0 [pid 6453] close(3 [pid 6452] ftruncate(5, 0 [pid 6454] <... setpgid resumed>) = 0 [pid 6453] <... close resumed>) = 0 [pid 6452] <... ftruncate resumed>) = 0 [pid 6454] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6453] close(4 [pid 6452] exit_group(0 [pid 6453] <... close resumed>) = 0 [pid 6452] <... exit_group resumed>) = ? [pid 6451] +++ exited with 0 +++ [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6451, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5076] umount2("./228", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6452] +++ exited with 0 +++ [pid 6453] mkdir("./bus", 0777 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6452, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5076] openat(AT_FDCWD, "./228", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6454] <... openat resumed>) = 3 [pid 5076] <... openat resumed>) = 3 [pid 5074] close(3) = 0 [pid 6453] <... mkdir resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] umount2("./227", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6455 attached ) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(3, "", [pid 6454] write(3, "1000", 4 [pid 5077] openat(AT_FDCWD, "./227", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6454] <... write resumed>) = 4 [pid 6455] set_robust_list(0x55556e32a660, 24 [pid 6454] close(3 [pid 5077] <... openat resumed>) = 3 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6454] <... close resumed>) = 0 [pid 6453] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5077] newfstatat(3, "", [pid 6454] symlink("/dev/binderfs", "./binderfs" [pid 6455] <... set_robust_list resumed>) = 0 [pid 6454] <... symlink resumed>) = 0 [pid 5078] <... ioctl resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6455 [pid 6455] chdir("./225" [pid 6454] memfd_create("syzkaller", 0 [pid 5077] getdents64(3, [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6455] <... chdir resumed>) = 0 [pid 6454] <... memfd_create resumed>) = 3 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] umount2("./228/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6454] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6453] <... mount resumed>) = 0 [pid 5077] umount2("./227/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6455] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6454] <... mmap resumed>) = 0x7f0356e00000 [pid 6453] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6455] <... prctl resumed>) = 0 [pid 6455] setpgid(0, 0) = 0 [pid 6455] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6455] write(3, "1000", 4) = 4 [pid 6453] <... openat resumed>) = 3 [pid 6455] close(3) = 0 [pid 6455] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6453] chdir("./bus" [pid 6455] memfd_create("syzkaller", 0 [pid 6453] <... chdir resumed>) = 0 [pid 6453] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6455] <... memfd_create resumed>) = 3 [pid 6453] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6455] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6453] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] close(3 [pid 6455] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6453] <... symlink resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 6453] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... umount2 resumed>) = 0 [ 211.819979][ T6453] loop0: detected capacity change from 0 to 1024 [pid 6454] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6453] <... creat resumed>) = 4 ./strace-static-x86_64: Process 6456 attached [pid 6453] rename("./bus", "./file2" [pid 5077] <... umount2 resumed>) = 0 [pid 6456] set_robust_list(0x55556e32a660, 24 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6456 [pid 6456] <... set_robust_list resumed>) = 0 [pid 6456] chdir("./228") = 0 [pid 6456] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6456] setpgid(0, 0) = 0 [pid 6456] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6456] write(3, "1000", 4) = 4 [pid 6456] close(3 [pid 6455] <... write resumed>) = 524288 [pid 6453] <... rename resumed>) = -1 EEXIST (File exists) [pid 5077] umount2("./227/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./228/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6456] <... close resumed>) = 0 [pid 6453] memfd_create("syzkaller", 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./227/bus", [pid 5076] newfstatat(AT_FDCWD, "./228/bus", [pid 6453] <... memfd_create resumed>) = 5 [pid 6456] symlink("/dev/binderfs", "./binderfs" [pid 6453] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6456] <... symlink resumed>) = 0 [pid 6454] <... write resumed>) = 524288 [pid 6454] munmap(0x7f0356e00000, 138412032 [pid 6453] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] umount2("./227/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./228/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6456] memfd_create("syzkaller", 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6456] <... memfd_create resumed>) = 3 [pid 6455] munmap(0x7f0356e00000, 138412032 [pid 5077] openat(AT_FDCWD, "./227/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] openat(AT_FDCWD, "./228/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6455] <... munmap resumed>) = 0 [pid 6454] <... munmap resumed>) = 0 [pid 6453] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6456] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6455] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6455] ioctl(4, LOOP_SET_FD, 3 [pid 6454] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5077] <... openat resumed>) = 4 [pid 5076] <... openat resumed>) = 4 [pid 6456] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6454] <... openat resumed>) = 4 [pid 6453] <... write resumed>) = 524288 [pid 5077] newfstatat(4, "", [pid 5076] newfstatat(4, "", [pid 6454] ioctl(4, LOOP_SET_FD, 3 [pid 6456] munmap(0x7f0356e00000, 138412032) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] getdents64(4, [pid 6456] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, [pid 5077] getdents64(4, [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6454] <... ioctl resumed>) = 0 [pid 6453] munmap(0x7f0356e00000, 138412032 [pid 6454] close(3 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] close(4 [pid 6454] <... close resumed>) = 0 [pid 5077] close(4 [pid 5076] <... close resumed>) = 0 [pid 6456] <... openat resumed>) = 4 [pid 6455] <... ioctl resumed>) = 0 [pid 6454] close(4 [pid 6453] <... munmap resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5076] rmdir("./228/bus" [pid 6456] ioctl(4, LOOP_SET_FD, 3 [pid 6455] close(3 [pid 6454] <... close resumed>) = 0 [pid 6453] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5077] rmdir("./227/bus" [pid 6455] <... close resumed>) = 0 [pid 6455] close(4 [pid 5076] <... rmdir resumed>) = 0 [pid 6455] <... close resumed>) = 0 [pid 6455] mkdir("./bus", 0777 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] umount2("./228/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6455] <... mkdir resumed>) = 0 [pid 6454] mkdir("./bus", 0777 [pid 6453] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] umount2("./227/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6454] <... mkdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6455] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6454] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6453] close(5 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./228/binderfs", [pid 6453] <... close resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./227/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] unlink("./227/binderfs" [pid 5076] unlink("./228/binderfs" [pid 6456] <... ioctl resumed>) = 0 [pid 6453] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] <... unlink resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5077] getdents64(3, [pid 5076] getdents64(3, [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] close(3 [pid 5076] close(3) = 0 [pid 5077] <... close resumed>) = 0 [pid 5076] rmdir("./228") = 0 [pid 5077] rmdir("./227" [pid 5076] mkdir("./229", 0777 [pid 5077] <... rmdir resumed>) = 0 [pid 5077] mkdir("./228", 0777 [pid 5076] <... mkdir resumed>) = 0 [pid 6456] close(3 [pid 5077] <... mkdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6456] <... close resumed>) = 0 [pid 6456] close(4 [pid 5076] <... openat resumed>) = 3 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [ 211.911106][ T6455] loop1: detected capacity change from 0 to 1024 [ 211.924494][ T6454] loop2: detected capacity change from 0 to 1024 [ 211.941402][ T6456] loop5: detected capacity change from 0 to 1024 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6456] <... close resumed>) = 0 [pid 6455] <... mount resumed>) = 0 [pid 6454] <... mount resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 6456] mkdir("./bus", 0777 [pid 6455] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6454] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6453] <... open resumed>) = 5 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 6455] <... openat resumed>) = 3 [pid 6455] chdir("./bus") = 0 [pid 6456] <... mkdir resumed>) = 0 [pid 6455] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6454] <... openat resumed>) = 3 [pid 6453] ftruncate(5, 0 [pid 6455] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6455] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6454] chdir("./bus") = 0 [pid 6453] <... ftruncate resumed>) = 0 [pid 6456] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "") = 0 [pid 6455] <... symlink resumed>) = 0 [pid 6454] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6453] exit_group(0) = ? [pid 6456] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6454] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6456] <... openat resumed>) = 3 [pid 6456] chdir("./bus") = 0 [pid 6455] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6453] +++ exited with 0 +++ [pid 6454] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6453, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 6456] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6456] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6455] <... creat resumed>) = 4 [pid 6456] <... symlink resumed>) = 0 [pid 6455] rename("./bus", "./file2" [pid 6454] <... symlink resumed>) = 0 [pid 5073] umount2("./225", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6456] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6454] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6455] <... rename resumed>) = -1 EEXIST (File exists) [pid 5073] openat(AT_FDCWD, "./225", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6455] memfd_create("syzkaller", 0) = 5 [pid 6454] <... creat resumed>) = 4 [pid 5073] <... openat resumed>) = 3 [pid 6455] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6454] rename("./bus", "./file2" [pid 5073] newfstatat(3, "", [pid 6456] <... creat resumed>) = 4 [pid 6455] <... mmap resumed>) = 0x7f0356e00000 [pid 6454] <... rename resumed>) = -1 EEXIST (File exists) [pid 6454] memfd_create("syzkaller", 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6454] <... memfd_create resumed>) = 5 [pid 6454] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] getdents64(3, [pid 6454] <... mmap resumed>) = 0x7f0356e00000 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6456] rename("./bus", "./file2" [pid 6454] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] umount2("./225/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6455] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... ioctl resumed>) = 0 [pid 6456] <... rename resumed>) = -1 EEXIST (File exists) [pid 5077] <... ioctl resumed>) = 0 [pid 6456] memfd_create("syzkaller", 0) = 5 [pid 6456] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6455] <... write resumed>) = 524288 [pid 6455] munmap(0x7f0356e00000, 138412032) = 0 [pid 6455] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6456] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6454] <... write resumed>) = 524288 [pid 5077] close(3 [pid 5076] close(3 [pid 5077] <... close resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 6455] close(5 [pid 6456] <... write resumed>) = 524288 [pid 6455] <... close resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6455] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6456] munmap(0x7f0356e00000, 138412032) = 0 [pid 6456] openat(AT_FDCWD, "/dev/loop5", O_RDWR./strace-static-x86_64: Process 6457 attached ) = -1 EBUSY (Device or resource busy) [pid 6455] <... open resumed>) = 5 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6457 ./strace-static-x86_64: Process 6458 attached [pid 6458] set_robust_list(0x55556e32a660, 24) = 0 [pid 6458] chdir("./228" [pid 6457] set_robust_list(0x55556e32a660, 24 [pid 6458] <... chdir resumed>) = 0 [pid 6457] <... set_robust_list resumed>) = 0 [pid 6456] close(5 [pid 6455] ftruncate(5, 0 [pid 6458] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6457] chdir("./229" [pid 6456] <... close resumed>) = 0 [pid 6454] munmap(0x7f0356e00000, 138412032 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6458 [pid 5073] <... umount2 resumed>) = 0 [pid 6458] <... prctl resumed>) = 0 [pid 6458] setpgid(0, 0 [pid 6454] <... munmap resumed>) = 0 [pid 5073] umount2("./225/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6458] <... setpgid resumed>) = 0 [pid 6457] <... chdir resumed>) = 0 [pid 6455] <... ftruncate resumed>) = 0 [pid 6454] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./225/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6454] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] umount2("./225/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6457] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6457] setpgid(0, 0 [pid 5073] openat(AT_FDCWD, "./225/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6458] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6457] <... setpgid resumed>) = 0 [pid 6455] exit_group(0 [pid 5073] <... openat resumed>) = 4 [pid 5073] newfstatat(4, "", [pid 6457] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6456] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6454] close(5 [pid 6458] <... openat resumed>) = 3 [pid 6457] <... openat resumed>) = 3 [pid 6455] <... exit_group resumed>) = ? [pid 6458] write(3, "1000", 4 [pid 6457] write(3, "1000", 4 [pid 6455] +++ exited with 0 +++ [pid 6454] <... close resumed>) = 0 [pid 5073] getdents64(4, [pid 6458] <... write resumed>) = 4 [pid 6457] <... write resumed>) = 4 [pid 6458] close(3 [pid 6457] close(3 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6455, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6458] <... close resumed>) = 0 [pid 6457] <... close resumed>) = 0 [pid 6458] symlink("/dev/binderfs", "./binderfs" [pid 6457] symlink("/dev/binderfs", "./binderfs" [pid 6458] <... symlink resumed>) = 0 [pid 6457] <... symlink resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6458] memfd_create("syzkaller", 0) = 3 [pid 6457] memfd_create("syzkaller", 0 [pid 5073] getdents64(4, [pid 6458] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6457] <... memfd_create resumed>) = 3 [pid 6456] <... open resumed>) = 5 [pid 5074] umount2("./225", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6458] <... mmap resumed>) = 0x7f0356e00000 [pid 6457] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] close(4 [pid 6457] <... mmap resumed>) = 0x7f0356e00000 [pid 6454] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5074] openat(AT_FDCWD, "./225", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6457] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6456] ftruncate(5, 0 [pid 5074] <... openat resumed>) = 3 [pid 5073] <... close resumed>) = 0 [pid 6456] <... ftruncate resumed>) = 0 [pid 5073] rmdir("./225/bus" [pid 5074] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6456] exit_group(0 [pid 5073] <... rmdir resumed>) = 0 [pid 6456] <... exit_group resumed>) = ? [pid 5074] getdents64(3, [pid 5073] umount2("./225/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6456] +++ exited with 0 +++ [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6458] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6456, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5074] umount2("./225/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] restart_syscall(<... resuming interrupted clone ...> [pid 5073] newfstatat(AT_FDCWD, "./225/binderfs", [pid 6454] <... open resumed>) = 5 [pid 5078] <... restart_syscall resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6458] <... write resumed>) = 524288 [pid 6457] <... write resumed>) = 524288 [pid 6454] ftruncate(5, 0 [pid 5074] umount2("./225/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] unlink("./225/binderfs" [pid 6458] munmap(0x7f0356e00000, 138412032 [pid 6454] <... ftruncate resumed>) = 0 [pid 5078] umount2("./228", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6458] <... munmap resumed>) = 0 [pid 6457] munmap(0x7f0356e00000, 138412032 [pid 6454] exit_group(0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./225/bus", [pid 5073] <... unlink resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./228", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6454] <... exit_group resumed>) = ? [pid 5078] <... openat resumed>) = 3 [pid 5073] getdents64(3, [pid 5078] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6458] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6457] <... munmap resumed>) = 0 [pid 5078] getdents64(3, [pid 5074] umount2("./225/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] close(3 [pid 6458] <... openat resumed>) = 4 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6458] ioctl(4, LOOP_SET_FD, 3 [pid 5078] umount2("./228/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] openat(AT_FDCWD, "./225/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... close resumed>) = 0 [pid 6457] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6454] +++ exited with 0 +++ [pid 5073] rmdir("./225" [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6454, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5074] <... openat resumed>) = 4 [pid 5073] <... rmdir resumed>) = 0 [pid 6457] <... openat resumed>) = 4 [pid 5073] mkdir("./226", 0777) = 0 [pid 6457] ioctl(4, LOOP_SET_FD, 3 [pid 5078] <... umount2 resumed>) = 0 [pid 5074] newfstatat(4, "", [pid 6458] <... ioctl resumed>) = 0 [pid 5078] umount2("./228/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] close(4) = 0 [pid 5074] rmdir("./225/bus") = 0 [pid 5075] umount2("./225", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./225", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5075] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] umount2("./225/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./225/binderfs", [pid 5075] umount2("./225/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5074] unlink("./225/binderfs") = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] newfstatat(AT_FDCWD, "./228/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] getdents64(3, [pid 5078] umount2("./228/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] close(3 [pid 6458] close(3 [pid 6457] <... ioctl resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./228/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6458] <... close resumed>) = 0 [pid 6457] close(3 [pid 5078] <... openat resumed>) = 4 [pid 5074] <... close resumed>) = 0 [pid 6458] close(4 [pid 6457] <... close resumed>) = 0 [pid 6458] <... close resumed>) = 0 [pid 6457] close(4 [pid 5078] newfstatat(4, "", [pid 6458] mkdir("./bus", 0777 [pid 6457] <... close resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5074] rmdir("./225" [pid 6457] mkdir("./bus", 0777 [pid 6458] <... mkdir resumed>) = 0 [pid 5078] getdents64(4, [pid 5075] umount2("./225/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... rmdir resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6457] <... mkdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6458] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5078] getdents64(4, [pid 5075] newfstatat(AT_FDCWD, "./225/bus", [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] mkdir("./226", 0777 [pid 5078] close(4 [pid 5075] umount2("./225/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... mkdir resumed>) = 0 [pid 6457] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5078] <... close resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 5078] rmdir("./228/bus" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5073] close(3) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] openat(AT_FDCWD, "./225/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6457] <... mount resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 6457] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] umount2("./228/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... openat resumed>) = 4 [ 212.148409][ T6458] loop4: detected capacity change from 0 to 1024 [ 212.148710][ T6457] loop3: detected capacity change from 0 to 1024 [pid 6457] <... openat resumed>) = 3 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(4, "", [pid 6457] chdir("./bus" [pid 5078] newfstatat(AT_FDCWD, "./228/binderfs", [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6457] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 6459 attached [pid 6457] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] getdents64(4, [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6459 [pid 6459] set_robust_list(0x55556e32a660, 24 [pid 6457] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] unlink("./228/binderfs" [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6459] <... set_robust_list resumed>) = 0 [pid 6458] <... mount resumed>) = 0 [pid 6459] chdir("./226" [pid 6458] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6457] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] <... unlink resumed>) = 0 [pid 5075] getdents64(4, [pid 6458] <... openat resumed>) = 3 [pid 5078] getdents64(3, [pid 6458] chdir("./bus") = 0 [pid 6458] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5078] close(3 [pid 5075] close(4 [pid 6459] <... chdir resumed>) = 0 [pid 6458] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] <... close resumed>) = 0 [pid 6459] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] <... close resumed>) = 0 [pid 6459] <... prctl resumed>) = 0 [pid 6458] <... symlink resumed>) = 0 [pid 5075] rmdir("./225/bus" [pid 6459] setpgid(0, 0 [pid 6458] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6459] <... setpgid resumed>) = 0 [pid 6457] <... symlink resumed>) = 0 [pid 5078] rmdir("./228" [pid 5075] <... rmdir resumed>) = 0 [pid 6459] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] umount2("./225/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6459] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./225/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6459] write(3, "1000", 4 [pid 5075] unlink("./225/binderfs" [pid 6459] <... write resumed>) = 4 [pid 6459] close(3 [pid 5078] <... rmdir resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 6459] <... close resumed>) = 0 [pid 5075] getdents64(3, [pid 6459] symlink("/dev/binderfs", "./binderfs" [pid 6458] <... creat resumed>) = 4 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6459] <... symlink resumed>) = 0 [pid 6457] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] mkdir("./229", 0777 [pid 5075] close(3 [pid 6458] rename("./bus", "./file2" [pid 5075] <... close resumed>) = 0 [pid 6459] memfd_create("syzkaller", 0 [pid 5075] rmdir("./225" [pid 6459] <... memfd_create resumed>) = 3 [pid 6458] <... rename resumed>) = -1 EEXIST (File exists) [pid 6458] memfd_create("syzkaller", 0 [pid 6459] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... mkdir resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 6457] <... creat resumed>) = 4 [pid 5075] mkdir("./226", 0777 [pid 6457] rename("./bus", "./file2" [pid 6458] <... memfd_create resumed>) = 5 [pid 6459] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6458] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... openat resumed>) = 3 [pid 6458] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] <... mkdir resumed>) = 0 [pid 6457] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] ioctl(3, LOOP_CLR_FD [pid 6459] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6457] memfd_create("syzkaller", 0) = 5 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6457] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... openat resumed>) = 3 [pid 6458] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6457] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6458] <... write resumed>) = 524288 [pid 6459] <... write resumed>) = 524288 [pid 6457] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... ioctl resumed>) = 0 [pid 6458] munmap(0x7f0356e00000, 138412032 [pid 6459] munmap(0x7f0356e00000, 138412032 [pid 6457] <... write resumed>) = 524288 [pid 5074] close(3 [pid 6458] <... munmap resumed>) = 0 [pid 6457] munmap(0x7f0356e00000, 138412032 [pid 5074] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6459] <... munmap resumed>) = 0 [pid 6458] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6459] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6458] close(5 [pid 6457] <... munmap resumed>) = 0 ./strace-static-x86_64: Process 6460 attached [pid 6459] <... openat resumed>) = 4 [pid 6457] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6460 [pid 6460] set_robust_list(0x55556e32a660, 24 [pid 6457] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6460] <... set_robust_list resumed>) = 0 [pid 6459] ioctl(4, LOOP_SET_FD, 3 [pid 6460] chdir("./226" [pid 6457] close(5 [pid 6458] <... close resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 6460] <... chdir resumed>) = 0 [pid 6458] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6457] <... close resumed>) = 0 [pid 6460] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6458] <... open resumed>) = 5 [pid 6460] setpgid(0, 0 [pid 6458] ftruncate(5, 0) = 0 [pid 6460] <... setpgid resumed>) = 0 [pid 6458] exit_group(0 [pid 6460] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6458] <... exit_group resumed>) = ? [pid 6457] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5075] close(3 [pid 5078] <... ioctl resumed>) = 0 [pid 5078] close(3) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6461 attached [pid 6460] <... openat resumed>) = 3 [pid 5075] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6460] write(3, "1000", 4./strace-static-x86_64: Process 6462 attached [pid 6461] set_robust_list(0x55556e32a660, 24 [pid 6460] <... write resumed>) = 4 [pid 6458] +++ exited with 0 +++ [pid 6457] <... open resumed>) = 5 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6458, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6462] set_robust_list(0x55556e32a660, 24 [pid 6461] <... set_robust_list resumed>) = 0 [pid 6460] close(3 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6462 [pid 6462] <... set_robust_list resumed>) = 0 [pid 6460] <... close resumed>) = 0 [pid 6457] ftruncate(5, 0) = 0 [pid 6462] chdir("./226" [pid 6460] symlink("/dev/binderfs", "./binderfs" [pid 6457] exit_group(0 [pid 6461] chdir("./229" [pid 6457] <... exit_group resumed>) = ? [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6461 [pid 6459] <... ioctl resumed>) = 0 [pid 6459] close(3) = 0 [pid 6459] close(4 [pid 6462] <... chdir resumed>) = 