./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor910318476 <...> [pid 5887] mkdir("./bus", 0777 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./130/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5886] close(4 [pid 5076] newfstatat(AT_FDCWD, "./133/binderfs", [pid 5886] <... close resumed>) = 0 [pid 5887] <... mkdir resumed>) = 0 [pid 5885] <... close resumed>) = 0 [pid 5884] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5886] mkdir("./bus", 0777 [pid 5887] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5076] unlink("./133/binderfs" [pid 5886] <... mkdir resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./130/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5884] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5886] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5075] <... openat resumed>) = 4 [pid 5075] newfstatat(4, "", [pid 5885] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5886] <... mount resumed>) = 0 [pid 5887] <... mount resumed>) = 0 [pid 5884] <... open resumed>) = 5 [pid 5076] getdents64(3, [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5886] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5887] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5884] ftruncate(5, 0 [pid 5075] getdents64(4, [pid 5886] <... openat resumed>) = 3 [pid 5887] <... openat resumed>) = 3 [pid 5884] <... ftruncate resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5886] chdir("./bus" [pid 5887] chdir("./bus" [pid 5884] exit_group(0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5886] <... chdir resumed>) = 0 [pid 5887] <... chdir resumed>) = 0 [pid 5884] <... exit_group resumed>) = ? [pid 5886] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5887] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5885] <... open resumed>) = 5 [pid 5884] +++ exited with 0 +++ [ 156.673327][ T5887] loop5: detected capacity change from 0 to 1024 [ 156.682360][ T5886] loop0: detected capacity change from 0 to 1024 [pid 5076] close(3 [pid 5075] getdents64(4, [pid 5886] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5887] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5885] ftruncate(5, 0 [pid 5076] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5884, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5886] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5887] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5076] rmdir("./133" [pid 5886] <... symlink resumed>) = 0 [pid 5887] <... symlink resumed>) = 0 [pid 5885] <... ftruncate resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] close(4 [pid 5885] exit_group(0 [pid 5075] <... close resumed>) = 0 [pid 5885] <... exit_group resumed>) = ? [pid 5886] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5887] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5075] rmdir("./130/bus" [pid 5074] umount2("./130", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] mkdir("./134", 0777) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./130", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5074] newfstatat(3, "", [pid 5886] <... creat resumed>) = 4 [pid 5887] <... creat resumed>) = 4 [pid 5885] +++ exited with 0 +++ [pid 5076] <... openat resumed>) = 3 [pid 5075] umount2("./130/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5886] rename("./bus", "./file2" [pid 5887] rename("./bus", "./file2" [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] getdents64(3, [pid 5075] newfstatat(AT_FDCWD, "./130/binderfs", [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5885, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 5075] unlink("./130/binderfs" [pid 5886] <... rename resumed>) = -1 EEXIST (File exists) [pid 5887] <... rename resumed>) = -1 EEXIST (File exists) [pid 5077] <... restart_syscall resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5074] umount2("./130/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5886] memfd_create("syzkaller", 0 [pid 5887] memfd_create("syzkaller", 0 [pid 5886] <... memfd_create resumed>) = 5 [pid 5887] <... memfd_create resumed>) = 5 [pid 5075] getdents64(3, [pid 5886] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5887] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] umount2("./132", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5886] <... mmap resumed>) = 0x7f0356e00000 [pid 5887] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] openat(AT_FDCWD, "./132", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5887] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] newfstatat(3, "", [pid 5886] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] close(3 [pid 5077] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./130") = 0 [pid 5075] mkdir("./131", 0777) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5077] <... umount2 resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5887] <... write resumed>) = 524288 [pid 5074] <... umount2 resumed>) = 0 [pid 5077] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./132/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./132/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] umount2("./130/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... openat resumed>) = 4 [pid 5077] newfstatat(4, "", [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] newfstatat(AT_FDCWD, "./130/bus", [pid 5077] getdents64(4, [pid 5887] munmap(0x7f0356e00000, 138412032 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] getdents64(4, [pid 5074] umount2("./130/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5886] <... write resumed>) = 524288 [pid 5077] close(4 [pid 5886] munmap(0x7f0356e00000, 138412032 [pid 5887] <... munmap resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./130/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] rmdir("./132/bus" [pid 5074] <... openat resumed>) = 4 [pid 5076] close(3 [pid 5077] <... rmdir resumed>) = 0 [pid 5886] <... munmap resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5074] newfstatat(4, "", [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5888 attached [pid 5886] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5887] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] umount2("./132/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5888] set_robust_list(0x55556e32a660, 24 [pid 5887] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5888] <... set_robust_list resumed>) = 0 [pid 5886] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5887] close(5 [pid 5077] newfstatat(AT_FDCWD, "./132/binderfs", [pid 5074] getdents64(4, [pid 5075] <... ioctl resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 5888 [pid 5888] chdir("./134") = 0 [pid 5888] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] close(3 [pid 5888] <... prctl resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5888] setpgid(0, 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5888] <... setpgid resumed>) = 0 [pid 5074] getdents64(4, [pid 5888] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5886] close(5 [pid 5077] unlink("./132/binderfs" [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5888] <... openat resumed>) = 3 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 5889 [pid 5074] close(4 [pid 5077] <... unlink resumed>) = 0 [pid 5077] getdents64(3, [pid 5074] <... close resumed>) = 0 [pid 5887] <... close resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] rmdir("./130/bus"./strace-static-x86_64: Process 5889 attached [pid 5888] write(3, "1000", 4 [pid 5077] close(3 [pid 5889] set_robust_list(0x55556e32a660, 24 [pid 5888] <... write resumed>) = 4 [pid 5887] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5886] <... close resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5889] <... set_robust_list resumed>) = 0 [pid 5888] close(3 [pid 5886] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] rmdir("./132" [pid 5074] umount2("./130/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5889] chdir("./131" [pid 5888] <... close resumed>) = 0 [pid 5889] <... chdir resumed>) = 0 [pid 5888] symlink("/dev/binderfs", "./binderfs" [pid 5077] <... rmdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5889] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5888] <... symlink resumed>) = 0 [pid 5887] <... open resumed>) = 5 [pid 5077] mkdir("./133", 0777 [pid 5889] <... prctl resumed>) = 0 [pid 5888] memfd_create("syzkaller", 0 [pid 5886] <... open resumed>) = 5 [pid 5074] newfstatat(AT_FDCWD, "./130/binderfs", [pid 5889] setpgid(0, 0 [pid 5888] <... memfd_create resumed>) = 3 [pid 5887] ftruncate(5, 0 [pid 5077] <... mkdir resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5889] <... setpgid resumed>) = 0 [pid 5888] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5889] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5888] <... mmap resumed>) = 0x7f0356e00000 [pid 5888] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5889] <... openat resumed>) = 3 [pid 5889] write(3, "1000", 4 [pid 5886] ftruncate(5, 0 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] unlink("./130/binderfs" [pid 5889] <... write resumed>) = 4 [pid 5886] <... ftruncate resumed>) = 0 [pid 5887] <... ftruncate resumed>) = 0 [pid 5889] close(3 [pid 5074] <... unlink resumed>) = 0 [pid 5889] <... close resumed>) = 0 [pid 5887] exit_group(0 [pid 5077] <... openat resumed>) = 3 [pid 5889] symlink("/dev/binderfs", "./binderfs" [pid 5886] exit_group(0 [pid 5887] <... exit_group resumed>) = ? [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5074] getdents64(3, [pid 5889] <... symlink resumed>) = 0 [pid 5886] <... exit_group resumed>) = ? [pid 5887] +++ exited with 0 +++ [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5887, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5886] +++ exited with 0 +++ [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3 [pid 5889] memfd_create("syzkaller", 0 [pid 5074] <... close resumed>) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5886, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5073] umount2("./131", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5889] <... memfd_create resumed>) = 3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./131", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", [pid 5889] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5889] <... mmap resumed>) = 0x7f0356e00000 [pid 5074] rmdir("./130" [pid 5889] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] getdents64(3, [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] mkdir("./131", 0777 [pid 5073] umount2("./131/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./133", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] <... mkdir resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./133", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5078] <... openat resumed>) = 3 [pid 5078] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5078] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5888] <... write resumed>) = 524288 [pid 5078] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5889] <... write resumed>) = 524288 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] <... umount2 resumed>) = 0 [pid 5888] munmap(0x7f0356e00000, 138412032) = 0 [pid 5888] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5888] ioctl(4, LOOP_SET_FD, 3 [pid 5078] <... umount2 resumed>) = 0 [pid 5077] <... ioctl resumed>) = 0 [pid 5073] umount2("./131/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] newfstatat(AT_FDCWD, "./133/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] newfstatat(AT_FDCWD, "./131/bus", [pid 5078] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] openat(AT_FDCWD, "./133/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] umount2("./131/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] newfstatat(4, "", [pid 5889] munmap(0x7f0356e00000, 138412032 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5889] <... munmap resumed>) = 0 [pid 5078] getdents64(4, [pid 5077] close(3 [pid 5073] openat(AT_FDCWD, "./131/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] <... close resumed>) = 0 [pid 5078] getdents64(4, [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... openat resumed>) = 4 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5889] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5078] close(4 [pid 5889] ioctl(4, LOOP_SET_FD, 3 [pid 5078] <... close resumed>) = 0 ./strace-static-x86_64: Process 5890 attached [pid 5073] newfstatat(4, "", [pid 5078] rmdir("./133/bus" [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 5890 [pid 5890] set_robust_list(0x55556e32a660, 24 [pid 5078] <... rmdir resumed>) = 0 [pid 5890] <... set_robust_list resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5890] chdir("./133" [pid 5078] umount2("./133/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] getdents64(4, [pid 5890] <... chdir resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5890] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5078] newfstatat(AT_FDCWD, "./133/binderfs", [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5890] <... prctl resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5890] setpgid(0, 0 [pid 5078] unlink("./133/binderfs" [pid 5073] getdents64(4, [pid 5888] <... ioctl resumed>) = 0 [pid 5890] <... setpgid resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5888] close(3 [pid 5890] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5078] getdents64(3, [pid 5073] close(4 [pid 5890] <... openat resumed>) = 3 [pid 5888] <... close resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] <... close resumed>) = 0 [pid 5890] write(3, "1000", 4 [pid 5888] close(4 [pid 5078] close(3 [pid 5073] rmdir("./131/bus" [pid 5890] <... write resumed>) = 4 [pid 5888] <... close resumed>) = 0 [pid 5890] close(3 [pid 5888] mkdir("./bus", 0777 [pid 5073] <... rmdir resumed>) = 0 [pid 5890] <... close resumed>) = 0 [pid 5888] <... mkdir resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5073] umount2("./131/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5890] symlink("/dev/binderfs", "./binderfs" [pid 5888] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5889] <... ioctl resumed>) = 0 [pid 5889] close(3) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5890] <... symlink resumed>) = 0 [pid 5889] close(4 [pid 5073] newfstatat(AT_FDCWD, "./131/binderfs", [pid 5890] memfd_create("syzkaller", 0 [pid 5889] <... close resumed>) = 0 [pid 5890] <... memfd_create resumed>) = 3 [pid 5889] mkdir("./bus", 0777 [pid 5078] rmdir("./133" [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5889] <... mkdir resumed>) = 0 [pid 5888] <... mount resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5890] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] close(3 [pid 5073] unlink("./131/binderfs" [pid 5888] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5890] <... mmap resumed>) = 0x7f0356e00000 [pid 5889] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5888] <... openat resumed>) = 3 [pid 5074] <... close resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5888] chdir("./bus" [pid 5073] getdents64(3, [pid 5888] <... chdir resumed>) = 0 [pid 5888] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5888] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] close(3 [pid 5889] <... mount resumed>) = 0 [pid 5888] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [ 156.911333][ T5888] loop3: detected capacity change from 0 to 1024 [ 156.925735][ T5889] loop2: detected capacity change from 0 to 1024 [pid 5078] mkdir("./134", 0777 [pid 5889] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5888] <... symlink resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5889] <... openat resumed>) = 3 [pid 5889] chdir("./bus" [pid 5073] rmdir("./131"./strace-static-x86_64: Process 5891 attached [pid 5889] <... chdir resumed>) = 0 [pid 5888] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] <... mkdir resumed>) = 0 [pid 5891] set_robust_list(0x55556e32a660, 24 [pid 5889] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5890] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... rmdir resumed>) = 0 [pid 5891] <... set_robust_list resumed>) = 0 [pid 5889] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... openat resumed>) = 3 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 5891 [pid 5073] mkdir("./132", 0777 [pid 5891] chdir("./131") = 0 [pid 5889] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5073] <... mkdir resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5891] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5888] <... creat resumed>) = 4 [pid 5891] <... prctl resumed>) = 0 [pid 5888] rename("./bus", "./file2" [pid 5073] <... openat resumed>) = 3 [pid 5891] setpgid(0, 0 [pid 5889] <... symlink resumed>) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5891] <... setpgid resumed>) = 0 [pid 5889] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5888] <... rename resumed>) = -1 EEXIST (File exists) [pid 5888] memfd_create("syzkaller", 0) = 5 [pid 5888] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5888] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5891] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5889] <... creat resumed>) = 4 [pid 5889] rename("./bus", "./file2") = -1 EEXIST (File exists) [pid 5890] <... write resumed>) = 524288 [pid 5889] memfd_create("syzkaller", 0) = 5 [pid 5889] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5891] <... openat resumed>) = 3 [pid 5888] <... write resumed>) = 524288 [pid 5891] write(3, "1000", 4 [pid 5890] munmap(0x7f0356e00000, 138412032 [pid 5891] <... write resumed>) = 4 [pid 5891] close(3 [pid 5890] <... munmap resumed>) = 0 [pid 5889] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5890] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5891] <... close resumed>) = 0 [pid 5891] symlink("/dev/binderfs", "./binderfs" [pid 5890] <... openat resumed>) = 4 [pid 5891] <... symlink resumed>) = 0 [pid 5890] ioctl(4, LOOP_SET_FD, 3 [pid 5891] memfd_create("syzkaller", 0 [pid 5888] munmap(0x7f0356e00000, 138412032) = 0 [pid 5888] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5888] close(5 [pid 5891] <... memfd_create resumed>) = 3 [pid 5891] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5891] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5888] <... close resumed>) = 0 [pid 5890] <... ioctl resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 5889] munmap(0x7f0356e00000, 138412032) = 0 [pid 5889] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5889] close(5) = 0 [pid 5888] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5890] close(3 [pid 5073] close(3 [pid 5890] <... close resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5890] close(4 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5891] <... write resumed>) = 524288 [pid 5890] <... close resumed>) = 0 [pid 5890] mkdir("./bus", 0777 [pid 5888] <... open resumed>) = 5 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 5892 ./strace-static-x86_64: Process 5892 attached [pid 5890] <... mkdir resumed>) = 0 [pid 5892] set_robust_list(0x55556e32a660, 24) = 0 [pid 5890] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5888] ftruncate(5, 0) = 0 [pid 5892] chdir("./132" [pid 5888] exit_group(0 [pid 5892] <... chdir resumed>) = 0 [pid 5078] <... ioctl resumed>) = 0 [pid 5892] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 157.024589][ T5890] loop4: detected capacity change from 0 to 1024 [pid 5889] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5888] <... exit_group resumed>) = ? [pid 5892] setpgid(0, 0 [pid 5891] munmap(0x7f0356e00000, 138412032 [pid 5888] +++ exited with 0 +++ [pid 5892] <... setpgid resumed>) = 0 [pid 5891] <... munmap resumed>) = 0 [pid 5889] <... open resumed>) = 5 [pid 5078] close(3 [pid 5890] <... mount resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5888, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5891] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5890] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5889] ftruncate(5, 0 [pid 5078] <... close resumed>) = 0 [pid 5892] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5891] <... openat resumed>) = 4 [pid 5890] chdir("./bus" [pid 5889] <... ftruncate resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5893 attached [pid 5892] <... openat resumed>) = 3 [pid 5891] ioctl(4, LOOP_SET_FD, 3 [pid 5890] <... chdir resumed>) = 0 [pid 5076] umount2("./134", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5889] exit_group(0 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 5893 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./134", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5893] set_robust_list(0x55556e32a660, 24 [pid 5892] write(3, "1000", 4 [pid 5890] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5889] <... exit_group resumed>) = ? [pid 5076] <... openat resumed>) = 3 [pid 5893] <... set_robust_list resumed>) = 0 [pid 5892] <... write resumed>) = 4 [pid 5890] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5889] +++ exited with 0 +++ [pid 5076] newfstatat(3, "", [pid 5893] chdir("./134" [pid 5892] close(3 [pid 5890] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5889, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5892] <... close resumed>) = 0 [pid 5891] <... ioctl resumed>) = 0 [pid 5890] <... symlink resumed>) = 0 [pid 5076] getdents64(3, [pid 5893] <... chdir resumed>) = 0 [pid 5892] symlink("/dev/binderfs", "./binderfs" [pid 5891] close(3 [pid 5890] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5893] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5892] <... symlink resumed>) = 0 [pid 5891] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5893] setpgid(0, 0 [pid 5891] close(4 [pid 5890] <... creat resumed>) = 4 [pid 5076] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5893] <... setpgid resumed>) = 0 [pid 5892] memfd_create("syzkaller", 0 [pid 5891] <... close resumed>) = 0 [pid 5890] rename("./bus", "./file2" [pid 5075] umount2("./131", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5893] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5892] <... memfd_create resumed>) = 3 [pid 5891] mkdir("./bus", 0777 [pid 5890] <... rename resumed>) = -1 EEXIST (File exists) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5893] <... openat resumed>) = 3 [pid 5891] <... mkdir resumed>) = 0 [pid 5890] memfd_create("syzkaller", 0 [pid 5075] openat(AT_FDCWD, "./131", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5893] write(3, "1000", 4 [pid 5892] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5891] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5890] <... memfd_create resumed>) = 5 [pid 5076] <... umount2 resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5893] <... write resumed>) = 4 [pid 5890] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] newfstatat(3, "", [pid 5893] close(3 [pid 5892] <... mmap resumed>) = 0x7f0356e00000 [pid 5890] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5893] <... close resumed>) = 0 [pid 5890] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(3, [pid 5893] symlink("/dev/binderfs", "./binderfs" [pid 5076] newfstatat(AT_FDCWD, "./134/bus", [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [ 157.106278][ T5891] loop1: detected capacity change from 0 to 1024 [pid 5075] umount2("./131/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5893] <... symlink resumed>) = 0 [pid 5892] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5893] memfd_create("syzkaller", 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = 0 [pid 5893] <... memfd_create resumed>) = 3 [pid 5893] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5076] openat(AT_FDCWD, "./134/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5075] umount2("./131/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5891] <... mount resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./131/bus", [pid 5893] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5891] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5891] <... openat resumed>) = 3 [pid 5891] chdir("./bus" [pid 5076] getdents64(4, [pid 5891] <... chdir resumed>) = 0 [pid 5891] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5891] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] getdents64(4, [pid 5075] umount2("./131/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5891] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] close(4) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] rmdir("./134/bus" [pid 5075] openat(AT_FDCWD, "./131/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] newfstatat(4, "", [pid 5890] <... write resumed>) = 524288 [pid 5076] umount2("./134/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5892] <... write resumed>) = 524288 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(4, [pid 5891] <... symlink resumed>) = 0 [pid 5893] <... write resumed>) = 524288 [pid 5892] munmap(0x7f0356e00000, 138412032 [pid 5890] munmap(0x7f0356e00000, 138412032 [pid 5076] newfstatat(AT_FDCWD, "./134/binderfs", [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] close(4) = 0 [pid 5075] rmdir("./131/bus" [pid 5893] munmap(0x7f0356e00000, 138412032 [pid 5892] <... munmap resumed>) = 0 [pid 5891] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5890] <... munmap resumed>) = 0 [pid 5076] unlink("./134/binderfs" [pid 5075] umount2("./131/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5893] <... munmap resumed>) = 0 [pid 5891] <... creat resumed>) = 4 [pid 5076] <... unlink resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5893] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5892] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5891] rename("./bus", "./file2" [pid 5890] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] getdents64(3, [pid 5075] newfstatat(AT_FDCWD, "./131/binderfs", [pid 5893] <... openat resumed>) = 4 [pid 5892] <... openat resumed>) = 4 [pid 5891] <... rename resumed>) = -1 EEXIST (File exists) [pid 5890] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5892] ioctl(4, LOOP_SET_FD, 3 [pid 5891] memfd_create("syzkaller", 0 [pid 5076] close(3 [pid 5075] unlink("./131/binderfs" [pid 5893] ioctl(4, LOOP_SET_FD, 3 [pid 5891] <... memfd_create resumed>) = 5 [pid 5890] close(5 [pid 5076] <... close resumed>) = 0 [pid 5891] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] rmdir("./134" [pid 5075] <... unlink resumed>) = 0 [pid 5891] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] <... rmdir resumed>) = 0 [pid 5076] mkdir("./135", 0777 [pid 5891] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... mkdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] getdents64(3, [pid 5893] <... ioctl resumed>) = 0 [pid 5890] <... close resumed>) = 0 [pid 5893] close(3 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5893] <... close resumed>) = 0 [pid 5890] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5075] close(3 [pid 5893] close(4 [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./131" [pid 5893] <... close resumed>) = 0 [pid 5893] mkdir("./bus", 0777 [pid 5075] <... rmdir resumed>) = 0 [pid 5893] <... mkdir resumed>) = 0 [pid 5075] mkdir("./132", 0777 [pid 5893] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5892] <... ioctl resumed>) = 0 [pid 5891] <... write resumed>) = 524288 [pid 5890] <... open resumed>) = 5 [pid 5075] <... mkdir resumed>) = 0 [pid 5892] close(3 [pid 5891] munmap(0x7f0356e00000, 138412032 [pid 5890] ftruncate(5, 0 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5892] <... close resumed>) = 0 [pid 5891] <... munmap resumed>) = 0 [pid 5890] <... ftruncate resumed>) = 0 [pid 5892] close(4 [pid 5075] <... openat resumed>) = 3 [pid 5890] exit_group(0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5892] <... close resumed>) = 0 [pid 5890] <... exit_group resumed>) = ? [pid 5892] mkdir("./bus", 0777 [pid 5891] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5890] +++ exited with 0 +++ [pid 5893] <... mount resumed>) = 0 [pid 5892] <... mkdir resumed>) = 0 [ 157.219333][ T5893] loop5: detected capacity change from 0 to 1024 [ 157.226565][ T5892] loop0: detected capacity change from 0 to 1024 [pid 5891] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5890, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5076] <... ioctl resumed>) = 0 [pid 5893] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5892] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5077] umount2("./133", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./133", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5077] newfstatat(3, "", [pid 5893] <... openat resumed>) = 3 [pid 5891] close(5 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5893] chdir("./bus") = 0 [pid 5077] getdents64(3, [pid 5076] close(3 [pid 5893] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] <... close resumed>) = 0 [pid 5893] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5077] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5891] <... close resumed>) = 0 [pid 5891] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5075] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 5894 attached [pid 5893] <... symlink resumed>) = 0 [pid 5892] <... mount resumed>) = 0 [pid 5891] <... open resumed>) = 5 [pid 5077] <... umount2 resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 5894 [pid 5894] set_robust_list(0x55556e32a660, 24 [pid 5892] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5891] ftruncate(5, 0 [pid 5892] <... openat resumed>) = 3 [pid 5892] chdir("./bus" [pid 5891] <... ftruncate resumed>) = 0 [pid 5894] <... set_robust_list resumed>) = 0 [pid 5892] <... chdir resumed>) = 0 [pid 5894] chdir("./135" [pid 5892] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5891] exit_group(0 [pid 5892] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5891] <... exit_group resumed>) = ? [pid 5893] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5892] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5891] +++ exited with 0 +++ [pid 5077] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] close(3 [pid 5894] <... chdir resumed>) = 0 [pid 5893] <... creat resumed>) = 4 [pid 5892] <... symlink resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... close resumed>) = 0 [pid 5893] rename("./bus", "./file2" [pid 5077] newfstatat(AT_FDCWD, "./133/bus", [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5891, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5074] umount2("./131", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./131", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] newfstatat(3, "", [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 5895 attached [pid 5894] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5892] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5074] getdents64(3, [pid 5894] <... prctl resumed>) = 0 [pid 5893] <... rename resumed>) = -1 EEXIST (File exists) [pid 5077] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 5895 [pid 5893] memfd_create("syzkaller", 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5895] set_robust_list(0x55556e32a660, 24 [pid 5894] setpgid(0, 0 [pid 5893] <... memfd_create resumed>) = 5 [pid 