0 [pid 6461] <... chdir resumed>) = 0 [pid 6460] <... symlink resumed>) = 0 [pid 6459] <... close resumed>) = 0 [pid 6457] +++ exited with 0 +++ [pid 6462] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6461] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6459] mkdir("./bus", 0777 [pid 6462] <... prctl resumed>) = 0 [pid 6461] <... prctl resumed>) = 0 [pid 6460] memfd_create("syzkaller", 0 [pid 6459] <... mkdir resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6457, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6461] setpgid(0, 0 [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 6460] <... memfd_create resumed>) = 3 [pid 5076] <... restart_syscall resumed>) = 0 [pid 6460] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] umount2("./228", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6461] <... setpgid resumed>) = 0 [pid 6460] <... mmap resumed>) = 0x7f0356e00000 [pid 6459] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6462] setpgid(0, 0) = 0 [pid 6461] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6460] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6459] <... mount resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./229", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6462] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6459] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6459] chdir("./bus" [pid 6462] <... openat resumed>) = 3 [pid 6461] <... openat resumed>) = 3 [pid 6459] <... chdir resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./228", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6462] write(3, "1000", 4 [pid 6461] write(3, "1000", 4 [pid 6459] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6462] <... write resumed>) = 4 [pid 6461] <... write resumed>) = 4 [pid 6460] <... write resumed>) = 524288 [pid 6459] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... openat resumed>) = 3 [ 212.277974][ T6459] loop0: detected capacity change from 0 to 1024 [pid 5076] openat(AT_FDCWD, "./229", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6462] close(3 [pid 6461] close(3 [pid 6460] munmap(0x7f0356e00000, 138412032 [pid 6459] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5077] newfstatat(3, "", [pid 5076] <... openat resumed>) = 3 [pid 6462] <... close resumed>) = 0 [pid 6461] <... close resumed>) = 0 [pid 6460] <... munmap resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] newfstatat(3, "", [pid 6462] symlink("/dev/binderfs", "./binderfs" [pid 6461] symlink("/dev/binderfs", "./binderfs" [pid 6462] <... symlink resumed>) = 0 [pid 6461] <... symlink resumed>) = 0 [pid 6459] <... symlink resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] getdents64(3, [pid 6462] memfd_create("syzkaller", 0 [pid 6461] memfd_create("syzkaller", 0 [pid 6460] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6459] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6462] <... memfd_create resumed>) = 3 [pid 6461] <... memfd_create resumed>) = 3 [pid 6460] <... openat resumed>) = 4 [pid 5077] umount2("./228/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./229/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6462] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6461] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6460] ioctl(4, LOOP_SET_FD, 3 [pid 6462] <... mmap resumed>) = 0x7f0356e00000 [pid 6461] <... mmap resumed>) = 0x7f0356e00000 [pid 6459] <... creat resumed>) = 4 [pid 6461] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6459] rename("./bus", "./file2" [pid 6462] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6459] <... rename resumed>) = -1 EEXIST (File exists) [pid 5076] <... umount2 resumed>) = 0 [pid 6459] memfd_create("syzkaller", 0) = 5 [pid 6459] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6462] <... write resumed>) = 524288 [pid 6461] <... write resumed>) = 524288 [pid 6460] <... ioctl resumed>) = 0 [pid 6461] munmap(0x7f0356e00000, 138412032 [pid 6460] close(3 [pid 6461] <... munmap resumed>) = 0 [pid 6460] <... close resumed>) = 0 [pid 6459] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... umount2 resumed>) = 0 [pid 5076] umount2("./229/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6460] close(4) = 0 [pid 6460] mkdir("./bus", 0777) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./229/bus", [pid 6461] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6460] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6461] <... openat resumed>) = 4 [pid 5077] umount2("./228/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./229/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6461] ioctl(4, LOOP_SET_FD, 3 [pid 5077] newfstatat(AT_FDCWD, "./228/bus", [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./229/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6462] munmap(0x7f0356e00000, 138412032 [pid 5076] <... openat resumed>) = 4 [pid 6462] <... munmap resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] newfstatat(4, "", [pid 6462] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5077] umount2("./228/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6462] <... openat resumed>) = 4 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6462] ioctl(4, LOOP_SET_FD, 3 [pid 5077] openat(AT_FDCWD, "./228/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6461] <... ioctl resumed>) = 0 [pid 6460] <... mount resumed>) = 0 [pid 6459] <... write resumed>) = 524288 [pid 5077] <... openat resumed>) = 4 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6462] <... ioctl resumed>) = 0 [pid 6461] close(3 [pid 6460] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5077] newfstatat(4, "", [pid 5076] getdents64(4, [pid 6462] close(3 [pid 6461] <... close resumed>) = 0 [pid 6460] <... openat resumed>) = 3 [pid 6459] munmap(0x7f0356e00000, 138412032 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6462] <... close resumed>) = 0 [pid 6461] close(4 [pid 5077] getdents64(4, [pid 6462] close(4 [pid 6461] <... close resumed>) = 0 [pid 6460] chdir("./bus" [pid 6462] <... close resumed>) = 0 [pid 6460] <... chdir resumed>) = 0 [pid 6459] <... munmap resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, [pid 6461] mkdir("./bus", 0777 [pid 6462] mkdir("./bus", 0777 [pid 6460] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6459] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5077] getdents64(4, [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6462] <... mkdir resumed>) = 0 [pid 6460] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6459] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6460] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5077] close(4 [pid 5076] close(4 [pid 6462] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6461] <... mkdir resumed>) = 0 [pid 6460] <... symlink resumed>) = 0 [pid 6459] close(5 [pid 5077] <... close resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 6460] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5077] rmdir("./228/bus" [pid 5076] rmdir("./229/bus" [pid 6460] <... creat resumed>) = 4 [pid 5076] <... rmdir resumed>) = 0 [pid 6460] rename("./bus", "./file2" [pid 6461] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6460] <... rename resumed>) = -1 EEXIST (File exists) [pid 5077] <... rmdir resumed>) = 0 [pid 6460] memfd_create("syzkaller", 0 [pid 5076] umount2("./229/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6460] <... memfd_create resumed>) = 5 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6460] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] newfstatat(AT_FDCWD, "./229/binderfs", [pid 6460] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] umount2("./228/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] unlink("./229/binderfs" [pid 6460] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... unlink resumed>) = 0 [pid 5076] getdents64(3, [pid 6461] <... mount resumed>) = 0 [pid 6460] <... write resumed>) = 524288 [pid 6459] <... close resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./228/binderfs", [ 212.350071][ T6460] loop1: detected capacity change from 0 to 1024 [ 212.382926][ T6461] loop5: detected capacity change from 0 to 1024 [ 212.392806][ T6462] loop2: detected capacity change from 0 to 1024 [pid 6461] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6461] chdir("./bus" [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6461] <... chdir resumed>) = 0 [pid 6460] munmap(0x7f0356e00000, 138412032 [pid 5077] unlink("./228/binderfs" [pid 6462] <... mount resumed>) = 0 [pid 6461] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6460] <... munmap resumed>) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6462] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6461] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6459] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6462] <... openat resumed>) = 3 [pid 6461] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6460] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5077] getdents64(3, [pid 5076] close(3 [pid 6462] chdir("./bus" [pid 6461] <... symlink resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] rmdir("./229" [pid 6462] <... chdir resumed>) = 0 [pid 6461] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6462] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6461] <... creat resumed>) = 4 [pid 6460] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] close(3 [pid 5076] <... rmdir resumed>) = 0 [pid 6462] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6462] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6461] rename("./bus", "./file2" [pid 5077] <... close resumed>) = 0 [pid 6462] <... symlink resumed>) = 0 [pid 6460] close(5 [pid 5077] rmdir("./228" [pid 5076] mkdir("./230", 0777 [pid 6462] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6461] <... rename resumed>) = -1 EEXIST (File exists) [pid 6461] memfd_create("syzkaller", 0 [pid 5076] <... mkdir resumed>) = 0 [pid 6461] <... memfd_create resumed>) = 5 [pid 5077] <... rmdir resumed>) = 0 [pid 6459] <... open resumed>) = 5 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6462] <... creat resumed>) = 4 [pid 6461] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] mkdir("./229", 0777 [pid 6462] rename("./bus", "./file2" [pid 6461] <... mmap resumed>) = 0x7f0356e00000 [pid 6459] ftruncate(5, 0 [pid 5077] <... mkdir resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 6462] <... rename resumed>) = -1 EEXIST (File exists) [pid 6461] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6460] <... close resumed>) = 0 [pid 6459] <... ftruncate resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6462] memfd_create("syzkaller", 0 [pid 6460] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6459] exit_group(0 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6462] <... memfd_create resumed>) = 5 [pid 6462] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6459] <... exit_group resumed>) = ? [pid 5077] <... openat resumed>) = 3 [pid 6462] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 6460] <... open resumed>) = 5 [pid 6459] +++ exited with 0 +++ [pid 6460] ftruncate(5, 0) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6459, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6460] exit_group(0) = ? [pid 5073] umount2("./226", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./226", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6460] +++ exited with 0 +++ [pid 5073] <... openat resumed>) = 3 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6460, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5073] newfstatat(3, "", [pid 5074] umount2("./226", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] openat(AT_FDCWD, "./226", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] getdents64(3, [pid 5074] <... openat resumed>) = 3 [pid 5074] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] umount2("./226/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6461] <... write resumed>) = 524288 [pid 5074] umount2("./226/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6462] <... write resumed>) = 524288 [pid 6461] munmap(0x7f0356e00000, 138412032 [pid 5076] <... ioctl resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 6461] <... munmap resumed>) = 0 [pid 5076] close(3 [pid 6462] munmap(0x7f0356e00000, 138412032) = 0 [pid 6462] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6462] close(5 [pid 5076] <... close resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6463 attached [pid 6463] set_robust_list(0x55556e32a660, 24) = 0 [pid 6463] chdir("./230") = 0 [pid 6463] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6463] setpgid(0, 0) = 0 [pid 6463] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6462] <... close resumed>) = 0 [pid 5077] <... ioctl resumed>) = 0 [pid 6461] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6463 [pid 5074] umount2("./226/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./226/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6463] <... openat resumed>) = 3 [pid 6461] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./226/bus", [pid 5073] newfstatat(AT_FDCWD, "./226/bus", [pid 6463] write(3, "1000", 4 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6463] <... write resumed>) = 4 [pid 5073] umount2("./226/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6463] close(3 [pid 6462] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6463] <... close resumed>) = 0 [pid 6461] close(5 [pid 5077] close(3 [pid 5074] umount2("./226/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] openat(AT_FDCWD, "./226/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6463] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6463] memfd_create("syzkaller", 0 [pid 5077] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... openat resumed>) = 4 [pid 6462] <... open resumed>) = 5 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] openat(AT_FDCWD, "./226/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] newfstatat(4, "", [pid 6463] <... memfd_create resumed>) = 3 [pid 6462] ftruncate(5, 0) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, [pid 6463] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6462] exit_group(0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6463] <... mmap resumed>) = 0x7f0356e00000 [pid 6462] <... exit_group resumed>) = ? [pid 6463] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6462] +++ exited with 0 +++ [pid 6461] <... close resumed>) = 0 [pid 5074] <... openat resumed>) = 4 [pid 5073] getdents64(4, [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6462, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6464 attached [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6464 [pid 5075] <... restart_syscall resumed>) = 0 [pid 5073] close(4 [pid 6464] set_robust_list(0x55556e32a660, 24) = 0 [pid 5074] newfstatat(4, "", [pid 5073] <... close resumed>) = 0 [pid 6464] chdir("./229" [pid 5075] umount2("./226", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6464] <... chdir resumed>) = 0 [pid 6461] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] rmdir("./226/bus" [pid 6464] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] openat(AT_FDCWD, "./226", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6464] <... prctl resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5073] <... rmdir resumed>) = 0 [pid 6464] setpgid(0, 0 [pid 6463] <... write resumed>) = 524288 [pid 5075] newfstatat(3, "", [pid 5074] getdents64(4, [pid 5073] umount2("./226/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6464] <... setpgid resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6464] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] getdents64(3, [pid 5074] getdents64(4, [pid 5073] newfstatat(AT_FDCWD, "./226/binderfs", [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6464] <... openat resumed>) = 3 [pid 5075] umount2("./226/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] close(4 [pid 5073] unlink("./226/binderfs" [pid 6464] write(3, "1000", 4 [pid 5074] <... close resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5074] rmdir("./226/bus" [pid 6464] <... write resumed>) = 4 [pid 6464] close(3 [pid 5074] <... rmdir resumed>) = 0 [pid 6464] <... close resumed>) = 0 [pid 6464] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5074] umount2("./226/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6464] memfd_create("syzkaller", 0 [pid 5074] newfstatat(AT_FDCWD, "./226/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6464] <... memfd_create resumed>) = 3 [pid 6464] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6461] <... open resumed>) = 5 [pid 5074] unlink("./226/binderfs" [pid 6464] <... mmap resumed>) = 0x7f0356e00000 [pid 6463] munmap(0x7f0356e00000, 138412032 [pid 6464] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... unlink resumed>) = 0 [pid 5073] getdents64(3, [pid 6461] ftruncate(5, 0 [pid 6463] <... munmap resumed>) = 0 [pid 6461] <... ftruncate resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5074] getdents64(3, [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3 [pid 5075] umount2("./226/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] rmdir("./226" [pid 5074] close(3 [pid 6463] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6461] exit_group(0 [pid 5075] newfstatat(AT_FDCWD, "./226/bus", [pid 6463] <... openat resumed>) = 4 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 6463] ioctl(4, LOOP_SET_FD, 3 [pid 6461] <... exit_group resumed>) = ? [pid 5075] umount2("./226/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... close resumed>) = 0 [pid 5073] mkdir("./227", 0777 [pid 6461] +++ exited with 0 +++ [pid 5074] rmdir("./226" [pid 5073] <... mkdir resumed>) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6461, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] umount2("./229", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./226/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... rmdir resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./229", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... openat resumed>) = 4 [pid 5074] mkdir("./227", 0777 [pid 5075] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5075] getdents64(4, [pid 5074] <... mkdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5078] newfstatat(3, "", [pid 5075] getdents64(4, [pid 5074] <... openat resumed>) = 3 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6464] <... write resumed>) = 524288 [pid 5078] getdents64(3, [pid 5075] close(4 [pid 6464] munmap(0x7f0356e00000, 138412032 [pid 6463] <... ioctl resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] <... close resumed>) = 0 [pid 6464] <... munmap resumed>) = 0 [pid 6463] close(3 [pid 5078] umount2("./229/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] rmdir("./226/bus" [pid 6464] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6463] <... close resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 6464] <... openat resumed>) = 4 [pid 6463] close(4 [pid 5075] umount2("./226/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6464] ioctl(4, LOOP_SET_FD, 3 [pid 6463] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./226/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./226/binderfs") = 0 [pid 5075] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6463] mkdir("./bus", 0777 [pid 5075] close(3 [pid 6463] <... mkdir resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./226" [pid 6463] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5075] <... rmdir resumed>) = 0 [pid 5075] mkdir("./227", 0777) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] <... ioctl resumed>) = 0 [pid 6464] <... ioctl resumed>) = 0 [pid 5078] <... umount2 resumed>) = 0 [pid 5074] close(3 [pid 5073] <... ioctl resumed>) = 0 [pid 5078] umount2("./229/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6464] close(3) = 0 [pid 5074] <... close resumed>) = 0 [pid 6464] close(4 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6465 attached [pid 6464] <... close resumed>) = 0 [pid 5078] newfstatat(AT_FDCWD, "./229/bus", [ 212.560518][ T6463] loop3: detected capacity change from 0 to 1024 [ 212.595923][ T6464] loop4: detected capacity change from 0 to 1024 [pid 5073] close(3 [pid 6465] set_robust_list(0x55556e32a660, 24 [pid 6464] mkdir("./bus", 0777 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... close resumed>) = 0 [pid 6465] <... set_robust_list resumed>) = 0 [pid 6464] <... mkdir resumed>) = 0 [pid 6463] <... mount resumed>) = 0 [pid 5078] umount2("./229/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6465 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6464] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6463] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5078] openat(AT_FDCWD, "./229/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6465] chdir("./227" [pid 6464] <... mount resumed>) = 0 [pid 6463] chdir("./bus" [pid 5078] <... openat resumed>) = 4 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6466 [pid 6465] <... chdir resumed>) = 0 [pid 6464] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] newfstatat(4, "", ./strace-static-x86_64: Process 6466 attached [pid 6465] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6464] <... openat resumed>) = 3 [pid 6463] <... chdir resumed>) = 0 [pid 6466] set_robust_list(0x55556e32a660, 24 [pid 6465] <... prctl resumed>) = 0 [pid 6464] chdir("./bus" [pid 6463] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 6466] <... set_robust_list resumed>) = 0 [pid 6465] setpgid(0, 0 [pid 6464] <... chdir resumed>) = 0 [pid 6463] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6465] <... setpgid resumed>) = 0 [pid 6466] chdir("./227" [pid 6464] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6463] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6466] <... chdir resumed>) = 0 [pid 6464] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6466] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6465] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6464] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6463] <... symlink resumed>) = 0 [pid 5078] getdents64(4, [pid 6463] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5075] close(3) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6466] <... prctl resumed>) = 0 [pid 6466] setpgid(0, 0) = 0 [pid 6466] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 6467 attached ) = 3 [pid 6467] set_robust_list(0x55556e32a660, 24) = 0 [pid 6467] chdir("./227" [pid 6466] write(3, "1000", 4) = 4 [pid 6467] <... chdir resumed>) = 0 [pid 6466] close(3 [pid 6467] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6466] <... close resumed>) = 0 [pid 6467] <... prctl resumed>) = 0 [pid 6466] symlink("/dev/binderfs", "./binderfs" [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6467 [pid 6467] setpgid(0, 0 [pid 6466] <... symlink resumed>) = 0 [pid 6467] <... setpgid resumed>) = 0 [pid 6467] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6466] memfd_create("syzkaller", 0 [pid 6467] <... openat resumed>) = 3 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6466] <... memfd_create resumed>) = 3 [pid 6465] <... openat resumed>) = 3 [pid 6464] <... symlink resumed>) = 0 [pid 5078] getdents64(4, [pid 6465] write(3, "1000", 4 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6467] write(3, "1000", 4 [pid 6466] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6467] <... write resumed>) = 4 [pid 6466] <... mmap resumed>) = 0x7f0356e00000 [pid 6465] <... write resumed>) = 4 [pid 6464] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] close(4) = 0 [pid 6467] close(3 [pid 6466] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6465] close(3 [pid 6463] <... creat resumed>) = 4 [pid 5078] rmdir("./229/bus" [pid 6467] <... close resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 6465] <... close resumed>) = 0 [pid 6465] symlink("/dev/binderfs", "./binderfs" [pid 6464] <... creat resumed>) = 4 [pid 6465] <... symlink resumed>) = 0 [pid 6464] rename("./bus", "./file2" [pid 6465] memfd_create("syzkaller", 0 [pid 5078] umount2("./229/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6465] <... memfd_create resumed>) = 3 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] newfstatat(AT_FDCWD, "./229/binderfs", [pid 6465] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6467] symlink("/dev/binderfs", "./binderfs" [pid 6465] <... mmap resumed>) = 0x7f0356e00000 [pid 6464] <... rename resumed>) = -1 EEXIST (File exists) [pid 6463] rename("./bus", "./file2" [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6467] <... symlink resumed>) = 0 [pid 6464] memfd_create("syzkaller", 0 [pid 6463] <... rename resumed>) = -1 EEXIST (File exists) [pid 6464] <... memfd_create resumed>) = 5 [pid 6467] memfd_create("syzkaller", 0 [pid 6464] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] unlink("./229/binderfs" [pid 6467] <... memfd_create resumed>) = 3 [pid 6464] <... mmap resumed>) = 0x7f0356e00000 [pid 6463] memfd_create("syzkaller", 0 [pid 6467] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6464] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6463] <... memfd_create resumed>) = 5 [pid 5078] <... unlink resumed>) = 0 [pid 6467] <... mmap resumed>) = 0x7f0356e00000 [pid 6466] <... write resumed>) = 524288 [pid 6465] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] getdents64(3, [pid 6467] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6463] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5078] close(3 [pid 6463] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... close resumed>) = 0 [pid 5078] rmdir("./229" [pid 6467] <... write resumed>) = 524288 [pid 6465] <... write resumed>) = 524288 [pid 6464] <... write resumed>) = 524288 [pid 6463] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... rmdir resumed>) = 0 [pid 6467] munmap(0x7f0356e00000, 138412032 [pid 6466] munmap(0x7f0356e00000, 138412032 [pid 6465] munmap(0x7f0356e00000, 138412032 [pid 6464] munmap(0x7f0356e00000, 138412032 [pid 6463] <... write resumed>) = 524288 [pid 5078] mkdir("./230", 0777 [pid 6466] <... munmap resumed>) = 0 [pid 6464] <... munmap resumed>) = 0 [pid 6463] munmap(0x7f0356e00000, 138412032 [pid 5078] <... mkdir resumed>) = 0 [pid 6466] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 6463] <... munmap resumed>) = 0 [pid 6466] <... openat resumed>) = 4 [pid 6465] <... munmap resumed>) = 0 [pid 6464] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6463] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6466] ioctl(4, LOOP_SET_FD, 3 [pid 6465] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6464] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6467] <... munmap resumed>) = 0 [pid 6467] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6466] <... ioctl resumed>) = 0 [pid 6465] <... openat resumed>) = 4 [pid 6464] close(5 [pid 6463] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6466] close(3 [pid 6467] ioctl(4, LOOP_SET_FD, 3 [pid 6466] <... close resumed>) = 0 [pid 6465] ioctl(4, LOOP_SET_FD, 3 [pid 6463] close(5 [pid 6466] close(4 [pid 6463] <... close resumed>) = 0 [pid 6466] <... close resumed>) = 0 [pid 6466] mkdir("./bus", 0777) = 0 [pid 6466] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6463] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6464] <... close resumed>) = 0 [pid 6465] <... ioctl resumed>) = 0 [pid 6467] <... ioctl resumed>) = 0 [pid 6464] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6465] close(3) = 0 [pid 6465] close(4) = 0 [pid 6465] mkdir("./bus", 0777 [pid 6463] <... open resumed>) = 5 [pid 6465] <... mkdir resumed>) = 0 [pid 6467] close(3) = 0 [pid 6467] close(4 [pid 6465] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6464] <... open resumed>) = 5 [pid 6467] <... close resumed>) = 0 [pid 6467] mkdir("./bus", 0777 [pid 6464] ftruncate(5, 0) = 0 [pid 6463] ftruncate(5, 0 [pid 6467] <... mkdir resumed>) = 0 [pid 6466] <... mount resumed>) = 0 [pid 6464] exit_group(0 [pid 6463] <... ftruncate resumed>) = 0 [pid 6467] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6464] <... exit_group resumed>) = ? [pid 6466] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6463] exit_group(0 [pid 6466] <... openat resumed>) = 3 [pid 6463] <... exit_group resumed>) = ? [pid 6466] chdir("./bus" [pid 6464] +++ exited with 0 +++ [pid 6463] +++ exited with 0 +++ [pid 6467] <... mount resumed>) = 0 [pid 6466] <... chdir resumed>) = 0 [pid 6467] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6463, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6466] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6467] <... openat resumed>) = 3 [pid 6466] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6464, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 6467] chdir("./bus" [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 6467] <... chdir resumed>) = 0 [pid 6466] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6467] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5077] <... restart_syscall resumed>) = 0 [pid 6467] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6466] <... symlink resumed>) = 0 [pid 5077] umount2("./229", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6466] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./229", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] umount2("./230", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6467] <... symlink resumed>) = 0 [pid 6466] <... creat resumed>) = 4 [pid 6465] <... mount resumed>) = 0 [pid 5078] <... ioctl resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6465] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] close(3 [pid 5077] newfstatat(3, "", [pid 5076] openat(AT_FDCWD, "./230", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6465] <... openat resumed>) = 3 [pid 5078] <... close resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... openat resumed>) = 3 [pid 6467] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6465] chdir("./bus" [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] getdents64(3, [pid 5076] newfstatat(3, "", [pid 6466] rename("./bus", "./file2" [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6466] <... rename resumed>) = -1 EEXIST (File exists) ./strace-static-x86_64: Process 6468 attached [pid 6467] <... creat resumed>) = 4 [pid 6465] <... chdir resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] getdents64(3, [pid 6467] rename("./bus", "./file2" [pid 6465] openat(AT_FDCWD, "/dev/loop1", O_RDWR [ 212.720461][ T6466] loop0: detected capacity change from 0 to 1024 [ 212.734481][ T6467] loop2: detected capacity change from 0 to 1024 [ 212.735552][ T6465] loop1: detected capacity change from 0 to 1024 [pid 5077] umount2("./229/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6465] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6467] <... rename resumed>) = -1 EEXIST (File exists) [pid 6465] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6468 [pid 5076] umount2("./230/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6468] set_robust_list(0x55556e32a660, 24) = 0 [pid 6467] memfd_create("syzkaller", 0 [pid 6466] memfd_create("syzkaller", 0 [pid 6465] <... symlink resumed>) = 0 [pid 6468] chdir("./230" [pid 6467] <... memfd_create resumed>) = 5 [pid 6466] <... memfd_create resumed>) = 5 [pid 6465] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6468] <... chdir resumed>) = 0 [pid 6467] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6466] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6468] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6468] setpgid(0, 0 [pid 6467] <... mmap resumed>) = 0x7f0356e00000 [pid 6466] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] <... umount2 resumed>) = 0 [pid 6467] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6466] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6468] <... setpgid resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 6465] <... creat resumed>) = 4 [pid 5077] umount2("./229/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6468] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6465] rename("./bus", "./file2" [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6468] <... openat resumed>) = 3 [pid 6465] <... rename resumed>) = -1 EEXIST (File exists) [pid 5077] newfstatat(AT_FDCWD, "./229/bus", [pid 6468] write(3, "1000", 4 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6468] <... write resumed>) = 4 [pid 6465] memfd_create("syzkaller", 0 [pid 5077] umount2("./229/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./230/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6468] close(3 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./229/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6468] <... close resumed>) = 0 [pid 6465] <... memfd_create resumed>) = 5 [pid 5077] <... openat resumed>) = 4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6468] symlink("/dev/binderfs", "./binderfs" [pid 6465] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] newfstatat(4, "", [pid 5076] newfstatat(AT_FDCWD, "./230/bus", [pid 6468] <... symlink resumed>) = 0 [pid 6465] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6468] memfd_create("syzkaller", 0 [pid 6467] <... write resumed>) = 524288 [pid 6465] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] getdents64(4, [pid 5076] umount2("./230/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6468] <... memfd_create resumed>) = 3 [pid 6467] munmap(0x7f0356e00000, 138412032 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6468] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] getdents64(4, [pid 5076] openat(AT_FDCWD, "./230/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6468] <... mmap resumed>) = 0x7f0356e00000 [pid 6467] <... munmap resumed>) = 0 [pid 6466] <... write resumed>) = 524288 [pid 6465] <... write resumed>) = 524288 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, [pid 5077] close(4 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] <... close resumed>) = 0 [pid 5076] getdents64(4, [pid 5077] rmdir("./229/bus" [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] close(4) = 0 [pid 5076] rmdir("./230/bus") = 0 [pid 5077] umount2("./229/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./230/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6467] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6466] munmap(0x7f0356e00000, 138412032 [pid 6465] munmap(0x7f0356e00000, 138412032 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./230/binderfs", [pid 6468] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] unlink("./230/binderfs" [pid 6465] <... munmap resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./229/binderfs", [pid 5076] <... unlink resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] getdents64(3, [pid 6466] <... munmap resumed>) = 0 [pid 6465] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6467] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6465] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] unlink("./229/binderfs" [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 5076] close(3 [pid 5077] getdents64(3, [pid 5076] <... close resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] rmdir("./230" [pid 5077] close(3) = 0 [pid 5077] rmdir("./229") = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 6465] close(5 [pid 5077] mkdir("./230", 0777 [pid 5076] mkdir("./231", 0777 [pid 5077] <... mkdir resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6468] <... write resumed>) = 524288 [pid 5076] <... openat resumed>) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6468] munmap(0x7f0356e00000, 138412032 [pid 6467] close(5 [pid 6466] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6465] <... close resumed>) = 0 [pid 6466] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6467] <... close resumed>) = 0 [pid 6466] close(5 [pid 6465] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6468] <... munmap resumed>) = 0 [pid 6466] <... close resumed>) = 0 [pid 6465] <... open resumed>) = 5 [pid 6466] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6468] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6465] ftruncate(5, 0) = 0 [pid 6465] exit_group(0 [pid 6466] <... open resumed>) = 5 [pid 6465] <... exit_group resumed>) = ? [pid 6468] <... openat resumed>) = 4 [pid 6465] +++ exited with 0 +++ [pid 6468] ioctl(4, LOOP_SET_FD, 3 [pid 6466] ftruncate(5, 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6465, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5074] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5074] umount2("./227", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./227", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] umount2("./227/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6466] <... ftruncate resumed>) = 0 [pid 6467] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6468] <... ioctl resumed>) = 0 [pid 6466] exit_group(0 [pid 5074] <... umount2 resumed>) = 0 [pid 6468] close(3 [pid 6466] <... exit_group resumed>) = ? [pid 5077] <... ioctl resumed>) = 0 [pid 5074] umount2("./227/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] close(3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... close resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./227/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] umount2("./227/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6468] <... close resumed>) = 0 [pid 6466] +++ exited with 0 +++ [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6468] close(4) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6466, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6468] mkdir("./bus", 0777./strace-static-x86_64: Process 6469 attached ) = 0 [pid 5074] openat(AT_FDCWD, "./227/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6469] set_robust_list(0x55556e32a660, 24 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6469 [pid 5074] <... openat resumed>) = 4 [pid 6469] <... set_robust_list resumed>) = 0 [pid 5074] newfstatat(4, "", [pid 6469] chdir("./230" [pid 6468] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5076] <... ioctl resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] umount2("./227", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6469] <... chdir resumed>) = 0 [pid 5076] close(3) = 0 [pid 6469] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] getdents64(4, [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6469] <... prctl resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] openat(AT_FDCWD, "./227", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6470 attached [pid 6469] setpgid(0, 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] <... openat resumed>) = 3 [pid 6470] set_robust_list(0x55556e32a660, 24 [pid 6469] <... setpgid resumed>) = 0 [pid 6467] <... open resumed>) = 5 [pid 5074] getdents64(4, [pid 6470] <... set_robust_list resumed>) = 0 [pid 6469] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] newfstatat(3, "", [pid 6470] chdir("./231" [pid 6469] <... openat resumed>) = 3 [pid 6467] ftruncate(5, 0 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6470 [pid 5074] close(4 [pid 6470] <... chdir resumed>) = 0 [pid 6469] write(3, "1000", 4 [pid 6467] <... ftruncate resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6470] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6469] <... write resumed>) = 4 [pid 6467] exit_group(0 [pid 5074] <... close resumed>) = 0 [pid 5073] getdents64(3, [pid 6470] <... prctl resumed>) = 0 [pid 6469] close(3 [pid 6468] <... mount resumed>) = 0 [pid 6467] <... exit_group resumed>) = ? [pid 5074] rmdir("./227/bus" [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6470] setpgid(0, 0 [pid 6469] <... close resumed>) = 0 [pid 6468] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6467] +++ exited with 0 +++ [pid 5074] <... rmdir resumed>) = 0 [pid 5073] umount2("./227/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6470] <... setpgid resumed>) = 0 [pid 6469] symlink("/dev/binderfs", "./binderfs" [pid 6468] <... openat resumed>) = 3 [ 212.891649][ T6468] loop5: detected capacity change from 0 to 1024 [pid 5074] umount2("./227/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6469] <... symlink resumed>) = 0 [pid 6468] chdir("./bus" [pid 6470] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./227/binderfs", [pid 6470] <... openat resumed>) = 3 [pid 6468] <... chdir resumed>) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6467, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6470] write(3, "1000", 4 [pid 6469] memfd_create("syzkaller", 0 [pid 6468] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] umount2("./227", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] unlink("./227/binderfs" [pid 6470] <... write resumed>) = 4 [pid 6468] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6470] close(3 [pid 6469] <... memfd_create resumed>) = 3 [pid 6468] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5074] <... unlink resumed>) = 0 [pid 6470] <... close resumed>) = 0 [pid 6469] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] getdents64(3, [pid 6470] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6469] <... mmap resumed>) = 0x7f0356e00000 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5074] close(3 [pid 5075] openat(AT_FDCWD, "./227", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... close resumed>) = 0 [pid 6470] memfd_create("syzkaller", 0 [pid 6468] <... symlink resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5075] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, [pid 6468] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6469] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] umount2("./227/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] rmdir("./227" [pid 6470] <... memfd_create resumed>) = 3 [pid 6470] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5073] umount2("./227/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./227/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./227/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6468] <... creat resumed>) = 4 [pid 5073] openat(AT_FDCWD, "./227/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6468] rename("./bus", "./file2" [pid 5073] <... openat resumed>) = 4 [pid 6470] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] newfstatat(4, "", [pid 5074] <... rmdir resumed>) = 0 [pid 6468] <... rename resumed>) = -1 EEXIST (File exists) [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6468] memfd_create("syzkaller", 0 [pid 5073] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, [pid 5075] <... umount2 resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6468] <... memfd_create resumed>) = 5 [pid 5073] close(4 [pid 6468] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./227/bus") = 0 [pid 6468] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] mkdir("./228", 0777 [pid 5073] umount2("./227/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./227/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./227/binderfs") = 0 [pid 5073] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] umount2("./227/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] close(3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... close resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./227/bus", [pid 5073] rmdir("./227" [pid 6470] <... write resumed>) = 524288 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5075] umount2("./227/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... mkdir resumed>) = 0 [pid 5073] mkdir("./228", 0777 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... mkdir resumed>) = 0 [pid 6469] <... write resumed>) = 524288 [pid 6468] <... write resumed>) = 524288 [pid 5075] openat(AT_FDCWD, "./227/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] <... openat resumed>) = 3 [pid 5073] <... openat resumed>) = 3 [pid 6470] munmap(0x7f0356e00000, 138412032 [pid 6469] munmap(0x7f0356e00000, 138412032 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5075] <... openat resumed>) = 4 [pid 5075] newfstatat(4, "", [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] close(4) = 0 [pid 5075] rmdir("./227/bus" [pid 6470] <... munmap resumed>) = 0 [pid 6469] <... munmap resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 6470] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6469] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5075] umount2("./227/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6470] <... openat resumed>) = 4 [pid 6469] <... openat resumed>) = 4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./227/binderfs", [pid 6470] ioctl(4, LOOP_SET_FD, 3 [pid 6469] ioctl(4, LOOP_SET_FD, 3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./227/binderfs") = 0 [pid 5075] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 5075] rmdir("./227" [pid 6468] munmap(0x7f0356e00000, 138412032 [pid 5075] <... rmdir resumed>) = 0 [pid 6468] <... munmap resumed>) = 0 [pid 5075] mkdir("./228", 0777 [pid 6468] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... mkdir resumed>) = 0 [pid 6468] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6468] close(5 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6468] <... close resumed>) = 0 [pid 6468] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 6470] <... ioctl resumed>) = 0 [pid 6469] <... ioctl resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 6468] ftruncate(5, 0 [pid 6470] close(3 [pid 6469] close(3 [pid 6470] <... close resumed>) = 0 [pid 6469] <... close resumed>) = 0 [pid 6468] <... ftruncate resumed>) = 0 [pid 6469] close(4 [pid 6468] exit_group(0 [pid 6470] close(4 [pid 6469] <... close resumed>) = 0 [pid 6468] <... exit_group resumed>) = ? [pid 6470] <... close resumed>) = 0 [pid 6469] mkdir("./bus", 0777 [pid 6468] +++ exited with 0 +++ [pid 5075] <... ioctl resumed>) = 0 [pid 6470] mkdir("./bus", 0777 [pid 6469] <... mkdir resumed>) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6468, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6470] <... mkdir resumed>) = 0 [pid 5074] close(3 [pid 6470] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5078] umount2("./230", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... close resumed>) = 0 [pid 5073] close(3 [pid 6469] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... close resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./230", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] newfstatat(3, "", ./strace-static-x86_64: Process 6471 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 6472 attached [pid 6471] set_robust_list(0x55556e32a660, 24 [pid 5078] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] umount2("./230/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6472 [pid 6471] <... set_robust_list resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6471 [pid 6472] set_robust_list(0x55556e32a660, 24 [pid 6471] chdir("./228" [pid 5075] close(3 [pid 6472] <... set_robust_list resumed>) = 0 [pid 6471] <... chdir resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 6471] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6473 attached [pid 6472] chdir("./228" [pid 6471] <... prctl resumed>) = 0 [pid 6471] setpgid(0, 0 [pid 6473] set_robust_list(0x55556e32a660, 24 [pid 6472] <... chdir resumed>) = 0 [pid 6471] <... setpgid resumed>) = 0 [ 213.006706][ T6469] loop4: detected capacity change from 0 to 1024 [ 213.016845][ T6470] loop3: detected capacity change from 0 to 1024 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6473 [pid 6473] <... set_robust_list resumed>) = 0 [pid 6472] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6471] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6473] chdir("./228" [pid 6472] <... prctl resumed>) = 0 [pid 6471] <... openat resumed>) = 3 [pid 6469] <... mount resumed>) = 0 [pid 6473] <... chdir resumed>) = 0 [pid 6472] setpgid(0, 0 [pid 6471] write(3, "1000", 4 [pid 6469] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6473] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6472] <... setpgid resumed>) = 0 [pid 6471] <... write resumed>) = 4 [pid 6469] <... openat resumed>) = 3 [pid 5078] <... umount2 resumed>) = 0 [pid 6473] <... prctl resumed>) = 0 [pid 6470] <... mount resumed>) = 0 [pid 6473] setpgid(0, 0 [pid 6472] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6471] close(3 [pid 6470] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6469] chdir("./bus" [pid 6473] <... setpgid resumed>) = 0 [pid 6472] <... openat resumed>) = 3 [pid 6471] <... close resumed>) = 0 [pid 6470] <... openat resumed>) = 3 [pid 6469] <... chdir resumed>) = 0 [pid 6473] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6472] write(3, "1000", 4 [pid 6471] symlink("/dev/binderfs", "./binderfs" [pid 6470] chdir("./bus") = 0 [pid 6472] <... write resumed>) = 4 [pid 6471] <... symlink resumed>) = 0 [pid 6470] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5078] umount2("./230/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6473] <... openat resumed>) = 3 [pid 6470] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6473] write(3, "1000", 4 [pid 6472] close(3 [pid 6471] memfd_create("syzkaller", 0 [pid 6469] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6473] <... write resumed>) = 4 [pid 6472] <... close resumed>) = 0 [pid 6471] <... memfd_create resumed>) = 3 [pid 6473] close(3 [pid 6472] symlink("/dev/binderfs", "./binderfs" [pid 6471] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6470] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6469] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] newfstatat(AT_FDCWD, "./230/bus", [pid 6473] <... close resumed>) = 0 [pid 6472] <... symlink resumed>) = 0 [pid 6471] <... mmap resumed>) = 0x7f0356e00000 [pid 6469] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6473] symlink("/dev/binderfs", "./binderfs" [pid 5078] umount2("./230/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./230/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6470] <... symlink resumed>) = 0 [pid 5078] newfstatat(4, "", [pid 6470] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6473] <... symlink resumed>) = 0 [pid 6471] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] getdents64(4, [pid 6473] memfd_create("syzkaller", 0 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6473] <... memfd_create resumed>) = 3 [pid 6469] <... symlink resumed>) = 0 [pid 5078] getdents64(4, [pid 6473] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6472] memfd_create("syzkaller", 0 [pid 6470] <... creat resumed>) = 4 [pid 6469] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6473] <... mmap resumed>) = 0x7f0356e00000 [pid 6472] <... memfd_create resumed>) = 3 [pid 6470] rename("./bus", "./file2" [pid 5078] close(4) = 0 [pid 6472] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] rmdir("./230/bus" [pid 6470] <... rename resumed>) = -1 EEXIST (File exists) [pid 6472] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... rmdir resumed>) = 0 [pid 6472] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6470] memfd_create("syzkaller", 0) = 5 [pid 6473] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6470] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5078] umount2("./230/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] newfstatat(AT_FDCWD, "./230/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] unlink("./230/binderfs") = 0 [pid 6469] <... creat resumed>) = 4 [pid 6470] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6469] rename("./bus", "./file2" [pid 5078] close(3) = 0 [pid 5078] rmdir("./230") = 0 [pid 6469] <... rename resumed>) = -1 EEXIST (File exists) [pid 6469] memfd_create("syzkaller", 0 [pid 5078] mkdir("./231", 0777 [pid 6471] <... write resumed>) = 524288 [pid 5078] <... mkdir resumed>) = 0 [pid 6473] <... write resumed>) = 524288 [pid 6472] <... write resumed>) = 524288 [pid 6471] munmap(0x7f0356e00000, 138412032 [pid 6469] <... memfd_create resumed>) = 5 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 6470] <... write resumed>) = 524288 [pid 6473] munmap(0x7f0356e00000, 138412032 [pid 6472] munmap(0x7f0356e00000, 138412032 [pid 6471] <... munmap resumed>) = 0 [pid 6469] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6470] munmap(0x7f0356e00000, 138412032 [pid 6472] <... munmap resumed>) = 0 [pid 6470] <... munmap resumed>) = 0 [pid 6473] <... munmap resumed>) = 0 [pid 6472] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6471] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6470] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6473] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6472] <... openat resumed>) = 4 [pid 6471] <... openat resumed>) = 4 [pid 6470] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6471] ioctl(4, LOOP_SET_FD, 3 [pid 6473] <... openat resumed>) = 4 [pid 6472] ioctl(4, LOOP_SET_FD, 3 [pid 6470] close(5 [pid 6473] ioctl(4, LOOP_SET_FD, 3 [pid 6471] <... ioctl resumed>) = 0 [pid 6470] <... close resumed>) = 0 [pid 6469] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6470] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6473] <... ioctl resumed>) = 0 [pid 6473] close(3) = 0 [pid 6473] close(4) = 0 [pid 6470] <... open resumed>) = 5 [pid 6473] mkdir("./bus", 0777) = 0 [pid 6473] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6470] ftruncate(5, 0 [pid 6472] <... ioctl resumed>) = 0 [pid 6470] <... ftruncate resumed>) = 0 [pid 6472] close(3 [pid 6470] exit_group(0 [pid 6473] <... mount resumed>) = 0 [pid 6472] <... close resumed>) = 0 [pid 6473] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6471] close(3 [pid 6470] <... exit_group resumed>) = ? [pid 6473] <... openat resumed>) = 3 [pid 6472] close(4 [pid 6471] <... close resumed>) = 0 [pid 6470] +++ exited with 0 +++ [pid 6469] <... write resumed>) = 524288 [pid 6473] chdir("./bus" [pid 6472] <... close resumed>) = 0 [pid 6473] <... chdir resumed>) = 0 [pid 6472] mkdir("./bus", 0777 [pid 6471] close(4 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6470, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6473] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6469] munmap(0x7f0356e00000, 138412032 [pid 6471] <... close resumed>) = 0 [pid 6473] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6471] mkdir("./bus", 0777 [pid 6473] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6469] <... munmap resumed>) = 0 [pid 6473] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 4 [pid 5076] umount2("./231", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6473] rename("./bus", "./file2" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6473] <... rename resumed>) = -1 EEXIST (File exists) [pid 6469] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] openat(AT_FDCWD, "./231", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6473] memfd_create("syzkaller", 