5077] openat(AT_FDCWD, "./133/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5895] <... set_robust_list resumed>) = 0 [pid 5894] <... setpgid resumed>) = 0 [pid 5893] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5892] <... creat resumed>) = 4 [pid 5077] <... openat resumed>) = 4 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5895] chdir("./132" [pid 5894] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5893] <... mmap resumed>) = 0x7f0356e00000 [pid 5892] rename("./bus", "./file2" [pid 5077] newfstatat(4, "", [pid 5895] <... chdir resumed>) = 0 [pid 5894] <... openat resumed>) = 3 [pid 5892] <... rename resumed>) = -1 EEXIST (File exists) [pid 5074] umount2("./131/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5895] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5894] write(3, "1000", 4 [pid 5892] memfd_create("syzkaller", 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5895] <... prctl resumed>) = 0 [pid 5894] <... write resumed>) = 4 [pid 5892] <... memfd_create resumed>) = 5 [pid 5895] setpgid(0, 0 [pid 5894] close(3 [pid 5892] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] getdents64(4, [pid 5895] <... setpgid resumed>) = 0 [pid 5894] <... close resumed>) = 0 [pid 5892] <... mmap resumed>) = 0x7f0356e00000 [pid 5895] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5894] symlink("/dev/binderfs", "./binderfs" [pid 5893] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] <... umount2 resumed>) = 0 [pid 5895] <... openat resumed>) = 3 [pid 5894] <... symlink resumed>) = 0 [pid 5892] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] umount2("./131/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5895] write(3, "1000", 4) = 4 [pid 5894] memfd_create("syzkaller", 0 [pid 5077] getdents64(4, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5895] close(3 [pid 5894] <... memfd_create resumed>) = 3 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] newfstatat(AT_FDCWD, "./131/bus", [pid 5895] <... close resumed>) = 0 [pid 5894] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] close(4 [pid 5895] symlink("/dev/binderfs", "./binderfs" [pid 5077] <... close resumed>) = 0 [pid 5894] <... mmap resumed>) = 0x7f0356e00000 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] rmdir("./133/bus" [pid 5895] <... symlink resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5074] umount2("./131/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5895] memfd_create("syzkaller", 0 [pid 5077] umount2("./133/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5893] <... write resumed>) = 524288 [pid 5077] newfstatat(AT_FDCWD, "./133/binderfs", [pid 5074] openat(AT_FDCWD, "./131/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5895] <... memfd_create resumed>) = 3 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5895] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... openat resumed>) = 4 [pid 5895] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] unlink("./133/binderfs") = 0 [pid 5894] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5893] munmap(0x7f0356e00000, 138412032 [pid 5077] getdents64(3, [pid 5893] <... munmap resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] close(3) = 0 [pid 5893] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] rmdir("./133" [pid 5893] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5895] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5892] <... write resumed>) = 524288 [pid 5077] <... rmdir resumed>) = 0 [pid 5074] newfstatat(4, "", [pid 5893] close(5) = 0 [pid 5077] mkdir("./134", 0777) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5895] <... write resumed>) = 524288 [pid 5893] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5895] munmap(0x7f0356e00000, 138412032 [pid 5894] <... write resumed>) = 524288 [pid 5892] munmap(0x7f0356e00000, 138412032 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5895] <... munmap resumed>) = 0 [pid 5074] getdents64(4, [pid 5895] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5895] <... openat resumed>) = 4 [pid 5894] munmap(0x7f0356e00000, 138412032 [pid 5074] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5895] ioctl(4, LOOP_SET_FD, 3 [pid 5074] close(4 [pid 5894] <... munmap resumed>) = 0 [pid 5893] <... open resumed>) = 5 [pid 5892] <... munmap resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5893] ftruncate(5, 0 [pid 5895] <... ioctl resumed>) = 0 [pid 5894] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5893] <... ftruncate resumed>) = 0 [pid 5892] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] rmdir("./131/bus" [pid 5895] close(3 [pid 5894] <... openat resumed>) = 4 [pid 5893] exit_group(0 [pid 5074] <... rmdir resumed>) = 0 [pid 5895] <... close resumed>) = 0 [pid 5894] ioctl(4, LOOP_SET_FD, 3 [pid 5893] <... exit_group resumed>) = ? [pid 5892] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] umount2("./131/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5895] close(4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5895] <... close resumed>) = 0 [pid 5892] close(5 [pid 5074] newfstatat(AT_FDCWD, "./131/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./131/binderfs" [pid 5895] mkdir("./bus", 0777 [pid 5892] <... close resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5895] <... mkdir resumed>) = 0 [pid 5894] <... ioctl resumed>) = 0 [pid 5893] +++ exited with 0 +++ [pid 5077] <... ioctl resumed>) = 0 [pid 5894] close(3) = 0 [pid 5894] close(4) = 0 [pid 5894] mkdir("./bus", 0777) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5893, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5894] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5078] umount2("./134", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5895] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5892] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] getdents64(3, [pid 5078] openat(AT_FDCWD, "./134", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5894] <... mount resumed>) = 0 [pid 5078] newfstatat(3, "", [pid 5074] close(3 [pid 5894] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] close(3 [pid 5894] <... openat resumed>) = 3 [pid 5078] getdents64(3, [pid 5077] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5894] chdir("./bus" [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] rmdir("./131" [pid 5894] <... chdir resumed>) = 0 [pid 5892] <... open resumed>) = 5 [pid 5078] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... rmdir resumed>) = 0 [pid 5894] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5074] mkdir("./132", 0777 [pid 5894] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5892] ftruncate(5, 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5892] <... ftruncate resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5895] <... mount resumed>) = 0 [pid 5894] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5892] exit_group(0 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 5896 [pid 5074] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5896 attached [pid 5896] set_robust_list(0x55556e32a660, 24 [pid 5895] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5892] <... exit_group resumed>) = ? [ 157.437295][ T5895] loop2: detected capacity change from 0 to 1024 [ 157.446855][ T5894] loop3: detected capacity change from 0 to 1024 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5896] <... set_robust_list resumed>) = 0 [pid 5895] <... openat resumed>) = 3 [pid 5894] <... symlink resumed>) = 0 [pid 5892] +++ exited with 0 +++ [pid 5895] chdir("./bus" [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5892, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5895] <... chdir resumed>) = 0 [pid 5896] chdir("./134" [pid 5895] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5894] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5896] <... chdir resumed>) = 0 [pid 5896] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5895] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... umount2 resumed>) = 0 [pid 5895] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5896] setpgid(0, 0 [pid 5078] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5896] <... setpgid resumed>) = 0 [pid 5894] <... creat resumed>) = 4 [pid 5078] newfstatat(AT_FDCWD, "./134/bus", [pid 5073] umount2("./132", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5895] <... symlink resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5895] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5896] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5894] rename("./bus", "./file2" [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5894] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./132", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5894] memfd_create("syzkaller", 0 [pid 5078] openat(AT_FDCWD, "./134/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5896] <... openat resumed>) = 3 [pid 5895] <... creat resumed>) = 4 [pid 5894] <... memfd_create resumed>) = 5 [pid 5078] <... openat resumed>) = 4 [pid 5073] <... openat resumed>) = 3 [pid 5896] write(3, "1000", 4 [pid 5894] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] newfstatat(4, "", [pid 5073] newfstatat(3, "", [pid 5896] <... write resumed>) = 4 [pid 5895] rename("./bus", "./file2" [pid 5894] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5896] close(3 [pid 5078] getdents64(4, [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5896] <... close resumed>) = 0 [pid 5895] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(3, [pid 5895] memfd_create("syzkaller", 0 [pid 5896] symlink("/dev/binderfs", "./binderfs" [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5895] <... memfd_create resumed>) = 5 [pid 5073] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5896] <... symlink resumed>) = 0 [pid 5895] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] getdents64(4, [pid 5895] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5896] memfd_create("syzkaller", 0 [pid 5894] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] close(4 [pid 5896] <... memfd_create resumed>) = 3 [pid 5896] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... close resumed>) = 0 [pid 5895] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5896] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] rmdir("./134/bus" [pid 5896] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... rmdir resumed>) = 0 [pid 5894] <... write resumed>) = 524288 [pid 5078] umount2("./134/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] newfstatat(AT_FDCWD, "./134/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5078] unlink("./134/binderfs") = 0 [pid 5078] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5078] close(3) = 0 [pid 5078] rmdir("./134") = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5896] <... write resumed>) = 524288 [pid 5073] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5895] <... write resumed>) = 524288 [pid 5894] munmap(0x7f0356e00000, 138412032 [pid 5078] mkdir("./135", 0777 [pid 5074] close(3 [pid 5894] <... munmap resumed>) = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5894] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5078] <... openat resumed>) = 3 [pid 5073] newfstatat(AT_FDCWD, "./132/bus", [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5895] munmap(0x7f0356e00000, 138412032 [pid 5073] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5896] munmap(0x7f0356e00000, 138412032 [pid 5895] <... munmap resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5897 attached [pid 5896] <... munmap resumed>) = 0 [pid 5894] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] openat(AT_FDCWD, "./132/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5897] set_robust_list(0x55556e32a660, 24 [pid 5894] close(5 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 5897 [pid 5073] <... openat resumed>) = 4 [pid 5895] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5073] newfstatat(4, "", [pid 5896] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5895] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5896] <... openat resumed>) = 4 [pid 5895] close(5 [pid 5073] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5897] <... set_robust_list resumed>) = 0 [pid 5073] getdents64(4, [pid 5896] ioctl(4, LOOP_SET_FD, 3 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5897] chdir("./132" [pid 5894] <... close resumed>) = 0 [pid 5897] <... chdir resumed>) = 0 [pid 5896] <... ioctl resumed>) = 0 [pid 5894] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5073] close(4 [pid 5897] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5896] close(3 [pid 5073] <... close resumed>) = 0 [pid 5897] <... prctl resumed>) = 0 [pid 5896] <... close resumed>) = 0 [pid 5895] <... close resumed>) = 0 [pid 5073] rmdir("./132/bus" [pid 5897] setpgid(0, 0 [pid 5896] close(4 [pid 5895] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5073] <... rmdir resumed>) = 0 [pid 5897] <... setpgid resumed>) = 0 [pid 5896] <... close resumed>) = 0 [pid 5894] <... open resumed>) = 5 [pid 5073] umount2("./132/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5897] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5896] mkdir("./bus", 0777 [pid 5894] ftruncate(5, 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5896] <... mkdir resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./132/binderfs", [pid 5897] <... openat resumed>) = 3 [pid 5896] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5894] <... ftruncate resumed>) = 0 [pid 5895] <... open resumed>) = 5 [pid 5894] exit_group(0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5897] write(3, "1000", 4 [pid 5895] ftruncate(5, 0 [pid 5894] <... exit_group resumed>) = ? [pid 5073] unlink("./132/binderfs" [pid 5897] <... write resumed>) = 4 [pid 5895] <... ftruncate resumed>) = 0 [pid 5897] close(3) = 0 [pid 5897] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5895] exit_group(0 [pid 5073] <... unlink resumed>) = 0 [pid 5895] <... exit_group resumed>) = ? [pid 5895] +++ exited with 0 +++ [pid 5897] memfd_create("syzkaller", 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5895, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5897] <... memfd_create resumed>) = 3 [pid 5897] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5075] umount2("./132", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] getdents64(3, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5897] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5894] +++ exited with 0 +++ [pid 5078] <... ioctl resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./132", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5894, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] <... openat resumed>) = 3 [pid 5073] close(3 [pid 5075] newfstatat(3, "", [pid 5076] umount2("./135", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... close resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] rmdir("./132" [pid 5076] openat(AT_FDCWD, "./135", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] getdents64(3, [pid 5076] <... openat resumed>) = 3 [pid 5076] newfstatat(3, "", [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... rmdir resumed>) = 0 [pid 5078] close(3 [pid 5076] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5896] <... mount resumed>) = 0 [pid 5076] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5896] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5896] chdir("./bus") = 0 [ 157.599188][ T5896] loop4: detected capacity change from 0 to 1024 [pid 5896] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5897] <... write resumed>) = 524288 [pid 5896] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... close resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] mkdir("./133", 0777 [pid 5896] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5897] munmap(0x7f0356e00000, 138412032./strace-static-x86_64: Process 5898 attached ) = 0 [pid 5896] <... symlink resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 5898] set_robust_list(0x55556e32a660, 24) = 0 [pid 5898] chdir("./135" [pid 5896] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5075] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 5898 [pid 5076] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... openat resumed>) = 3 [pid 5076] newfstatat(AT_FDCWD, "./135/bus", [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5898] <... chdir resumed>) = 0 [pid 5897] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] newfstatat(AT_FDCWD, "./132/bus", [pid 5898] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5897] <... openat resumed>) = 4 [pid 5076] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5897] ioctl(4, LOOP_SET_FD, 3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5898] <... prctl resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./135/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5898] setpgid(0, 0 [pid 5896] <... creat resumed>) = 4 [pid 5076] <... openat resumed>) = 4 [pid 5075] openat(AT_FDCWD, "./132/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] newfstatat(4, "", [pid 5898] <... setpgid resumed>) = 0 [pid 5896] rename("./bus", "./file2" [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... openat resumed>) = 4 [pid 5898] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] getdents64(4, [pid 5075] newfstatat(4, "", [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, [pid 5075] getdents64(4, [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5898] <... openat resumed>) = 3 [pid 5896] <... rename resumed>) = -1 EEXIST (File exists) [pid 5076] close(4 [pid 5898] write(3, "1000", 4 [pid 5896] memfd_create("syzkaller", 0 [pid 5075] getdents64(4, [pid 5076] <... close resumed>) = 0 [pid 5076] rmdir("./135/bus" [pid 5898] <... write resumed>) = 4 [pid 5896] <... memfd_create resumed>) = 5 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5898] close(3) = 0 [pid 5896] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] close(4 [pid 5898] symlink("/dev/binderfs", "./binderfs" [pid 5896] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5898] <... symlink resumed>) = 0 [pid 5896] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] umount2("./135/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] rmdir("./132/bus" [pid 5898] memfd_create("syzkaller", 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5898] <... memfd_create resumed>) = 3 [pid 5897] <... ioctl resumed>) = 0 [pid 5075] umount2("./132/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5898] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5897] close(3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5898] <... mmap resumed>) = 0x7f0356e00000 [pid 5897] <... close resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./135/binderfs", [pid 5075] newfstatat(AT_FDCWD, "./132/binderfs", [pid 5898] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5897] close(4 [pid 5896] <... write resumed>) = 524288 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./135/binderfs" [pid 5897] <... close resumed>) = 0 [pid 5897] mkdir("./bus", 0777 [pid 5075] unlink("./132/binderfs" [pid 5897] <... mkdir resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5897] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5075] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 5075] rmdir("./132" [pid 5897] <... mount resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 5897] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5897] chdir("./bus") = 0 [pid 5075] mkdir("./133", 0777 [pid 5897] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] getdents64(3, [pid 5073] close(3 [pid 5897] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 157.684236][ T5897] loop1: detected capacity change from 0 to 1024 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5897] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5896] munmap(0x7f0356e00000, 138412032 [pid 5076] close(3 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5896] <... munmap resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5076] rmdir("./135" [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 5899 [pid 5897] <... symlink resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5076] mkdir("./136", 0777./strace-static-x86_64: Process 5899 attached [pid 5896] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5899] set_robust_list(0x55556e32a660, 24 [pid 5896] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... mkdir resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5899] <... set_robust_list resumed>) = 0 [pid 5897] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5896] close(5 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5899] chdir("./133" [pid 5898] <... write resumed>) = 524288 [pid 5897] <... creat resumed>) = 4 [pid 5896] <... close resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5899] <... chdir resumed>) = 0 [pid 5899] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5898] munmap(0x7f0356e00000, 138412032 [pid 5897] rename("./bus", "./file2" [pid 5896] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5899] <... prctl resumed>) = 0 [pid 5898] <... munmap resumed>) = 0 [pid 5897] <... rename resumed>) = -1 EEXIST (File exists) [pid 5899] setpgid(0, 0 [pid 5898] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5897] memfd_create("syzkaller", 0 [pid 5899] <... setpgid resumed>) = 0 [pid 5898] <... openat resumed>) = 4 [pid 5897] <... memfd_create resumed>) = 5 [pid 5897] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5897] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5899] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5898] ioctl(4, LOOP_SET_FD, 3 [pid 5899] <... openat resumed>) = 3 [pid 5896] <... open resumed>) = 5 [pid 5896] ftruncate(5, 0) = 0 [pid 5896] exit_group(0) = ? [pid 5898] <... ioctl resumed>) = 0 [pid 5899] write(3, "1000", 4 [pid 5896] +++ exited with 0 +++ [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5896, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5899] <... write resumed>) = 4 [pid 5899] close(3) = 0 [pid 5899] symlink("/dev/binderfs", "./binderfs" [pid 5077] umount2("./134", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5899] <... symlink resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./134", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5899] memfd_create("syzkaller", 0 [pid 5898] close(3 [pid 5077] <... openat resumed>) = 3 [pid 5899] <... memfd_create resumed>) = 3 [pid 5898] <... close resumed>) = 0 [pid 5077] newfstatat(3, "", [pid 5075] <... ioctl resumed>) = 0 [pid 5899] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5898] close(4 [pid 5897] <... write resumed>) = 524288 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] close(3 [pid 5899] <... mmap resumed>) = 0x7f0356e00000 [pid 5898] <... close resumed>) = 0 [pid 5077] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5897] munmap(0x7f0356e00000, 138412032 [pid 5899] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5898] mkdir("./bus", 0777 [pid 5075] <... close resumed>) = 0 [pid 5897] <... munmap resumed>) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5898] <... mkdir resumed>) = 0 [pid 5897] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5898] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5897] <... openat resumed>) = -1 EBUSY (Device or resource busy) ./strace-static-x86_64: Process 5900 attached [pid 5897] close(5 [ 157.788088][ T5898] loop5: detected capacity change from 0 to 1024 [pid 5077] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5900] set_robust_list(0x55556e32a660, 24 [pid 5077] newfstatat(AT_FDCWD, "./134/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5900] <... set_robust_list resumed>) = 0 [pid 5899] <... write resumed>) = 524288 [pid 5898] <... mount resumed>) = 0 [pid 5077] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] close(3 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 5900 [pid 5900] chdir("./133" [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5900] <... chdir resumed>) = 0 [pid 5898] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5077] openat(AT_FDCWD, "./134/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... close resumed>) = 0 [pid 5900] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5898] <... openat resumed>) = 3 [pid 5077] <... openat resumed>) = 4 [pid 5900] <... prctl resumed>) = 0 [pid 5898] chdir("./bus" [pid 5077] newfstatat(4, "", [pid 5900] setpgid(0, 0 [pid 5898] <... chdir resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5898] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5897] <... close resumed>) = 0 [pid 5900] <... setpgid resumed>) = 0 [pid 5897] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] getdents64(4, [pid 5898] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 5901 attached [pid 5898] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5900] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5077] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5898] <... symlink resumed>) = 0 [pid 5077] close(4) = 0 [pid 5901] set_robust_list(0x55556e32a660, 24) = 0 [pid 5077] rmdir("./134/bus" [pid 5901] chdir("./136" [pid 5900] <... openat resumed>) = 3 [pid 5898] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5077] <... rmdir resumed>) = 0 [pid 5900] write(3, "1000", 4 [pid 5901] <... chdir resumed>) = 0 [pid 5900] <... write resumed>) = 4 [pid 5900] close(3 [pid 5897] <... open resumed>) = 5 [pid 5900] <... close resumed>) = 0 [pid 5900] symlink("/dev/binderfs", "./binderfs" [pid 5901] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5900] <... symlink resumed>) = 0 [pid 5897] ftruncate(5, 0 [pid 5077] umount2("./134/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5901] <... prctl resumed>) = 0 [pid 5899] munmap(0x7f0356e00000, 138412032 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 5901 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5899] <... munmap resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./134/binderfs", [pid 5901] setpgid(0, 0) = 0 [pid 5900] memfd_create("syzkaller", 0 [pid 5899] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5898] <... creat resumed>) = 4 [pid 5897] <... ftruncate resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] unlink("./134/binderfs" [pid 5899] <... openat resumed>) = 4 [pid 5901] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5898] rename("./bus", "./file2" [pid 5077] <... unlink resumed>) = 0 [pid 5901] <... openat resumed>) = 3 [pid 5900] <... memfd_create resumed>) = 3 [pid 5899] ioctl(4, LOOP_SET_FD, 3 [pid 5897] exit_group(0 [pid 5077] getdents64(3, [pid 5900] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5898] <... rename resumed>) = -1 EEXIST (File exists) [pid 5897] <... exit_group resumed>) = ? [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5897] +++ exited with 0 +++ [pid 5077] close(3 [pid 5900] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] <... close resumed>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5897, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5898] memfd_create("syzkaller", 0 [pid 5077] rmdir("./134" [pid 5901] write(3, "1000", 4 [pid 5898] <... memfd_create resumed>) = 5 [pid 5077] <... rmdir resumed>) = 0 [pid 5901] <... write resumed>) = 4 [pid 5898] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] mkdir("./135", 0777 [pid 5901] close(3 [pid 5898] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] <... mkdir resumed>) = 0 [pid 5074] umount2("./132", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5901] <... close resumed>) = 0 [pid 5900] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./132", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5898] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5901] symlink("/dev/binderfs", "./binderfs" [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5901] <... symlink resumed>) = 0 [pid 5899] <... ioctl resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5901] memfd_create("syzkaller", 0 [pid 5899] close(3 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5899] <... close resumed>) = 0 [pid 5901] <... memfd_create resumed>) = 3 [pid 5899] close(4 [pid 5074] <... umount2 resumed>) = 0 [pid 5901] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5899] <... close resumed>) = 0 [pid 5901] <... mmap resumed>) = 0x7f0356e00000 [pid 5899] mkdir("./bus", 0777) = 0 [pid 5899] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5074] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./132/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5901] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5900] <... write resumed>) = 524288 [pid 5074] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5898] <... write resumed>) = 524288 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5898] munmap(0x7f0356e00000, 138412032 [pid 5900] munmap(0x7f0356e00000, 138412032 [pid 5074] openat(AT_FDCWD, "./132/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5900] <... munmap resumed>) = 0 [pid 5898] <... munmap resumed>) = 0 [pid 5074] <... openat resumed>) = 4 [pid 5898] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] newfstatat(4, "", [pid 5898] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 157.895917][ T5899] loop0: detected capacity change from 0 to 1024 [pid 5074] getdents64(4, [pid 5898] close(5 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] close(4) = 0 [pid 5900] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] rmdir("./132/bus" [pid 5900] <... openat resumed>) = 4 [pid 5074] <... rmdir resumed>) = 0 [pid 5901] <... write resumed>) = 524288 [pid 5900] ioctl(4, LOOP_SET_FD, 3 [pid 5901] munmap(0x7f0356e00000, 138412032 [pid 5900] <... ioctl resumed>) = 0 [pid 5899] <... mount resumed>) = 0 [pid 5898] <... close resumed>) = 0 [pid 5077] <... ioctl resumed>) = 0 [pid 5074] umount2("./132/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5899] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5901] <... munmap resumed>) = 0 [pid 5900] close(3 [pid 5899] <... openat resumed>) = 3 [pid 5898] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5899] chdir("./bus" [pid 5900] <... close resumed>) = 0 [pid 5899] <... chdir resumed>) = 0 [ 157.957234][ T5900] loop2: detected capacity change from 0 to 1024 [pid 5074] newfstatat(AT_FDCWD, "./132/binderfs", [pid 5901] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5900] close(4 [pid 5899] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5898] <... open resumed>) = 5 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5901] <... openat resumed>) = 4 [pid 5900] <... close resumed>) = 0 [pid 5074] unlink("./132/binderfs" [pid 5899] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5899] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5077] close(3) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556e32a650) = 5902 [pid 5074] <... unlink resumed>) = 0 [pid 5898] ftruncate(5, 0 [pid 5074] getdents64(3, [pid 5900] mkdir("./bus", 0777./strace-static-x86_64: Process 5902 attached [pid 5901] ioctl(4, LOOP_SET_FD, 3 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5902] set_robust_list(0x55556e32a660, 24 [pid 5900] <... mkdir resumed>) = 0 [pid 5899] <... symlink resumed>) = 0 [pid 5898] <... ftruncate resumed>) = 0 [pid 5074] close(3 [pid 5899] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5074] <... close