0) = 5 [pid 6473] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... openat resumed>) = 3 [pid 6473] <... mmap resumed>) = 0x7f0356e00000 [pid 6473] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6469] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6469] close(5 [pid 5076] getdents64(3, [pid 5078] <... ioctl resumed>) = 0 [ 213.132713][ T6471] loop1: detected capacity change from 0 to 1024 [ 213.134609][ T6473] loop2: detected capacity change from 0 to 1024 [ 213.145553][ T6472] loop0: detected capacity change from 0 to 1024 [pid 6473] <... write resumed>) = 524288 [pid 6469] <... close resumed>) = 0 [pid 6469] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] close(3 [pid 6473] munmap(0x7f0356e00000, 138412032 [pid 6469] <... open resumed>) = 5 [pid 6473] <... munmap resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6473] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6469] ftruncate(5, 0 [pid 6473] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6473] close(5 [pid 6469] <... ftruncate resumed>) = 0 [pid 6469] exit_group(0./strace-static-x86_64: Process 6474 attached [pid 6474] set_robust_list(0x55556e32a660, 24) = 0 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6474 [pid 6474] chdir("./231" [pid 6469] <... exit_group resumed>) = ? [pid 6474] <... chdir resumed>) = 0 [pid 6472] <... mkdir resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6474] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6472] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6474] setpgid(0, 0) = 0 [pid 5076] umount2("./231/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6474] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6473] <... close resumed>) = 0 [pid 6471] <... mkdir resumed>) = 0 [pid 6474] <... openat resumed>) = 3 [pid 6472] <... mount resumed>) = 0 [pid 6472] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6472] chdir("./bus") = 0 [pid 6469] +++ exited with 0 +++ [pid 6474] write(3, "1000", 4 [pid 6472] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6474] <... write resumed>) = 4 [pid 6472] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6474] close(3 [pid 6472] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6474] <... close resumed>) = 0 [pid 6473] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6469, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6474] symlink("/dev/binderfs", "./binderfs" [pid 6471] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6474] <... symlink resumed>) = 0 [pid 6472] <... symlink resumed>) = 0 [pid 5077] umount2("./230", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6474] memfd_create("syzkaller", 0 [pid 6472] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6474] <... memfd_create resumed>) = 3 [pid 6473] <... open resumed>) = 5 [pid 5077] openat(AT_FDCWD, "./230", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6474] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] <... openat resumed>) = 3 [pid 6474] <... mmap resumed>) = 0x7f0356e00000 [pid 6473] ftruncate(5, 0 [pid 5077] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6473] <... ftruncate resumed>) = 0 [pid 6473] exit_group(0) = ? [pid 6472] <... creat resumed>) = 4 [pid 5077] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6472] rename("./bus", "./file2") = -1 EEXIST (File exists) [pid 6472] memfd_create("syzkaller", 0) = 5 [pid 6474] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6472] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5077] umount2("./230/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = 0 [pid 6473] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6473, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6474] <... write resumed>) = 524288 [pid 5076] umount2("./231/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./231/bus", [pid 5075] umount2("./228", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6471] <... mount resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6471] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] openat(AT_FDCWD, "./228", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6471] <... openat resumed>) = 3 [pid 6474] munmap(0x7f0356e00000, 138412032 [pid 6472] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6471] chdir("./bus" [pid 5077] <... umount2 resumed>) = 0 [pid 5076] umount2("./231/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] newfstatat(3, "", [pid 6472] <... write resumed>) = 524288 [pid 6474] <... munmap resumed>) = 0 [pid 6471] <... chdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6471] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] openat(AT_FDCWD, "./231/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] getdents64(3, [pid 6474] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5076] <... openat resumed>) = 4 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6474] <... openat resumed>) = 4 [pid 6471] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] umount2("./230/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] newfstatat(4, "", [pid 5075] umount2("./228/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6474] ioctl(4, LOOP_SET_FD, 3 [pid 6471] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6474] <... ioctl resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./230/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] umount2("./230/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./230/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5077] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] getdents64(4, [pid 6472] munmap(0x7f0356e00000, 138412032 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6472] <... munmap resumed>) = 0 [pid 5077] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] close(4) = 0 [pid 5077] rmdir("./230/bus" [pid 6472] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5077] <... rmdir resumed>) = 0 [pid 6472] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] umount2("./230/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./230/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] unlink("./230/binderfs" [pid 6472] close(5 [pid 5077] <... unlink resumed>) = 0 [pid 6472] <... close resumed>) = 0 [pid 5077] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] close(3) = 0 [pid 5077] rmdir("./230") = 0 [pid 5076] getdents64(4, [pid 5075] umount2("./228/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6471] <... symlink resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] mkdir("./231", 0777) = 0 [pid 5076] getdents64(4, [pid 5075] newfstatat(AT_FDCWD, "./228/bus", [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5076] close(4 [pid 5075] umount2("./228/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5076] <... close resumed>) = 0 [pid 5076] rmdir("./231/bus" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6474] close(3 [pid 5075] openat(AT_FDCWD, "./228/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6474] <... close resumed>) = 0 [pid 6474] close(4) = 0 [pid 6471] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5075] <... openat resumed>) = 4 [pid 6474] mkdir("./bus", 0777 [pid 5075] newfstatat(4, "", [pid 6474] <... mkdir resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6474] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5075] getdents64(4, [pid 5076] <... rmdir resumed>) = 0 [pid 6472] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5076] umount2("./231/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(4, [pid 5076] newfstatat(AT_FDCWD, "./231/binderfs", [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] close(4 [pid 5076] unlink("./231/binderfs" [pid 5075] <... close resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 6471] <... creat resumed>) = 4 [pid 5075] rmdir("./228/bus" [pid 5076] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5076] close(3 [pid 6471] rename("./bus", "./file2" [pid 6472] <... open resumed>) = 5 [pid 5076] <... close resumed>) = 0 [pid 6474] <... mount resumed>) = 0 [pid 6471] <... rename resumed>) = -1 EEXIST (File exists) [pid 5076] rmdir("./231" [pid 5075] umount2("./228/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6474] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6472] ftruncate(5, 0 [pid 6471] memfd_create("syzkaller", 0 [pid 6474] <... openat resumed>) = 3 [pid 6474] chdir("./bus" [pid 6472] <... ftruncate resumed>) = 0 [pid 6474] <... chdir resumed>) = 0 [pid 6471] <... memfd_create resumed>) = 5 [pid 6471] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6474] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6472] exit_group(0 [pid 6471] <... mmap resumed>) = 0x7f0356e00000 [pid 6474] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] newfstatat(AT_FDCWD, "./228/binderfs", [pid 6474] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6472] <... exit_group resumed>) = ? [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./228/binderfs" [pid 6474] <... symlink resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5076] mkdir("./232", 0777 [pid 6474] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6471] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] getdents64(3, [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] <... ioctl resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5075] close(3 [pid 6472] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6472, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./228", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./228", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [ 213.287783][ T6474] loop5: detected capacity change from 0 to 1024 [pid 5073] umount2("./228/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] <... close resumed>) = 0 [pid 6474] <... creat resumed>) = 4 [pid 5075] rmdir("./228" [pid 6471] <... write resumed>) = 524288 [pid 6474] rename("./bus", "./file2" [pid 6471] munmap(0x7f0356e00000, 138412032 [pid 5075] <... rmdir resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 6474] <... rename resumed>) = -1 EEXIST (File exists) [pid 6471] <... munmap resumed>) = 0 [pid 6474] memfd_create("syzkaller", 0) = 5 [pid 6474] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6474] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6471] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] mkdir("./229", 0777 [pid 5073] umount2("./228/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./228/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./228/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... mkdir resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6471] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6471] close(5 [pid 5077] close(3 [pid 5073] openat(AT_FDCWD, "./228/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... close resumed>) = 0 [pid 5073] <... openat resumed>) = 4 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] newfstatat(4, "", [pid 5075] <... openat resumed>) = 3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5073] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6475 [pid 5073] getdents64(4, ./strace-static-x86_64: Process 6475 attached 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6475] set_robust_list(0x55556e32a660, 24 [pid 5073] close(4) = 0 [pid 5073] rmdir("./228/bus" [pid 6475] <... set_robust_list resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 6475] chdir("./231" [pid 6471] <... close resumed>) = 0 [pid 5073] umount2("./228/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6475] <... chdir resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./228/binderfs", [pid 6475] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6475] <... prctl resumed>) = 0 [pid 5073] unlink("./228/binderfs") = 0 [pid 6475] setpgid(0, 0) = 0 [pid 6475] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5073] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6471] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5073] close(3 [pid 6475] write(3, "1000", 4 [pid 5073] <... close resumed>) = 0 [pid 6475] <... write resumed>) = 4 [pid 5073] rmdir("./228" [pid 6475] close(3 [pid 6474] <... write resumed>) = 524288 [pid 5073] <... rmdir resumed>) = 0 [pid 6475] <... close resumed>) = 0 [pid 6475] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6475] memfd_create("syzkaller", 0 [pid 5073] mkdir("./229", 0777 [pid 6475] <... memfd_create resumed>) = 3 [pid 6471] <... open resumed>) = 5 [pid 5073] <... mkdir resumed>) = 0 [pid 6475] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6471] ftruncate(5, 0 [pid 6475] <... mmap resumed>) = 0x7f0356e00000 [pid 6471] <... ftruncate resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 6471] exit_group(0) = ? [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6474] munmap(0x7f0356e00000, 138412032 [pid 6475] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6474] <... munmap resumed>) = 0 [pid 6474] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6474] close(5) = 0 [pid 6471] +++ exited with 0 +++ [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6471, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6475] <... write resumed>) = 524288 [pid 6474] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5074] umount2("./228", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./228", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] umount2("./228/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6475] munmap(0x7f0356e00000, 138412032 [pid 6474] <... open resumed>) = 5 [pid 5074] <... umount2 resumed>) = 0 [pid 6475] <... munmap resumed>) = 0 [pid 6474] ftruncate(5, 0 [pid 5074] umount2("./228/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6475] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6474] <... ftruncate resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6475] ioctl(4, LOOP_SET_FD, 3 [pid 6474] exit_group(0 [pid 5074] newfstatat(AT_FDCWD, "./228/bus", [pid 6474] <... exit_group resumed>) = ? [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./228/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./228/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5074] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] close(4) = 0 [pid 5074] rmdir("./228/bus" [pid 5075] <... ioctl resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 6474] +++ exited with 0 +++ [pid 5075] close(3 [pid 5074] umount2("./228/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6474, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] <... close resumed>) = 0 [pid 5078] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] umount2("./231", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./231", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5078] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] umount2("./231/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6476 attached [pid 5076] <... ioctl resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./228/binderfs", [pid 5073] <... ioctl resumed>) = 0 [pid 6476] set_robust_list(0x55556e32a660, 24 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6476 [pid 6476] <... set_robust_list resumed>) = 0 [pid 5076] close(3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] close(3 [pid 6476] chdir("./229" [pid 5074] unlink("./228/binderfs" [pid 5073] <... close resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6476] <... chdir resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 6476] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6476] setpgid(0, 0 [pid 5074] getdents64(3, [pid 5076] <... close resumed>) = 0 [pid 6476] <... setpgid resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3 [pid 6475] <... ioctl resumed>) = 0 [pid 6475] close(3) = 0 [pid 6475] close(4) = 0 [pid 6475] mkdir("./bus", 0777 [pid 5074] <... close resumed>) = 0 [pid 6475] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 6478 attached ./strace-static-x86_64: Process 6477 attached [pid 6476] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5078] <... umount2 resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6478 [pid 5074] rmdir("./228" [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6477 [pid 6478] set_robust_list(0x55556e32a660, 24 [pid 5078] umount2("./231/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6476] <... openat resumed>) = 3 [pid 6477] set_robust_list(0x55556e32a660, 24 [pid 5078] newfstatat(AT_FDCWD, "./231/bus", [pid 6478] <... set_robust_list resumed>) = 0 [pid 6477] <... set_robust_list resumed>) = 0 [pid 6476] write(3, "1000", 4 [pid 6475] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 6478] chdir("./232" [pid 6477] chdir("./229" [pid 6476] <... write resumed>) = 4 [pid 5074] mkdir("./229", 0777 [pid 6476] close(3 [pid 5078] umount2("./231/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] <... mkdir resumed>) = 0 [pid 6476] <... close resumed>) = 0 [pid 6478] <... chdir resumed>) = 0 [pid 6478] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6476] symlink("/dev/binderfs", "./binderfs" [pid 5078] openat(AT_FDCWD, "./231/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6478] <... prctl resumed>) = 0 [pid 6476] <... symlink resumed>) = 0 [pid 5078] <... openat resumed>) = 4 [pid 6478] setpgid(0, 0 [pid 6477] <... chdir resumed>) = 0 [pid 6476] memfd_create("syzkaller", 0 [pid 5078] newfstatat(4, "", [pid 6478] <... setpgid resumed>) = 0 [pid 6476] <... memfd_create resumed>) = 3 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(4, [pid 6478] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6476] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6476] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] close(4 [pid 6477] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5078] <... close resumed>) = 0 [pid 6477] <... prctl resumed>) = 0 [pid 5078] rmdir("./231/bus" [pid 6477] setpgid(0, 0 [pid 5078] <... rmdir resumed>) = 0 [pid 6477] <... setpgid resumed>) = 0 [pid 6477] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6476] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6478] <... openat resumed>) = 3 [pid 6477] <... openat resumed>) = 3 [pid 6475] <... mount resumed>) = 0 [pid 5078] umount2("./231/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6478] write(3, "1000", 4 [pid 6475] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6478] <... write resumed>) = 4 [pid 6477] write(3, "1000", 4 [pid 6475] <... openat resumed>) = 3 [pid 5078] newfstatat(AT_FDCWD, "./231/binderfs", [pid 5074] <... openat resumed>) = 3 [pid 6478] close(3 [pid 6477] <... write resumed>) = 4 [pid 6475] chdir("./bus" [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6478] <... close resumed>) = 0 [pid 6477] close(3 [pid 6475] <... chdir resumed>) = 0 [pid 5078] unlink("./231/binderfs" [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6478] symlink("/dev/binderfs", "./binderfs" [pid 6477] <... close resumed>) = 0 [ 213.424377][ T6475] loop4: detected capacity change from 0 to 1024 [pid 6475] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] <... unlink resumed>) = 0 [pid 6478] <... symlink resumed>) = 0 [pid 6477] symlink("/dev/binderfs", "./binderfs" [pid 6475] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6478] memfd_create("syzkaller", 0 [pid 6477] <... symlink resumed>) = 0 [pid 5078] getdents64(3, [pid 6478] <... memfd_create resumed>) = 3 [pid 6478] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6475] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6477] memfd_create("syzkaller", 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5078] close(3 [pid 6477] <... memfd_create resumed>) = 3 [pid 5078] <... close resumed>) = 0 [pid 6477] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] rmdir("./231" [pid 6477] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... rmdir resumed>) = 0 [pid 6475] <... symlink resumed>) = 0 [pid 6477] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6475] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] mkdir("./232", 0777) = 0 [pid 6478] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6476] <... write resumed>) = 524288 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 6476] munmap(0x7f0356e00000, 138412032 [pid 6475] <... creat resumed>) = 4 [pid 6478] <... write resumed>) = 524288 [pid 6476] <... munmap resumed>) = 0 [pid 6475] rename("./bus", "./file2") = -1 EEXIST (File exists) [pid 6476] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6475] memfd_create("syzkaller", 0 [pid 6476] ioctl(4, LOOP_SET_FD, 3 [pid 6475] <... memfd_create resumed>) = 5 [pid 6475] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6477] <... write resumed>) = 524288 [pid 6477] munmap(0x7f0356e00000, 138412032) = 0 [pid 6478] munmap(0x7f0356e00000, 138412032 [pid 6476] <... ioctl resumed>) = 0 [pid 6475] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... ioctl resumed>) = 0 [pid 6478] <... munmap resumed>) = 0 [pid 6477] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6476] close(3 [pid 6475] <... write resumed>) = 524288 [pid 5074] close(3 [pid 6478] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6477] <... openat resumed>) = 4 [pid 6476] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 6476] close(4 [pid 6478] <... openat resumed>) = 4 [pid 6477] ioctl(4, LOOP_SET_FD, 3 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6478] ioctl(4, LOOP_SET_FD, 3 [pid 6476] <... close resumed>) = 0 [pid 6476] mkdir("./bus", 0777 [pid 6475] munmap(0x7f0356e00000, 138412032./strace-static-x86_64: Process 6479 attached [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6479 [pid 6479] set_robust_list(0x55556e32a660, 24 [pid 6475] <... munmap resumed>) = 0 [pid 6479] <... set_robust_list resumed>) = 0 [pid 6479] chdir("./229") = 0 [pid 6476] <... mkdir resumed>) = 0 [pid 6475] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6479] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6479] setpgid(0, 0) = 0 [pid 6476] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6475] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... ioctl resumed>) = 0 [pid 6475] close(5 [pid 5078] close(3 [pid 6479] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6479] write(3, "1000", 4) = 4 [pid 6479] close(3) = 0 [pid 6479] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6475] <... close resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 6479] memfd_create("syzkaller", 0) = 3 [pid 6479] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6479] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6478] <... ioctl resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6478] close(3./strace-static-x86_64: Process 6480 attached [pid 6479] <... write resumed>) = 524288 [pid 6478] <... close resumed>) = 0 [pid 6478] close(4 [pid 6480] set_robust_list(0x55556e32a660, 24 [pid 6478] <... close resumed>) = 0 [pid 6480] <... set_robust_list resumed>) = 0 [pid 6478] mkdir("./bus", 0777 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6480 [pid 6475] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6480] chdir("./232" [pid 6478] <... mkdir resumed>) = 0 [pid 6477] <... ioctl resumed>) = 0 [pid 6477] close(3) = 0 [pid 6477] close(4 [pid 6480] <... chdir resumed>) = 0 [pid 6477] <... close resumed>) = 0 [pid 6480] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6478] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [ 213.512524][ T6476] loop2: detected capacity change from 0 to 1024 [ 213.544231][ T6478] loop3: detected capacity change from 0 to 1024 [ 213.544334][ T6477] loop0: detected capacity change from 0 to 1024 [pid 6477] mkdir("./bus", 0777 [pid 6480] <... prctl resumed>) = 0 [pid 6477] <... mkdir resumed>) = 0 [pid 6480] setpgid(0, 0 [pid 6477] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6480] <... setpgid resumed>) = 0 [pid 6480] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6479] munmap(0x7f0356e00000, 138412032 [pid 6477] <... mount resumed>) = 0 [pid 6476] <... mount resumed>) = 0 [pid 6475] <... open resumed>) = 5 [pid 6479] <... munmap resumed>) = 0 [pid 6477] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6476] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6475] ftruncate(5, 0 [pid 6479] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6477] <... openat resumed>) = 3 [pid 6475] <... ftruncate resumed>) = 0 [pid 6479] <... openat resumed>) = 4 [pid 6477] chdir("./bus" [pid 6476] <... openat resumed>) = 3 [pid 6479] ioctl(4, LOOP_SET_FD, 3 [pid 6477] <... chdir resumed>) = 0 [pid 6476] chdir("./bus" [pid 6475] exit_group(0 [pid 6480] <... openat resumed>) = 3 [pid 6478] <... mount resumed>) = 0 [pid 6477] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6478] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6477] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6476] <... chdir resumed>) = 0 [pid 6475] <... exit_group resumed>) = ? [pid 6480] write(3, "1000", 4 [pid 6476] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6480] <... write resumed>) = 4 [pid 6478] <... openat resumed>) = 3 [pid 6480] close(3 [pid 6477] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6480] <... close resumed>) = 0 [pid 6478] chdir("./bus" [pid 6477] <... symlink resumed>) = 0 [pid 6476] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6477] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6480] symlink("/dev/binderfs", "./binderfs" [pid 6478] <... chdir resumed>) = 0 [pid 6477] <... creat resumed>) = 4 [pid 6476] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6475] +++ exited with 0 +++ [pid 6477] rename("./bus", "./file2" [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6475, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6480] <... symlink resumed>) = 0 [pid 6478] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6477] <... rename resumed>) = -1 EEXIST (File exists) [pid 6480] memfd_create("syzkaller", 0 [pid 6478] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6478] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6477] memfd_create("syzkaller", 0 [pid 6480] <... memfd_create resumed>) = 3 [pid 6477] <... memfd_create resumed>) = 5 [pid 6476] <... symlink resumed>) = 0 [pid 6477] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6480] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6477] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6476] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5077] umount2("./231", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6478] <... symlink resumed>) = 0 [pid 6480] <... mmap resumed>) = 0x7f0356e00000 [pid 6478] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5077] openat(AT_FDCWD, "./231", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6479] <... ioctl resumed>) = 0 [pid 6479] close(3) = 0 [pid 6479] close(4) = 0 [pid 6479] mkdir("./bus", 0777) = 0 [pid 5077] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6476] <... creat resumed>) = 4 [pid 5077] getdents64(3, [pid 6480] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6479] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6478] <... creat resumed>) = 4 [pid 6477] <... write resumed>) = 524288 [pid 6476] rename("./bus", "./file2" [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6479] <... mount resumed>) = 0 [pid 6478] rename("./bus", "./file2" [pid 5077] umount2("./231/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6479] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6479] chdir("./bus" [pid 6478] <... rename resumed>) = -1 EEXIST (File exists) [pid 6476] <... rename resumed>) = -1 EEXIST (File exists) [pid 6479] <... chdir resumed>) = 0 [pid 6479] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6476] memfd_create("syzkaller", 0 [pid 6479] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6479] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6478] memfd_create("syzkaller", 0 [pid 6476] <... memfd_create resumed>) = 5 [pid 6480] <... write resumed>) = 524288 [pid 6479] <... symlink resumed>) = 0 [pid 6478] <... memfd_create resumed>) = 5 [pid 6476] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6479] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6477] munmap(0x7f0356e00000, 138412032 [pid 6478] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6476] <... mmap resumed>) = 0x7f0356e00000 [pid 6480] munmap(0x7f0356e00000, 138412032 [pid 6479] <... creat resumed>) = 4 [pid 6478] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] <... umount2 resumed>) = 0 [ 213.599446][ T6479] loop1: detected capacity change from 0 to 1024 [pid 6479] rename("./bus", "./file2" [pid 6480] <... munmap resumed>) = 0 [pid 6479] <... rename resumed>) = -1 EEXIST (File exists) [pid 6477] <... munmap resumed>) = 0 [pid 6476] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6480] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6479] memfd_create("syzkaller", 0 [pid 6478] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6477] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6476] <... write resumed>) = 524288 [pid 5077] umount2("./231/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6480] <... openat resumed>) = 4 [pid 6479] <... memfd_create resumed>) = 5 [pid 6477] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6480] ioctl(4, LOOP_SET_FD, 3 [pid 5077] newfstatat(AT_FDCWD, "./231/bus", [pid 6479] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6477] close(5 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6479] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] umount2("./231/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./231/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6478] <... write resumed>) = 524288 [pid 6477] <... close resumed>) = 0 [pid 6476] munmap(0x7f0356e00000, 138412032 [pid 5077] <... openat resumed>) = 4 [pid 5077] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] getdents64(4, [pid 6476] <... munmap resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6479] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] close(4) = 0 [pid 5077] rmdir("./231/bus") = 0 [pid 6476] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5077] umount2("./231/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./231/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] unlink("./231/binderfs") = 0 [pid 6476] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] getdents64(3, [pid 6476] close(5 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] close(3) = 0 [pid 5077] rmdir("./231") = 0 [pid 6480] <... ioctl resumed>) = 0 [pid 6480] close(3) = 0 [pid 6480] close(4) = 0 [pid 6480] mkdir("./bus", 0777) = 0 [pid 5077] mkdir("./232", 0777) = 0 [pid 6480] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6478] munmap(0x7f0356e00000, 138412032) = 0 [pid 6480] <... mount resumed>) = 0 [pid 6479] <... write resumed>) = 524288 [pid 6478] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6477] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6476] <... close resumed>) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6480] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6478] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6480] <... openat resumed>) = 3 [pid 6478] close(5 [pid 6480] chdir("./bus" [pid 6479] munmap(0x7f0356e00000, 138412032 [pid 6478] <... close resumed>) = 0 [pid 6480] <... chdir resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 6480] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6479] <... munmap resumed>) = 0 [pid 6477] <... open resumed>) = 5 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 6480] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6479] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6477] ftruncate(5, 0 [pid 6480] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6479] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6477] <... ftruncate resumed>) = 0 [ 213.682615][ T6480] loop5: detected capacity change from 0 to 1024 [pid 6476] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6478] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6479] close(5 [pid 6477] exit_group(0) = ? [pid 6479] <... close resumed>) = 0 [pid 6480] <... symlink resumed>) = 0 [pid 6477] +++ exited with 0 +++ [pid 6480] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6476] <... open resumed>) = 5 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6477, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5073] umount2("./229", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./229", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, [pid 6476] ftruncate(5, 0 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6476] <... ftruncate resumed>) = 0 [pid 5073] umount2("./229/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6479] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6480] <... creat resumed>) = 4 [pid 6478] <... open resumed>) = 5 [pid 6476] exit_group(0 [pid 5073] <... umount2 resumed>) = 0 [pid 6480] rename("./bus", "./file2" [pid 6478] ftruncate(5, 0) = 0 [pid 6478] exit_group(0 [pid 6476] <... exit_group resumed>) = ? [pid 6478] <... exit_group resumed>) = ? [pid 6480] <... rename resumed>) = -1 EEXIST (File exists) [pid 6478] +++ exited with 0 +++ [pid 5073] umount2("./229/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6478, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6480] memfd_create("syzkaller", 0) = 5 [pid 6479] <... open resumed>) = 5 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6480] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] newfstatat(AT_FDCWD, "./229/bus", [pid 6479] ftruncate(5, 0 [pid 6480] <... mmap resumed>) = 0x7f0356e00000 [pid 6479] <... ftruncate resumed>) = 0 [pid 5076] umount2("./232", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6480] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6479] exit_group(0 [pid 6476] +++ exited with 0 +++ [pid 5077] <... ioctl resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./229/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6480] <... write resumed>) = 524288 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6476, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6479] <... exit_group resumed>) = ? [pid 5075] umount2("./229", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./229", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5075] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(3, [pid 5073] openat(AT_FDCWD, "./229/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] openat(AT_FDCWD, "./232", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] <... openat resumed>) = 4 [pid 6479] +++ exited with 0 +++ [pid 5076] <... openat resumed>) = 3 [pid 5075] umount2("./229/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] close(3 [pid 5076] newfstatat(3, "", [pid 5073] newfstatat(4, "", [pid 5077] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] getdents64(3, [pid 5073] getdents64(4, [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6479, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, [pid 5076] umount2("./232/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./229/bus") = 0 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6481 [pid 6480] munmap(0x7f0356e00000, 138412032 [pid 5073] umount2("./229/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./229", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6480] <... munmap resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./229/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6480] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] unlink("./229/binderfs" [pid 6480] <... openat resumed>) = -1 EBUSY (Device or resource busy) ./strace-static-x86_64: Process 6481 attached [pid 5076] <... umount2 resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./229", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... unlink resumed>) = 0 [pid 6480] close(5 [pid 6481] set_robust_list(0x55556e32a660, 24 [pid 6480] <... close resumed>) = 0 [pid 5076] umount2("./232/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 6481] <... set_robust_list resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./229/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] newfstatat(3, "", [pid 6481] chdir("./232" [pid 5076] newfstatat(AT_FDCWD, "./232/bus", [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, [pid 5075] newfstatat(AT_FDCWD, "./229/bus", [pid 5074] getdents64(3, [pid 6481] <... chdir resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6481] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] umount2("./232/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./229/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./229/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6481] <... prctl resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6481] setpgid(0, 0 [pid 6480] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5076] openat(AT_FDCWD, "./232/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... umount2 resumed>) = 0 [pid 5073] close(3 [pid 6481] <... setpgid resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5075] openat(AT_FDCWD, "./229/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./229" [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5073] mkdir("./230", 0777 [pid 6481] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] getdents64(4, [pid 5075] <... openat resumed>) = 4 [pid 5075] newfstatat(4, "", [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, [pid 5075] getdents64(4, [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6481] <... openat resumed>) = 3 [pid 5076] close(4 [pid 5075] getdents64(4, [pid 5076] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6481] write(3, "1000", 4 [pid 5076] rmdir("./232/bus" [pid 5075] close(4 [pid 5074] umount2("./229/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6481] <... write resumed>) = 4 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... mkdir resumed>) = 0 [pid 6481] close(3 [pid 6480] <... open resumed>) = 5 [pid 6481] <... close resumed>) = 0 [pid 6480] ftruncate(5, 0 [pid 5076] umount2("./232/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] rmdir("./229/bus" [pid 5074] newfstatat(AT_FDCWD, "./229/bus", [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6481] symlink("/dev/binderfs", "./binderfs" [pid 6480] <... ftruncate resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... openat resumed>) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6481] <... symlink resumed>) = 0 [pid 6480] exit_group(0 [pid 5076] newfstatat(AT_FDCWD, "./232/binderfs", [pid 5075] umount2("./229/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6480] <... exit_group resumed>) = ? [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./229/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6481] memfd_create("syzkaller", 0 [pid 6480] +++ exited with 0 +++ [pid 5076] unlink("./232/binderfs" [pid 5075] newfstatat(AT_FDCWD, "./229/binderfs", [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6481] <... memfd_create resumed>) = 3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] openat(AT_FDCWD, "./229/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6481] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5074] <... openat resumed>) = 4 [pid 5076] <... unlink resumed>) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6480, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5076] getdents64(3, [pid 5075] unlink("./229/binderfs" [pid 5074] newfstatat(4, "", [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] close(3 [pid 5074] getdents64(4, [pid 6481] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... close resumed>) = 0 [pid 5075] getdents64(3, [pid 5076] rmdir("./232" [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] <... rmdir resumed>) = 0 [pid 5078] umount2("./232", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] close(3 [pid 5074] getdents64(4, [pid 5075] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] rmdir("./229" [pid 5074] close(4 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 6481] <... write resumed>) = 524288 [pid 5078] openat(AT_FDCWD, "./232", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] mkdir("./233", 0777 [pid 5075] mkdir("./230", 0777 [pid 5074] rmdir("./229/bus" [pid 6481] munmap(0x7f0356e00000, 138412032 [pid 5078] <... openat resumed>) = 3 [pid 6481] <... munmap resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5078] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6481] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] getdents64(3, [pid 6481] <... openat resumed>) = 4 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6481] ioctl(4, LOOP_SET_FD, 3 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] umount2("./232/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] <... openat resumed>) = 3 [pid 5074] <... rmdir resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5074] umount2("./229/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./229/binderfs", [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./229/binderfs") = 0 [pid 5074] getdents64(3, [pid 6481] <... ioctl resumed>) = 0 [pid 5078] <... umount2 resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5073] <... ioctl resumed>) = 0 [pid 6481] close(3 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6482 attached [pid 6481] <... close resumed>) = 0 [pid 5078] umount2("./232/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] close(3 [pid 6482] set_robust_list(0x55556e32a660, 24 [pid 6481] close(4 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... close resumed>) = 0 [pid 6482] <... set_robust_list resumed>) = 0 [pid 6481] <... close resumed>) = 0 [pid 5078] newfstatat(AT_FDCWD, "./232/bus", [pid 6481] mkdir("./bus", 0777 [pid 6482] chdir("./230" [pid 6481] <... mkdir resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] rmdir("./229" [pid 6482] <... chdir resumed>) = 0 [pid 6481] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5078] umount2("./232/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] <... rmdir resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./232/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6482] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5078] <... openat resumed>) = 4 [pid 6482] <... prctl resumed>) = 0 [pid 5078] newfstatat(4, "", [pid 6482] setpgid(0, 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] mkdir("./230", 0777 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6482 [pid 6482] <... setpgid resumed>) = 0 [pid 5078] getdents64(4, [pid 5074] <... mkdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6482] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5078] getdents64(4, [pid 6482] <... openat resumed>) = 3 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6482] write(3, "1000", 4 [pid 5078] close(4 [pid 6482] <... write resumed>) = 4 [pid 5078] <... close resumed>) = 0 [pid 5078] rmdir("./232/bus" [pid 6482] close(3) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 6482] symlink("/dev/binderfs", "./binderfs" [pid 5078] umount2("./232/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6482] <... symlink resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6482] memfd_create("syzkaller", 0 [pid 5078] newfstatat(AT_FDCWD, "./232/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] unlink("./232/binderfs") = 0 [pid 6482] <... memfd_create resumed>) = 3 [pid 5078] getdents64(3, [pid 6482] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6482] <... mmap resumed>) = 0x7f0356e00000 [pid 6481] <... mount resumed>) = 0 [pid 5078] close(3 [pid 6482] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6481] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] <... close resumed>) = 0 [pid 6481] <... openat resumed>) = 3 [pid 5078] rmdir("./232" [pid 6481] chdir("./bus" [pid 5078] <... rmdir resumed>) = 0 [pid 6481] <... chdir resumed>) = 0 [pid 5078] mkdir("./233", 0777 [pid 6481] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] <... mkdir resumed>) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6481] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... openat resumed>) = 3 [pid 6481] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] ioctl(3, LOOP_CLR_FD [pid 6482] <... write resumed>) = 524288 [pid 6481] <... symlink resumed>) = 0 [ 213.868006][ T6481] loop4: detected capacity change from 0 to 1024 [pid 6482] munmap(0x7f0356e00000, 138412032 [pid 6481] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5075] <... ioctl resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 6482] <... munmap resumed>) = 0 [pid 5075] close(3 [pid 5074] close(3 [pid 5075] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... close resumed>) = 0 [pid 6482] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6483 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6482] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6483 attached [pid 6483] set_robust_list(0x55556e32a660, 24./strace-static-x86_64: Process 6484 attached [pid 6482] <... ioctl resumed>) = 0 [pid 6481] <... creat resumed>) = 4 [pid 5076] <... ioctl resumed>) = 0 [pid 6484] set_robust_list(0x55556e32a660, 24) = 0 [pid 6484] chdir("./230") = 0 [pid 6484] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6484] setpgid(0, 0) = 0 [pid 6484] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6484] write(3, "1000", 4) = 4 [pid 6484] close(3) = 0 [pid 6484] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5078] <... ioctl resumed>) = 0 [pid 6484] memfd_create("syzkaller", 0 [pid 6481] rename("./bus", "./file2" [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6484 [pid 6483] <... set_robust_list resumed>) = 0 [pid 6483] chdir("./230" [pid 6484] <... memfd_create resumed>) = 3 [pid 6483] <... chdir resumed>) = 0 [pid 6483] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6483] setpgid(0, 0) = 0 [pid 6484] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6483] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6484] <... mmap resumed>) = 0x7f0356e00000 [pid 6483] <... openat resumed>) = 3 [pid 6484] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6483] write(3, "1000", 4) = 4 [pid 6483] close(3) = 0 [pid 6483] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6483] memfd_create("syzkaller", 0) = 3 [pid 6483] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6483] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] close(3 [pid 5076] close(3 [pid 6481] <... rename resumed>) = -1 EEXIST (File exists) [pid 5076] <... close resumed>) = 0 [pid 6481] memfd_create("syzkaller", 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] <... close resumed>) = 0 [pid 6481] <... memfd_create resumed>) = 5 [pid 6482] close(3 [pid 6481] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6481] <... mmap resumed>) = 0x7f0356e00000 [pid 6482] <... close resumed>) = 0 ./strace-static-x86_64: Process 6486 attached ./strace-static-x86_64: Process 6485 attached [pid 6483] <... write resumed>) = 524288 [pid 6482] close(4 [pid 6481] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6485 [pid 6482] <... close resumed>) = 0 [pid 6482] mkdir("./bus", 0777 [pid 6486] set_robust_list(0x55556e32a660, 24 [pid 6485] set_robust_list(0x55556e32a660, 24 [pid 6486] <... set_robust_list resumed>) = 0 [pid 6485] <... set_robust_list resumed>) = 0 [pid 6482] <... mkdir resumed>) = 0 [pid 6486] chdir("./233" [pid 6485] chdir("./233" [pid 6484] <... write resumed>) = 524288 [pid 6482] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6486 [pid 6485] <... chdir resumed>) = 0 [pid 6485] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6484] munmap(0x7f0356e00000, 138412032 [pid 6486] <... chdir resumed>) = 0 [pid 6485] setpgid(0, 0 [pid 6484] <... munmap resumed>) = 0 [pid 6485] <... setpgid resumed>) = 0 [pid 6486] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6485] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6486] <... prctl resumed>) = 0 [pid 6485] <... openat resumed>) = 3 [pid 6486] setpgid(0, 0 [ 213.947573][ T6482] loop0: detected capacity change from 0 to 1024 [pid 6485] write(3, "1000", 4 [pid 6486] <... setpgid resumed>) = 0 [pid 6485] <... write resumed>) = 4 [pid 6481] <... write resumed>) = 524288 [pid 6485] close(3 [pid 6486] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6485] <... close resumed>) = 0 [pid 6484] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6483] munmap(0x7f0356e00000, 138412032 [pid 6481] munmap(0x7f0356e00000, 138412032 [pid 6485] symlink("/dev/binderfs", "./binderfs" [pid 6484] <... openat resumed>) = 4 [pid 6483] <... munmap resumed>) = 0 [pid 6481] <... munmap resumed>) = 0 [pid 6486] <... openat resumed>) = 3 [pid 6485] <... symlink resumed>) = 0 [pid 6484] ioctl(4, LOOP_SET_FD, 3 [pid 6481] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6483] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6486] write(3, "1000", 4 [pid 6483] <... openat resumed>) = 4 [pid 6481] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6486] <... write resumed>) = 4 [pid 6486] close(3 [pid 6485] memfd_create("syzkaller", 0 [pid 6483] ioctl(4, LOOP_SET_FD, 3 [pid 6482] <... mount resumed>) = 0 [pid 6481] close(5 [pid 6486] <... close resumed>) = 0 [pid 6485] <... memfd_create resumed>) = 3 [pid 6482] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6486] symlink("/dev/binderfs", "./binderfs" [pid 6485] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6486] <... symlink resumed>) = 0 [pid 6482] <... openat resumed>) = 3 [pid 6481] <... close resumed>) = 0 [pid 6485] <... mmap resumed>) = 0x7f0356e00000 [pid 6486] memfd_create("syzkaller", 0 [pid 6482] chdir("./bus" [pid 6486] <... memfd_create resumed>) = 3 [pid 6485] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6482] <... chdir resumed>) = 0 [pid 6481] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6486] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6482] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6481] <... open resumed>) = 5 [pid 6481] ftruncate(5, 0 [pid 6486] <... mmap resumed>) = 0x7f0356e00000 [pid 6484] <... ioctl resumed>) = 0 [pid 6482] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6481] <... ftruncate resumed>) = 0 [pid 6482] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6486] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6482] <... symlink resumed>) = 0 [pid 6481] exit_group(0 [pid 6484] close(3) = 0 [pid 6484] close(4) = 0 [pid 6484] mkdir("./bus", 0777) = 0 [pid 6481] <... exit_group resumed>) = ? [pid 6482] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6484] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6482] <... creat resumed>) = 4 [pid 6486] <... write resumed>) = 524288 [pid 6485] <... write resumed>) = 524288 [pid 6483] <... ioctl resumed>) = 0 [pid 6482] rename("./bus", "./file2" [pid 6481] +++ exited with 0 +++ [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6481, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [ 214.019850][ T6484] loop1: detected capacity change from 0 to 1024 [ 214.032270][ T6483] loop2: detected capacity change from 0 to 1024 [pid 6486] munmap(0x7f0356e00000, 138412032 [pid 6485] munmap(0x7f0356e00000, 138412032 [pid 6484] <... mount resumed>) = 0 [pid 6483] close(3) = 0 [pid 6483] close(4) = 0 [pid 6486] <... munmap resumed>) = 0 [pid 6484] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6483] mkdir("./bus", 0777 [pid 6485] <... munmap resumed>) = 0 [pid 5077] umount2("./232", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6486] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6485] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6484] <... openat resumed>) = 3 [pid 6483] <... mkdir resumed>) = 0 [pid 6482] <... rename resumed>) = -1 EEXIST (File exists) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6486] <... openat resumed>) = 4 [pid 6484] chdir("./bus" [pid 5077] openat(AT_FDCWD, "./232", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6486] ioctl(4, LOOP_SET_FD, 3 [pid 6485] <... openat resumed>) = 4 [pid 6484] <... chdir resumed>) = 0 [pid 6483] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6482] memfd_create("syzkaller", 0 [pid 5077] <... openat resumed>) = 3 [pid 6482] <... memfd_create resumed>) = 5 [pid 6482] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6485] ioctl(4, LOOP_SET_FD, 3 [pid 6484] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6482] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] newfstatat(3, "", [pid 6485] <... ioctl resumed>) = 0 [pid 6484] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6482] <... write resumed>) = 524288 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6486] <... ioctl resumed>) = 0 [pid 6485] close(3 [pid 6484] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6482] munmap(0x7f0356e00000, 138412032 [pid 5077] getdents64(3, [pid 6486] close(3 [pid 6485] <... close resumed>) = 0 [pid 6484] <... symlink resumed>) = 0 [pid 6482] <... munmap resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6486] <... close resumed>) = 0 [pid 6485] close(4 [pid 6484] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5077] umount2("./232/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6486] close(4) = 0 [pid 6486] mkdir("./bus", 0777 [pid 6485] <... close resumed>) = 0 [pid 6486] <... mkdir resumed>) = 0 [pid 6485] mkdir("./bus", 0777 [pid 6482] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6486] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6485] <... mkdir resumed>) = 0 [pid 6482] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6486] <... mount resumed>) = 0 [pid 6484] <... creat resumed>) = 4 [pid 5077] <... umount2 resumed>) = 0 [pid 6486] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5077] umount2("./232/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6486] <... openat resumed>) = 3 [pid 6485] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6482] close(5 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6486] chdir("./bus" [pid 6484] rename("./bus", "./file2" [pid 5077] newfstatat(AT_FDCWD, "./232/bus", [pid 6486] <... chdir resumed>) = 0 [pid 6483] <... mount resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6486] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] umount2("./232/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./232/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6483] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5077] <... openat resumed>) = 4 [pid 5077] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6483] <... openat resumed>) = 3 [pid 5077] getdents64(4, [pid 6486] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6484] <... rename resumed>) = -1 EEXIST (File exists) [pid 6483] chdir("./bus" [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6486] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6484] memfd_create("syzkaller", 0 [pid 6483] <... chdir resumed>) = 0 [pid 5077] getdents64(4, [pid 6484] <... memfd_create resumed>) = 5 [pid 6483] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6486] <... symlink resumed>) = 0 [pid 6484] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6483] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] close(4 [pid 