resumed>) = 0 [pid 5902] <... set_robust_list resumed>) = 0 [pid 5898] exit_group(0 [pid 5074] rmdir("./132") = 0 [pid 5902] chdir("./135" [pid 5900] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5898] <... exit_group resumed>) = ? [pid 5074] mkdir("./133", 0777) = 0 [pid 5898] +++ exited with 0 +++ [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5902] <... chdir resumed>) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5898, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5074] <... openat resumed>) = 3 [pid 5078] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5902] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5902] <... prctl resumed>) = 0 [pid 5078] umount2("./135", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./135", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5902] setpgid(0, 0 [pid 5078] <... openat resumed>) = 3 [pid 5902] <... setpgid resumed>) = 0 [pid 5900] <... mount resumed>) = 0 [pid 5902] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5900] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] newfstatat(3, "", [pid 5902] <... openat resumed>) = 3 [pid 5900] <... openat resumed>) = 3 [pid 5899] <... creat resumed>) = 4 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5901] <... ioctl resumed>) = 0 [pid 5902] write(3, "1000", 4 [pid 5900] chdir("./bus" [pid 5899] rename("./bus", "./file2" [pid 5078] getdents64(3, [pid 5902] <... write resumed>) = 4 [pid 5901] close(3 [pid 5900] <... chdir resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5902] close(3 [pid 5900] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5899] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5902] <... close resumed>) = 0 [pid 5900] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5899] memfd_create("syzkaller", 0 [pid 5902] symlink("/dev/binderfs", "./binderfs" [pid 5901] <... close resumed>) = 0 [pid 5900] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5899] <... memfd_create resumed>) = 5 [pid 5899] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5902] <... symlink resumed>) = 0 [pid 5899] <... mmap resumed>) = 0x7f0356e00000 [pid 5902] memfd_create("syzkaller", 0 [pid 5901] close(4 [pid 5900] <... symlink resumed>) = 0 [pid 5901] <... close resumed>) = 0 [pid 5900] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5901] mkdir("./bus", 0777) = 0 [pid 5902] <... memfd_create resumed>) = 3 [pid 5902] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5901] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5900] <... creat resumed>) = 4 [pid 5899] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5902] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... umount2 resumed>) = 0 [pid 5900] rename("./bus", "./file2" [pid 5899] <... write resumed>) = 524288 [pid 5074] <... ioctl resumed>) = 0 [ 158.004837][ T5901] loop3: detected capacity change from 0 to 1024 [pid 5078] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5900] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] newfstatat(AT_FDCWD, "./135/bus", [pid 5900] memfd_create("syzkaller", 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5900] <... memfd_create resumed>) = 5 [pid 5900] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5901] <... mount resumed>) = 0 [pid 5078] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5900] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./135/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5901] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5900] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... openat resumed>) = 4 [pid 5902] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5901] <... openat resumed>) = 3 [pid 5074] close(3) = 0 [pid 5901] chdir("./bus") = 0 [pid 5901] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5078] newfstatat(4, "", [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5901] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5901] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5900] <... write resumed>) = 524288 [pid 5078] getdents64(4, [pid 5901] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 5903 ./strace-static-x86_64: Process 5903 attached [pid 5902] <... write resumed>) = 524288 [pid 5899] munmap(0x7f0356e00000, 138412032 [pid 5903] set_robust_list(0x55556e32a660, 24 [pid 5078] getdents64(4, [pid 5903] <... set_robust_list resumed>) = 0 [pid 5899] <... munmap resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5903] chdir("./133" [pid 5078] close(4 [pid 5899] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5078] <... close resumed>) = 0 [pid 5903] <... chdir resumed>) = 0 [pid 5899] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] rmdir("./135/bus" [pid 5903] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5899] close(5 [pid 5078] <... rmdir resumed>) = 0 [pid 5903] <... prctl resumed>) = 0 [pid 5901] <... creat resumed>) = 4 [pid 5900] munmap(0x7f0356e00000, 138412032 [pid 5899] <... close resumed>) = 0 [pid 5903] setpgid(0, 0 [pid 5078] umount2("./135/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5903] <... setpgid resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5903] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5078] newfstatat(AT_FDCWD, "./135/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] unlink("./135/binderfs") = 0 [pid 5903] <... openat resumed>) = 3 [pid 5902] munmap(0x7f0356e00000, 138412032 [pid 5901] rename("./bus", "./file2" [pid 5900] <... munmap resumed>) = 0 [pid 5078] getdents64(3, [pid 5903] write(3, "1000", 4 [pid 5902] <... munmap resumed>) = 0 [pid 5903] <... write resumed>) = 4 [pid 5902] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5903] close(3 [pid 5902] <... openat resumed>) = 4 [pid 5078] close(3 [pid 5903] <... close resumed>) = 0 [pid 5902] ioctl(4, LOOP_SET_FD, 3 [pid 5901] <... rename resumed>) = -1 EEXIST (File exists) [pid 5900] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] <... close resumed>) = 0 [pid 5903] symlink("/dev/binderfs", "./binderfs" [pid 5901] memfd_create("syzkaller", 0 [pid 5903] <... symlink resumed>) = 0 [pid 5901] <... memfd_create resumed>) = 5 [pid 5900] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5903] memfd_create("syzkaller", 0 [pid 5901] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5900] close(5 [pid 5899] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] rmdir("./135" [pid 5901] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... rmdir resumed>) = 0 [pid 5903] <... memfd_create resumed>) = 3 [pid 5078] mkdir("./136", 0777 [pid 5903] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... mkdir resumed>) = 0 [pid 5903] <... mmap resumed>) = 0x7f0356e00000 [pid 5903] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5901] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5899] <... open resumed>) = 5 [pid 5899] ftruncate(5, 0 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5899] <... ftruncate resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5900] <... close resumed>) = 0 [pid 5899] exit_group(0 [pid 5902] <... ioctl resumed>) = 0 [pid 5902] close(3) = 0 [pid 5902] close(4 [pid 5899] <... exit_group resumed>) = ? [pid 5902] <... close resumed>) = 0 [pid 5900] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5899] +++ exited with 0 +++ [pid 5902] mkdir("./bus", 0777 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5899, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5073] umount2("./133", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5903] <... write resumed>) = 524288 [pid 5902] <... mkdir resumed>) = 0 [pid 5900] <... open resumed>) = 5 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./133", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", [pid 5902] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5900] ftruncate(5, 0 [ 158.125645][ T5902] loop4: detected capacity change from 0 to 1024 [pid 5903] munmap(0x7f0356e00000, 138412032) = 0 [pid 5901] <... write resumed>) = 524288 [pid 5900] <... ftruncate resumed>) = 0 [pid 5903] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5900] exit_group(0 [pid 5073] <... umount2 resumed>) = 0 [pid 5903] <... openat resumed>) = 4 [pid 5901] munmap(0x7f0356e00000, 138412032 [pid 5900] <... exit_group resumed>) = ? [pid 5900] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5900, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 5901] <... munmap resumed>) = 0 [pid 5075] <... restart_syscall resumed>) = 0 [pid 5903] ioctl(4, LOOP_SET_FD, 3 [pid 5901] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] umount2("./133", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5901] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5901] close(5 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./133", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... openat resumed>) = 3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(3, "", [pid 5073] newfstatat(AT_FDCWD, "./133/bus", [pid 5078] <... ioctl resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5902] <... mount resumed>) = 0 [pid 5075] getdents64(3, [pid 5073] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5902] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5075] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] openat(AT_FDCWD, "./133/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5902] <... openat resumed>) = 3 [pid 5902] chdir("./bus" [pid 5073] <... openat resumed>) = 4 [pid 5902] <... chdir resumed>) = 0 [pid 5901] <... close resumed>) = 0 [pid 5902] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] newfstatat(4, "", [pid 5902] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] close(3 [pid 5901] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] <... close resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] getdents64(4, [pid 5902] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 5904 attached [pid 5073] getdents64(4, [pid 5904] set_robust_list(0x55556e32a660, 24 [pid 5903] <... ioctl resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5903] close(3 [pid 5901] <... open resumed>) = 5 [pid 5073] close(4 [pid 5904] <... set_robust_list resumed>) = 0 [pid 5903] <... close resumed>) = 0 [pid 5901] ftruncate(5, 0 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 5904 [pid 5073] <... close resumed>) = 0 [pid 5904] chdir("./136" [pid 5903] close(4 [pid 5902] <... symlink resumed>) = 0 [pid 5073] rmdir("./133/bus" [pid 5904] <... chdir resumed>) = 0 [pid 5903] <... close resumed>) = 0 [pid 5902] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5075] <... umount2 resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5904] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5903] mkdir("./bus", 0777 [pid 5901] <... ftruncate resumed>) = 0 [pid 5904] <... prctl resumed>) = 0 [pid 5903] <... mkdir resumed>) = 0 [pid 5901] exit_group(0 [pid 5904] setpgid(0, 0) = 0 [pid 5901] <... exit_group resumed>) = ? [pid 5075] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./133/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5903] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5904] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./133/binderfs", [pid 5902] <... creat resumed>) = 4 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5901] +++ exited with 0 +++ [pid 5904] <... openat resumed>) = 3 [pid 5902] rename("./bus", "./file2" [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5901, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] newfstatat(AT_FDCWD, "./133/bus", [pid 5073] unlink("./133/binderfs" [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5076] umount2("./136", MNT_DETACH|UMOUNT_NOFOLLOW [ 158.194911][ T5903] loop1: detected capacity change from 0 to 1024 [pid 5075] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5904] write(3, "1000", 4 [pid 5902] <... rename resumed>) = -1 EEXIST (File exists) [pid 5073] getdents64(3, [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5904] <... write resumed>) = 4 [pid 5902] memfd_create("syzkaller", 0 [pid 5076] openat(AT_FDCWD, "./136", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] openat(AT_FDCWD, "./133/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5902] <... memfd_create resumed>) = 5 [pid 5076] <... openat resumed>) = 3 [pid 5902] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] newfstatat(3, "", [pid 5075] <... openat resumed>) = 4 [pid 5073] close(3 [pid 5904] close(3 [pid 5903] <... mount resumed>) = 0 [pid 5904] <... close resumed>) = 0 [pid 5902] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] newfstatat(4, "", [pid 5073] <... close resumed>) = 0 [pid 5904] symlink("/dev/binderfs", "./binderfs" [pid 5903] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5902] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] getdents64(3, [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5904] <... symlink resumed>) = 0 [pid 5073] rmdir("./133" [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] getdents64(4, [pid 5904] memfd_create("syzkaller", 0 [pid 5903] <... openat resumed>) = 3 [pid 5076] umount2("./136/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] <... rmdir resumed>) = 0 [pid 5904] <... memfd_create resumed>) = 3 [pid 5073] mkdir("./134", 0777 [pid 5904] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... mkdir resumed>) = 0 [pid 5904] <... mmap resumed>) = 0x7f0356e00000 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5904] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... openat resumed>) = 3 [pid 5903] chdir("./bus" [pid 5075] getdents64(4, [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5903] <... chdir resumed>) = 0 [pid 5903] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5903] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] close(4 [pid 5903] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5903] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./133/bus") = 0 [pid 5075] umount2("./133/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./133/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5903] <... creat resumed>) = 4 [pid 5902] <... write resumed>) = 524288 [pid 5076] <... umount2 resumed>) = 0 [pid 5075] unlink("./133/binderfs" [pid 5903] rename("./bus", "./file2" [pid 5076] umount2("./136/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... unlink resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(3, [pid 5076] newfstatat(AT_FDCWD, "./136/bus", [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] close(3 [pid 5076] umount2("./136/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] rmdir("./133" [pid 5076] openat(AT_FDCWD, "./136/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5903] <... rename resumed>) = -1 EEXIST (File exists) [pid 5902] munmap(0x7f0356e00000, 138412032 [pid 5075] <... rmdir resumed>) = 0 [pid 5903] memfd_create("syzkaller", 0 [pid 5902] <... munmap resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5903] <... memfd_create resumed>) = 5 [pid 5076] newfstatat(4, "", [pid 5904] <... write resumed>) = 524288 [pid 5903] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5902] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, [pid 5903] <... mmap resumed>) = 0x7f0356e00000 [pid 5902] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] mkdir("./134", 0777 [pid 5902] close(5 [pid 5076] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] close(4 [pid 5902] <... close resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5076] rmdir("./136/bus" [pid 5904] munmap(0x7f0356e00000, 138412032) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 5904] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5903] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] umount2("./136/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5904] ioctl(4, LOOP_SET_FD, 3 [pid 5076] newfstatat(AT_FDCWD, "./136/binderfs", [pid 5904] <... ioctl resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5076] unlink("./136/binderfs" [pid 5073] close(3 [pid 5076] <... unlink resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5076] getdents64(3, [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5902] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] close(3) = 0 [pid 5903] <... write resumed>) = 524288 [pid 5076] rmdir("./136") = 0 ./strace-static-x86_64: Process 5905 attached [pid 5905] set_robust_list(0x55556e32a660, 24 [pid 5902] <... open resumed>) = 5 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 5905 [pid 5905] <... set_robust_list resumed>) = 0 [pid 5076] mkdir("./137", 0777 [pid 5905] chdir("./134" [pid 5903] munmap(0x7f0356e00000, 138412032 [pid 5902] ftruncate(5, 0 [pid 5905] <... chdir resumed>) = 0 [pid 5903] <... munmap resumed>) = 0 [pid 5902] <... ftruncate resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5905] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5905] <... prctl resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5902] exit_group(0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5902] <... exit_group resumed>) = ? [pid 5905] setpgid(0, 0 [pid 5903] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5902] +++ exited with 0 +++ [pid 5905] <... setpgid resumed>) = 0 [pid 5904] close(3 [pid 5903] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5902, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5904] <... close resumed>) = 0 [pid 5903] close(5 [pid 5904] close(4) = 0 [pid 5904] mkdir("./bus", 0777 [pid 5905] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5904] <... mkdir resumed>) = 0 [pid 5077] umount2("./135", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./135", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5904] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5077] <... openat resumed>) = 3 [pid 5905] <... openat resumed>) = 3 [pid 5077] newfstatat(3, "", [pid 5905] write(3, "1000", 4 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5905] <... write resumed>) = 4 [pid 5077] getdents64(3, [pid 5905] close(3) = 0 [pid 5904] <... mount resumed>) = 0 [pid 5903] <... close resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5904] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5904] chdir("./bus") = 0 [pid 5904] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5904] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5903] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5905] symlink("/dev/binderfs", "./binderfs" [pid 5077] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... ioctl resumed>) = 0 [pid 5905] <... symlink resumed>) = 0 [pid 5904] <... symlink resumed>) = 0 [pid 5075] close(3 [pid 5905] memfd_create("syzkaller", 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5904] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5905] <... memfd_create resumed>) = 3 [pid 5903] <... open resumed>) = 5 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5903] ftruncate(5, 0) = 0 [pid 5904] <... creat resumed>) = 4 [pid 5903] exit_group(0./strace-static-x86_64: Process 5906 attached [pid 5906] set_robust_list(0x55556e32a660, 24 [ 158.337195][ T5904] loop5: detected capacity change from 0 to 1024 [pid 5904] rename("./bus", "./file2" [pid 5903] <... exit_group resumed>) = ? [pid 5077] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5906] <... set_robust_list resumed>) = 0 [pid 5905] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5903] +++ exited with 0 +++ [pid 5076] <... ioctl resumed>) = 0 [pid 5905] <... mmap resumed>) = 0x7f0356e00000 [pid 5904] <... rename resumed>) = -1 EEXIST (File exists) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./135/bus", [pid 5906] chdir("./134" [pid 5904] memfd_create("syzkaller", 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 5906 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5903, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5904] <... memfd_create resumed>) = 5 [pid 5074] umount2("./133", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5904] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5904] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./135/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] openat(AT_FDCWD, "./133", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... openat resumed>) = 4 [pid 5077] newfstatat(4, "", [pid 5074] <... openat resumed>) = 3 [pid 5074] newfstatat(3, "", [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] getdents64(4, [pid 5074] getdents64(3, [pid 5906] <... chdir resumed>) = 0 [pid 5906] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] getdents64(4, [pid 5074] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5906] <... prctl resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] close(4 [pid 5906] setpgid(0, 0 [pid 5904] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5906] <... setpgid resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5076] close(3 [pid 5906] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5904] <... write resumed>) = 524288 [pid 5077] rmdir("./135/bus" [pid 5076] <... close resumed>) = 0 [pid 5905] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... rmdir resumed>) = 0 [pid 5077] umount2("./135/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5906] <... openat resumed>) = 3 [pid 5077] newfstatat(AT_FDCWD, "./135/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5906] write(3, "1000", 4 [pid 5077] unlink("./135/binderfs" [pid 5906] <... write resumed>) = 4 [pid 5077] <... unlink resumed>) = 0 [pid 5906] close(3 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 5907 [pid 5906] <... close resumed>) = 0 ./strace-static-x86_64: Process 5907 attached [pid 5906] symlink("/dev/binderfs", "./binderfs" [pid 5074] <... umount2 resumed>) = 0 [pid 5907] set_robust_list(0x55556e32a660, 24) = 0 [pid 5906] <... symlink resumed>) = 0 [pid 5077] getdents64(3, [pid 5907] chdir("./137" [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5907] <... chdir resumed>) = 0 [pid 5077] close(3 [pid 5907] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5077] <... close resumed>) = 0 [pid 5907] <... prctl resumed>) = 0 [pid 5906] memfd_create("syzkaller", 0 [pid 5077] rmdir("./135" [pid 5074] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5907] setpgid(0, 0 [pid 5904] munmap(0x7f0356e00000, 138412032 [pid 5077] <... rmdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5907] <... setpgid resumed>) = 0 [pid 5906] <... memfd_create resumed>) = 3 [pid 5904] <... munmap resumed>) = 0 [pid 5077] mkdir("./136", 0777 [pid 5074] newfstatat(AT_FDCWD, "./133/bus", [pid 5907] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5907] write(3, "1000", 4 [pid 5904] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] <... mkdir resumed>) = 0 [pid 5074] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5907] <... write resumed>) = 4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5907] close(3 [pid 5904] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] openat(AT_FDCWD, "./133/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5907] <... close resumed>) = 0 [pid 5906] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5904] close(5 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] <... openat resumed>) = 4 [pid 5907] symlink("/dev/binderfs", "./binderfs" [pid 5906] <... mmap resumed>) = 0x7f0356e00000 [pid 5904] <... close resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5074] newfstatat(4, "", [pid 5907] <... symlink resumed>) = 0 [pid 5907] memfd_create("syzkaller", 0 [pid 5906] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5905] <... write resumed>) = 524288 [pid 5904] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, [pid 5907] <... memfd_create resumed>) = 3 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5907] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5905] munmap(0x7f0356e00000, 138412032 [pid 5074] close(4) = 0 [pid 5074] rmdir("./133/bus" [pid 5905] <... munmap resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5907] <... mmap resumed>) = 0x7f0356e00000 [pid 5907] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5905] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] umount2("./133/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5906] <... write resumed>) = 524288 [pid 5904] <... open resumed>) = 5 [pid 5906] munmap(0x7f0356e00000, 138412032 [pid 5907] <... write resumed>) = 524288 [pid 5905] <... openat resumed>) = 4 [pid 5904] ftruncate(5, 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5907] munmap(0x7f0356e00000, 138412032 [pid 5905] ioctl(4, LOOP_SET_FD, 3 [pid 5904] <... ftruncate resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./133/binderfs", [pid 5907] <... munmap resumed>) = 0 [pid 5906] <... munmap resumed>) = 0 [pid 5906] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5077] <... ioctl resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5904] exit_group(0) = ? [pid 5074] unlink("./133/binderfs" [pid 5906] <... openat resumed>) = 4 [pid 5904] +++ exited with 0 +++ [pid 5074] <... unlink resumed>) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5904, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5907] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5074] getdents64(3, [pid 5907] <... openat resumed>) = 4 [pid 5906] ioctl(4, LOOP_SET_FD, 3 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5907] ioctl(4, LOOP_SET_FD, 3 [pid 5074] close(3) = 0 [pid 5906] <... ioctl resumed>) = 0 [pid 5905] <... ioctl resumed>) = 0 [pid 5077] close(3 [pid 5907] <... ioctl resumed>) = 0 [pid 5074] rmdir("./133" [pid 5907] close(3 [pid 5077] <... close resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5907] <... close resumed>) = 0 [pid 5906] close(3 [pid 5905] close(3 [pid 5078] umount2("./136", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5907] close(4 [pid 5906] <... close resumed>) = 0 [pid 5905] <... close resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5907] <... close resumed>) = 0 [pid 5074] mkdir("./134", 0777) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5078] openat(AT_FDCWD, "./136", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5907] mkdir("./bus", 0777 [pid 5905] close(4 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 5908 [pid 5078] <... openat resumed>) = 3 [ 158.492157][ T5905] loop0: detected capacity change from 0 to 1024 [ 158.512039][ T5906] loop2: detected capacity change from 0 to 1024 [ 158.513166][ T5907] loop3: detected capacity change from 0 to 1024 [pid 5907] <... mkdir resumed>) = 0 [pid 5906] close(4 [pid 5905] <... close resumed>) = 0 [pid 5078] newfstatat(3, "", [pid 5906] <... close resumed>) = 0 [pid 5905] mkdir("./bus", 0777 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5906] mkdir("./bus", 0777./strace-static-x86_64: Process 5908 attached [pid 5907] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5906] <... mkdir resumed>) = 0 [pid 5905] <... mkdir resumed>) = 0 [pid 5078] getdents64(3, [pid 5905] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5908] set_robust_list(0x55556e32a660, 24 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5908] <... set_robust_list resumed>) = 0 [pid 5906] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5908] chdir("./136") = 0 [pid 5908] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5908] setpgid(0, 0) = 0 [pid 5908] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5078] umount2("./136/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5908] write(3, "1000", 4) = 4 [pid 5908] close(3) = 0 [pid 5908] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5908] memfd_create("syzkaller", 0 [pid 5905] <... mount resumed>) = 0 [pid 5908] <... memfd_create resumed>) = 3 [pid 5905] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5908] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5905] <... openat resumed>) = 3 [pid 5908] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5907] <... mount resumed>) = 0 [pid 5906] <... mount resumed>) = 0 [pid 5905] chdir("./bus" [pid 5074] <... ioctl resumed>) = 0 [pid 5907] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5906] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5905] <... chdir resumed>) = 0 [pid 5078] <... umount2 resumed>) = 0 [pid 5074] close(3 [pid 5906] <... openat resumed>) = 3 [pid 5074] <... close resumed>) = 0 [pid 5905] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5907] <... openat resumed>) = 3 [pid 5078] umount2("./136/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5909 attached [pid 5908] <... write resumed>) = 524288 [pid 5907] chdir("./bus" [pid 5906] chdir("./bus" [pid 5905] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] newfstatat(AT_FDCWD, "./136/bus", [pid 5907] <... chdir resumed>) = 0 [pid 5906] <... chdir resumed>) = 0 [pid 5905] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5907] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5906] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 5909 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] umount2("./136/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5906] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5907] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] openat(AT_FDCWD, "./136/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5909] set_robust_list(0x55556e32a660, 24 [pid 5906] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5905] <... symlink resumed>) = 0 [pid 5078] <... openat resumed>) = 4 [pid 5907] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5909] <... set_robust_list resumed>) = 0 [pid 5078] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, [pid 5909] chdir("./134" [pid 5907] <... symlink resumed>) = 0 [pid 5905] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5906] <... symlink resumed>) = 0 [pid 5906] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5909] <... chdir resumed>) = 0 [pid 5078] close(4 [pid 5907] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5909] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5908] munmap(0x7f0356e00000, 138412032 [pid 5078] <... close resumed>) = 0 [pid 5909] <... prctl resumed>) = 0 [pid 5908] <... munmap resumed>) = 0 [pid 5078] rmdir("./136/bus" [pid 5909] setpgid(0, 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5905] <... creat resumed>) = 4 [pid 5909] <... setpgid resumed>) = 0 [pid 5906] <... creat resumed>) = 4 [pid 5905] rename("./bus", "./file2" [pid 5909] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5908] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5907] <... creat resumed>) = 4 [pid 5906] rename("./bus", "./file2" [pid 5905] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] umount2("./136/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5908] <... openat resumed>) = 4 [pid 5907] rename("./bus", "./file2" [pid 5906] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] newfstatat(AT_FDCWD, "./136/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5908] ioctl(4, LOOP_SET_FD, 3 [pid 5907] <... rename resumed>) = -1 EEXIST (File exists) [pid 5906] memfd_create("syzkaller", 0 [pid 5078] unlink("./136/binderfs" [pid 5909] <... openat resumed>) = 3 [pid 5908] <... ioctl resumed>) = 0 [pid 5907] memfd_create("syzkaller", 0 [pid 5906] <... memfd_create resumed>) = 5 [pid 5905] memfd_create("syzkaller", 0 [pid 5078] <... unlink resumed>) = 0 [pid 5909] write(3, "1000", 4 [pid 5908] close(3 [pid 5907] <... memfd_create resumed>) = 5 [pid 5906] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5905] <... memfd_create resumed>) = 5 [pid 5078] getdents64(3, [pid 5909] <... write resumed>) = 4 [pid 5908] <... close resumed>) = 0 [pid 5907] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5906] <... mmap resumed>) = 0x7f0356e00000 [pid 5905] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5909] close(3 [pid 5908] close(4 [pid 5907] <... mmap resumed>) = 0x7f0356e00000 [pid 5905] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] close(3 [pid 5909] <... close resumed>) = 0 [pid 5908] <... close resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5909] symlink("/dev/binderfs", "./binderfs" [pid 5908] mkdir("./bus", 0777 [pid 5078] rmdir("./136" [pid 5909] <... symlink resumed>) = 0 [pid 5908] <... mkdir resumed>) = 0 [pid 5906] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5905] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... rmdir resumed>) = 0 [pid 5907] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5909] memfd_create("syzkaller", 0 [pid 5908] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5078] mkdir("./137", 0777 [pid 5909] <... memfd_create resumed>) = 3 [pid 5078] <... mkdir resumed>) = 0 [pid 5909] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5909] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5906] <... write resumed>) = 524288 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5908] <... mount resumed>) = 0 [pid 5908] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5908] chdir("./bus") = 0 [pid 5907] <... write resumed>) = 524288 [ 158.678406][ T5908] loop4: detected capacity change from 0 to 1024 [pid 5908] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5905] <... write resumed>) = 524288 [pid 5908] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5908] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5907] munmap(0x7f0356e00000, 138412032) = 0 [pid 5906] munmap(0x7f0356e00000, 138412032 [pid 5905] munmap(0x7f0356e00000, 138412032 [pid 5909] <... write resumed>) = 524288 [pid 5908] <... symlink resumed>) = 0 [pid 5907] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5906] <... munmap resumed>) = 0 [pid 5905] <... munmap resumed>) = 0 [pid 5909] munmap(0x7f0356e00000, 138412032 [pid 5907] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5908] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5907] close(5 [pid 5905] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5906] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5908] <... creat resumed>) = 4 [pid 5907] <... close resumed>) = 0 [pid 5906] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5905] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5909] <... munmap resumed>) = 0 [pid 5908] rename("./bus", "./file2" [pid 5909] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5906] close(5 [pid 5909] ioctl(4, LOOP_SET_FD, 3 [pid 5905] close(5 [pid 5908] <... rename resumed>) = -1 EEXIST (File exists) [pid 5907] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5906] <... close resumed>) = 0 [pid 5078] <... ioctl resumed>) = 0 [pid 5908] memfd_create("syzkaller", 0) = 5 [pid 5908] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] close(3 [pid 5908] <... mmap resumed>) = 0x7f0356e00000 [pid 5905] <... close resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5907] <... open resumed>) = 5 [pid 5905] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5907] ftruncate(5, 0 [pid 5905] <... open resumed>) = 5 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5907] <... ftruncate resumed>) = 0 [pid 5905] ftruncate(5, 0) = 0 [pid 5905] exit_group(0) = ? ./strace-static-x86_64: Process 5910 attached [pid 5908] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5907] exit_group(0 [pid 5906] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5905] +++ exited with 0 +++ [pid 5910] set_robust_list(0x55556e32a660, 24 [pid 5909] <... ioctl resumed>) = 0 [pid 5907] <... exit_group resumed>) = ? [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 5910 [pid 5909] close(3) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5905, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5909] close(4) = 0 [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 5909] mkdir("./bus", 0777 [pid 5073] <... restart_syscall resumed>) = 0 [pid 5910] <... set_robust_list resumed>) = 0 [pid 5910] chdir("./137") = 0 [pid 5910] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5073] umount2("./134", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5910] setpgid(0, 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5910] <... setpgid resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./134", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5910] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5909] <... mkdir resumed>) = 0 [pid 5907] +++ exited with 0 +++ [pid 5073] <... openat resumed>) = 3 [pid 5073] newfstatat(3, "", [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5907, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5910] <... openat resumed>) = 3 [pid 5076] <... restart_syscall resumed>) = 0 [pid 5910] write(3, "1000", 4 [pid 5909] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5073] getdents64(3, [pid 5910] <... write resumed>) = 4 [pid 5906] <... open resumed>) = 5 [pid 5910] close(3 [pid 5906] ftruncate(5, 0 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5910] <... close resumed>) = 0 [pid 5909] <... mount resumed>) = 0 [pid 5906] <... ftruncate resumed>) = 0 [pid 5076] umount2("./137", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5910] symlink("/dev/binderfs", "./binderfs" [pid 5909] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5909] <... openat resumed>) = 3 [ 158.782426][ T5909] loop1: detected capacity change from 0 to 1024 [pid 5076] openat(AT_FDCWD, "./137", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5910] <... symlink resumed>) = 0 [pid 5909] chdir("./bus" [pid 5076] <... openat resumed>) = 3 [pid 5910] memfd_create("syzkaller", 0 [pid 5909] <... chdir resumed>) = 0 [pid 5908] <... write resumed>) = 524288 [pid 5906] exit_group(0 [pid 5076] newfstatat(3, "", [pid 5073] <... umount2 resumed>) = 0 [pid 5909] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5909] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5906] <... exit_group resumed>) = ? [pid 5909] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5910] <... memfd_create resumed>) = 3 [pid 5076] getdents64(3, [pid 5910] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5909] <... symlink resumed>) = 0 [pid 5908] munmap(0x7f0356e00000, 138412032 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5910] <... mmap resumed>) = 0x7f0356e00000 [pid 5908] <... munmap resumed>) = 0 [pid 5906] +++ exited with 0 +++ [pid 5908] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] umount2("./137/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5906, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5909] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5908] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5908] close(5 [pid 5910] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... umount2 resumed>) = 0 [pid 5075] umount2("./134", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./134/bus", [pid 5075] openat(AT_FDCWD, "./134", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5073] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] newfstatat(3, "", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5908] <... close resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] openat(AT_FDCWD, "./134/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5909] <... creat resumed>) = 4 [pid 5075] getdents64(3, [pid 5909] rename("./bus", "./file2" [pid 5073] <... openat resumed>) = 4 [pid 5909] <... rename resumed>) = -1 EEXIST (File exists) [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5909] memfd_create("syzkaller", 0 [pid 5075] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] newfstatat(4, "", [pid 5909] <... memfd_create resumed>) = 5 [pid 5076] umount2("./137/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5909] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5908] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] getdents64(4, [pid 5909] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] newfstatat(AT_FDCWD, "./137/bus", [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./137/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5908] <... open resumed>) = 5 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] close(4 [pid 5076] openat(AT_FDCWD, "./137/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... close resumed>) = 0 [pid 5910] <... write resumed>) = 524288 [pid 5909] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5908] ftruncate(5, 0 [pid 5076] <... openat resumed>) = 4 [pid 5073] rmdir("./134/bus") = 0 [pid 5076] newfstatat(4, "", [pid 5910] munmap(0x7f0356e00000, 138412032 [pid 5073] umount2("./134/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] getdents64(4, [pid 5073] newfstatat(AT_FDCWD, "./134/binderfs", [pid 5908] <... ftruncate resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5908] exit_group(0 [pid 5076] getdents64(4, [pid 5073] unlink("./134/binderfs" [pid 5910] <... munmap resumed>) = 0 [pid 5909] <... write resumed>) = 524288 [pid 5908] <... exit_group resumed>) = ? [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5076] close(4) = 0 [pid 5910] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5908] +++ exited with 0 +++ [pid 5076] rmdir("./137/bus" [pid 5075] <... umount2 resumed>) = 0 [pid 5073] getdents64(3, [pid 5076] <... rmdir resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5910] <... openat resumed>) = 4 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5908, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5076] umount2("./137/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] close(3 [pid 5910] ioctl(4, LOOP_SET_FD, 3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... close resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./137/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] rmdir("./134" [pid 5076] unlink("./137/binderfs" [pid 5073] <... rmdir resumed>) = 0 [pid 5077] umount2("./136", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... unlink resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] getdents64(3, [pid 5073] mkdir("./135", 0777 [pid 5077] openat(AT_FDCWD, "./136", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5076] close(3 [pid 5077] newfstatat(3, "", [pid 5076] <... close resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] rmdir("./137" [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5909] munmap(0x7f0356e00000, 138412032 [pid 5077] getdents64(3, [pid 5076] <... rmdir resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5909] <... munmap resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] umount2("./136/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] mkdir("./138", 0777 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5910] <... ioctl resumed>) = 0 [pid 5909] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] <... mkdir resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./134/bus", [pid 5910] close(3 [pid 5909] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5910] <... close resumed>) = 0 [pid 5909] close(5 [pid 5077] <... umount2 resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5910] close(4 [pid 5077] umount2("./136/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5910] <... close resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] openat(AT_FDCWD, "./134/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] newfstatat(AT_FDCWD, "./136/bus", [pid 5075] <... openat resumed>) = 4 [pid 5910] mkdir("./bus", 0777 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] umount2("./136/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] getdents64(4, [pid 5910] <... mkdir resumed>) = 0 [pid 5909] <... close resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] openat(AT_FDCWD, "./136/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5075] getdents64(4, [pid 5909] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5910] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5075] close(4) = 0 [pid 5075] rmdir("./134/bus" [pid 5077] newfstatat(4, "", [pid 5075] <... rmdir resumed>) = 0 [pid 5075] umount2("./134/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5909] <... open resumed>) = 5 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 5910] <... mount resumed>) = 0 [pid 5909] ftruncate(5, 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] getdents64(4, [pid 5910] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] newfstatat(AT_FDCWD, "./134/binderfs", [pid 5910] <... openat resumed>) = 3 [pid 5909] <... ftruncate resumed>) = 0 [pid 5077] getdents64(4, [pid 5909] exit_group(0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] close(4) = 0 [pid 5077] rmdir("./136/bus" [pid 5910] chdir("./bus" [pid 5909] <... exit_group resumed>) = ? [pid 5077] <... rmdir resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5910] <... chdir resumed>) = 0 [pid 5909] +++ exited with 0 +++ [pid 5075] unlink("./134/binderfs" [pid 5910] openat(AT_FDCWD, "/dev/loop5", O_RDWR [ 158.912321][ T5910] loop5: detected capacity change from 0 to 1024 [pid 5076] close(3 [pid 5075] <... unlink resumed>) = 0 [pid 5910] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] umount2("./136/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... close resumed>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5909, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5073] close(3 [pid 5910] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] getdents64(3, [pid 5074] umount2("./134", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... close resumed>) = 0 [pid 5075] close(3 [pid 5074] openat(AT_FDCWD, "./134", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] newfstatat(AT_FDCWD, "./136/binderfs", [pid 5075] <... close resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5910] <... symlink resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] rmdir("./134" [pid 5074] newfstatat(3, "", [pid 5077] unlink("./136/binderfs"./strace-static-x86_64: Process 5912 attached ./strace-static-x86_64: Process 5911 attached [pid 5910] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5077] <... unlink resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 5911 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5912] set_robust_list(0x55556e32a660, 24) = 0 [pid 5911] set_robust_list(0x55556e32a660, 24 [pid 5077] getdents64(3, [pid 5075] mkdir("./135", 0777 [pid 5074] getdents64(3, [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5912] chdir("./135" [pid 5911] <... set_robust_list resumed>) = 0 [pid 5077] close(3 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 5912 [pid 5912] <... chdir resumed>) = 0 [pid 5911] chdir("./138" [pid 5910] <... creat resumed>) = 4 [pid 5077] <... close resumed>) = 0 [pid 5074] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5912] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5911] <... chdir resumed>) = 0 [pid 5077] rmdir("./136" [pid 5912] <... prctl resumed>) = 0 [pid 5911] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5910] rename("./bus", "./file2" [pid 5077] <... rmdir resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5912] setpgid(0, 0 [pid 5911] <... prctl resumed>) = 0 [pid 5912] <... setpgid resumed>) = 0 [pid 5911] setpgid(0, 0 [pid 5910] <... rename resumed>) = -1 EEXIST (File exists) [pid 5077] mkdir("./137", 0777) = 0 [pid 5912] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5910] memfd_create("syzkaller", 0) = 5 [pid 5912] <... openat resumed>) = 3 [pid 5910] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5910] <... mmap resumed>) = 0x7f0356e00000 [pid 5912] write(3, "1000", 4 [pid 5075] <... openat resumed>) = 3 [pid 5912] <... write resumed>) = 4 [pid 5912] close(3 [pid 5911] <... setpgid resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5912] <... close resumed>) = 0 [pid 5912] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5912] memfd_create("syzkaller", 0) = 3 [pid 5911] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5910] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... umount2 resumed>) = 0 [pid 5911] <... openat resumed>) = 3 [pid 5911] write(3, "1000", 4 [pid 5074] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5912] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5911] <... write resumed>) = 4 [pid 5912] <... mmap resumed>) = 0x7f0356e00000 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5912] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5911] close(3 [pid 5074] newfstatat(AT_FDCWD, "./134/bus", [pid 5911] <... close resumed>) = 0 [pid 5911] symlink("/dev/binderfs", "./binderfs" [pid 5912] <... write resumed>) = 524288 [pid 5910] <... write resumed>) = 524288 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5912] munmap(0x7f0356e00000, 138412032 [pid 5911] <... symlink resumed>) = 0 [pid 5910] munmap(0x7f0356e00000, 138412032 [pid 5074] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./134/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5911] memfd_create("syzkaller", 0 [pid 5074] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, [pid 5911] <... memfd_create resumed>) = 3 [pid 5910] <... munmap resumed>) = 0 [pid 5077] <... ioctl resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5911] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5912] <... munmap resumed>) = 0 [pid 5911] <... mmap resumed>) = 0x7f0356e00000 [pid 5910] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] close(3 [pid 5074] getdents64(4, [pid 5911] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] <... close resumed>) = 0 [pid 5074] close(4 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] close(3) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... close resumed>) = 0 [pid 5912] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5910] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] rmdir("./134/bus" [pid 5912] <... openat resumed>) = 4 [pid 5910] close(5 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 5913 ./strace-static-x86_64: Process 5914 attached ./strace-static-x86_64: Process 5913 attached [pid 5912] ioctl(4, LOOP_SET_FD, 3 [pid 5911] <... write resumed>) = 524288 [pid 5910] <... close resumed>) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 5914 [pid 5074] <... rmdir resumed>) = 0 [pid 5914] set_robust_list(0x55556e32a660, 24) = 0 [pid 5914] chdir("./137") = 0 [pid 5914] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5914] setpgid(0, 0) = 0 [pid 5914] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5914] write(3, "1000", 4) = 4 [pid 5914] close(3) = 0 [pid 5914] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5914] memfd_create("syzkaller", 0) = 3 [pid 5074] umount2("./134/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5913] set_robust_list(0x55556e32a660, 24 [pid 5914] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5911] munmap(0x7f0356e00000, 138412032 [pid 5913] <... set_robust_list resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5914] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5911] <... munmap resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./134/binderfs", [pid 5913] chdir("./135" [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./134/binderfs" [pid 5913] <... chdir resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5913] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5910] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5074] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 5913] <... prctl resumed>) = 0 [pid 5913] setpgid(0, 0 [pid 5074] rmdir("./134" [pid 5913] <... setpgid resumed>) = 0 [pid 5912] <... ioctl resumed>) = 0 [pid 5911] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5074] <... rmdir resumed>) = 0 [pid 5911] <... openat resumed>) = 4 [pid 5910] <... open resumed>) = 5 [pid 5913] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5912] close(3 [pid 5911] ioctl(4, LOOP_SET_FD, 3 [pid 5910] ftruncate(5, 0 [pid 5913] <... openat resumed>) = 3 [pid 5912] <... close resumed>) = 0 [pid 5913] write(3, "1000", 4 [pid 5912] close(4 [pid 5910] <... ftruncate resumed>) = 0 [pid 5074] mkdir("./135", 0777 [pid 5913] <... write resumed>) = 4 [pid 5912] <... close resumed>) = 0 [pid 5913] close(3 [pid 5912] mkdir("./bus", 0777 [pid 5910] exit_group(0 [pid 5074] <... mkdir resumed>) = 0 [pid 5913] <... close resumed>) = 0 [pid 5913] symlink("/dev/binderfs", "./binderfs" [pid 5910] <... exit_group resumed>) = ? [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5913] <... symlink resumed>) = 0 [pid 5914] <... write resumed>) = 524288 [pid 5912] <... mkdir resumed>) = 0 [pid 5910] +++ exited with 0 +++ [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5910, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5912] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5913] memfd_create("syzkaller", 0 [pid 5078] umount2("./137", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5913] <... memfd_create resumed>) = 3 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./137", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5913] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... openat resumed>) = 3 [pid 5913] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] newfstatat(3, "", [pid 5914] munmap(0x7f0356e00000, 138412032 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5914] <... munmap resumed>) = 0 [pid 5911] <... ioctl resumed>) = 0 [pid 5078] getdents64(3, [pid 5912] <... mount resumed>) = 0 [pid 5914] openat(AT_FDCWD, "/dev/loop4", O_RDWR [ 159.084935][ T5912] loop0: detected capacity change from 0 to 1024 [ 159.112599][ T5911] loop3: detected capacity change from 0 to 1024 [pid 5911] close(3 [pid 5914] <... openat resumed>) = 4 [pid 5911] <... close resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5913] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5914] ioctl(4, LOOP_SET_FD, 3 [pid 5912] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5911] close(4 [pid 5078] umount2("./137/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5913] <... write resumed>) = 524288 [pid 5914] <... ioctl resumed>) = 0 [pid 5912] <... openat resumed>) = 3 [pid 5911] <... close resumed>) = 0 [pid 5912] chdir("./bus") = 0 [pid 5911] mkdir("./bus", 0777 [pid 5912] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5911] <... mkdir resumed>) = 0 [pid 5913] munmap(0x7f0356e00000, 138412032 [pid 5912] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5911] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5074] <... ioctl resumed>) = 0 [pid 5913] <... munmap resumed>) = 0 [pid 5913] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5912] <... symlink resumed>) = 0 [pid 5078] <... umount2 resumed>) = 0 [pid 5913] <... openat resumed>) = 4 [pid 5913] ioctl(4, LOOP_SET_FD, 3 [pid 5912] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] umount2("./137/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] newfstatat(AT_FDCWD, "./137/bus", [pid 5914] close(3 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] close(3 [pid 5914] <... close resumed>) = 0 [pid 5912] <... creat resumed>) = 4 [pid 5911] <... mount resumed>) = 0 [pid 5078] umount2("./137/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... close resumed>) = 0 [pid 5914] close(4 [pid 5912] rename("./bus", "./file2" [pid 5911] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5914] <... close resumed>) = 0 [pid 5911] <... openat resumed>) = 3 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5914] mkdir("./bus", 0777 [pid 5911] chdir("./bus" [pid 5078] openat(AT_FDCWD, "./137/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5913] <... ioctl resumed>) = 0 [pid 5914] <... mkdir resumed>) = 0 [pid 5912] <... rename resumed>) = -1 EEXIST (File exists) [pid 5911] <... chdir resumed>) = 0 [pid 5913] close(3 [pid 5914] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5912] memfd_create("syzkaller", 0 [pid 5911] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5078] <... openat resumed>) = 4 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 5915 [pid 5913] <... close resumed>) = 0 [pid 5912] <... memfd_create resumed>) = 5 [pid 5911] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] newfstatat(4, "", ./strace-static-x86_64: Process 5915 attached [pid 5913] close(4 [pid 5912] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5911] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5915] set_robust_list(0x55556e32a660, 24 [pid 5913] <... close resumed>) = 0 [pid 5912] <... mmap resumed>) = 0x7f0356e00000 [pid 5911] <... symlink resumed>) = 0 [pid 5078] getdents64(4, [pid 5915] <... set_robust_list resumed>) = 0 [pid 5913] mkdir("./bus", 0777 [pid 5911] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5915] chdir("./135" [pid 5913] <... mkdir resumed>) = 0 [pid 5914] <... mount resumed>) = 0 [pid 5911] <... creat resumed>) = 4 [pid 5915] <... chdir resumed>) = 0 [pid 5914] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5915] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5914] <... openat resumed>) = 3 [pid 5915] <... prctl resumed>) = 0 [pid 5914] chdir("./bus" [pid 5915] setpgid(0, 0 [pid 5913] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5914] <... chdir resumed>) = 0 [pid 5911] rename("./bus", "./file2" [pid 5078] getdents64(4, [pid 5915] <... setpgid resumed>) = 0 [pid 5914] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5915] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5914] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5915] <... openat resumed>) = 3 [pid 5914] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] close(4 [ 159.149510][ T5914] loop4: detected capacity change from 0 to 1024 [ 159.176279][ T5913] loop2: detected capacity change from 0 to 1024 [pid 5915] write(3, "1000", 4 [pid 5912] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5915] <... write resumed>) = 4 [pid 5078] <... close resumed>) = 0 [pid 5915] close(3 [pid 5078] rmdir("./137/bus" [pid 5915] <... close resumed>) = 0 [pid 5915] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5914] <... symlink resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5078] umount2("./137/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5915] memfd_create("syzkaller", 0 [pid 5913] <... mount resumed>) = 0 [pid 5914] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5911] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5915] <... memfd_create resumed>) = 3 [pid 5913] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5911] memfd_create("syzkaller", 0 [pid 5078] newfstatat(AT_FDCWD, "./137/binderfs", [pid 5915] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5913] <... openat resumed>) = 3 [pid 5911] <... memfd_create resumed>) = 5 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5915] <... mmap resumed>) = 0x7f0356e00000 [pid 5913] chdir("./bus" [pid 5914] <... creat resumed>) = 4 [pid 5911] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] unlink("./137/binderfs" [pid 5915] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5913] <... chdir resumed>) = 0 [pid 5914] rename("./bus", "./file2" [pid 5912] <... write resumed>) = 524288 [pid 5911] <... mmap resumed>) = 0x7f0356e00000 [pid 5913] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5912] munmap(0x7f0356e00000, 138412032 [pid 5911] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... unlink resumed>) = 0 [pid 5913] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5914] <... rename resumed>) = -1 EEXIST (File exists) [pid 5912] <... munmap resumed>) = 0 [pid 5078] getdents64(3, [pid 5913] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5914] memfd_create("syzkaller", 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5914] <... memfd_create resumed>) = 5 [pid 5078] close(3 [pid 5914] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5912] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5078] <... close resumed>) = 0 [pid 5915] <... write resumed>) = 524288 [pid 5913] <... symlink resumed>) = 0 [pid 5914] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] rmdir("./137" [pid 5913] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5912] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5913] <... creat resumed>) = 4 [pid 5914] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5912] close(5 [pid 5911] <... write resumed>) = 524288 [pid 5078] <... rmdir resumed>) = 0 [pid 5913] rename("./bus", "./file2" [pid 5078] mkdir("./138", 0777) = 0 [pid 5915] munmap(0x7f0356e00000, 138412032 [pid 5913] <... rename resumed>) = -1 EEXIST (File exists) [pid 5915] <... munmap resumed>) = 0 [pid 5913] memfd_create("syzkaller", 0 [pid 5911] munmap(0x7f0356e00000, 138412032 [pid 5913] <... memfd_create resumed>) = 5 [pid 5912] <... close resumed>) = 0 [pid 5911] <... munmap resumed>) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5913] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5078] <... openat resumed>) = 3 [pid 5912] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5913] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5915] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5911] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5915] ioctl(4, LOOP_SET_FD, 3 [pid 5911] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5911] close(5 [pid 5913] <... write resumed>) = 524288 [pid 5911] <... close resumed>) = 0 [pid 5911] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5915] <... ioctl resumed>) = 0 [pid 5913] munmap(0x7f0356e00000, 138412032 [pid 5914] <... write resumed>) = 524288 [pid 5912] <... open resumed>) = 5 [pid 5911] <... open resumed>) = 5 [pid 5911] ftruncate(5, 0) = 0 [pid 5915] close(3 [pid 5911] exit_group(0 [pid 5915] <... close resumed>) = 0 [pid 5913] <... munmap resumed>) = 0 [pid 5914] munmap(0x7f0356e00000, 138412032 [pid 5912] ftruncate(5, 0 [pid 5911] <... exit_group resumed>) = ? [pid 5915] close(4 [pid 5914] <... munmap resumed>) = 0 [pid 5912] <... ftruncate resumed>) = 0 [pid 5915] <... close resumed>) = 0 [pid 5913] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5914] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5912] exit_group(0 [pid 5911] +++ exited with 0 +++ [pid 5915] mkdir("./bus", 0777 [pid 5913] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5914] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5912] <... exit_group resumed>) = ? [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5911, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5076] umount2("./138", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5912] +++ exited with 0 +++ [pid 5076] openat(AT_FDCWD, "./138", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] umount2("./138/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5915] <... mkdir resumed>) = 0 [pid 5915] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5913] close(5 [pid 5914] close(5 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5912, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5913] <... close resumed>) = 0 [pid 5914] <... close resumed>) = 0 [pid 5078] <... ioctl resumed>) = 0 [ 159.305338][ T5915] loop1: detected capacity change from 0 to 1024 [ 159.316244][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 159.316263][ T28] audit: type=1800 audit(1710613041.414:820): pid=5912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop0" ino=20 res=0 errno=0 [pid 5078] close(3 [pid 5073] umount2("./135", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./135", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... close resumed>) = 0 [pid 5913] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... openat resumed>) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 5916 [pid 5073] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5914] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5073] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5916 attached [pid 5916] set_robust_list(0x55556e32a660, 24) = 0 [pid 5913] <... open resumed>) = 5 [pid 5913] ftruncate(5, 0 [pid 5916] chdir("./138" [pid 5913] <... ftruncate resumed>) = 0 [pid 5916] <... chdir resumed>) = 0 [pid 5913] exit_group(0 [pid 5916] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5913] <... exit_group resumed>) = ? [pid 5916] <... prctl resumed>) = 0 [pid 5915] <... mount resumed>) = 0 [pid 5913] +++ exited with 0 +++ [pid 5916] setpgid(0, 0 [pid 5915] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5913, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5073] <... umount2 resumed>) = 0 [pid 5916] <... setpgid resumed>) = 0 [pid 5915] <... openat resumed>) = 3 [pid 5914] <... open resumed>) = 5 [pid 5073] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5916] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5915] chdir("./bus" [pid 5914] ftruncate(5, 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5916] <... openat resumed>) = 3 [pid 5915] <... chdir resumed>) = 0 [pid 5914] <... ftruncate resumed>) = 0 [pid 5075] umount2("./135", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] newfstatat(AT_FDCWD, "./135/bus", [pid 5916] write(3, "1000", 4 [pid 5915] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5914] exit_group(0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5915] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5915] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5075] openat(AT_FDCWD, "./135", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5915] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5075] <... openat resumed>) = 3 [pid 5914] <... exit_group resumed>) = ? [pid 5075] newfstatat(3, "", [pid 5914] +++ exited with 0 +++ [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5914, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5916] <... write resumed>) = 4 [pid 5915] <... creat resumed>) = 4 [pid 5075] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5915] rename("./bus", "./file2" [pid 5916] close(3 [pid 5073] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5916] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5915] <... rename resumed>) = -1 EEXIST (File exists) [pid 5915] memfd_create("syzkaller", 0 [pid 5077] umount2("./137", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5915] <... memfd_create resumed>) = 5 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5915] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] openat(AT_FDCWD, "./137", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5915] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] <... openat resumed>) = 3 [pid 5916] symlink("/dev/binderfs", "./binderfs" [pid 5915] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] newfstatat(3, "", [pid 5076] <... umount2 resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./135/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5077] getdents64(3, [pid 5075] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] umount2("./137/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] newfstatat(AT_FDCWD, "./135/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./135/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5075] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] close(4) = 0 [pid 5075] rmdir("./135/bus") = 0 [ 159.416284][ T28] audit: type=1800 audit(1710613041.434:821): pid=5911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop3" ino=20 res=0 errno=0 [pid 5075] umount2("./135/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./138/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... openat resumed>) = 4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(4, "", [pid 5075] newfstatat(AT_FDCWD, "./135/binderfs", [pid 5916] <... symlink resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] newfstatat(AT_FDCWD, "./138/bus", [pid 5075] unlink("./135/binderfs") = 0 [pid 5075] getdents64(3, [pid 5915] <... write resumed>) = 524288 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5077] umount2("./137/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] close(3 [pid 5077] newfstatat(AT_FDCWD, "./137/bus", [pid 5075] <... close resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] rmdir("./135" [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... rmdir resumed>) = 0 [ 159.449617][ T28] audit: type=1800 audit(1710613041.504:822): pid=5913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop2" ino=20 res=0 errno=0 [pid 5073] getdents64(4, [pid 5916] memfd_create("syzkaller", 0 [pid 5915] munmap(0x7f0356e00000, 138412032 [pid 5077] umount2("./137/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./138/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] mkdir("./136", 0777 [pid 5915] <... munmap resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... mkdir resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./137/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5077] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] getdents64(4, [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5915] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5915] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] getdents64(4, [pid 5075] <... openat resumed>) = 3 [pid 5915] close(5 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5077] close(4 [pid 5915] <... close resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5077] rmdir("./137/bus") = 0 [pid 5077] umount2("./137/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./137/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] unlink("./137/binderfs") = 0 [pid 5077] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] close(3) = 0 [pid 5077] rmdir("./137" [pid 5915] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./138/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5916] <... memfd_create resumed>) = 3 [pid 5077] mkdir("./138", 0777 [pid 5916] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... openat resumed>) = 4 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5916] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] <... mkdir resumed>) = 0 [pid 5076] newfstatat(4, "", [pid 5073] getdents64(4, [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5076] getdents64(4, [pid 5073] close(4) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, [pid 5073] rmdir("./135/bus" [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] close(4) = 0 [pid 5076] rmdir("./138/bus" [pid 5073] <... rmdir resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5073] umount2("./135/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./138/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./138/binderfs", [pid 5073] newfstatat(AT_FDCWD, "./135/binderfs", [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./138/binderfs" [pid 5073] unlink("./135/binderfs" [pid 5076] <... unlink resumed>) = 0 [pid 5076] getdents64(3, [pid 5073] <... unlink resumed>) = 0 [pid 5916] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5915] <... open resumed>) = 5 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5916] <... write resumed>) = 524288 [pid 5915] ftruncate(5, 0 [pid 5073] getdents64(3, [pid 5916] munmap(0x7f0356e00000, 138412032 [pid 5915] <... ftruncate resumed>) = 0 [ 159.487825][ T28] audit: type=1800 audit(1710613041.514:823): pid=5914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop4" ino=20 res=0 errno=0 [pid 5916] <... munmap resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5915] exit_group(0 [pid 5073] close(3) = 0 [pid 5915] <... exit_group resumed>) = ? [pid 5916] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5915] +++ exited with 0 +++ [pid 5073] rmdir("./135" [pid 5916] <... openat resumed>) = 4 [pid 5076] close(3 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5915, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5916] ioctl(4, LOOP_SET_FD, 3 [pid 5076] <... close resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 5075] close(3 [pid 5074] <... restart_syscall resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5917 attached [pid 5074] umount2("./135", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5917] set_robust_list(0x55556e32a660, 24 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 5917 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5917] <... set_robust_list resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./135", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5917] chdir("./136" [pid 5916] <... ioctl resumed>) = 0 [pid 5077] <... ioctl resumed>) = 0 [pid 5076] rmdir("./138" [pid 5074] <... openat resumed>) = 3 [pid 5073] <... rmdir resumed>) = 0 [pid 5917] <... chdir resumed>) = 0 [pid 5916] close(3 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] newfstatat(3, "", [pid 5073] mkdir("./136", 0777 [pid 5917] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5916] <... close resumed>) = 0 [pid 5076] mkdir("./139", 0777 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 5917] <... prctl resumed>) = 0 [pid 5916] close(4 [pid 5077] close(3 [pid 5076] <... mkdir resumed>) = 0 [pid 5074] getdents64(3, [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5916] <... close resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] <... openat resumed>) = 3 [pid 5916] mkdir("./bus", 0777 [pid 5076] <... openat resumed>) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5916] <... mkdir resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5916] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5917] setpgid(0, 0 [pid 5077] <... close resumed>) = 0 [pid 5074] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5917] <... setpgid resumed>) = 0 [ 159.523300][ T28] audit: type=1800 audit(1710613041.624:824): pid=5915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 159.554111][ T5916] loop5: detected capacity change from 0 to 1024 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5918 attached [pid 5917] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5916] <... mount resumed>) = 0 [pid 5916] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5917] <... openat resumed>) = 3 [pid 5916] <... openat resumed>) = 3 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 5918 [pid 5917] write(3, "1000", 4) = 4 [pid 5917] close(3 [pid 5916] chdir("./bus" [pid 5917] <... close resumed>) = 0 [pid 5916] <... chdir resumed>) = 0 [pid 5916] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5918] set_robust_list(0x55556e32a660, 24 [pid 5917] symlink("/dev/binderfs", "./binderfs" [pid 5916] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5918] <... set_robust_list resumed>) = 0 [pid 5917] <... symlink resumed>) = 0 [pid 5916] <... symlink resumed>) = 0 [pid 5918] chdir("./138" [pid 5916] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5918] <... chdir resumed>) = 0 [pid 5917] memfd_create("syzkaller", 0 [pid 5918] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5917] <... memfd_create resumed>) = 3 [pid 5918] <... prctl resumed>) = 0 [pid 5917] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5918] setpgid(0, 0 [pid 5917] <... mmap resumed>) = 0x7f0356e00000 [pid 5916] <... creat resumed>) = 4 [pid 5916] rename("./bus", "./file2") = -1 EEXIST (File exists) [pid 5916] memfd_create("syzkaller", 0) = 5 [pid 5916] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5918] <... setpgid resumed>) = 0 [pid 5916] <... mmap resumed>) = 0x7f0356e00000 [pid 5918] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5917] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5916] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5918] <... openat resumed>) = 3 [pid 5918] write(3, "1000", 4) = 4 [pid 5918] close(3) = 0 [pid 5918] symlink("/dev/binderfs", "./binderfs" [pid 5917] <... write resumed>) = 524288 [pid 5076] <... ioctl resumed>) = 0 [pid 5918] <... symlink resumed>) = 0 [pid 5918] memfd_create("syzkaller", 0) = 3 [pid 5918] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5918] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... umount2 resumed>) = 0 [pid 5917] munmap(0x7f0356e00000, 138412032 [pid 5076] close(3 [pid 5917] <... munmap resumed>) = 0 [pid 5917] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5916] <... write resumed>) = 524288 [pid 5076] <... close resumed>) = 0 [pid 5074] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... ioctl resumed>) = 0 [pid 5917] <... openat resumed>) = 4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5916] munmap(0x7f0356e00000, 138412032) = 0 [pid 5916] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] newfstatat(AT_FDCWD, "./135/bus", [pid 5916] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5916] close(5 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5917] ioctl(4, LOOP_SET_FD, 3 [pid 5074] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 5919 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] close(3 [pid 5916] <... close resumed>) = 0 [pid 5073] <... close resumed>) = 0 ./strace-static-x86_64: Process 5919 attached [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5919] set_robust_list(0x55556e32a660, 24 [pid 5917] <... ioctl resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./135/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5919] <... set_robust_list resumed>) = 0 [pid 5917] close(3 [pid 5919] chdir("./139" [pid 5917] <... close resumed>) = 0 [pid 5074] <... openat resumed>) = 4 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 5920 [pid 5917] close(4 [pid 5074] newfstatat(4, "", [pid 5917] <... close resumed>) = 0 [pid 5919] <... chdir resumed>) = 0 [pid 5916] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5919] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5917] mkdir("./bus", 0777 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5919] <... prctl resumed>) = 0 [pid 5919] setpgid(0, 0 [pid 5917] <... mkdir resumed>) = 0 [pid 5074] getdents64(4, [pid 5919] <... setpgid resumed>) = 0 [pid 5916] <... open resumed>) = 5 [pid 5919] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5918] <... write resumed>) = 524288 [pid 5917] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5916] ftruncate(5, 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 5920 attached [pid 5074] getdents64(4, [pid 5920] set_robust_list(0x55556e32a660, 24 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] close(4 [pid 5916] <... ftruncate resumed>) = 0 [pid 5916] exit_group(0 [pid 5074] <... close resumed>) = 0 [pid 5920] <... set_robust_list resumed>) = 0 [pid 5074] rmdir("./135/bus" [pid 5920] chdir("./136" [pid 5074] <... rmdir resumed>) = 0 [pid 5920] <... chdir resumed>) = 0 [pid 5074] umount2("./135/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5920] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5920] <... prctl resumed>) = 0 [pid 5916] <... exit_group resumed>) = ? [pid 5074] newfstatat(AT_FDCWD, "./135/binderfs", [pid 5920] setpgid(0, 0) = 0 [pid 5920] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5918] munmap(0x7f0356e00000, 138412032 [pid 5916] +++ exited with 0 +++ [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5920] <... openat resumed>) = 3 [pid 5920] write(3, "1000", 4 [pid 5919] <... openat resumed>) = 3 [pid 5918] <... munmap resumed>) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5916, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5074] unlink("./135/binderfs" [pid 5920] <... write resumed>) = 4 [pid 5920] close(3) = 0 [pid 5920] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5919] write(3, "1000", 4 [pid 5078] umount2("./138", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... unlink resumed>) = 0 [pid 5920] memfd_create("syzkaller", 0 [pid 5919] <... write resumed>) = 4 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] getdents64(3, [pid 5918] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5920] <... memfd_create resumed>) = 3 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3 [pid 5920] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5919] close(3 [pid 5918] <... openat resumed>) = 4 [pid 5917] <... mount resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./138", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... close resumed>) = 0 [pid 5919] <... close resumed>) = 0 [ 159.689083][ T5917] loop2: detected capacity change from 0 to 1024 [ 159.711138][ T28] audit: type=1800 audit(1710613041.814:825): pid=5916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop5" ino=20 res=0 errno=0 [pid 5078] <... openat resumed>) = 3 [pid 5919] symlink("/dev/binderfs", "./binderfs" [pid 5918] ioctl(4, LOOP_SET_FD, 3 [pid 5917] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] newfstatat(3, "", [pid 5074] rmdir("./135" [pid 5920] <... mmap resumed>) = 0x7f0356e00000 [pid 5919] <... symlink resumed>) = 0 [pid 5917] <... openat resumed>) = 3 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5919] memfd_create("syzkaller", 0 [pid 5078] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] umount2("./138/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5919] <... memfd_create resumed>) = 3 [pid 5919] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5920] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5919] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5918] <... ioctl resumed>) = 0 [pid 5917] chdir("./bus" [pid 5074] <... rmdir resumed>) = 0 [pid 5917] <... chdir resumed>) = 0 [pid 5917] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] mkdir("./136", 0777 [pid 5917] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5917] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5074] <... mkdir resumed>) = 0 [pid 5918] close(3 [pid 5917] <... symlink resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5917] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] <... umount2 resumed>) = 0 [pid 5918] <... close resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5918] close(4 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5918] <... close resumed>) = 0 [pid 5918] mkdir("./bus", 0777 [pid 5078] umount2("./138/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5919] <... write resumed>) = 524288 [pid 5917] <... creat resumed>) = 4 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] newfstatat(AT_FDCWD, "./138/bus", [pid 5917] rename("./bus", "./file2" [pid 5919] munmap(0x7f0356e00000, 138412032 [pid 5918] <... mkdir resumed>) = 0 [pid 5917] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5917] memfd_create("syzkaller", 0 [pid 5078] umount2("./138/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5917] <... memfd_create resumed>) = 5 [pid 5078] openat(AT_FDCWD, "./138/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5078] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(4, [pid 5919] <... munmap resumed>) = 0 [pid 5918] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5917] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5917] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5078] close(4 [pid 5919] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5078] <... close resumed>) = 0 [ 159.771294][ T5918] loop4: detected capacity change from 0 to 1024 [pid 5078] rmdir("./138/bus") = 0 [pid 5919] ioctl(4, LOOP_SET_FD, 3 [pid 5920] <... write resumed>) = 524288 [pid 5078] umount2("./138/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5920] munmap(0x7f0356e00000, 138412032 [pid 5919] <... ioctl resumed>) = 0 [pid 5918] <... mount resumed>) = 0 [pid 5917] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] newfstatat(AT_FDCWD, "./138/binderfs", [pid 5918] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5918] <... openat resumed>) = 3 [pid 5918] chdir("./bus" [pid 5078] unlink("./138/binderfs" [pid 5920] <... munmap resumed>) = 0 [pid 5918] <... chdir resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5918] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] getdents64(3, [pid 5920] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5919] close(3 [pid 5918] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5917] <... write resumed>) = 524288 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5920] <... openat resumed>) = 4 [pid 5919] <... close resumed>) = 0 [pid 5918] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] close(3 [pid 5917] munmap(0x7f0356e00000, 138412032 [pid 5918] <... symlink resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5919] close(4 [pid 5917] <... munmap resumed>) = 0 [pid 5078] rmdir("./138" [pid 5919] <... close resumed>) = 0 [pid 5918] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5919] mkdir("./bus", 0777 [pid 5078] <... rmdir resumed>) = 0 [pid 5920] ioctl(4, LOOP_SET_FD, 3 [pid 5919] <... mkdir resumed>) = 0 [ 159.817661][ T5919] loop3: detected capacity change from 0 to 1024 [pid 5917] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] mkdir("./139", 0777 [pid 5920] <... ioctl resumed>) = 0 [pid 5919] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5917] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... mkdir resumed>) = 0 [pid 5074] close(3) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5917] close(5 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 5921 [pid 5918] <... creat resumed>) = 4 [pid 5918] rename("./bus", "./file2") = -1 EEXIST (File exists) [pid 5078] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5921 attached [pid 5918] memfd_create("syzkaller", 0 [pid 5921] set_robust_list(0x55556e32a660, 24 [pid 5918] <... memfd_create resumed>) = 5 [pid 5918] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5918] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5917] <... close resumed>) = 0 [pid 5921] <... set_robust_list resumed>) = 0 [pid 5920] close(3 [pid 5918] <... write resumed>) = 524288 [pid 5917] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5921] chdir("./136") = 0 [pid 5920] <... close resumed>) = 0 [pid 5920] close(4 [pid 5921] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5920] <... close resumed>) = 0 [pid 5921] <... prctl resumed>) = 0 [pid 5921] setpgid(0, 0) = 0 [pid 5921] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5920] mkdir("./bus", 0777 [pid 5921] <... openat resumed>) = 3 [pid 5917] <... open resumed>) = 5 [ 159.858902][ T5920] loop0: detected capacity change from 0 to 1024 [pid 5921] write(3, "1000", 4 [pid 5920] <... mkdir resumed>) = 0 [pid 5917] ftruncate(5, 0 [pid 5921] <... write resumed>) = 4 [pid 5921] close(3) = 0 [pid 5921] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5921] memfd_create("syzkaller", 0) = 3 [pid 5921] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5918] munmap(0x7f0356e00000, 138412032 [pid 5921] <... mmap resumed>) = 0x7f0356e00000 [pid 5918] <... munmap resumed>) = 0 [pid 5921] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5918] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5918] close(5) = 0 [pid 5921] <... write resumed>) = 524288 [pid 5920] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5917] <... ftruncate resumed>) = 0 [pid 5918] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5917] exit_group(0 [pid 5921] munmap(0x7f0356e00000, 138412032 [pid 5917] <... exit_group resumed>) = ? [pid 5919] <... mount resumed>) = 0 [pid 5918] <... open resumed>) = 5 [pid 5921] <... munmap resumed>) = 0 [ 159.901535][ T28] audit: type=1800 audit(1710613042.004:826): pid=5917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop2" ino=20 res=0 errno=0 [pid 5919] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5921] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5920] <... mount resumed>) = 0 [pid 5919] <... openat resumed>) = 3 [pid 5917] +++ exited with 0 +++ [pid 5078] <... ioctl resumed>) = 0 [pid 5921] <... openat resumed>) = 4 [pid 5918] ftruncate(5, 0 [pid 5921] ioctl(4, LOOP_SET_FD, 3 [pid 5918] <... ftruncate resumed>) = 0 [pid 5920] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5919] chdir("./bus" [pid 5918] exit_group(0 [pid 5920] <... openat resumed>) = 3 [pid 5918] <... exit_group resumed>) = ? [pid 5919] <... chdir resumed>) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5917, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5919] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5918] +++ exited with 0 +++ [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 5919] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... restart_syscall resumed>) = 0 [pid 5919] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5920] chdir("./bus") = 0 [pid 5078] close(3 [pid 5075] umount2("./136", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5920] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5920] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... close resumed>) = 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5918, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] openat(AT_FDCWD, "./136", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 5075] <... openat resumed>) = 3 [pid 5075] newfstatat(3, "", [pid 5920] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5919] <... symlink resumed>) = 0 [pid 5077] <... restart_syscall resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, [pid 5919] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5921] <... ioctl resumed>) = 0 [pid 5077] umount2("./138", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 5922 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5922 attached [pid 5077] openat(AT_FDCWD, "./138", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5922] set_robust_list(0x55556e32a660, 24 [pid 5077] newfstatat(3, "", [pid 5921] close(3 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5921] <... close resumed>) = 0 [pid 5077] getdents64(3, [pid 5921] close(4 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] umount2("./136/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5921] <... close resumed>) = 0 [pid 5077] umount2("./138/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5921] mkdir("./bus", 0777) = 0 [ 159.938315][ T28] audit: type=1800 audit(1710613042.034:827): pid=5918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 159.963093][ T5921] loop1: detected capacity change from 0 to 1024 [pid 5922] <... set_robust_list resumed>) = 0 [pid 5921] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5920] <... symlink resumed>) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5922] chdir("./139" [pid 5920] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5919] <... creat resumed>) = 4 [pid 5922] <... chdir resumed>) = 0 [pid 5922] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5921] <... mount resumed>) = 0 [pid 5077] umount2("./138/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5922] <... prctl resumed>) = 0 [pid 5922] setpgid(0, 0 [pid 5921] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5077] newfstatat(AT_FDCWD, "./138/bus", [pid 5919] rename("./bus", "./file2" [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5921] <... openat resumed>) = 3 [pid 5922] <... setpgid resumed>) = 0 [pid 5921] chdir("./bus" [pid 5077] umount2("./138/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5922] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5921] <... chdir resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5921] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5077] openat(AT_FDCWD, "./138/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5921] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... openat resumed>) = 4 [pid 5077] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5921] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5077] close(4 [pid 5921] <... symlink resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5077] rmdir("./138/bus") = 0 [pid 5077] umount2("./138/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = 0 [pid 5920] <... creat resumed>) = 4 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5922] <... openat resumed>) = 3 [pid 5077] newfstatat(AT_FDCWD, "./138/binderfs", [pid 5920] rename("./bus", "./file2" [pid 5921] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5922] write(3, "1000", 4 [pid 5921] <... creat resumed>) = 4 [pid 5919] <... rename resumed>) = -1 EEXIST (File exists) [pid 5077] unlink("./138/binderfs" [pid 5075] umount2("./136/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5922] <... write resumed>) = 4 [pid 5920] <... rename resumed>) = -1 EEXIST (File exists) [pid 5919] memfd_create("syzkaller", 0 [pid 5077] <... unlink resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5922] close(3 [pid 5921] rename("./bus", "./file2" [pid 5920] memfd_create("syzkaller", 0 [pid 5919] <... memfd_create resumed>) = 5 [pid 5077] getdents64(3, [pid 5075] newfstatat(AT_FDCWD, "./136/bus", [pid 5922] <... close resumed>) = 0 [pid 5921] <... rename resumed>) = -1 EEXIST (File exists) [pid 5919] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5922] symlink("/dev/binderfs", "./binderfs" [pid 5921] memfd_create("syzkaller", 0 [pid 5920] <... memfd_create resumed>) = 5 [pid 5919] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] close(3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5922] <... symlink resumed>) = 0 [pid 5921] <... memfd_create resumed>) = 5 [pid 5077] <... close resumed>) = 0 [pid 5921] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] rmdir("./138" [pid 5921] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] <... rmdir resumed>) = 0 [pid 5920] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5922] memfd_create("syzkaller", 0 [pid 5921] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] umount2("./136/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] mkdir("./139", 0777 [pid 5922] <... memfd_create resumed>) = 3 [pid 5920] <... mmap resumed>) = 0x7f0356e00000 [pid 5919] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... mkdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5922] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] openat(AT_FDCWD, "./136/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5922] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] newfstatat(4, "", [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5075] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] close(4) = 0 [pid 5075] rmdir("./136/bus") = 0 [pid 5921] <... write resumed>) = 524288 [pid 5922] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5920] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5919] <... write resumed>) = 524288 [pid 5075] umount2("./136/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./136/binderfs", [pid 5921] munmap(0x7f0356e00000, 138412032 [pid 5919] munmap(0x7f0356e00000, 138412032 [pid 5077] <... ioctl resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5921] <... munmap resumed>) = 0 [pid 5075] unlink("./136/binderfs") = 0 [pid 5919] <... munmap resumed>) = 0 [pid 5075] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 5919] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] rmdir("./136" [pid 5921] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5920] <... write resumed>) = 524288 [pid 5919] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... rmdir resumed>) = 0 [pid 5922] <... write resumed>) = 524288 [pid 5921] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5919] close(5 [pid 5921] close(5) = 0 [pid 5922] munmap(0x7f0356e00000, 138412032 [pid 5075] mkdir("./137", 0777 [pid 5920] munmap(0x7f0356e00000, 138412032 [pid 5077] close(3 [pid 5920] <... munmap resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5922] <... munmap resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5922] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5919] <... close resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 5923 attached [pid 5922] <... openat resumed>) = 4 [pid 5920] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] <... openat resumed>) = 3 [pid 5920] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 5923 [pid 5922] ioctl(4, LOOP_SET_FD, 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5923] set_robust_list(0x55556e32a660, 24 [pid 5921] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5920] close(5 [pid 5919] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5923] <... set_robust_list resumed>) = 0 [pid 5920] <... close resumed>) = 0 [pid 5923] chdir("./139") = 0 [pid 5921] <... open resumed>) = 5 [pid 5923] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5923] setpgid(0, 0) = 0 [pid 5921] ftruncate(5, 0 [pid 5923] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5921] <... ftruncate resumed>) = 0 [pid 5923] <... openat resumed>) = 3 [pid 5922] <... ioctl resumed>) = 0 [pid 5921] exit_group(0 [pid 5923] write(3, "1000", 4 [pid 5921] <... exit_group resumed>) = ? [pid 5923] <... write resumed>) = 4 [pid 5922] close(3 [pid 5921] +++ exited with 0 +++ [pid 5920] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5923] close(3 [pid 5922] <... close resumed>) = 0 [pid 5922] close(4 [pid 5923] <... close resumed>) = 0 [pid 5922] <... close resumed>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5921, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5923] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5074] umount2("./136", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./136", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] newfstatat(3, "", [pid 5922] mkdir("./bus", 0777 [pid 5919] <... open resumed>) = 5 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5919] ftruncate(5, 0 [pid 5923] memfd_create("syzkaller", 0 [pid 5919] <... ftruncate resumed>) = 0 [pid 5074] getdents64(3, [pid 5923] <... memfd_create resumed>) = 3 [pid 5922] <... mkdir resumed>) = 0 [pid 5919] exit_group(0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5919] <... exit_group resumed>) = ? [ 160.109121][ T5922] loop5: detected capacity change from 0 to 1024 [ 160.120866][ T28] audit: type=1800 audit(1710613042.224:828): pid=5921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop1" ino=20 res=0 errno=0 [pid 5922] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5923] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5920] <... open resumed>) = 5 [pid 5919] +++ exited with 0 +++ [pid 5074] umount2("./136/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5923] <... mmap resumed>) = 0x7f0356e00000 [pid 5920] ftruncate(5, 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5923] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5920] <... ftruncate resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5919, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5923] <... write resumed>) = 524288 [pid 5920] exit_group(0 [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5074] umount2("./136/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5920] <... exit_group resumed>) = ? [pid 5076] <... restart_syscall resumed>) = 0 [pid 5922] <... mount resumed>) = 0 [pid 5920] +++ exited with 0 +++ [pid 5075] <... ioctl resumed>) = 0 [pid 5922] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5076] umount2("./139", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5922] chdir("./bus" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5920, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5922] <... chdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./139", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 5922] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5076] <... openat resumed>) = 3 [pid 5922] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] newfstatat(3, "", [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... restart_syscall resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, [pid 5074] newfstatat(AT_FDCWD, "./136/bus", [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5922] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5076] umount2("./139/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./136/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./136", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5923] munmap(0x7f0356e00000, 138412032 [pid 5076] <... umount2 resumed>) = 0 [pid 5075] close(3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5923] <... munmap resumed>) = 0 [pid 5076] umount2("./139/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... close resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./136/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5922] <... symlink resumed>) = 0 [ 160.155250][ T28] audit: type=1800 audit(1710613042.254:829): pid=5919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop3" ino=20 res=0 errno=0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... openat resumed>) = 4 [pid 5073] openat(AT_FDCWD, "./136", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5923] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5922] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5076] newfstatat(AT_FDCWD, "./139/bus", [pid 5074] newfstatat(4, "", [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5923] <... openat resumed>) = 4 [pid 5076] umount2("./139/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5923] ioctl(4, LOOP_SET_FD, 3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 5924 [pid 5074] getdents64(4, [pid 5073] newfstatat(3, "", ./strace-static-x86_64: Process 5924 attached [pid 5076] openat(AT_FDCWD, "./139/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] newfstatat(4, "", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5924] set_robust_list(0x55556e32a660, 24) = 0 [pid 5073] getdents64(3, [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5924] chdir("./137") = 0 [pid 5076] getdents64(4, [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5924] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] umount2("./136/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5924] setpgid(0, 0) = 0 [pid 5076] getdents64(4, [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5924] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] close(4 [pid 5924] <... openat resumed>) = 3 [pid 5922] <... creat resumed>) = 4 [pid 5076] <... close resumed>) = 0 [pid 5074] getdents64(4, [pid 5073] <... umount2 resumed>) = 0 [pid 5076] rmdir("./139/bus" [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] close(4) = 0 [pid 5074] rmdir("./136/bus") = 0 [pid 5924] write(3, "1000", 4) = 4 [pid 5924] close(3) = 0 [pid 5922] rename("./bus", "./file2" [pid 5076] umount2("./139/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5924] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./139/binderfs", [pid 5924] <... symlink resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5922] <... rename resumed>) = -1 EEXIST (File exists) [pid 5076] unlink("./139/binderfs" [pid 5074] umount2("./136/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5924] memfd_create("syzkaller", 0 [pid 5922] memfd_create("syzkaller", 0 [pid 5076] <... unlink resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./136/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5922] <... memfd_create resumed>) = 5 [pid 5076] getdents64(3, [pid 5074] newfstatat(AT_FDCWD, "./136/binderfs", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5923] <... ioctl resumed>) = 0 [pid 5922] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] newfstatat(AT_FDCWD, "./136/bus", [pid 5924] <... memfd_create resumed>) = 3 [pid 5922] <... mmap resumed>) = 0x7f0356e00000 [pid 5924] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5076] close(3 [pid 5074] unlink("./136/binderfs" [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5923] close(3 [pid 5076] <... close resumed>) = 0 [pid 5923] <... close resumed>) = 0 [pid 5076] rmdir("./139" [pid 5073] umount2("./136/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5923] close(4 [pid 5074] <... unlink resumed>) = 0 [pid 5924] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5923] <... close resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] getdents64(3, [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5923] mkdir("./bus", 0777 [pid 5922] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] mkdir("./140", 0777 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] openat(AT_FDCWD, "./136/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5923] <... mkdir resumed>) = 0 [pid 5074] close(3 [pid 5073] <... openat resumed>) = 4 [pid 5923] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5076] <... mkdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5073] newfstatat(4, "", [pid 5074] rmdir("./136" [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] mkdir("./137", 0777 [ 160.223072][ T5923] loop4: detected capacity change from 0 to 1024 [pid 5073] close(4 [pid 5076] <... openat resumed>) = 3 [pid 5074] <... mkdir resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] rmdir("./136/bus" [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5073] <... rmdir resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] umount2("./136/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5924] <... write resumed>) = 524288 [pid 5924] munmap(0x7f0356e00000, 138412032 [pid 5923] <... mount resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./136/binderfs", [pid 5923] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5924] <... munmap resumed>) = 0 [pid 5922] <... write resumed>) = 524288 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5924] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5923] <... openat resumed>) = 3 [pid 5922] munmap(0x7f0356e00000, 138412032 [pid 5073] unlink("./136/binderfs" [pid 5924] <... openat resumed>) = 4 [pid 5923] chdir("./bus" [pid 5922] <... munmap resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5923] <... chdir resumed>) = 0 [pid 5924] ioctl(4, LOOP_SET_FD, 3 [pid 5923] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5922] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] getdents64(3, [pid 5924] <... ioctl resumed>) = 0 [pid 5923] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5922] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5924] close(3 [pid 5923] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5922] close(5 [pid 5073] close(3 [pid 5924] <... close resumed>) = 0 [pid 5924] close(4 [pid 5923] <... symlink resumed>) = 0 [pid 5922] <... close resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5924] <... close resumed>) = 0 [pid 5923] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5922] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5073] rmdir("./136" [pid 5924] mkdir("./bus", 0777 [pid 5073] <... rmdir resumed>) = 0 [pid 5924] <... mkdir resumed>) = 0 [pid 5073] mkdir("./137", 0777 [pid 5924] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5073] <... mkdir resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD [ 160.308933][ T5924] loop2: detected capacity change from 0 to 1024 [pid 5076] close(3) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5924] <... mount resumed>) = 0 [pid 5922] <... open resumed>) = 5 [pid 5923] <... creat resumed>) = 4 [pid 5074] close(3 [pid 5924] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5923] rename("./bus", "./file2"./strace-static-x86_64: Process 5925 attached [pid 5074] <... close resumed>) = 0 [pid 5925] set_robust_list(0x55556e32a660, 24 [pid 5924] <... openat resumed>) = 3 [pid 5923] <... rename resumed>) = -1 EEXIST (File exists) [pid 5922] ftruncate(5, 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5925] <... set_robust_list resumed>) = 0 [pid 5924] chdir("./bus" [pid 5923] memfd_create("syzkaller", 0 [pid 5922] <... ftruncate resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 5925 [pid 5925] chdir("./140" [pid 5924] <... chdir resumed>) = 0 [pid 5923] <... memfd_create resumed>) = 5 [pid 5922] exit_group(0./strace-static-x86_64: Process 5926 attached [pid 5925] <... chdir resumed>) = 0 [pid 5924] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5923] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5922] <... exit_group resumed>) = ? [pid 5926] set_robust_list(0x55556e32a660, 24) = 0 [pid 5926] chdir("./137") = 0 [pid 5926] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5924] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5923] <... mmap resumed>) = 0x7f0356e00000 [pid 5922] +++ exited with 0 +++ [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 5926 [pid 5926] setpgid(0, 0 [pid 5925] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5924] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5926] <... setpgid resumed>) = 0 [pid 5925] <... prctl resumed>) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5922, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5926] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5078] umount2("./139", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5926] <... openat resumed>) = 3 [pid 5925] setpgid(0, 0 [pid 5923] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5926] write(3, "1000", 4 [pid 5925] <... setpgid resumed>) = 0 [pid 5924] <... symlink resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./139", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5926] <... write resumed>) = 4 [pid 5925] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5924] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] <... openat resumed>) = 3 [pid 5926] close(3) = 0 [pid 5925] <... openat resumed>) = 3 [pid 5078] newfstatat(3, "", [pid 5926] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5924] <... creat resumed>) = 4 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5925] write(3, "1000", 4 [pid 5926] memfd_create("syzkaller", 0 [pid 5925] <... write resumed>) = 4 [pid 5078] getdents64(3, [pid 5925] close(3 [pid 5924] rename("./bus", "./file2" [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5926] <... memfd_create resumed>) = 3 [pid 5925] <... close resumed>) = 0 [pid 5078] umount2("./139/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5925] symlink("/dev/binderfs", "./binderfs" [pid 5926] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5925] <... symlink resumed>) = 0 [pid 5926] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5925] memfd_create("syzkaller", 0 [pid 5924] <... rename resumed>) = -1 EEXIST (File exists) [pid 5073] <... ioctl resumed>) = 0 [pid 5925] <... memfd_create resumed>) = 3 [pid 5924] memfd_create("syzkaller", 0 [pid 5925] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5924] <... memfd_create resumed>) = 5 [pid 5923] <... write resumed>) = 524288 [pid 5078] <... umount2 resumed>) = 0 [pid 5925] <... mmap resumed>) = 0x7f0356e00000 [pid 5924] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5925] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5924] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] umount2("./139/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] close(3 [pid 5078] newfstatat(AT_FDCWD, "./139/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... close resumed>) = 0 [pid 5078] umount2("./139/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5924] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5926] <... write resumed>) = 524288 [pid 5078] openat(AT_FDCWD, "./139/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5927 attached [pid 5927] set_robust_list(0x55556e32a660, 24 [pid 5925] <... write resumed>) = 524288 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 5927 [pid 5927] <... set_robust_list resumed>) = 0 [pid 5078] <... openat resumed>) = 4 [pid 5927] chdir("./137" [pid 5078] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5927] <... chdir resumed>) = 0 [pid 5078] getdents64(4, [pid 5927] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5923] munmap(0x7f0356e00000, 138412032 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5927] <... prctl resumed>) = 0 [pid 5078] close(4 [pid 5927] setpgid(0, 0 [pid 5078] <... close resumed>) = 0 [pid 5927] <... setpgid resumed>) = 0 [pid 5078] rmdir("./139/bus") = 0 [pid 5927] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5078] umount2("./139/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5927] <... openat resumed>) = 3 [pid 5924] <... write resumed>) = 524288 [pid 5923] <... munmap resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5927] write(3, "1000", 4 [pid 5078] newfstatat(AT_FDCWD, "./139/binderfs", [pid 5927] <... write resumed>) = 4 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5927] close(3 [pid 5078] unlink("./139/binderfs" [pid 5927] <... close resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5927] symlink("/dev/binderfs", "./binderfs" [pid 5923] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] getdents64(3, [pid 5927] <... symlink resumed>) = 0 [pid 5926] munmap(0x7f0356e00000, 138412032 [pid 5925] munmap(0x7f0356e00000, 138412032 [pid 5923] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5927] memfd_create("syzkaller", 0 [pid 5926] <... munmap resumed>) = 0 [pid 5925] <... munmap resumed>) = 0 [pid 5923] close(5 [pid 5078] close(3 [pid 5927] <... memfd_create resumed>) = 3 [pid 5078] <... close resumed>) = 0 [pid 5927] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] rmdir("./139" [pid 5927] <... mmap resumed>) = 0x7f0356e00000 [pid 5926] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5925] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5078] <... rmdir resumed>) = 0 [pid 5927] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5926] <... openat resumed>) = 4 [pid 5925] <... openat resumed>) = 4 [pid 5078] mkdir("./140", 0777 [pid 5926] ioctl(4, LOOP_SET_FD, 3 [pid 5925] ioctl(4, LOOP_SET_FD, 3 [pid 5078] <... mkdir resumed>) = 0 [pid 5924] munmap(0x7f0356e00000, 138412032 [pid 5923] <... close resumed>) = 0 [pid 5925] <... ioctl resumed>) = 0 [pid 5924] <... munmap resumed>) = 0 [pid 5923] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5924] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5924] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5923] <... open resumed>) = 5 [pid 5078] <... openat resumed>) = 3 [pid 5924] close(5 [pid 5923] ftruncate(5, 0 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5924] <... close resumed>) = 0 [pid 5927] <... write resumed>) = 524288 [pid 5923] <... ftruncate resumed>) = 0 [pid 5923] exit_group(0) = ? [pid 5926] <... ioctl resumed>) = 0 [pid 5927] munmap(0x7f0356e00000, 138412032 [pid 5926] close(3 [pid 5925] close(3 [pid 5927] <... munmap resumed>) = 0 [pid 5926] <... close resumed>) = 0 [pid 5925] <... close resumed>) = 0 [pid 5924] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5923] +++ exited with 0 +++ [pid 5926] close(4 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5923, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5926] <... close resumed>) = 0 [pid 5925] close(4 [pid 5077] umount2("./139", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5927] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5926] mkdir("./bus", 0777 [pid 5925] <... close resumed>) = 0 [pid 5924] <... open resumed>) = 5 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5927] <... openat resumed>) = 4 [pid 5926] <... mkdir resumed>) = 0 [pid 5925] mkdir("./bus", 0777 [pid 5924] ftruncate(5, 0 [pid 5077] openat(AT_FDCWD, "./139", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5927] ioctl(4, LOOP_SET_FD, 3 [pid 5925] <... mkdir resumed>) = 0 [pid 5924] <... ftruncate resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [ 160.487007][ T5925] loop3: detected capacity change from 0 to 1024 [ 160.493561][ T5926] loop1: detected capacity change from 0 to 1024 [pid 5926] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5924] exit_group(0 [pid 5077] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5924] <... exit_group resumed>) = ? [pid 5077] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] umount2("./139/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5925] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5924] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5924, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5078] <... ioctl resumed>) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5075] umount2("./137", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] close(3 [pid 5927] <... ioctl resumed>) = 0 [pid 5926] <... mount resumed>) = 0 [pid 5925] <... mount resumed>) = 0 [pid 5077] umount2("./139/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5925] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5075] openat(AT_FDCWD, "./137", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5926] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5925] <... openat resumed>) = 3 [pid 5927] close(3 [pid 5926] <... openat resumed>) = 3 [pid 5078] <... close resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... openat resumed>) = 3 [pid 5927] <... close resumed>) = 0 [pid 5926] chdir("./bus" [pid 5925] chdir("./bus" [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] newfstatat(AT_FDCWD, "./139/bus", [pid 5927] close(4 [pid 5926] <... chdir resumed>) = 0 [pid 5925] <... chdir resumed>) = 0 [pid 5927] <... close resumed>) = 0 [pid 5926] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5925] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] newfstatat(3, "", [pid 5927] mkdir("./bus", 0777 [pid 5926] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5925] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 5928 attached [pid 5927] <... mkdir resumed>) = 0 [pid 5926] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5925] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 5928 [pid 5077] umount2("./139/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./139/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] getdents64(3, [pid 5928] set_robust_list(0x55556e32a660, 24) = 0 [pid 5927] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5926] <... symlink resumed>) = 0 [pid 5925] <... symlink resumed>) = 0 [pid 5077] <... openat resumed>) = 4 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5928] chdir("./140" [ 160.531944][ T5927] loop0: detected capacity change from 0 to 1024 [pid 5926] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5925] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5077] newfstatat(4, "", [pid 5075] umount2("./137/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5928] <... chdir resumed>) = 0 [pid 5928] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5928] <... prctl resumed>) = 0 [pid 5077] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5928] setpgid(0, 0 [pid 5077] getdents64(4, [pid 5927] <... mount resumed>) = 0 [pid 5927] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5927] chdir("./bus") = 0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5928] <... setpgid resumed>) = 0 [pid 5077] close(4 [pid 5928] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5927] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5926] <... creat resumed>) = 4 [pid 5077] <... close resumed>) = 0 [pid 5926] rename("./bus", "./file2" [pid 5927] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5926] <... rename resumed>) = -1 EEXIST (File exists) [pid 5925] <... creat resumed>) = 4 [pid 5927] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5926] memfd_create("syzkaller", 0 [pid 5925] rename("./bus", "./file2" [pid 5926] <... memfd_create resumed>) = 5 [pid 5925] <... rename resumed>) = -1 EEXIST (File exists) [pid 5926] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5925] memfd_create("syzkaller", 0 [pid 5926] <... mmap resumed>) = 0x7f0356e00000 [pid 5925] <... memfd_create resumed>) = 5 [pid 5925] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] rmdir("./139/bus" [pid 5927] <... symlink resumed>) = 0 [pid 5925] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] <... rmdir resumed>) = 0 [pid 5928] <... openat resumed>) = 3 [pid 5927] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5925] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] umount2("./139/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./139/binderfs", [pid 5928] write(3, "1000", 4 [pid 5927] <... creat resumed>) = 4 [pid 5926] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5927] rename("./bus", "./file2") = -1 EEXIST (File exists) [pid 5928] <... write resumed>) = 4 [pid 5927] memfd_create("syzkaller", 0 [pid 5077] unlink("./139/binderfs" [pid 5075] umount2("./137/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5928] close(3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5928] <... close resumed>) = 0 [pid 5928] symlink("/dev/binderfs", "./binderfs" [pid 5927] <... memfd_create resumed>) = 5 [pid 5077] <... unlink resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./137/bus", [pid 5928] <... symlink resumed>) = 0 [pid 5927] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5928] memfd_create("syzkaller", 0 [pid 5927] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] getdents64(3, [pid 5075] umount2("./137/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5928] <... memfd_create resumed>) = 3 [pid 5927] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./137/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5077] close(3 [pid 5075] newfstatat(4, "", [pid 5928] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, [pid 5928] <... mmap resumed>) = 0x7f0356e00000 [pid 5927] <... write resumed>) = 524288 [pid 5926] <... write resumed>) = 524288 [pid 5925] <... write resumed>) = 524288 [pid 5077] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] rmdir("./139" [pid 5925] munmap(0x7f0356e00000, 138412032 [pid 5075] close(4 [pid 5926] munmap(0x7f0356e00000, 138412032 [pid 5925] <... munmap resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5926] <... munmap resumed>) = 0 [pid 5925] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] rmdir("./137/bus" [pid 5926] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5925] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... rmdir resumed>) = 0 [pid 5926] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5925] close(5 [pid 5077] mkdir("./140", 0777 [pid 5928] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5926] close(5 [pid 5925] <... close resumed>) = 0 [pid 5926] <... close resumed>) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 5075] umount2("./137/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5927] munmap(0x7f0356e00000, 138412032 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5927] <... munmap resumed>) = 0 [pid 5925] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5075] newfstatat(AT_FDCWD, "./137/binderfs", [pid 5927] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5925] <... open resumed>) = 5 [pid 5077] <... openat resumed>) = 3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5928] <... write resumed>) = 524288 [pid 5927] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5926] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5925] ftruncate(5, 0 [pid 5075] unlink("./137/binderfs" [pid 5927] close(5) = 0 [pid 5925] <... ftruncate resumed>) = 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5075] <... unlink resumed>) = 0 [pid 5926] <... open resumed>) = 5 [pid 5926] ftruncate(5, 0 [pid 5075] getdents64(3, [pid 5926] <... ftruncate resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5928] munmap(0x7f0356e00000, 138412032 [pid 5926] exit_group(0 [pid 5075] close(3 [pid 5925] exit_group(0 [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./137" [pid 5926] <... exit_group resumed>) = ? [pid 5928] <... munmap resumed>) = 0 [pid 5926] +++ exited with 0 +++ [pid 5075] <... rmdir resumed>) = 0 [pid 5928] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] mkdir("./138", 0777 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5926, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5925] <... exit_group resumed>) = ? [pid 5928] <... openat resumed>) = 4 [pid 5925] +++ exited with 0 +++ [pid 5074] umount2("./137", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5925, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./137", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] umount2("./140", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... openat resumed>) = 3 [pid 5927] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5928] ioctl(4, LOOP_SET_FD, 3 [pid 5076] openat(AT_FDCWD, "./140", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... mkdir resumed>) = 0 [pid 5074] newfstatat(3, "", [pid 5076] <... openat resumed>) = 3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] newfstatat(3, "", [pid 5074] getdents64(3, [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5927] <... open resumed>) = 5 [pid 5927] ftruncate(5, 0) = 0 [pid 5928] <... ioctl resumed>) = 0 [pid 5076] getdents64(3, [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] umount2("./137/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5928] close(3) = 0 [pid 5927] exit_group(0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] <... openat resumed>) = 3 [pid 5928] close(4) = 0 [pid 5927] <... exit_group resumed>) = ? [pid 5076] umount2("./140/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5928] mkdir("./bus", 0777 [pid 5927] +++ exited with 0 +++ [pid 5928] <... mkdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5927, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5928] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5074] umount2("./137/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./137", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./137/bus", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./137", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] umount2("./137/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] getdents64(3, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./140/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] openat(AT_FDCWD, "./137/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] <... ioctl resumed>) = 0 [pid 5077] close(3) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... openat resumed>) = 