6483] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6484] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] <... close resumed>) = 0 [pid 5077] rmdir("./232/bus") = 0 [pid 5077] umount2("./232/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6486] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./232/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] unlink("./232/binderfs" [pid 6483] <... symlink resumed>) = 0 [pid 6482] <... close resumed>) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 6485] <... mount resumed>) = 0 [pid 6483] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5077] getdents64(3, [pid 6485] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6482] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6486] <... creat resumed>) = 4 [pid 6485] <... openat resumed>) = 3 [pid 5077] close(3 [pid 6486] rename("./bus", "./file2" [pid 6485] chdir("./bus" [pid 6484] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... close resumed>) = 0 [pid 6485] <... chdir resumed>) = 0 [pid 6482] <... open resumed>) = 5 [pid 5077] rmdir("./232" [pid 6485] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5077] <... rmdir resumed>) = 0 [pid 6485] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6485] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6486] <... rename resumed>) = -1 EEXIST (File exists) [pid 6482] ftruncate(5, 0 [pid 6486] memfd_create("syzkaller", 0 [pid 6482] <... ftruncate resumed>) = 0 [pid 5077] mkdir("./233", 0777 [pid 6486] <... memfd_create resumed>) = 5 [pid 6485] <... symlink resumed>) = 0 [pid 6483] <... creat resumed>) = 4 [pid 6486] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6483] rename("./bus", "./file2" [pid 6482] exit_group(0 [pid 5077] <... mkdir resumed>) = 0 [pid 6486] <... mmap resumed>) = 0x7f0356e00000 [pid 6485] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6482] <... exit_group resumed>) = ? [ 214.100906][ T6486] loop5: detected capacity change from 0 to 1024 [ 214.109542][ T6485] loop3: detected capacity change from 0 to 1024 [pid 6486] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6483] <... rename resumed>) = -1 EEXIST (File exists) [pid 6482] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6482, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5073] umount2("./230", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./230", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] getdents64(3, [pid 6483] memfd_create("syzkaller", 0 [pid 5077] <... openat resumed>) = 3 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5073] umount2("./230/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6485] <... creat resumed>) = 4 [pid 6483] <... memfd_create resumed>) = 5 [pid 6485] rename("./bus", "./file2" [pid 6484] <... write resumed>) = 524288 [pid 5073] <... umount2 resumed>) = 0 [pid 6485] <... rename resumed>) = -1 EEXIST (File exists) [pid 6483] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6485] memfd_create("syzkaller", 0 [pid 6484] munmap(0x7f0356e00000, 138412032 [pid 6483] <... mmap resumed>) = 0x7f0356e00000 [pid 5073] umount2("./230/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6485] <... memfd_create resumed>) = 5 [pid 6484] <... munmap resumed>) = 0 [pid 5077] <... ioctl resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6484] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6483] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] newfstatat(AT_FDCWD, "./230/bus", [pid 6485] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./230/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6485] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6484] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./230/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6484] close(5 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] close(3 [pid 6486] <... write resumed>) = 524288 [pid 6485] <... write resumed>) = 524288 [pid 6484] <... close resumed>) = 0 [pid 6483] <... write resumed>) = 524288 [pid 5077] <... close resumed>) = 0 [pid 5073] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./230/bus") = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] umount2("./230/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6487 attached [pid 6486] munmap(0x7f0356e00000, 138412032 [pid 6484] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6483] munmap(0x7f0356e00000, 138412032 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6487] set_robust_list(0x55556e32a660, 24 [pid 6486] <... munmap resumed>) = 0 [pid 6483] <... munmap resumed>) = 0 [pid 6487] <... set_robust_list resumed>) = 0 [pid 6486] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6487] chdir("./233") = 0 [pid 6486] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6484] <... open resumed>) = 5 [pid 6483] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6487] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6484] ftruncate(5, 0 [pid 6487] <... prctl resumed>) = 0 [pid 6486] close(5 [pid 6485] munmap(0x7f0356e00000, 138412032 [pid 5073] newfstatat(AT_FDCWD, "./230/binderfs", [pid 6485] <... munmap resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./230/binderfs" [pid 6486] <... close resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5073] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6485] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] close(3 [pid 6485] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... close resumed>) = 0 [pid 6485] close(5 [pid 5073] rmdir("./230" [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6487 [pid 5073] <... rmdir resumed>) = 0 [pid 6484] <... ftruncate resumed>) = 0 [pid 6483] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] mkdir("./231", 0777 [pid 6487] setpgid(0, 0 [pid 5073] <... mkdir resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6486] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6485] <... close resumed>) = 0 [pid 6484] exit_group(0 [pid 6487] <... setpgid resumed>) = 0 [pid 6483] close(5 [pid 6485] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6486] <... open resumed>) = 5 [pid 6486] ftruncate(5, 0) = 0 [pid 6485] <... open resumed>) = 5 [pid 6487] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6486] exit_group(0) = ? [pid 6485] ftruncate(5, 0 [pid 6487] <... openat resumed>) = 3 [pid 6486] +++ exited with 0 +++ [pid 6485] <... ftruncate resumed>) = 0 [pid 6484] <... exit_group resumed>) = ? [pid 6483] <... close resumed>) = 0 [pid 6487] write(3, "1000", 4 [pid 6485] exit_group(0 [pid 6484] +++ exited with 0 +++ [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6486, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6487] <... write resumed>) = 4 [pid 6485] <... exit_group resumed>) = ? [pid 6483] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6487] close(3 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6484, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6487] <... close resumed>) = 0 [pid 5078] umount2("./233", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 6487] symlink("/dev/binderfs", "./binderfs" [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... restart_syscall resumed>) = 0 [pid 6487] <... symlink resumed>) = 0 [pid 6485] +++ exited with 0 +++ [pid 5078] openat(AT_FDCWD, "./233", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6487] memfd_create("syzkaller", 0 [pid 5078] <... openat resumed>) = 3 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6485, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5078] newfstatat(3, "", [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 6487] <... memfd_create resumed>) = 3 [pid 5074] umount2("./230", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6487] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... restart_syscall resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] openat(AT_FDCWD, "./230", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6487] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6483] <... open resumed>) = 5 [pid 5078] getdents64(3, [pid 6483] ftruncate(5, 0 [pid 5074] <... openat resumed>) = 3 [pid 6483] <... ftruncate resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6483] exit_group(0 [pid 5078] umount2("./233/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6483] <... exit_group resumed>) = ? [pid 5076] umount2("./233", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] newfstatat(3, "", [pid 6487] <... write resumed>) = 524288 [pid 6483] +++ exited with 0 +++ [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] openat(AT_FDCWD, "./233", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6483, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6487] munmap(0x7f0356e00000, 138412032 [pid 5076] <... openat resumed>) = 3 [pid 5074] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] newfstatat(3, "", [pid 5075] umount2("./230", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6487] <... munmap resumed>) = 0 [pid 5076] getdents64(3, [pid 5075] openat(AT_FDCWD, "./230", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] umount2("./230/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6487] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] <... openat resumed>) = 3 [pid 6487] <... openat resumed>) = 4 [pid 5076] umount2("./233/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] newfstatat(3, "", [pid 6487] ioctl(4, LOOP_SET_FD, 3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] umount2("./230/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6487] <... ioctl resumed>) = 0 [pid 5078] <... umount2 resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 5074] umount2("./230/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./233/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] close(3 [pid 6487] close(3 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... close resumed>) = 0 [pid 6487] <... close resumed>) = 0 [pid 5078] newfstatat(AT_FDCWD, "./233/bus", [pid 5074] newfstatat(AT_FDCWD, "./230/bus", [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 6488 attached [pid 6487] close(4 [pid 5078] umount2("./233/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6487] <... close resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6488 [pid 5074] umount2("./230/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6488] set_robust_list(0x55556e32a660, 24) = 0 [pid 6487] mkdir("./bus", 0777 [pid 5078] openat(AT_FDCWD, "./233/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... umount2 resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... openat resumed>) = 4 [pid 5074] openat(AT_FDCWD, "./230/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6487] <... mkdir resumed>) = 0 [pid 5074] <... openat resumed>) = 4 [pid 6488] chdir("./231" [pid 6487] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5078] newfstatat(4, "", [pid 5074] newfstatat(4, "", [pid 6488] <... chdir resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] umount2("./233/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6488] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5078] getdents64(4, [pid 5075] umount2("./230/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] getdents64(4, [pid 6488] <... prctl resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6488] setpgid(0, 0 [pid 5078] getdents64(4, [pid 5076] newfstatat(AT_FDCWD, "./233/bus", [pid 5075] newfstatat(AT_FDCWD, "./230/bus", [pid 5074] getdents64(4, [pid 6488] <... setpgid resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6488] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6487] <... mount resumed>) = 0 [pid 5078] close(4 [pid 5076] umount2("./233/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] close(4 [pid 5075] umount2("./230/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6488] <... openat resumed>) = 3 [pid 5078] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6488] write(3, "1000", 4 [pid 6487] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] rmdir("./233/bus" [pid 5076] openat(AT_FDCWD, "./233/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] openat(AT_FDCWD, "./230/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] rmdir("./230/bus" [pid 6488] <... write resumed>) = 4 [pid 6487] <... openat resumed>) = 3 [pid 5078] <... rmdir resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5075] <... openat resumed>) = 4 [pid 5074] <... rmdir resumed>) = 0 [pid 6488] close(3 [pid 6487] chdir("./bus" [pid 5078] umount2("./233/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] newfstatat(4, "", [pid 5075] newfstatat(4, "", [pid 5074] umount2("./230/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6488] <... close resumed>) = 0 [pid 6487] <... chdir resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6488] symlink("/dev/binderfs", "./binderfs" [pid 6487] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] newfstatat(AT_FDCWD, "./233/binderfs", [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, [pid 5074] newfstatat(AT_FDCWD, "./230/binderfs", [pid 6488] <... symlink resumed>) = 0 [pid 6487] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] getdents64(4, [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 214.279588][ T6487] loop4: detected capacity change from 0 to 1024 [pid 5078] unlink("./233/binderfs" [pid 5075] getdents64(4, [pid 5074] unlink("./230/binderfs" [pid 6488] memfd_create("syzkaller", 0 [pid 6487] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] <... unlink resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5078] getdents64(3, [pid 5075] close(4 [pid 5074] getdents64(3, [pid 5076] getdents64(4, [pid 5075] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6488] <... memfd_create resumed>) = 3 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] rmdir("./230/bus" [pid 5074] close(3 [pid 6488] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] close(3 [pid 5076] close(4 [pid 6488] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... close resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5075] umount2("./230/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6487] <... symlink resumed>) = 0 [pid 5076] rmdir("./233/bus" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] rmdir("./230" [pid 5078] rmdir("./233" [pid 5075] newfstatat(AT_FDCWD, "./230/binderfs", [pid 6488] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... rmdir resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 6487] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5075] unlink("./230/binderfs") = 0 [pid 5075] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] close(3 [pid 5078] mkdir("./234", 0777 [pid 5076] umount2("./233/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] mkdir("./231", 0777 [pid 5075] rmdir("./230" [pid 6487] <... creat resumed>) = 4 [pid 6487] rename("./bus", "./file2" [pid 5078] <... mkdir resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./233/binderfs", [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./233/binderfs" [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6487] <... rename resumed>) = -1 EEXIST (File exists) [pid 5076] <... unlink resumed>) = 0 [pid 5075] mkdir("./231", 0777 [pid 6488] <... write resumed>) = 524288 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5076] getdents64(3, [pid 5075] <... mkdir resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 6487] memfd_create("syzkaller", 0) = 5 [pid 6487] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5078] <... openat resumed>) = 3 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5076] <... close resumed>) = 0 [pid 5076] rmdir("./233") = 0 [pid 5076] mkdir("./234", 0777 [pid 6487] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... mkdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6488] munmap(0x7f0356e00000, 138412032) = 0 [pid 6488] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6487] <... write resumed>) = 524288 [pid 6488] <... openat resumed>) = 4 [pid 6487] munmap(0x7f0356e00000, 138412032 [pid 6488] ioctl(4, LOOP_SET_FD, 3 [pid 6487] <... munmap resumed>) = 0 [pid 6487] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6488] <... ioctl resumed>) = 0 [pid 6487] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6488] close(3 [pid 6487] close(5 [pid 6488] <... close resumed>) = 0 [pid 6488] close(4) = 0 [pid 6487] <... close resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 6488] mkdir("./bus", 0777) = 0 [pid 6487] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] <... ioctl resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5074] close(3 [pid 5075] close(3 [pid 5078] close(3 [pid 5074] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6488] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6490 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6490 attached [pid 6490] set_robust_list(0x55556e32a660, 24./strace-static-x86_64: Process 6489 attached ) = 0 [pid 6490] chdir("./231" [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6489 [pid 6490] <... chdir resumed>) = 0 [pid 6490] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6490] setpgid(0, 0./strace-static-x86_64: Process 6491 attached ) = 0 [pid 6489] set_robust_list(0x55556e32a660, 24 [pid 6491] set_robust_list(0x55556e32a660, 24 [pid 6490] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6489] <... set_robust_list resumed>) = 0 [pid 6491] <... set_robust_list resumed>) = 0 [pid 6489] chdir("./231" [pid 6487] <... open resumed>) = 5 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6491 [pid 5076] <... ioctl resumed>) = 0 [pid 6489] <... chdir resumed>) = 0 [pid 6489] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6487] ftruncate(5, 0 [pid 6491] chdir("./234" [pid 6490] <... openat resumed>) = 3 [pid 6489] setpgid(0, 0 [pid 6487] <... ftruncate resumed>) = 0 [ 214.384178][ T6488] loop0: detected capacity change from 0 to 1024 [pid 6491] <... chdir resumed>) = 0 [pid 6490] write(3, "1000", 4 [pid 6489] <... setpgid resumed>) = 0 [pid 6487] exit_group(0 [pid 6490] <... write resumed>) = 4 [pid 6490] close(3) = 0 [pid 6490] symlink("/dev/binderfs", "./binderfs" [pid 6489] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6491] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6490] <... symlink resumed>) = 0 [pid 6489] <... openat resumed>) = 3 [pid 6487] <... exit_group resumed>) = ? [pid 6491] <... prctl resumed>) = 0 [pid 6489] write(3, "1000", 4 [pid 6491] setpgid(0, 0 [pid 6490] memfd_create("syzkaller", 0 [pid 6489] <... write resumed>) = 4 [pid 6487] +++ exited with 0 +++ [pid 5076] close(3 [pid 6490] <... memfd_create resumed>) = 3 [pid 5076] <... close resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6491] <... setpgid resumed>) = 0 [pid 6489] close(3 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6487, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 6491] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6490] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6489] <... close resumed>) = 0 [pid 6488] <... mount resumed>) = 0 ./strace-static-x86_64: Process 6492 attached [pid 6491] <... openat resumed>) = 3 [pid 6489] symlink("/dev/binderfs", "./binderfs" [pid 6491] write(3, "1000", 4 [pid 6490] <... mmap resumed>) = 0x7f0356e00000 [pid 6489] <... symlink resumed>) = 0 [pid 6488] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6492] set_robust_list(0x55556e32a660, 24 [pid 6491] <... write resumed>) = 4 [pid 6490] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6492] <... set_robust_list resumed>) = 0 [pid 6491] close(3 [pid 6489] memfd_create("syzkaller", 0 [pid 6488] <... openat resumed>) = 3 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6492 [pid 6491] <... close resumed>) = 0 [pid 6491] symlink("/dev/binderfs", "./binderfs" [pid 6488] chdir("./bus" [pid 6491] <... symlink resumed>) = 0 [pid 6488] <... chdir resumed>) = 0 [pid 5077] umount2("./233", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6492] chdir("./234" [pid 6488] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6492] <... chdir resumed>) = 0 [pid 6491] memfd_create("syzkaller", 0 [pid 6488] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6492] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6491] <... memfd_create resumed>) = 3 [pid 6492] <... prctl resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./233", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6491] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6492] setpgid(0, 0) = 0 [pid 6491] <... mmap resumed>) = 0x7f0356e00000 [pid 6490] <... write resumed>) = 524288 [pid 6488] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5077] <... openat resumed>) = 3 [pid 6488] <... symlink resumed>) = 0 [pid 6488] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6491] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6492] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6489] <... memfd_create resumed>) = 3 [pid 5077] newfstatat(3, "", [pid 6489] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6492] <... openat resumed>) = 3 [pid 6489] <... mmap resumed>) = 0x7f0356e00000 [pid 6488] <... creat resumed>) = 4 [pid 5077] getdents64(3, [pid 6492] write(3, "1000", 4 [pid 6488] rename("./bus", "./file2" [pid 6492] <... write resumed>) = 4 [pid 6488] <... rename resumed>) = -1 EEXIST (File exists) [pid 6492] close(3 [pid 6488] memfd_create("syzkaller", 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6492] <... close resumed>) = 0 [pid 6489] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6488] <... memfd_create resumed>) = 5 [pid 6492] symlink("/dev/binderfs", "./binderfs" [pid 6488] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] umount2("./233/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6492] <... symlink resumed>) = 0 [pid 6488] <... mmap resumed>) = 0x7f0356e00000 [pid 6492] memfd_create("syzkaller", 0 [pid 6488] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... umount2 resumed>) = 0 [pid 6492] <... memfd_create resumed>) = 3 [pid 6492] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6490] munmap(0x7f0356e00000, 138412032 [pid 6492] <... mmap resumed>) = 0x7f0356e00000 [pid 6490] <... munmap resumed>) = 0 [pid 6490] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6490] ioctl(4, LOOP_SET_FD, 3 [pid 6492] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6491] <... write resumed>) = 524288 [pid 6490] <... ioctl resumed>) = 0 [pid 6489] <... write resumed>) = 524288 [pid 5077] umount2("./233/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6491] munmap(0x7f0356e00000, 138412032 [pid 6492] <... write resumed>) = 524288 [pid 6491] <... munmap resumed>) = 0 [pid 6489] munmap(0x7f0356e00000, 138412032 [pid 5077] newfstatat(AT_FDCWD, "./233/bus", [pid 6489] <... munmap resumed>) = 0 [pid 6492] munmap(0x7f0356e00000, 138412032 [pid 6491] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6490] close(3 [pid 6489] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6492] <... munmap resumed>) = 0 [pid 6491] <... openat resumed>) = 4 [pid 6490] <... close resumed>) = 0 [pid 6489] <... openat resumed>) = 4 [pid 5077] umount2("./233/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6491] ioctl(4, LOOP_SET_FD, 3 [pid 6489] ioctl(4, LOOP_SET_FD, 3 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6488] <... write resumed>) = 524288 [pid 6488] munmap(0x7f0356e00000, 138412032 [pid 6492] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6491] <... ioctl resumed>) = 0 [pid 6490] close(4 [pid 6489] <... ioctl resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./233/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6490] <... close resumed>) = 0 [pid 6489] close(3 [pid 6488] <... munmap resumed>) = 0 [pid 5077] <... openat resumed>) = 4 [pid 6492] <... openat resumed>) = 4 [pid 6491] close(3 [pid 6490] mkdir("./bus", 0777 [pid 6489] <... close resumed>) = 0 [pid 5077] newfstatat(4, "", [pid 6490] <... mkdir resumed>) = 0 [pid 6489] close(4 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6491] <... close resumed>) = 0 [pid 6492] ioctl(4, LOOP_SET_FD, 3 [pid 6491] close(4 [pid 6490] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6489] <... close resumed>) = 0 [pid 6488] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5077] getdents64(4, [pid 6491] <... close resumed>) = 0 [pid 6489] mkdir("./bus", 0777 [pid 6488] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6489] <... mkdir resumed>) = 0 [pid 5077] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] close(4 [pid 6489] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5077] <... close resumed>) = 0 [pid 6490] <... mount resumed>) = 0 [pid 5077] rmdir("./233/bus" [pid 6491] mkdir("./bus", 0777 [pid 6490] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6488] close(5 [pid 6490] <... openat resumed>) = 3 [pid 6490] chdir("./bus") = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 6490] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5077] umount2("./233/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6490] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6489] <... mount resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./233/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6492] <... ioctl resumed>) = 0 [pid 6491] <... mkdir resumed>) = 0 [pid 6490] <... symlink resumed>) = 0 [pid 6489] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6488] <... close resumed>) = 0 [pid 6492] close(3 [pid 6491] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6490] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6489] <... openat resumed>) = 3 [pid 5077] unlink("./233/binderfs" [pid 6492] <... close resumed>) = 0 [pid 6489] chdir("./bus" [pid 5077] <... unlink resumed>) = 0 [pid 6492] close(4 [pid 6489] <... chdir resumed>) = 0 [pid 6492] <... close resumed>) = 0 [pid 6490] <... creat resumed>) = 4 [pid 6489] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5077] getdents64(3, [pid 6490] rename("./bus", "./file2" [pid 6489] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6492] mkdir("./bus", 0777 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6492] <... mkdir resumed>) = 0 [pid 6489] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5077] close(3 [pid 6490] <... rename resumed>) = -1 EEXIST (File exists) [pid 6490] memfd_create("syzkaller", 0 [pid 5077] <... close resumed>) = 0 [pid 6492] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6490] <... memfd_create resumed>) = 5 [pid 6489] <... symlink resumed>) = 0 [pid 5077] rmdir("./233" [pid 6490] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] <... rmdir resumed>) = 0 [pid 6490] <... mmap resumed>) = 0x7f0356e00000 [ 214.517679][ T6490] loop2: detected capacity change from 0 to 1024 [ 214.537651][ T6491] loop5: detected capacity change from 0 to 1024 [ 214.546113][ T6489] loop1: detected capacity change from 0 to 1024 [ 214.558374][ T6492] loop3: detected capacity change from 0 to 1024 [pid 6490] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6489] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5077] mkdir("./234", 0777 [pid 6488] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] <... mkdir resumed>) = 0 [pid 6489] <... creat resumed>) = 4 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6489] rename("./bus", "./file2" [pid 5077] <... openat resumed>) = 3 [pid 6492] <... mount resumed>) = 0 [pid 6489] <... rename resumed>) = -1 EEXIST (File exists) [pid 6492] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6489] memfd_create("syzkaller", 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 