4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./140/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./140/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./140/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] newfstatat(4, "", [pid 5073] umount2("./137/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... openat resumed>) = 4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 5929 attached [pid 5074] getdents64(4, [pid 5929] set_robust_list(0x55556e32a660, 24 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 5929 [pid 5929] <... set_robust_list resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5929] chdir("./140" [pid 5076] newfstatat(4, "", [pid 5074] getdents64(4, [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5929] <... chdir resumed>) = 0 [pid 5076] getdents64(4, [ 160.729518][ T5928] loop5: detected capacity change from 0 to 1024 [pid 5074] close(4 [pid 5929] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5928] <... mount resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] <... ioctl resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5928] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5929] <... prctl resumed>) = 0 [pid 5928] <... openat resumed>) = 3 [pid 5075] close(3 [pid 5074] rmdir("./137/bus" [pid 5928] chdir("./bus" [pid 5075] <... close resumed>) = 0 [pid 5929] setpgid(0, 0) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5929] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5076] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] close(4./strace-static-x86_64: Process 5930 attached [pid 5929] write(3, "1000", 4 [pid 5928] <... chdir resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 5930 [pid 5074] umount2("./137/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5930] set_robust_list(0x55556e32a660, 24 [pid 5928] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5930] <... set_robust_list resumed>) = 0 [pid 5929] <... write resumed>) = 4 [pid 5928] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] rmdir("./140/bus" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = 0 [pid 5930] chdir("./138" [pid 5928] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5076] <... rmdir resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./137/binderfs", [pid 5073] umount2("./137/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./140/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./137/bus", [pid 5929] close(3 [pid 5076] newfstatat(AT_FDCWD, "./140/binderfs", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5930] <... chdir resumed>) = 0 [pid 5929] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./137/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5930] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5929] symlink("/dev/binderfs", "./binderfs" [pid 5076] unlink("./140/binderfs" [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5930] <... prctl resumed>) = 0 [pid 5929] <... symlink resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5074] unlink("./137/binderfs" [pid 5073] openat(AT_FDCWD, "./137/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5930] setpgid(0, 0 [pid 5929] memfd_create("syzkaller", 0 [pid 5928] <... symlink resumed>) = 0 [pid 5076] getdents64(3, [pid 5074] <... unlink resumed>) = 0 [pid 5073] <... openat resumed>) = 4 [pid 5930] <... setpgid resumed>) = 0 [pid 5929] <... memfd_create resumed>) = 3 [pid 5929] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] newfstatat(4, "", [pid 5929] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] close(3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... close resumed>) = 0 [pid 5073] getdents64(4, [pid 5076] rmdir("./140" [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5930] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5929] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... rmdir resumed>) = 0 [pid 5073] getdents64(4, [pid 5074] getdents64(3, [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] close(4 [pid 5930] <... openat resumed>) = 3 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5928] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5076] mkdir("./141", 0777 [pid 5073] <... close resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5074] close(3 [pid 5073] rmdir("./137/bus" [pid 5930] write(3, "1000", 4 [pid 5074] <... close resumed>) = 0 [pid 5930] <... write resumed>) = 4 [pid 5928] <... creat resumed>) = 4 [pid 5074] rmdir("./137" [pid 5073] <... rmdir resumed>) = 0 [pid 5930] close(3 [pid 5928] rename("./bus", "./file2" [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] umount2("./137/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5930] <... close resumed>) = 0 [pid 5928] <... rename resumed>) = -1 EEXIST (File exists) [pid 5076] <... openat resumed>) = 3 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5930] symlink("/dev/binderfs", "./binderfs" [pid 5928] memfd_create("syzkaller", 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5073] newfstatat(AT_FDCWD, "./137/binderfs", [pid 5930] <... symlink resumed>) = 0 [pid 5928] <... memfd_create resumed>) = 5 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5928] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] unlink("./137/binderfs" [pid 5930] memfd_create("syzkaller", 0 [pid 5928] <... mmap resumed>) = 0x7f0356e00000 [pid 5074] mkdir("./138", 0777 [pid 5073] <... unlink resumed>) = 0 [pid 5930] <... memfd_create resumed>) = 3 [pid 5074] <... mkdir resumed>) = 0 [pid 5073] getdents64(3, [pid 5930] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./137" [pid 5930] <... mmap resumed>) = 0x7f0356e00000 [pid 5929] <... write resumed>) = 524288 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] <... rmdir resumed>) = 0 [pid 5073] mkdir("./138", 0777 [pid 5930] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5929] munmap(0x7f0356e00000, 138412032 [pid 5928] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... openat resumed>) = 3 [pid 5930] <... write resumed>) = 524288 [pid 5929] <... munmap resumed>) = 0 [pid 5928] <... write resumed>) = 524288 [pid 5073] <... mkdir resumed>) = 0 [pid 5929] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5928] munmap(0x7f0356e00000, 138412032 [pid 5929] <... openat resumed>) = 4 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5930] munmap(0x7f0356e00000, 138412032 [pid 5929] ioctl(4, LOOP_SET_FD, 3 [pid 5928] <... munmap resumed>) = 0 [pid 5930] <... munmap resumed>) = 0 [pid 5929] <... ioctl resumed>) = 0 [pid 5928] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5930] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5929] close(3 [pid 5928] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5930] ioctl(4, LOOP_SET_FD, 3 [pid 5929] <... close resumed>) = 0 [pid 5928] close(5 [pid 5929] close(4 [pid 5928] <... close resumed>) = 0 [pid 5930] <... ioctl resumed>) = 0 [pid 5929] <... close resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5929] mkdir("./bus", 0777 [pid 5930] close(3 [pid 5929] <... mkdir resumed>) = 0 [pid 5076] close(3 [pid 5930] <... close resumed>) = 0 [pid 5930] close(4 [pid 5076] <... close resumed>) = 0 [pid 5929] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5930] <... close resumed>) = 0 [pid 5928] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5930] mkdir("./bus", 0777 [pid 5073] <... ioctl resumed>) = 0 [pid 5930] <... mkdir resumed>) = 0 [pid 5930] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5928] <... open resumed>) = 5 ./strace-static-x86_64: Process 5931 attached [pid 5928] ftruncate(5, 0 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 5931 [pid 5931] set_robust_list(0x55556e32a660, 24) = 0 [pid 5930] <... mount resumed>) = 0 [pid 5928] <... ftruncate resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5073] close(3 [pid 5929] <... mount resumed>) = 0 [pid 5931] chdir("./141" [pid 5073] <... close resumed>) = 0 [pid 5930] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5929] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5928] exit_group(0 [pid 5929] <... openat resumed>) = 3 [pid 5928] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 5932 attached [pid 5931] <... chdir resumed>) = 0 [pid 5930] <... openat resumed>) = 3 [pid 5929] chdir("./bus" [pid 5931] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5930] chdir("./bus" [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 5932 [ 160.896105][ T5929] loop4: detected capacity change from 0 to 1024 [ 160.904337][ T5930] loop2: detected capacity change from 0 to 1024 [pid 5931] <... prctl resumed>) = 0 [pid 5930] <... chdir resumed>) = 0 [pid 5932] set_robust_list(0x55556e32a660, 24 [pid 5931] setpgid(0, 0 [pid 5930] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5929] <... chdir resumed>) = 0 [pid 5928] +++ exited with 0 +++ [pid 5074] close(3 [pid 5932] <... set_robust_list resumed>) = 0 [pid 5931] <... setpgid resumed>) = 0 [pid 5930] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5929] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] <... close resumed>) = 0 [pid 5932] chdir("./138" [pid 5931] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5930] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5929] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5928, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5932] <... chdir resumed>) = 0 [pid 5931] <... openat resumed>) = 3 [pid 5929] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] restart_syscall(<... resuming interrupted clone ...> [pid 5932] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5931] write(3, "1000", 4 [pid 5078] <... restart_syscall resumed>) = 0 [pid 5932] <... prctl resumed>) = 0 [pid 5931] <... write resumed>) = 4 [pid 5929] <... symlink resumed>) = 0 [pid 5932] setpgid(0, 0 [pid 5931] close(3 [pid 5930] <... symlink resumed>) = 0 [pid 5932] <... setpgid resumed>) = 0 [pid 5931] <... close resumed>) = 0 [pid 5930] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5932] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5931] symlink("/dev/binderfs", "./binderfs" [pid 5929] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 5933 attached [pid 5932] <... openat resumed>) = 3 [pid 5931] <... symlink resumed>) = 0 [pid 5078] umount2("./140", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 5933 [pid 5933] set_robust_list(0x55556e32a660, 24 [pid 5929] <... creat resumed>) = 4 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5933] <... set_robust_list resumed>) = 0 [pid 5932] write(3, "1000", 4 [pid 5078] openat(AT_FDCWD, "./140", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5933] chdir("./138" [pid 5932] <... write resumed>) = 4 [pid 5931] memfd_create("syzkaller", 0 [pid 5930] <... creat resumed>) = 4 [pid 5078] <... openat resumed>) = 3 [pid 5929] rename("./bus", "./file2" [pid 5933] <... chdir resumed>) = 0 [pid 5932] close(3 [pid 5931] <... memfd_create resumed>) = 3 [pid 5930] rename("./bus", "./file2" [pid 5933] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5932] <... close resumed>) = 0 [pid 5931] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] newfstatat(3, "", [pid 5933] <... prctl resumed>) = 0 [pid 5932] symlink("/dev/binderfs", "./binderfs" [pid 5931] <... mmap resumed>) = 0x7f0356e00000 [pid 5930] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5933] setpgid(0, 0 [pid 5932] <... symlink resumed>) = 0 [pid 5931] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5930] memfd_create("syzkaller", 0 [pid 5929] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] getdents64(3, [pid 5933] <... setpgid resumed>) = 0 [pid 5932] memfd_create("syzkaller", 0 [pid 5933] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5930] <... memfd_create resumed>) = 5 [pid 5932] <... memfd_create resumed>) = 3 [pid 5930] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5932] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5930] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] umount2("./140/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5933] <... openat resumed>) = 3 [pid 5932] <... mmap resumed>) = 0x7f0356e00000 [pid 5932] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5929] memfd_create("syzkaller", 0 [pid 5933] write(3, "1000", 4 [pid 5929] <... memfd_create resumed>) = 5 [pid 5933] <... write resumed>) = 4 [pid 5929] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5933] close(3 [pid 5929] <... mmap resumed>) = 0x7f0356e00000 [pid 5933] <... close resumed>) = 0 [pid 5933] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5933] memfd_create("syzkaller", 0 [pid 5078] <... umount2 resumed>) = 0 [pid 5931] <... write resumed>) = 524288 [pid 5929] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5933] <... memfd_create resumed>) = 3 [pid 5930] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5933] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5933] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] umount2("./140/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5930] <... write resumed>) = 524288 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5931] munmap(0x7f0356e00000, 138412032) = 0 [pid 5078] newfstatat(AT_FDCWD, "./140/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] umount2("./140/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5932] <... write resumed>) = 524288 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5933] <... write resumed>) = 524288 [pid 5931] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5929] <... write resumed>) = 524288 [pid 5078] openat(AT_FDCWD, "./140/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5931] <... openat resumed>) = 4 [pid 5078] newfstatat(4, "", [pid 5932] munmap(0x7f0356e00000, 138412032 [pid 5931] ioctl(4, LOOP_SET_FD, 3 [pid 5930] munmap(0x7f0356e00000, 138412032 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(4, [pid 5932] <... munmap resumed>) = 0 [pid 5930] <... munmap resumed>) = 0 [pid 5929] munmap(0x7f0356e00000, 138412032 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5929] <... munmap resumed>) = 0 [pid 5078] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5932] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5078] close(4 [pid 5929] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] <... close resumed>) = 0 [pid 5932] <... openat resumed>) = 4 [pid 5078] rmdir("./140/bus" [pid 5929] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5929] close(5 [pid 5078] <... rmdir resumed>) = 0 [pid 5930] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5932] ioctl(4, LOOP_SET_FD, 3 [pid 5930] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5929] <... close resumed>) = 0 [pid 5078] umount2("./140/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5933] munmap(0x7f0356e00000, 138412032 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5933] <... munmap resumed>) = 0 [pid 5078] newfstatat(AT_FDCWD, "./140/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] unlink("./140/binderfs" [pid 5930] close(5) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5933] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5078] getdents64(3, [pid 5933] <... openat resumed>) = 4 [pid 5933] ioctl(4, LOOP_SET_FD, 3 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5931] <... ioctl resumed>) = 0 [pid 5931] close(3) = 0 [pid 5932] <... ioctl resumed>) = 0 [pid 5931] close(4 [pid 5930] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5932] close(3 [pid 5931] <... close resumed>) = 0 [pid 5931] mkdir("./bus", 0777) = 0 [pid 5931] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5932] <... close resumed>) = 0 [pid 5932] close(4) = 0 [pid 5932] mkdir("./bus", 0777) = 0 [pid 5932] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5930] <... open resumed>) = 5 [pid 5929] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] close(3 [pid 5930] ftruncate(5, 0 [pid 5078] <... close resumed>) = 0 [pid 5930] <... ftruncate resumed>) = 0 [pid 5078] rmdir("./140" [pid 5929] <... open resumed>) = 5 [pid 5930] exit_group(0) = ? [pid 5929] ftruncate(5, 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5930] +++ exited with 0 +++ [pid 5929] <... ftruncate resumed>) = 0 [pid 5078] mkdir("./141", 0777 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5930, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5075] umount2("./138", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./138", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5933] <... ioctl resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5075] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5933] close(3 [pid 5075] umount2("./138/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5933] <... close resumed>) = 0 [pid 5933] close(4) = 0 [pid 5933] mkdir("./bus", 0777) = 0 [pid 5929] exit_group(0 [pid 5078] <... mkdir resumed>) = 0 [ 161.066071][ T5931] loop3: detected capacity change from 0 to 1024 [ 161.080321][ T5932] loop0: detected capacity change from 0 to 1024 [ 161.098932][ T5933] loop1: detected capacity change from 0 to 1024 [pid 5929] <... exit_group resumed>) = ? [pid 5931] <... mount resumed>) = 0 [pid 5933] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5931] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5932] <... mount resumed>) = 0 [pid 5931] <... openat resumed>) = 3 [pid 5932] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5931] chdir("./bus" [pid 5932] <... openat resumed>) = 3 [pid 5932] chdir("./bus" [pid 5931] <... chdir resumed>) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5932] <... chdir resumed>) = 0 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5932] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5931] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5932] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5931] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5933] <... mount resumed>) = 0 [pid 5932] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5931] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5933] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5932] <... symlink resumed>) = 0 [pid 5931] <... symlink resumed>) = 0 [pid 5929] +++ exited with 0 +++ [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5929, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5933] <... openat resumed>) = 3 [pid 5932] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5931] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5933] chdir("./bus" [pid 5077] umount2("./140", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5933] <... chdir resumed>) = 0 [pid 5931] <... creat resumed>) = 4 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5933] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5077] openat(AT_FDCWD, "./140", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5933] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5932] <... creat resumed>) = 4 [pid 5931] rename("./bus", "./file2" [pid 5077] <... openat resumed>) = 3 [pid 5933] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5077] newfstatat(3, "", [pid 5932] rename("./bus", "./file2" [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5931] <... rename resumed>) = -1 EEXIST (File exists) [pid 5077] getdents64(3, [pid 5932] <... rename resumed>) = -1 EEXIST (File exists) [pid 5931] memfd_create("syzkaller", 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] <... umount2 resumed>) = 0 [pid 5075] umount2("./138/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5933] <... symlink resumed>) = 0 [pid 5931] <... memfd_create resumed>) = 5 [pid 5077] umount2("./140/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5933] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5931] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5932] memfd_create("syzkaller", 0 [pid 5931] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] newfstatat(AT_FDCWD, "./138/bus", [pid 5932] <... memfd_create resumed>) = 5 [pid 5932] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./138/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./138/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5931] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5932] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5933] <... creat resumed>) = 4 [pid 5933] rename("./bus", "./file2" [pid 5932] <... write resumed>) = 524288 [pid 5077] <... umount2 resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 5933] <... rename resumed>) = -1 EEXIST (File exists) [pid 5933] memfd_create("syzkaller", 0 [pid 5931] <... write resumed>) = 524288 [pid 5075] newfstatat(4, "", [pid 5933] <... memfd_create resumed>) = 5 [pid 5933] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] <... ioctl resumed>) = 0 [pid 5078] close(3 [pid 5077] umount2("./140/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... close resumed>) = 0 [pid 5075] getdents64(4, [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] newfstatat(AT_FDCWD, "./140/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5933] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5932] munmap(0x7f0356e00000, 138412032 [pid 5077] umount2("./140/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5932] <... munmap resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(4, [pid 5931] munmap(0x7f0356e00000, 138412032 [pid 5077] openat(AT_FDCWD, "./140/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5934 attached [pid 5932] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5931] <... munmap resumed>) = 0 [pid 5077] <... openat resumed>) = 4 [pid 5075] close(4 [pid 5934] set_robust_list(0x55556e32a660, 24 [pid 5932] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 5934 [pid 5077] newfstatat(4, "", [pid 5075] <... close resumed>) = 0 [pid 5934] <... set_robust_list resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] rmdir("./138/bus" [pid 5077] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] getdents64(4, [pid 5934] chdir("./141" [pid 5933] <... write resumed>) = 524288 [pid 5932] close(5 [pid 5931] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5934] <... chdir resumed>) = 0 [pid 5931] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] close(4 [pid 5075] umount2("./138/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5934] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5931] close(5 [pid 5077] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5934] <... prctl resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./138/binderfs", [pid 5934] setpgid(0, 0 [pid 5931] <... close resumed>) = 0 [pid 5077] rmdir("./140/bus" [pid 5934] <... setpgid resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5932] <... close resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5075] unlink("./138/binderfs" [pid 5077] umount2("./140/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] <... unlink resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./140/binderfs", [pid 5932] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5075] getdents64(3, [pid 5934] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] unlink("./140/binderfs") = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] getdents64(3, [pid 5075] close(3 [pid 5934] <... openat resumed>) = 3 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] <... close resumed>) = 0 [pid 5077] close(3) = 0 [pid 5077] rmdir("./140" [pid 5934] write(3, "1000", 4 [pid 5933] munmap(0x7f0356e00000, 138412032 [pid 5931] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] <... rmdir resumed>) = 0 [pid 5075] rmdir("./138" [pid 5077] mkdir("./141", 0777) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5075] mkdir("./139", 0777 [pid 5077] <... openat resumed>) = 3 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5933] <... munmap resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5934] <... write resumed>) = 4 [pid 5934] close(3 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5934] <... close resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5934] symlink("/dev/binderfs", "./binderfs" [pid 5933] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5933] close(5 [pid 5934] <... symlink resumed>) = 0 [pid 5931] <... open resumed>) = 5 [pid 5934] memfd_create("syzkaller", 0 [pid 5932] <... open resumed>) = 5 [pid 5932] ftruncate(5, 0) = 0 [pid 5932] exit_group(0 [pid 5934] <... memfd_create resumed>) = 3 [pid 5931] ftruncate(5, 0 [pid 5934] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5933] <... close resumed>) = 0 [pid 5932] <... exit_group resumed>) = ? [pid 5931] <... ftruncate resumed>) = 0 [pid 5934] <... mmap resumed>) = 0x7f0356e00000 [pid 5932] +++ exited with 0 +++ [pid 5931] exit_group(0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5932, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5073] umount2("./138", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] <... ioctl resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./138", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5933] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5073] <... openat resumed>) = 3 [pid 5931] <... exit_group resumed>) = ? [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] umount2("./138/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] close(3 [pid 5934] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5933] <... open resumed>) = 5 [pid 5933] ftruncate(5, 0) = 0 [pid 5931] +++ exited with 0 +++ [pid 5077] <... close resumed>) = 0 [pid 5933] exit_group(0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... umount2 resumed>) = 0 [pid 5933] <... exit_group resumed>) = ? [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5931, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5076] umount2("./141", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./141", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] umount2("./138/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5935 attached [pid 5934] <... write resumed>) = 524288 [pid 5933] +++ exited with 0 +++ [pid 5076] newfstatat(3, "", [pid 5075] <... ioctl resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, [pid 5934] munmap(0x7f0356e00000, 138412032 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5933, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5073] newfstatat(AT_FDCWD, "./138/bus", [pid 5076] umount2("./141/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5935] set_robust_list(0x55556e32a660, 24 [pid 5074] umount2("./138", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./138/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] openat(AT_FDCWD, "./138", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5935] <... set_robust_list resumed>) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 5935 [pid 5935] chdir("./141") = 0 [pid 5935] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5935] setpgid(0, 0) = 0 [pid 5935] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5934] <... munmap resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(3, "", [pid 5073] openat(AT_FDCWD, "./138/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5934] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5935] <... openat resumed>) = 3 [pid 5934] <... openat resumed>) = 4 [pid 5074] getdents64(3, [pid 5073] <... openat resumed>) = 4 [pid 5935] write(3, "1000", 4 [pid 5934] ioctl(4, LOOP_SET_FD, 3 [pid 5935] <... write resumed>) = 4 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] newfstatat(4, "", [pid 5935] close(3) = 0 [pid 5935] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5935] memfd_create("syzkaller", 0 [pid 5934] <... ioctl resumed>) = 0 [pid 5075] close(3 [pid 5074] umount2("./138/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... close resumed>) = 0 [pid 5073] getdents64(4, [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5935] <... memfd_create resumed>) = 3 [pid 5073] getdents64(4, [pid 5935] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5936 attached [pid 5934] close(3 [pid 5073] close(4 [pid 5936] set_robust_list(0x55556e32a660, 24) = 0 [pid 5934] <... close resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 5936 [pid 5073] <... close resumed>) = 0 [pid 5936] chdir("./139" [pid 5935] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5934] close(4 [pid 5076] <... umount2 resumed>) = 0 [pid 5936] <... chdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5073] rmdir("./138/bus" [pid 5936] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5934] <... close resumed>) = 0 [pid 5074] umount2("./138/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5936] <... prctl resumed>) = 0 [pid 5934] mkdir("./bus", 0777 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... rmdir resumed>) = 0 [pid 5936] setpgid(0, 0 [pid 5076] umount2("./141/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./141/bus", [pid 5936] <... setpgid resumed>) = 0 [pid 5934] <... mkdir resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] newfstatat(AT_FDCWD, "./138/bus", [pid 5073] umount2("./138/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./141/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5936] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./141/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5936] <... openat resumed>) = 3 [pid 5076] <... openat resumed>) = 4 [pid 5073] newfstatat(AT_FDCWD, "./138/binderfs", [pid 5074] umount2("./138/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] newfstatat(4, "", [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] openat(AT_FDCWD, "./138/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] unlink("./138/binderfs" [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... openat resumed>) = 4 [pid 5076] getdents64(4, [pid 5073] <... unlink resumed>) = 0 [pid 5074] newfstatat(4, "", [pid 5073] getdents64(3, [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] getdents64(4, [ 161.384648][ T5934] loop5: detected capacity change from 0 to 1024 [pid 5074] getdents64(4, [pid 5073] close(3 [pid 5936] write(3, "1000", 4 [pid 5935] <... write resumed>) = 524288 [pid 5934] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] <... close resumed>) = 0 [pid 5936] <... write resumed>) = 4 [pid 5935] munmap(0x7f0356e00000, 138412032 [pid 5076] close(4 [pid 5074] getdents64(4, [pid 5073] rmdir("./138" [pid 5936] close(3 [pid 5935] <... munmap resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5936] <... close resumed>) = 0 [pid 5076] rmdir("./141/bus" [pid 5074] close(4 [pid 5073] mkdir("./139", 0777 [pid 5936] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... rmdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 5936] <... symlink resumed>) = 0 [pid 5935] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] umount2("./141/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] rmdir("./138/bus" [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5936] memfd_create("syzkaller", 0 [pid 5935] <... openat resumed>) = 4 [pid 5934] <... mount resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5936] <... memfd_create resumed>) = 3 [pid 5935] ioctl(4, LOOP_SET_FD, 3 [pid 5934] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5076] newfstatat(AT_FDCWD, "./141/binderfs", [pid 5074] umount2("./138/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5936] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5934] <... openat resumed>) = 3 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./141/binderfs") = 0 [pid 5076] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3) = 0 [pid 5076] rmdir("./141") = 0 [pid 5076] mkdir("./142", 