6492] <... openat resumed>) = 3 [pid 6491] <... mount resumed>) = 0 [pid 6490] <... write resumed>) = 524288 [pid 6489] <... memfd_create resumed>) = 5 [pid 6488] <... open resumed>) = 5 [pid 6492] chdir("./bus" [pid 6491] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6488] ftruncate(5, 0 [pid 6492] <... chdir resumed>) = 0 [pid 6492] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6491] <... openat resumed>) = 3 [pid 6492] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6491] chdir("./bus" [pid 6488] <... ftruncate resumed>) = 0 [pid 6491] <... chdir resumed>) = 0 [pid 6491] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6488] exit_group(0 [pid 6491] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6488] <... exit_group resumed>) = ? [pid 6492] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6489] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6491] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6492] <... symlink resumed>) = 0 [pid 6489] <... mmap resumed>) = 0x7f0356e00000 [pid 6492] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6491] <... symlink resumed>) = 0 [pid 6491] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6490] munmap(0x7f0356e00000, 138412032) = 0 [pid 6489] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6491] <... creat resumed>) = 4 [pid 6492] <... creat resumed>) = 4 [pid 6488] +++ exited with 0 +++ [pid 6491] rename("./bus", "./file2" [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6488, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6492] rename("./bus", "./file2" [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 6492] <... rename resumed>) = -1 EEXIST (File exists) [pid 6491] <... rename resumed>) = -1 EEXIST (File exists) [pid 6490] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6489] <... write resumed>) = 524288 [pid 5073] <... restart_syscall resumed>) = 0 [pid 6492] memfd_create("syzkaller", 0 [pid 6491] memfd_create("syzkaller", 0 [pid 6490] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6492] <... memfd_create resumed>) = 5 [pid 6491] <... memfd_create resumed>) = 5 [pid 6491] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6492] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5073] umount2("./231", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6492] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6491] <... mmap resumed>) = 0x7f0356e00000 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6490] close(5 [pid 5073] openat(AT_FDCWD, "./231", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] umount2("./231/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6492] <... write resumed>) = 524288 [pid 5073] <... umount2 resumed>) = 0 [pid 6490] <... close resumed>) = 0 [pid 6489] munmap(0x7f0356e00000, 138412032 [pid 6491] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6489] <... munmap resumed>) = 0 [pid 6490] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6489] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6491] <... write resumed>) = 524288 [pid 6489] close(5) = 0 [pid 6490] <... open resumed>) = 5 [pid 5073] umount2("./231/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6492] munmap(0x7f0356e00000, 138412032) = 0 [pid 6492] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6490] ftruncate(5, 0) = 0 [pid 6490] exit_group(0) = ? [pid 6490] +++ exited with 0 +++ [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6490, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5073] newfstatat(AT_FDCWD, "./231/bus", [pid 6492] close(5 [pid 5075] umount2("./231", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] <... ioctl resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./231", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] umount2("./231/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] close(3 [pid 5075] newfstatat(3, "", [pid 5077] <... close resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] getdents64(3, [pid 6489] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6491] munmap(0x7f0356e00000, 138412032 [pid 5073] openat(AT_FDCWD, "./231/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6491] <... munmap resumed>) = 0 [pid 5075] umount2("./231/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... openat resumed>) = 4 [pid 5073] newfstatat(4, "", [pid 6491] openat(AT_FDCWD, "/dev/loop5", O_RDWR./strace-static-x86_64: Process 6493 attached [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6493] set_robust_list(0x55556e32a660, 24 [pid 6491] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] getdents64(4, [pid 6493] <... set_robust_list resumed>) = 0 [pid 6491] close(5 [pid 6489] <... open resumed>) = 5 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6493 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6493] chdir("./234") = 0 [pid 6493] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6489] ftruncate(5, 0 [pid 6493] <... prctl resumed>) = 0 [pid 6489] <... ftruncate resumed>) = 0 [pid 5073] getdents64(4, [pid 6493] setpgid(0, 0 [pid 6492] <... close resumed>) = 0 [pid 6489] exit_group(0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6493] <... setpgid resumed>) = 0 [pid 5073] close(4 [pid 5075] <... umount2 resumed>) = 0 [pid 6493] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6492] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6489] <... exit_group resumed>) = ? [pid 5073] <... close resumed>) = 0 [pid 6491] <... close resumed>) = 0 [pid 6489] +++ exited with 0 +++ [pid 5073] rmdir("./231/bus" [pid 6493] <... openat resumed>) = 3 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6489, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5073] <... rmdir resumed>) = 0 [pid 6493] write(3, "1000", 4 [pid 6492] <... open resumed>) = 5 [pid 6493] <... write resumed>) = 4 [pid 6493] close(3 [pid 6492] ftruncate(5, 0 [pid 6493] <... close resumed>) = 0 [pid 6492] <... ftruncate resumed>) = 0 [pid 5073] umount2("./231/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6493] symlink("/dev/binderfs", "./binderfs" [pid 5075] umount2("./231/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6493] <... symlink resumed>) = 0 [pid 6492] exit_group(0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6492] <... exit_group resumed>) = ? [pid 5075] newfstatat(AT_FDCWD, "./231/bus", [pid 6492] +++ exited with 0 +++ [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6492, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] umount2("./231/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./231", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "./231/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./231/binderfs", [pid 6491] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5075] <... openat resumed>) = 4 [pid 5074] openat(AT_FDCWD, "./231", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6493] memfd_create("syzkaller", 0 [pid 5075] newfstatat(4, "", [pid 5074] <... openat resumed>) = 3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6493] <... memfd_create resumed>) = 3 [pid 5076] umount2("./234", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] newfstatat(3, "", [pid 5073] unlink("./231/binderfs" [pid 6493] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(4, [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6493] <... mmap resumed>) = 0x7f0356e00000 [pid 6491] <... open resumed>) = 5 [pid 5076] openat(AT_FDCWD, "./234", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(3, [pid 5073] <... unlink resumed>) = 0 [pid 6493] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6491] ftruncate(5, 0 [pid 5076] <... openat resumed>) = 3 [pid 5075] getdents64(4, [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] getdents64(3, [pid 5076] newfstatat(3, "", [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6491] <... ftruncate resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] umount2("./231/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] close(3 [pid 5076] getdents64(3, [pid 6491] exit_group(0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] close(4 [pid 5073] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./231/bus" [pid 6491] <... exit_group resumed>) = ? [pid 5076] umount2("./234/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... rmdir resumed>) = 0 [pid 5073] rmdir("./231") = 0 [pid 5073] mkdir("./232", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6491] +++ exited with 0 +++ [pid 5075] umount2("./231/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6491, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./231/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./231/binderfs" [pid 5078] umount2("./234", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... unlink resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(3, [pid 5076] <... umount2 resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5078] openat(AT_FDCWD, "./234", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] umount2("./234/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] close(3 [pid 5074] umount2("./231/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6493] <... write resumed>) = 524288 [pid 5078] <... openat resumed>) = 3 [pid 5076] newfstatat(AT_FDCWD, "./234/bus", [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./231" [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] newfstatat(AT_FDCWD, "./231/bus", [pid 5076] umount2("./234/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] mkdir("./232", 0777 [pid 5078] newfstatat(3, "", [pid 5076] openat(AT_FDCWD, "./234/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... mkdir resumed>) = 0 [pid 5074] umount2("./231/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] getdents64(3, [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] openat(AT_FDCWD, "./231/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] newfstatat(4, "", [pid 5075] <... openat resumed>) = 3 [pid 5074] <... openat resumed>) = 4 [pid 5078] umount2("./234/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] newfstatat(4, "", [pid 5076] getdents64(4, [pid 6493] munmap(0x7f0356e00000, 138412032) = 0 [pid 6493] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6493] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 6493] close(3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6493] <... close resumed>) = 0 [pid 6493] close(4) = 0 [pid 6493] mkdir("./bus", 0777) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, [pid 6493] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5078] <... umount2 resumed>) = 0 [pid 5076] getdents64(4, [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] close(3 [pid 5074] getdents64(4, [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] close(4 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] close(4 [pid 5076] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./231/bus" [pid 5076] rmdir("./234/bus"./strace-static-x86_64: Process 6494 attached [pid 5074] <... rmdir resumed>) = 0 [pid 6494] set_robust_list(0x55556e32a660, 24 [pid 6493] <... mount resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] umount2("./231/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6494 [pid 6494] <... set_robust_list resumed>) = 0 [pid 6493] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5076] umount2("./234/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6494] chdir("./232" [pid 6493] <... openat resumed>) = 3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./231/binderfs", [pid 6494] <... chdir resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./234/binderfs", [pid 6494] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5078] umount2("./234/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6493] chdir("./bus") = 0 [pid 5074] unlink("./231/binderfs" [pid 6494] <... prctl resumed>) = 0 [pid 5076] unlink("./234/binderfs" [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6493] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5078] newfstatat(AT_FDCWD, "./234/bus", [pid 5074] <... unlink resumed>) = 0 [pid 6493] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6494] setpgid(0, 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5074] getdents64(3, [pid 6494] <... setpgid resumed>) = 0 [pid 6493] <... symlink resumed>) = 0 [pid 5078] umount2("./234/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] getdents64(3, [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6493] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6494] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5074] close(3 [pid 6493] <... creat resumed>) = 4 [pid 6493] rename("./bus", "./file2") = -1 EEXIST (File exists) [pid 5074] <... close resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./234/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] close(3 [pid 6493] memfd_create("syzkaller", 0) = 5 [pid 6493] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6494] <... openat resumed>) = 3 [pid 6493] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... openat resumed>) = 4 [pid 5076] <... close resumed>) = 0 [pid 5074] rmdir("./231") = 0 [pid 5078] newfstatat(4, "", [pid 5076] rmdir("./234" [pid 5074] mkdir("./232", 0777 [pid 6494] write(3, "1000", 4 [pid 5076] <... rmdir resumed>) = 0 [pid 6494] <... write resumed>) = 4 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6494] close(3 [pid 5074] <... mkdir resumed>) = 0 [pid 6494] <... close resumed>) = 0 [pid 5078] getdents64(4, [pid 5076] mkdir("./235", 0777 [pid 6494] symlink("/dev/binderfs", "./binderfs" [pid 5075] close(3 [pid 6494] <... symlink resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6494] memfd_create("syzkaller", 0 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6495 [pid 5076] <... mkdir resumed>) = 0 [pid 5078] getdents64(4, [pid 6494] <... memfd_create resumed>) = 3 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5078] close(4./strace-static-x86_64: Process 6495 attached ) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5074] <... openat resumed>) = 3 [pid 5078] rmdir("./234/bus" [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6495] set_robust_list(0x55556e32a660, 24) = 0 [pid 6495] chdir("./232") = 0 [pid 6495] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 6494] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6495] setpgid(0, 0 [pid 6494] <... mmap resumed>) = 0x7f0356e00000 [pid 6493] <... write resumed>) = 524288 [pid 6495] <... setpgid resumed>) = 0 [pid 5078] umount2("./234/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] newfstatat(AT_FDCWD, "./234/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 214.747800][ T6493] loop4: detected capacity change from 0 to 1024 [pid 5078] unlink("./234/binderfs" [pid 6495] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6494] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6493] munmap(0x7f0356e00000, 138412032 [pid 6495] <... openat resumed>) = 3 [pid 6493] <... munmap resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 6495] write(3, "1000", 4 [pid 6493] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6495] <... write resumed>) = 4 [pid 6495] close(3) = 0 [pid 6495] symlink("/dev/binderfs", "./binderfs" [pid 6493] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] getdents64(3, [pid 6495] <... symlink resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6493] close(5 [pid 5078] close(3) = 0 [pid 5078] rmdir("./234") = 0 [pid 5078] mkdir("./235", 0777) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6493] <... close resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 6495] memfd_create("syzkaller", 0 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 6495] <... memfd_create resumed>) = 3 [pid 6494] <... write resumed>) = 524288 [pid 6495] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6494] munmap(0x7f0356e00000, 138412032 [pid 6495] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6493] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5074] <... ioctl resumed>) = 0 [pid 6494] <... munmap resumed>) = 0 [pid 5074] close(3) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6494] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6494] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6496 attached [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6496 [pid 6495] <... write resumed>) = 524288 [pid 6493] <... open resumed>) = 5 [pid 6493] ftruncate(5, 0) = 0 [pid 6495] munmap(0x7f0356e00000, 138412032 [pid 6493] exit_group(0 [pid 5076] <... ioctl resumed>) = 0 [pid 6493] <... exit_group resumed>) = ? [pid 6496] set_robust_list(0x55556e32a660, 24 [pid 6495] <... munmap resumed>) = 0 [pid 6493] +++ exited with 0 +++ [pid 6496] <... set_robust_list resumed>) = 0 [pid 6495] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6493, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 6496] chdir("./232" [pid 6495] <... openat resumed>) = 4 [pid 6496] <... chdir resumed>) = 0 [pid 6495] ioctl(4, LOOP_SET_FD, 3 [pid 5076] close(3 [pid 5077] umount2("./234", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... close resumed>) = 0 [pid 6496] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6496] <... prctl resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./234", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6497 attached [pid 5078] <... ioctl resumed>) = 0 [pid 6497] set_robust_list(0x55556e32a660, 24 [pid 6494] <... ioctl resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6497 [pid 5077] <... openat resumed>) = 3 [pid 6497] <... set_robust_list resumed>) = 0 [pid 6496] setpgid(0, 0 [pid 6494] close(3 [pid 5077] newfstatat(3, "", [pid 6497] chdir("./235" [pid 6494] <... close resumed>) = 0 [pid 6496] <... setpgid resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6497] <... chdir resumed>) = 0 [pid 6494] close(4 [pid 6497] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6494] <... close resumed>) = 0 [pid 5077] getdents64(3, [pid 6497] <... prctl resumed>) = 0 [pid 6494] mkdir("./bus", 0777 [pid 6497] setpgid(0, 0 [pid 6496] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6494] <... mkdir resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6497] <... setpgid resumed>) = 0 [pid 6494] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6497] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6496] <... openat resumed>) = 3 [pid 5077] umount2("./234/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6496] write(3, "1000", 4 [pid 6497] <... openat resumed>) = 3 [pid 6497] write(3, "1000", 4) = 4 [pid 6497] close(3 [pid 6496] <... write resumed>) = 4 [pid 6497] <... close resumed>) = 0 [pid 6496] close(3 [pid 6497] symlink("/dev/binderfs", "./binderfs" [pid 6496] <... close resumed>) = 0 [pid 6497] <... symlink resumed>) = 0 [pid 6496] symlink("/dev/binderfs", "./binderfs" [pid 6495] <... ioctl resumed>) = 0 [pid 6494] <... mount resumed>) = 0 [pid 5078] close(3 [pid 5077] <... umount2 resumed>) = 0 [pid 6496] <... symlink resumed>) = 0 [pid 6495] close(3 [pid 6494] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] <... close resumed>) = 0 [pid 5077] umount2("./234/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6497] memfd_create("syzkaller", 0 [pid 6496] memfd_create("syzkaller", 0 [pid 6495] <... close resumed>) = 0 [pid 6494] <... openat resumed>) = 3 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6496] <... memfd_create resumed>) = 3 [pid 6495] close(4 [pid 5077] newfstatat(AT_FDCWD, "./234/bus", [pid 6496] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6495] <... close resumed>) = 0 [pid 6494] chdir("./bus" [pid 6497] <... memfd_create resumed>) = 3 [pid 6496] <... mmap resumed>) = 0x7f0356e00000 [pid 6496] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6495] mkdir("./bus", 0777 [pid 6494] <... chdir resumed>) = 0 [pid 5077] umount2("./234/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6494] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6494] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] openat(AT_FDCWD, "./234/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6498 attached [pid 6497] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] <... openat resumed>) = 4 [pid 6497] <... mmap resumed>) = 0x7f0356e00000 [pid 6495] <... mkdir resumed>) = 0 [pid 6494] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5077] newfstatat(4, "", [pid 6498] set_robust_list(0x55556e32a660, 24 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6498 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6497] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6498] <... set_robust_list resumed>) = 0 [pid 6495] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5077] close(4 [pid 6498] chdir("./235") = 0 [pid 6496] <... write resumed>) = 524288 [pid 6494] <... symlink resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 6498] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5077] rmdir("./234/bus" [pid 6498] <... prctl resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 6498] setpgid(0, 0) = 0 [pid 5077] umount2("./234/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./234/binderfs", [pid 6494] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6498] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5077] unlink("./234/binderfs") = 0 [pid 6498] write(3, "1000", 4 [pid 5077] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] close(3) = 0 [pid 5077] rmdir("./234" [pid 6498] <... write resumed>) = 4 [pid 5077] <... rmdir resumed>) = 0 [pid 6498] close(3 [pid 6495] <... mount resumed>) = 0 [pid 6498] <... close resumed>) = 0 [pid 6498] symlink("/dev/binderfs", "./binderfs" [pid 6497] <... write resumed>) = 524288 [pid 6495] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6498] <... symlink resumed>) = 0 [pid 6496] munmap(0x7f0356e00000, 138412032 [pid 6495] <... openat resumed>) = 3 [pid 6498] memfd_create("syzkaller", 0 [pid 6496] <... munmap resumed>) = 0 [pid 6495] chdir("./bus" [pid 5077] mkdir("./235", 0777 [pid 6498] <... memfd_create resumed>) = 3 [pid 6495] <... chdir resumed>) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 6498] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6495] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6494] <... creat resumed>) = 4 [pid 6498] <... mmap resumed>) = 0x7f0356e00000 [pid 6497] munmap(0x7f0356e00000, 138412032 [pid 6496] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6495] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6494] rename("./bus", "./file2" [pid 6496] <... openat resumed>) = 4 [pid 6495] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [ 214.848372][ T6494] loop0: detected capacity change from 0 to 1024 [ 214.874694][ T6495] loop2: detected capacity change from 0 to 1024 [pid 6496] ioctl(4, LOOP_SET_FD, 3 [pid 5077] <... openat resumed>) = 3 [pid 6497] <... munmap resumed>) = 0 [pid 6494] <... rename resumed>) = -1 EEXIST (File exists) [pid 6494] memfd_create("syzkaller", 0 [pid 6498] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6495] <... symlink resumed>) = 0 [pid 6494] <... memfd_create resumed>) = 5 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 6494] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6497] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6494] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6495] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6497] <... openat resumed>) = 4 [pid 6497] ioctl(4, LOOP_SET_FD, 3 [pid 6495] <... creat resumed>) = 4 [pid 6495] rename("./bus", "./file2") = -1 EEXIST (File exists) [pid 6495] memfd_create("syzkaller", 0) = 5 [pid 6495] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6496] <... ioctl resumed>) = 0 [pid 6498] <... write resumed>) = 524288 [pid 6497] <... ioctl resumed>) = 0 [pid 6495] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6494] <... write resumed>) = 524288 [pid 6498] munmap(0x7f0356e00000, 138412032 [pid 6496] close(3) = 0 [pid 6496] close(4) = 0 [pid 6494] munmap(0x7f0356e00000, 138412032 [pid 6498] <... munmap resumed>) = 0 [pid 6496] mkdir("./bus", 0777 [pid 6494] <... munmap resumed>) = 0 [pid 6496] <... mkdir resumed>) = 0 [pid 6494] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6498] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6497] close(3 [pid 6496] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6495] <... write resumed>) = 524288 [pid 6498] <... openat resumed>) = 4 [pid 6497] <... close resumed>) = 0 [pid 6497] close(4) = 0 [pid 6494] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6495] munmap(0x7f0356e00000, 138412032 [pid 6497] mkdir("./bus", 0777) = 0 [pid 6495] <... munmap resumed>) = 0 [pid 6494] close(5 [pid 6498] ioctl(4, LOOP_SET_FD, 3 [ 214.941634][ T6496] loop1: detected capacity change from 0 to 1024 [ 214.957245][ T6497] loop3: detected capacity change from 0 to 1024 [pid 6497] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5077] <... ioctl resumed>) = 0 [pid 6495] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6495] close(5) = 0 [pid 6494] <... close resumed>) = 0 [pid 5077] close(3) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6497] <... mount resumed>) = 0 [pid 6497] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6499 [pid 6497] chdir("./bus"./strace-static-x86_64: Process 6499 attached [pid 6499] set_robust_list(0x55556e32a660, 24) = 0 [pid 6499] chdir("./235" [pid 6497] <... chdir resumed>) = 0 [pid 6496] <... mount resumed>) = 0 [pid 6499] <... chdir resumed>) = 0 [pid 6497] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6496] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6499] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6496] <... openat resumed>) = 3 [pid 6499] <... prctl resumed>) = 0 [pid 6497] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6496] chdir("./bus" [pid 6499] setpgid(0, 0 [pid 6496] <... chdir resumed>) = 0 [pid 6499] <... setpgid resumed>) = 0 [pid 6497] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6496] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6495] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6494] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6499] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6498] <... ioctl resumed>) = 0 [pid 6496] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6499] <... openat resumed>) = 3 [pid 6498] close(3 [pid 6497] <... symlink resumed>) = 0 [pid 6496] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6499] write(3, "1000", 4 [pid 6498] <... close resumed>) = 0 [pid 6499] <... write resumed>) = 4 [pid 6499] close(3) = 0 [pid 6499] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6498] close(4 [pid 6496] <... symlink resumed>) = 0 [pid 6494] <... open resumed>) = 5 [pid 6499] memfd_create("syzkaller", 0 [pid 6495] <... open resumed>) = 5 [pid 6499] <... memfd_create resumed>) = 3 [pid 6498] <... close resumed>) = 0 [pid 6496] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6495] ftruncate(5, 0 [pid 6497] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6499] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6498] mkdir("./bus", 0777 [pid 6495] <... ftruncate resumed>) = 0 [pid 6494] ftruncate(5, 0 [pid 6499] <... mmap resumed>) = 0x7f0356e00000 [pid 6498] <... mkdir resumed>) = 0 [pid 6496] <... creat resumed>) = 4 [pid 6495] exit_group(0 [pid 6494] <... ftruncate resumed>) = 0 [pid 6498] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6497] <... creat resumed>) = 4 [pid 6496] rename("./bus", "./file2") = -1 EEXIST (File exists) [pid 6495] <... exit_group resumed>) = ? [pid 6494] exit_group(0 [pid 6497] rename("./bus", "./file2" [pid 6496] memfd_create("syzkaller", 0 [pid 6495] +++ exited with 0 +++ [pid 6494] <... exit_group resumed>) = ? [pid 6496] <... memfd_create resumed>) = 5 [pid 6494] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6495, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6499] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6496] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6494, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6496] <... mmap resumed>) = 0x7f0356e00000 [pid 6497] <... rename resumed>) = -1 EEXIST (File exists) [ 214.997635][ T6498] loop5: detected capacity change from 0 to 1024 [pid 5073] umount2("./232", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6497] memfd_create("syzkaller", 0 [pid 5075] umount2("./232", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6497] <... memfd_create resumed>) = 5 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6499] <... write resumed>) = 524288 [pid 6497] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6496] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] openat(AT_FDCWD, "./232", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] openat(AT_FDCWD, "./232", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6497] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] umount2("./232/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... openat resumed>) = 3 [pid 5073] newfstatat(3, "", [pid 6497] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] umount2("./232/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6499] munmap(0x7f0356e00000, 138412032) = 0 [pid 6498] <... mount resumed>) = 0 [pid 6497] <... write resumed>) = 524288 [pid 6498] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5073] <... umount2 resumed>) = 0 [pid 6499] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6498] chdir("./bus" [pid 6499] <... openat resumed>) = 4 [pid 6498] <... chdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 6498] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6499] ioctl(4, LOOP_SET_FD, 3 [pid 6498] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6498] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6497] munmap(0x7f0356e00000, 138412032 [pid 5073] umount2("./232/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./232/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6497] <... munmap resumed>) = 0 [pid 6496] <... write resumed>) = 524288 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./232/bus", [pid 5075] newfstatat(AT_FDCWD, "./232/bus", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6497] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6496] munmap(0x7f0356e00000, 138412032 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./232/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./232/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./232/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6497] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6496] <... munmap resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./232/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... openat resumed>) = 4 [pid 5075] <... openat resumed>) = 4 [pid 5073] newfstatat(4, "", [pid 6497] close(5 [pid 5075] newfstatat(4, "", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, [pid 5075] getdents64(4, [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, [pid 5075] getdents64(4, [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] close(4 [pid 5075] close(4 [pid 5073] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5073] rmdir("./232/bus" [pid 6498] <... symlink resumed>) = 0 [pid 5075] rmdir("./232/bus" [pid 5073] <... rmdir resumed>) = 0 [pid 6498] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5075] <... rmdir resumed>) = 0 [pid 5073] umount2("./232/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6496] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6496] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] newfstatat(AT_FDCWD, "./232/binderfs", [pid 6496] close(5 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./232/binderfs" [pid 5075] umount2("./232/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... unlink resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] getdents64(3, [pid 5075] newfstatat(AT_FDCWD, "./232/binderfs", [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] close(3 [pid 6498] <... creat resumed>) = 4 [pid 5073] <... close resumed>) = 0 [pid 5075] unlink("./232/binderfs" [pid 5073] rmdir("./232" [pid 6498] rename("./bus", "./file2" [pid 6497] <... close resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 6497] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5075] getdents64(3, [pid 5073] mkdir("./233", 0777 [pid 6498] <... rename resumed>) = -1 EEXIST (File exists) [pid 6496] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 6498] memfd_create("syzkaller", 0 [pid 5075] close(3 [pid 6498] <... memfd_create resumed>) = 5 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] <... close resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5075] rmdir("./232" [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6498] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... rmdir resumed>) = 0 [pid 6499] <... ioctl resumed>) = 0 [pid 6498] <... mmap resumed>) = 0x7f0356e00000 [pid 6499] close(3) = 0 [pid 6499] close(4) = 0 [pid 6499] mkdir("./bus", 0777) = 0 [pid 6499] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5075] mkdir("./233", 0777 [pid 6497] <... open resumed>) = 5 [pid 5075] <... mkdir resumed>) = 0 [pid 6497] ftruncate(5, 0 [pid 6496] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 6497] <... ftruncate resumed>) = 0 [pid 6498] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6497] exit_group(0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6497] <... exit_group resumed>) = ? [pid 6499] <... mount resumed>) = 0 [pid 6497] +++ exited with 0 +++ [pid 6499] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6497, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6499] <... openat resumed>) = 3 [pid 6496] <... open resumed>) = 5 [pid 6496] ftruncate(5, 0 [pid 5076] umount2("./235", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6496] <... ftruncate resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6496] exit_group(0) = ? [ 215.085926][ T6499] loop4: detected capacity change from 0 to 1024 [pid 6496] +++ exited with 0 +++ [pid 5076] openat(AT_FDCWD, "./235", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6496, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6499] chdir("./bus") = 0 [pid 6499] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5076] <... openat resumed>) = 3 [pid 5074] umount2("./232", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6499] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(3, "", [pid 5074] openat(AT_FDCWD, "./232", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6499] <... symlink resumed>) = 0 [pid 5074] newfstatat(3, "", [pid 6499] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] umount2("./232/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6499] <... creat resumed>) = 4 [pid 5076] umount2("./235/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6499] rename("./bus", "./file2") = -1 EEXIST (File exists) [pid 6499] memfd_create("syzkaller", 0) = 5 [pid 6499] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6499] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6498] <... write resumed>) = 524288 [pid 6498] munmap(0x7f0356e00000, 138412032) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 6499] <... write resumed>) = 524288 [pid 6498] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6499] munmap(0x7f0356e00000, 138412032 [pid 6498] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6499] <... munmap resumed>) = 0 [pid 6498] close(5 [pid 6499] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6498] <... close resumed>) = 0 [pid 5076] umount2("./235/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./232/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... ioctl resumed>) = 0 [pid 6499] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./235/bus", [pid 5074] newfstatat(AT_FDCWD, "./232/bus", [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./235/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./232/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./235/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5074] openat(AT_FDCWD, "./232/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] newfstatat(4, "", [pid 5074] <... openat resumed>) = 4 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] newfstatat(4, "", [pid 5076] getdents64(4, [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6499] close(5 [pid 5074] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, [pid 5076] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] close(4 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] <... close resumed>) = 0 [pid 5076] rmdir("./235/bus" [pid 5074] close(4 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5076] umount2("./235/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] rmdir("./232/bus" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... rmdir resumed>) = 0 [pid 5073] close(3 [pid 5076] newfstatat(AT_FDCWD, "./235/binderfs", [pid 5074] umount2("./232/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... close resumed>) = 0 [pid 6499] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] unlink("./235/binderfs" [pid 5074] newfstatat(AT_FDCWD, "./232/binderfs", [pid 5076] <... unlink resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] getdents64(3, [pid 5074] unlink("./232/binderfs" [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 6498] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5076] close(3) = 0 [pid 5076] rmdir("./235") = 0 [pid 5074] getdents64(3, ./strace-static-x86_64: Process 6500 attached [pid 6500] set_robust_list(0x55556e32a660, 24 [pid 6498] <... open resumed>) = 5 [pid 6500] <... set_robust_list resumed>) = 0 [pid 6499] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5076] mkdir("./236", 0777 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6500 [pid 6500] chdir("./233" [pid 6498] ftruncate(5, 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5074] close(3 [pid 6500] <... chdir resumed>) = 0 [pid 6500] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6498] <... ftruncate resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 6500] <... prctl resumed>) = 0 [pid 5074] rmdir("./232" [pid 6498] exit_group(0 [pid 6500] setpgid(0, 0 [pid 6498] <... exit_group resumed>) = ? [pid 6500] <... setpgid resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5074] <... rmdir resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5075] close(3 [pid 5074] mkdir("./233", 0777 [pid 5075] <... close resumed>) = 0 [pid 6500] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6498] +++ exited with 0 +++ [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... mkdir resumed>) = 0 [pid 6500] <... openat resumed>) = 3 [pid 6499] <... open resumed>) = 5 [pid 6500] write(3, "1000", 4 [pid 6499] ftruncate(5, 0 [pid 6500] <... write resumed>) = 4 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6499] <... ftruncate resumed>) = 0 [pid 6500] close(3) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6501 [pid 5074] <... openat resumed>) = 3 [pid 6500] symlink("/dev/binderfs", "./binderfs" [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6498, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5078] umount2("./235", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6500] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 6501 attached [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6500] memfd_create("syzkaller", 0 [pid 5078] openat(AT_FDCWD, "./235", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6501] set_robust_list(0x55556e32a660, 24) = 0 [pid 6500] <... memfd_create resumed>) = 3 [pid 5078] <... openat resumed>) = 3 [pid 6500] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6501] chdir("./233" [pid 5078] getdents64(3, [pid 6500] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] umount2("./235/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6500] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6499] exit_group(0 [pid 6501] <... chdir resumed>) = 0 [pid 6499] <... exit_group resumed>) = ? [pid 6501] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6499] +++ exited with 0 +++ [pid 6501] <... prctl resumed>) = 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6499, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 6501] setpgid(0, 0) = 0 [pid 5077] umount2("./235", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6501] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5078] <... umount2 resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./235", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5077] newfstatat(3, "", [pid 5078] umount2("./235/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] getdents64(3, [pid 5078] newfstatat(AT_FDCWD, "./235/bus", [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6500] <... write resumed>) = 524288 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] umount2("./235/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] umount2("./235/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6501] <... openat resumed>) = 3 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./235/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5078] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6501] write(3, "1000", 4 [pid 5078] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, [pid 6501] <... write resumed>) = 4 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5078] close(4 [pid 6501] close(3) = 0 [pid 6501] symlink("/dev/binderfs", "./binderfs" [pid 5078] <... close resumed>) = 0 [pid 6501] <... symlink resumed>) = 0 [pid 6500] munmap(0x7f0356e00000, 138412032 [pid 6501] memfd_create("syzkaller", 0 [pid 5078] rmdir("./235/bus" [pid 6501] <... memfd_create resumed>) = 3 [pid 6500] <... munmap resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5078] umount2("./235/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] newfstatat(AT_FDCWD, "./235/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] unlink("./235/binderfs") = 0 [pid 5078] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5078] close(3) = 0 [pid 5078] rmdir("./235") = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5078] mkdir("./236", 0777) = 0 [pid 6500] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6501] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6500] ioctl(4, LOOP_SET_FD, 3 [pid 5074] close(3 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] umount2("./235/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... close resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] close(3 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] newfstatat(AT_FDCWD, "./235/bus", [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... close resumed>) = 0 ./strace-static-x86_64: Process 6502 attached [pid 6502] set_robust_list(0x55556e32a660, 24) = 0 [pid 6502] chdir("./233") = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6502] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5077] umount2("./235/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6502] <... prctl resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6502] setpgid(0, 0 [pid 5077] openat(AT_FDCWD, "./235/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6502] <... setpgid resumed>) = 0 [pid 5077] <... openat resumed>) = 4 [pid 6502] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5077] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] getdents64(4, [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6502 [pid 6502] <... openat resumed>) = 3 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6503 [pid 6502] write(3, "1000", 4 [pid 5077] close(4 [pid 6502] <... write resumed>) = 4 [pid 5077] <... close resumed>) = 0 [pid 6502] close(3 [pid 5077] rmdir("./235/bus" [pid 6502] <... close resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 6502] symlink("/dev/binderfs", "./binderfs" [pid 5077] umount2("./235/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6502] <... symlink resumed>) = 0 [pid 6501] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6502] memfd_create("syzkaller", 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./235/binderfs", [pid 6502] <... memfd_create resumed>) = 3 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6502] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] unlink("./235/binderfs" [pid 6502] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 6503 attached [pid 6502] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6503] set_robust_list(0x55556e32a660, 24 [pid 6500] <... ioctl resumed>) = 0 [pid 5077] getdents64(3, [pid 6503] <... set_robust_list resumed>) = 0 [pid 6500] close(3 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] close(3) = 0 [pid 5077] rmdir("./235" [pid 6501] <... write resumed>) = 524288 [pid 6500] <... close resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 6503] chdir("./236" [pid 5077] mkdir("./236", 0777 [pid 6503] <... chdir resumed>) = 0 [pid 6500] close(4 [pid 5077] <... mkdir resumed>) = 0 [pid 6503] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6500] <... close resumed>) = 0 [pid 6502] <... write resumed>) = 524288 [pid 6503] <... prctl resumed>) = 0 [pid 6500] mkdir("./bus", 0777 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 6502] munmap(0x7f0356e00000, 138412032 [pid 6503] setpgid(0, 0 [pid 6501] munmap(0x7f0356e00000, 138412032 [pid 6500] <... mkdir resumed>) = 0 [pid 5078] <... ioctl resumed>) = 0 [pid 6503] <... setpgid resumed>) = 0 [pid 6503] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6500] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6503] <... openat resumed>) = 3 [pid 6502] <... munmap resumed>) = 0 [pid 6501] <... munmap resumed>) = 0 [pid 6503] write(3, "1000", 4) = 4 [pid 6503] close(3 [pid 6502] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6503] <... close resumed>) = 0 [pid 6503] symlink("/dev/binderfs", "./binderfs" [pid 6502] <... openat resumed>) = 4 [pid 6502] ioctl(4, LOOP_SET_FD, 3 [pid 6503] <... symlink resumed>) = 0 [ 215.256909][ T6500] loop0: detected capacity change from 0 to 1024 [pid 6503] memfd_create("syzkaller", 0) = 3 [pid 6501] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6500] <... mount resumed>) = 0 [pid 5078] close(3) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556e32a650) = 6504 ./strace-static-x86_64: Process 6504 attached [pid 6504] set_robust_list(0x55556e32a660, 24 [pid 6503] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6501] <... openat resumed>) = 4 [pid 6500] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5077] <... ioctl resumed>) = 0 [pid 6503] <... mmap resumed>) = 0x7f0356e00000 [pid 6501] ioctl(4, LOOP_SET_FD, 3 [pid 6500] <... openat resumed>) = 3 [pid 6504] <... set_robust_list resumed>) = 0 [pid 6504] chdir("./236") = 0 [pid 6504] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6504] setpgid(0, 0 [pid 6503] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6504] <... setpgid resumed>) = 0 [pid 6504] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6504] write(3, "1000", 4) = 4 [pid 6504] close(3) = 0 [pid 6504] symlink("/dev/binderfs", "./binderfs" [pid 6502] <... ioctl resumed>) = 0 [pid 6504] <... symlink resumed>) = 0 [pid 6502] close(3 [pid 6504] memfd_create("syzkaller", 0 [pid 6502] <... close resumed>) = 0 [pid 6504] <... memfd_create resumed>) = 3 [pid 6502] close(4 [pid 5077] close(3 [pid 6504] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6502] <... close resumed>) = 0 [pid 6500] chdir("./bus" [pid 5077] <... close resumed>) = 0 [pid 6504] <... mmap resumed>) = 0x7f0356e00000 [pid 6502] mkdir("./bus", 0777 [pid 6500] <... chdir resumed>) = 0 [pid 6502] <... mkdir resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6503] <... write resumed>) = 524288 [pid 6500] openat(AT_FDCWD, "/dev/loop0", O_RDWR./strace-static-x86_64: Process 6505 attached [pid 6502] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6505] set_robust_list(0x55556e32a660, 24 [pid 6500] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6505] <... set_robust_list resumed>) = 0 [pid 6500] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6505] chdir("./236" [pid 6504] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6505] <... chdir resumed>) = 0 [pid 6500] <... symlink resumed>) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6505 [pid 6505] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6500] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6505] <... prctl resumed>) = 0 [pid 6505] setpgid(0, 0) = 0 [pid 6500] <... creat resumed>) = 4 [pid 6505] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6503] munmap(0x7f0356e00000, 138412032 [pid 6501] <... ioctl resumed>) = 0 [pid 6500] rename("./bus", "./file2" [pid 6505] write(3, "1000", 4) = 4 [pid 6503] <... munmap resumed>) = 0 [pid 6505] close(3) = 0 [pid 6503] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6501] close(3 [pid 6500] <... rename resumed>) = -1 EEXIST (File exists) [pid 6505] symlink("/dev/binderfs", "./binderfs" [pid 6503] <... openat resumed>) = 4 [pid 6501] <... close resumed>) = 0 [pid 6500] memfd_create("syzkaller", 0 [pid 6505] <... symlink resumed>) = 0 [pid 6503] ioctl(4, LOOP_SET_FD, 3 [ 215.313404][ T6502] loop1: detected capacity change from 0 to 1024 [ 215.334515][ T6501] loop2: detected capacity change from 0 to 1024 [pid 6501] close(4 [pid 6500] <... memfd_create resumed>) = 5 [pid 6505] memfd_create("syzkaller", 0 [pid 6501] <... close resumed>) = 0 [pid 6505] <... memfd_create resumed>) = 3 [pid 6505] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6504] <... write resumed>) = 524288 [pid 6504] munmap(0x7f0356e00000, 138412032) = 0 [pid 6502] <... mount resumed>) = 0 [pid 6501] mkdir("./bus", 0777 [pid 6500] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6505] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6502] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6502] chdir("./bus") = 0 [pid 6502] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6500] <... mmap resumed>) = 0x7f0356e00000 [pid 6501] <... mkdir resumed>) = 0 [pid 6504] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6502] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6504] <... openat resumed>) = 4 [pid 6504] ioctl(4, LOOP_SET_FD, 3 [pid 6503] <... ioctl resumed>) = 0 [pid 6501] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6500] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6503] close(3 [pid 6505] <... write resumed>) = 524288 [pid 6502] <... symlink resumed>) = 0 [pid 6502] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6505] munmap(0x7f0356e00000, 138412032) = 0 [pid 6500] <... write resumed>) = 524288 [pid 6501] <... mount resumed>) = 0 [pid 6503] <... close resumed>) = 0 [pid 6501] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6500] munmap(0x7f0356e00000, 138412032 [pid 6503] close(4 [pid 6501] <... openat resumed>) = 3 [pid 6503] <... close resumed>) = 0 [pid 6503] mkdir("./bus", 0777 [pid 6501] chdir("./bus" [pid 6505] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6503] <... mkdir resumed>) = 0 [pid 6502] <... creat resumed>) = 4 [pid 6501] <... chdir resumed>) = 0 [pid 6500] <... munmap resumed>) = 0 [pid 6505] <... openat resumed>) = 4 [pid 6502] rename("./bus", "./file2" [ 215.373843][ T6503] loop3: detected capacity change from 0 to 1024 [ 215.390518][ T6504] loop5: detected capacity change from 0 to 1024 [pid 6505] ioctl(4, LOOP_SET_FD, 3 [pid 6501] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6503] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6500] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6502] <... rename resumed>) = -1 EEXIST (File exists) [pid 6500] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6501] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6500] close(5 [pid 6502] memfd_create("syzkaller", 0 [pid 6504] <... ioctl resumed>) = 0 [pid 6502] <... memfd_create resumed>) = 5 [pid 6504] close(3 [pid 6502] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6504] <... close resumed>) = 0 [pid 6504] close(4) = 0 [pid 6502] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6501] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6504] mkdir("./bus", 0777) = 0 [pid 6502] <... write resumed>) = 524288 [pid 6501] <... symlink resumed>) = 0 [pid 6500] <... close resumed>) = 0 [pid 6504] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6503] <... mount resumed>) = 0 [pid 6501] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6500] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6501] <... creat resumed>) = 4 [pid 6505] <... ioctl resumed>) = 0 [pid 6505] close(3) = 0 [pid 6505] close(4) = 0 [pid 6505] mkdir("./bus", 0777 [pid 6502] munmap(0x7f0356e00000, 138412032 [pid 6505] <... mkdir resumed>) = 0 [pid 6502] <... munmap resumed>) = 0 [pid 6505] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6502] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6502] close(5 [pid 6503] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6502] <... close resumed>) = 0 [pid 6501] rename("./bus", "./file2" [pid 6500] <... open resumed>) = 5 [pid 6503] <... openat resumed>) = 3 [pid 6503] chdir("./bus" [ 215.415616][ T6505] loop4: detected capacity change from 0 to 1024 [ 215.438444][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 215.438463][ T28] audit: type=1800 audit(1710613097.544:1409): pid=6500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop0" ino=20 res=0 errno=0 [pid 6500] ftruncate(5, 0 [pid 6502] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6503] <... chdir resumed>) = 0 [pid 6505] <... mount resumed>) = 0 [pid 6504] <... mount resumed>) = 0 [pid 6503] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6502] <... open resumed>) = 5 [pid 6501] <... rename resumed>) = -1 EEXIST (File exists) [pid 6500] <... ftruncate resumed>) = 0 [pid 6505] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6504] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6501] memfd_create("syzkaller", 0 [pid 6505] <... openat resumed>) = 3 [pid 6504] <... openat resumed>) = 3 [pid 6501] <... memfd_create resumed>) = 5 [pid 6505] chdir("./bus" [pid 6504] chdir("./bus" [pid 6501] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6505] <... chdir resumed>) = 0 [pid 6504] <... chdir resumed>) = 0 [pid 6501] <... mmap resumed>) = 0x7f0356e00000 [pid 6505] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6504] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6503] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6502] ftruncate(5, 0 [pid 6501] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6500] exit_group(0 [pid 6505] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6504] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6505] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6504] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6503] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6502] <... ftruncate resumed>) = 0 [pid 6501] <... write resumed>) = 524288 [pid 6500] <... exit_group resumed>) = ? [pid 6505] <... symlink resumed>) = 0 [pid 6504] <... symlink resumed>) = 0 [pid 6505] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000