0777 [pid 5936] <... mmap resumed>) = 0x7f0356e00000 [pid 5935] <... ioctl resumed>) = 0 [pid 5934] chdir("./bus" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5935] close(3 [pid 5934] <... chdir resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./138/binderfs", [pid 5935] <... close resumed>) = 0 [pid 5934] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5935] close(4 [pid 5934] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5936] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5935] <... close resumed>) = 0 [pid 5934] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5074] unlink("./138/binderfs") = 0 [pid 5074] getdents64(3, [pid 5935] mkdir("./bus", 0777 [pid 5076] <... openat resumed>) = 3 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 5935] <... mkdir resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5934] <... symlink resumed>) = 0 [pid 5074] rmdir("./138") = 0 [pid 5934] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5935] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5074] mkdir("./139", 0777 [pid 5934] <... creat resumed>) = 4 [pid 5074] <... mkdir resumed>) = 0 [pid 5934] rename("./bus", "./file2") = -1 EEXIST (File exists) [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5934] memfd_create("syzkaller", 0) = 5 [pid 5074] <... openat resumed>) = 3 [pid 5934] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [ 161.468489][ T5935] loop4: detected capacity change from 0 to 1024 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5934] <... mmap resumed>) = 0x7f0356e00000 [pid 5936] <... write resumed>) = 524288 [pid 5935] <... mount resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 5935] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5934] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] close(3 [pid 5935] chdir("./bus" [pid 5073] <... close resumed>) = 0 [pid 5935] <... chdir resumed>) = 0 [pid 5936] munmap(0x7f0356e00000, 138412032 [pid 5935] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5935] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5935] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5936] <... munmap resumed>) = 0 ./strace-static-x86_64: Process 5937 attached [pid 5936] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5935] <... symlink resumed>) = 0 [pid 5936] <... openat resumed>) = 4 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 5937 [pid 5936] ioctl(4, LOOP_SET_FD, 3 [pid 5937] set_robust_list(0x55556e32a660, 24) = 0 [pid 5937] chdir("./139") = 0 [pid 5937] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5937] setpgid(0, 0) = 0 [pid 5937] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5937] write(3, "1000", 4 [pid 5934] <... write resumed>) = 524288 [pid 5937] <... write resumed>) = 4 [pid 5935] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5937] close(3) = 0 [pid 5937] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5937] memfd_create("syzkaller", 0) = 3 [pid 5937] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5935] <... creat resumed>) = 4 [pid 5935] rename("./bus", "./file2" [pid 5937] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5935] <... rename resumed>) = -1 EEXIST (File exists) [pid 5934] munmap(0x7f0356e00000, 138412032) = 0 [pid 5935] memfd_create("syzkaller", 0) = 5 [pid 5076] close(3 [pid 5935] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5936] <... ioctl resumed>) = 0 [pid 5934] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5076] <... close resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5936] close(3 [pid 5935] <... mmap resumed>) = 0x7f0356e00000 [pid 5934] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] close(3 [pid 5936] <... close resumed>) = 0 [pid 5935] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5934] close(5 [pid 5936] close(4 [pid 5934] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5936] <... close resumed>) = 0 [pid 5937] <... write resumed>) = 524288 [pid 5936] mkdir("./bus", 0777 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5938 attached [ 161.542687][ T5936] loop2: detected capacity change from 0 to 1024 [pid 5938] set_robust_list(0x55556e32a660, 24) = 0 [pid 5938] chdir("./142" [pid 5936] <... mkdir resumed>) = 0 [pid 5936] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 5939 [pid 5938] <... chdir resumed>) = 0 [pid 5938] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5938] setpgid(0, 0) = 0 [pid 5937] munmap(0x7f0356e00000, 138412032./strace-static-x86_64: Process 5939 attached [pid 5938] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5937] <... munmap resumed>) = 0 [pid 5934] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 5938 [pid 5939] set_robust_list(0x55556e32a660, 24 [pid 5938] <... openat resumed>) = 3 [pid 5939] <... set_robust_list resumed>) = 0 [pid 5938] write(3, "1000", 4 [pid 5937] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5935] <... write resumed>) = 524288 [pid 5934] <... open resumed>) = 5 [pid 5939] chdir("./139" [pid 5938] <... write resumed>) = 4 [pid 5937] <... openat resumed>) = 4 [pid 5938] close(3 [pid 5937] ioctl(4, LOOP_SET_FD, 3 [pid 5934] ftruncate(5, 0 [pid 5939] <... chdir resumed>) = 0 [pid 5938] <... close resumed>) = 0 [pid 5934] <... ftruncate resumed>) = 0 [pid 5938] symlink("/dev/binderfs", "./binderfs" [pid 5939] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5934] exit_group(0 [pid 5939] <... prctl resumed>) = 0 [pid 5938] <... symlink resumed>) = 0 [pid 5936] <... mount resumed>) = 0 [pid 5935] munmap(0x7f0356e00000, 138412032 [pid 5934] <... exit_group resumed>) = ? [pid 5939] setpgid(0, 0 [pid 5936] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5935] <... munmap resumed>) = 0 [pid 5939] <... setpgid resumed>) = 0 [pid 5936] <... openat resumed>) = 3 [pid 5939] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5938] memfd_create("syzkaller", 0 [pid 5936] chdir("./bus" [pid 5935] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5936] <... chdir resumed>) = 0 [pid 5936] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5935] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5935] close(5 [pid 5939] <... openat resumed>) = 3 [pid 5936] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5935] <... close resumed>) = 0 [pid 5934] +++ exited with 0 +++ [pid 5939] write(3, "1000", 4 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5934, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5938] <... memfd_create resumed>) = 3 [pid 5937] <... ioctl resumed>) = 0 [pid 5078] umount2("./141", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5939] <... write resumed>) = 4 [pid 5938] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5937] close(3 [pid 5936] <... symlink resumed>) = 0 [pid 5935] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5939] close(3 [pid 5938] <... mmap resumed>) = 0x7f0356e00000 [pid 5937] <... close resumed>) = 0 [pid 5936] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5935] <... open resumed>) = 5 [pid 5078] openat(AT_FDCWD, "./141", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5939] <... close resumed>) = 0 [pid 5937] close(4 [pid 5935] ftruncate(5, 0 [pid 5078] <... openat resumed>) = 3 [pid 5939] symlink("/dev/binderfs", "./binderfs" [pid 5937] <... close resumed>) = 0 [pid 5078] newfstatat(3, "", [pid 5939] <... symlink resumed>) = 0 [pid 5938] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5937] mkdir("./bus", 0777 [pid 5936] <... creat resumed>) = 4 [pid 5935] <... ftruncate resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5939] memfd_create("syzkaller", 0 [pid 5938] <... write resumed>) = 524288 [pid 5937] <... mkdir resumed>) = 0 [pid 5936] rename("./bus", "./file2" [pid 5935] exit_group(0 [pid 5078] getdents64(3, [pid 5939] <... memfd_create resumed>) = 3 [pid 5937] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [ 161.627436][ T5937] loop0: detected capacity change from 0 to 1024 [pid 5939] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5937] <... mount resumed>) = 0 [pid 5078] umount2("./141/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5939] <... mmap resumed>) = 0x7f0356e00000 [pid 5937] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5935] <... exit_group resumed>) = ? [pid 5937] <... openat resumed>) = 3 [pid 5937] chdir("./bus" [pid 5936] <... rename resumed>) = -1 EEXIST (File exists) [pid 5935] +++ exited with 0 +++ [pid 5938] munmap(0x7f0356e00000, 138412032 [pid 5937] <... chdir resumed>) = 0 [pid 5937] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5936] memfd_create("syzkaller", 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5935, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5938] <... munmap resumed>) = 0 [pid 5937] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5936] <... memfd_create resumed>) = 5 [pid 5077] umount2("./141", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5937] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5936] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./141", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5938] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5077] <... openat resumed>) = 3 [pid 5938] <... openat resumed>) = 4 [pid 5937] <... symlink resumed>) = 0 [pid 5936] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] newfstatat(3, "", [pid 5938] ioctl(4, LOOP_SET_FD, 3 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5939] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5937] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5077] umount2("./141/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5936] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5939] <... write resumed>) = 524288 [pid 5938] <... ioctl resumed>) = 0 [pid 5937] <... creat resumed>) = 4 [pid 5078] <... umount2 resumed>) = 0 [pid 5939] munmap(0x7f0356e00000, 138412032) = 0 [pid 5938] close(3 [pid 5937] rename("./bus", "./file2" [pid 5936] munmap(0x7f0356e00000, 138412032 [pid 5078] umount2("./141/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = 0 [pid 5939] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5938] <... close resumed>) = 0 [pid 5077] umount2("./141/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5939] <... openat resumed>) = 4 [pid 5936] <... munmap resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5939] ioctl(4, LOOP_SET_FD, 3 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./141/bus", [pid 5938] close(4 [pid 5937] <... rename resumed>) = -1 EEXIST (File exists) [pid 5936] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] newfstatat(AT_FDCWD, "./141/bus", [pid 5938] <... close resumed>) = 0 [pid 5937] memfd_create("syzkaller", 0 [pid 5936] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5939] <... ioctl resumed>) = 0 [pid 5938] mkdir("./bus", 0777 [pid 5937] <... memfd_create resumed>) = 5 [pid 5936] close(5 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5938] <... mkdir resumed>) = 0 [pid 5078] umount2("./141/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] umount2("./141/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5939] close(3 [pid 5938] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5937] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] openat(AT_FDCWD, "./141/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5939] <... close resumed>) = 0 [pid 5937] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] newfstatat(4, "", [pid 5077] openat(AT_FDCWD, "./141/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5939] close(4 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] <... openat resumed>) = 4 [pid 5939] <... close resumed>) = 0 [pid 5937] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] getdents64(4, [pid 5077] newfstatat(4, "", [pid 5939] mkdir("./bus", 0777 [pid 5936] <... close resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5939] <... mkdir resumed>) = 0 [pid 5937] <... write resumed>) = 524288 [pid 5936] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] getdents64(4, [pid 5077] getdents64(4, [pid 5939] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5937] munmap(0x7f0356e00000, 138412032 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5936] <... open resumed>) = 5 [pid 5078] close(4 [pid 5077] getdents64(4, [pid 5938] <... mount resumed>) = 0 [pid 5937] <... munmap resumed>) = 0 [pid 5936] ftruncate(5, 0 [pid 5078] <... close resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5938] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5936] <... ftruncate resumed>) = 0 [pid 5938] <... openat resumed>) = 3 [pid 5078] rmdir("./141/bus" [pid 5077] close(4 [pid 5938] chdir("./bus" [pid 5937] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5078] <... rmdir resumed>) = 0 [pid 5077] <... close resumed>) = 0 [ 161.707244][ T5938] loop3: detected capacity change from 0 to 1024 [ 161.733142][ T5939] loop1: detected capacity change from 0 to 1024 [pid 5938] <... chdir resumed>) = 0 [pid 5937] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5936] exit_group(0 [pid 5078] umount2("./141/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] rmdir("./141/bus" [pid 5938] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5937] close(5 [pid 5936] <... exit_group resumed>) = ? [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... rmdir resumed>) = 0 [pid 5938] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] umount2("./141/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5938] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5077] newfstatat(AT_FDCWD, "./141/binderfs", [pid 5078] newfstatat(AT_FDCWD, "./141/binderfs", [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] unlink("./141/binderfs" [pid 5938] <... symlink resumed>) = 0 [pid 5936] +++ exited with 0 +++ [pid 5078] unlink("./141/binderfs" [pid 5077] <... unlink resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5077] getdents64(3, [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5936, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5939] <... mount resumed>) = 0 [pid 5938] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] getdents64(3, [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5939] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5937] <... close resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] close(3 [pid 5939] <... openat resumed>) = 3 [pid 5078] close(3 [pid 5077] <... close resumed>) = 0 [pid 5939] chdir("./bus" [pid 5078] <... close resumed>) = 0 [pid 5077] rmdir("./141" [pid 5939] <... chdir resumed>) = 0 [pid 5937] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] rmdir("./141" [pid 5077] <... rmdir resumed>) = 0 [pid 5939] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5078] <... rmdir resumed>) = 0 [pid 5075] umount2("./139", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5939] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5938] <... creat resumed>) = 4 [pid 5077] mkdir("./142", 0777 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5939] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5077] <... mkdir resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./139", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5938] rename("./bus", "./file2" [pid 5078] mkdir("./142", 0777 [pid 5075] <... openat resumed>) = 3 [pid 5937] <... open resumed>) = 5 [pid 5078] <... mkdir resumed>) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5075] newfstatat(3, "", [pid 5077] <... openat resumed>) = 3 [pid 5939] <... symlink resumed>) = 0 [pid 5938] <... rename resumed>) = -1 EEXIST (File exists) [pid 5937] ftruncate(5, 0 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5938] memfd_create("syzkaller", 0 [pid 5937] <... ftruncate resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5938] <... memfd_create resumed>) = 5 [pid 5939] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5938] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5937] exit_group(0 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5938] <... mmap resumed>) = 0x7f0356e00000 [pid 5938] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5937] <... exit_group resumed>) = ? [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5937] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5937, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] getdents64(3, [pid 5938] <... write resumed>) = 524288 [pid 5939] <... creat resumed>) = 4 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5939] rename("./bus", "./file2" [pid 5938] munmap(0x7f0356e00000, 138412032 [pid 5075] umount2("./139/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5939] <... rename resumed>) = -1 EEXIST (File exists) [pid 5938] <... munmap resumed>) = 0 [pid 5939] memfd_create("syzkaller", 0) = 5 [pid 5073] umount2("./139", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5939] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5938] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] openat(AT_FDCWD, "./139", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5938] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... openat resumed>) = 3 [pid 5073] newfstatat(3, "", [pid 5939] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5938] close(5 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] umount2("./139/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5938] <... close resumed>) = 0 [pid 5939] <... write resumed>) = 524288 [pid 5077] <... ioctl resumed>) = 0 [pid 5075] umount2("./139/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./139/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5938] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] close(3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... close resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./139/bus", [pid 5073] newfstatat(AT_FDCWD, "./139/bus", [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./139/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./139/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./139/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5940 attached [pid 5939] munmap(0x7f0356e00000, 138412032 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... openat resumed>) = 4 [pid 5075] openat(AT_FDCWD, "./139/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] newfstatat(4, "", [pid 5940] set_robust_list(0x55556e32a660, 24 [pid 5939] <... munmap resumed>) = 0 [pid 5938] <... open resumed>) = 5 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 5940 [pid 5075] <... openat resumed>) = 4 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5940] <... set_robust_list resumed>) = 0 [pid 5939] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5938] ftruncate(5, 0 [pid 5075] newfstatat(4, "", [pid 5073] getdents64(4, [pid 5940] chdir("./142" [pid 5939] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5940] <... chdir resumed>) = 0 [pid 5939] close(5 [pid 5938] <... ftruncate resumed>) = 0 [pid 5075] getdents64(4, [pid 5073] getdents64(4, [pid 5940] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5938] exit_group(0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5939] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5940] <... prctl resumed>) = 0 [pid 5939] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] <... ioctl resumed>) = 0 [pid 5075] getdents64(4, [pid 5073] close(4 [pid 5940] setpgid(0, 0) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5078] close(3 [pid 5073] <... close resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5075] close(4) = 0 [pid 5940] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5073] rmdir("./139/bus" [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5938] <... exit_group resumed>) = ? [pid 5075] rmdir("./139/bus" [pid 5073] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 5941 attached [pid 5940] <... openat resumed>) = 3 [pid 5939] <... open resumed>) = 5 [pid 5938] +++ exited with 0 +++ [pid 5075] <... rmdir resumed>) = 0 [pid 5941] set_robust_list(0x55556e32a660, 24 [pid 5940] write(3, "1000", 4 [pid 5939] ftruncate(5, 0 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 5941 [pid 5073] umount2("./139/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5941] <... set_robust_list resumed>) = 0 [pid 5940] <... write resumed>) = 4 [pid 5075] umount2("./139/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5941] chdir("./142" [pid 5940] close(3 [pid 5939] <... ftruncate resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5941] <... chdir resumed>) = 0 [pid 5940] <... close resumed>) = 0 [pid 5939] exit_group(0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5938, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5941] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5940] symlink("/dev/binderfs", "./binderfs" [pid 5939] <... exit_group resumed>) = ? [pid 5076] umount2("./142", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] newfstatat(AT_FDCWD, "./139/binderfs", [pid 5073] newfstatat(AT_FDCWD, "./139/binderfs", [pid 5940] <... symlink resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5941] <... prctl resumed>) = 0 [pid 5940] memfd_create("syzkaller", 0 [pid 5076] openat(AT_FDCWD, "./142", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] unlink("./139/binderfs" [pid 5073] unlink("./139/binderfs" [pid 5076] <... openat resumed>) = 3 [pid 5075] <... unlink resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5076] newfstatat(3, "", [pid 5075] getdents64(3, [pid 5073] getdents64(3, [pid 5941] setpgid(0, 0 [pid 5940] <... memfd_create resumed>) = 3 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5941] <... setpgid resumed>) = 0 [pid 5940] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5939] +++ exited with 0 +++ [pid 5076] getdents64(3, [pid 5075] close(3 [pid 5073] close(3 [pid 5941] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5940] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] <... close resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5076] umount2("./142/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] rmdir("./139" [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5939, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5073] rmdir("./139" [pid 5075] <... rmdir resumed>) = 0 [pid 5074] umount2("./139", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... rmdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] mkdir("./140", 0777 [pid 5941] <... openat resumed>) = 3 [pid 5940] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] mkdir("./140", 0777 [pid 5076] <... umount2 resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./139", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... mkdir resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5074] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] umount2("./139/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5941] write(3, "1000", 4 [pid 5075] <... openat resumed>) = 3 [pid 5073] <... openat resumed>) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5941] <... write resumed>) = 4 [pid 5940] <... write resumed>) = 524288 [pid 5076] umount2("./142/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5941] close(3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./142/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5941] <... close resumed>) = 0 [pid 5940] munmap(0x7f0356e00000, 138412032 [pid 5076] umount2("./142/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = 0 [pid 5941] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./142/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5941] <... symlink resumed>) = 0 [pid 5076] newfstatat(4, "", [pid 5941] memfd_create("syzkaller", 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5941] <... memfd_create resumed>) = 3 [pid 5076] getdents64(4, [pid 5940] <... munmap resumed>) = 0 [pid 5941] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] umount2("./139/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5941] <... mmap resumed>) = 0x7f0356e00000 [pid 5940] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5940] ioctl(4, LOOP_SET_FD, 3 [pid 5941] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] getdents64(4, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./139/bus", [pid 5940] <... ioctl resumed>) = 0 [pid 5940] close(3 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5940] <... close resumed>) = 0 [pid 5940] close(4 [pid 5076] close(4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... close resumed>) = 0 [pid 5074] umount2("./139/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] rmdir("./142/bus" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5940] <... close resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./139/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] umount2("./142/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... openat resumed>) = 4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./142/binderfs", [pid 5074] newfstatat(4, "", [pid 5940] mkdir("./bus", 0777 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] unlink("./142/binderfs") = 0 [pid 5074] getdents64(4, [pid 5940] <... mkdir resumed>) = 0 [pid 5076] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] close(3) = 0 [pid 5074] getdents64(4, [pid 5076] rmdir("./142") = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] mkdir("./143", 0777 [pid 5074] close(4 [pid 5076] <... mkdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5074] rmdir("./139/bus" [pid 5940] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5941] <... write resumed>) = 524288 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 5941] munmap(0x7f0356e00000, 138412032 [pid 5074] umount2("./139/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5941] <... munmap resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./139/binderfs", [pid 5075] close(3) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5942 attached [pid 5941] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5940] <... mount resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] close(3 [pid 5942] set_robust_list(0x55556e32a660, 24 [pid 5941] <... openat resumed>) = 4 [pid 5940] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 5942 [ 161.977986][ T5940] loop4: detected capacity change from 0 to 1024 [pid 5074] unlink("./139/binderfs" [pid 5942] <... set_robust_list resumed>) = 0 [pid 5940] <... openat resumed>) = 3 [pid 5074] <... unlink resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5941] ioctl(4, LOOP_SET_FD, 3 [pid 5940] chdir("./bus" [pid 5074] getdents64(3, [pid 5942] chdir("./140" [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5942] <... chdir resumed>) = 0 [pid 5942] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5940] <... chdir resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 5943 [pid 5942] <... prctl resumed>) = 0 [pid 5940] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] close(3 [pid 5942] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 5943 attached [pid 5942] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5940] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... ioctl resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5943] set_robust_list(0x55556e32a660, 24 [pid 5940] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5074] rmdir("./139" [pid 5943] <... set_robust_list resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5943] chdir("./140" [pid 5942] <... openat resumed>) = 3 [pid 5074] mkdir("./140", 0777 [pid 5943] <... chdir resumed>) = 0 [pid 5940] <... symlink resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5943] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5940] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5942] write(3, "1000", 4 [pid 5943] <... prctl resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5942] <... write resumed>) = 4 [pid 5943] setpgid(0, 0 [pid 5074] <... openat resumed>) = 3 [pid 5943] <... setpgid resumed>) = 0 [pid 5942] close(3 [pid 5943] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5942] <... close resumed>) = 0 [pid 5941] <... ioctl resumed>) = 0 [pid 5076] close(3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5943] write(3, "1000", 4 [pid 5942] symlink("/dev/binderfs", "./binderfs" [pid 5941] close(3 [pid 5076] <... close resumed>) = 0 [pid 5943] <... write resumed>) = 4 [pid 5941] <... close resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5943] close(3 [pid 5942] <... symlink resumed>) = 0 [pid 5941] close(4 [pid 5943] <... close resumed>) = 0 [pid 5941] <... close resumed>) = 0 [pid 5940] <... creat resumed>) = 4 [pid 5943] symlink("/dev/binderfs", "./binderfs" [pid 5941] mkdir("./bus", 0777 [pid 5943] <... symlink resumed>) = 0 [pid 5942] memfd_create("syzkaller", 0 [pid 5941] <... mkdir resumed>) = 0 [pid 5940] rename("./bus", "./file2" [pid 5943] memfd_create("syzkaller", 0 [pid 5942] <... memfd_create resumed>) = 3 [pid 5941] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, ""./strace-static-x86_64: Process 5944 attached [pid 5943] <... memfd_create resumed>) = 3 [pid 5942] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5940] <... rename resumed>) = -1 EEXIST (File exists) [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 5944 [pid 5944] set_robust_list(0x55556e32a660, 24 [pid 5943] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5942] <... mmap resumed>) = 0x7f0356e00000 [pid 5940] memfd_create("syzkaller", 0 [pid 5943] <... mmap resumed>) = 0x7f0356e00000 [ 162.033590][ T5941] loop5: detected capacity change from 0 to 1024 [pid 5940] <... memfd_create resumed>) = 5 [pid 5944] <... set_robust_list resumed>) = 0 [pid 5943] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5940] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5940] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5944] chdir("./143" [pid 5943] <... write resumed>) = 524288 [pid 5942] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5941] <... mount resumed>) = 0 [pid 5944] <... chdir resumed>) = 0 [pid 5944] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5944] setpgid(0, 0 [pid 5942] <... write resumed>) = 524288 [pid 5941] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5944] <... setpgid resumed>) = 0 [pid 5943] munmap(0x7f0356e00000, 138412032 [pid 5941] <... openat resumed>) = 3 [pid 5944] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5943] <... munmap resumed>) = 0 [pid 5941] chdir("./bus" [pid 5944] write(3, "1000", 4 [pid 5942] munmap(0x7f0356e00000, 138412032 [pid 5941] <... chdir resumed>) = 0 [pid 5941] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5942] <... munmap resumed>) = 0 [pid 5944] <... write resumed>) = 4 [pid 5942] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5944] close(3) = 0 [pid 5943] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5942] <... openat resumed>) = 4 [pid 5944] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5943] <... openat resumed>) = 4 [pid 5942] ioctl(4, LOOP_SET_FD, 3 [pid 5941] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5944] memfd_create("syzkaller", 0 [pid 5943] ioctl(4, LOOP_SET_FD, 3 [pid 5941] <... symlink resumed>) = 0 [pid 5944] <... memfd_create resumed>) = 3 [pid 5944] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5944] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5941] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5940] <... write resumed>) = 524288 [pid 5943] <... ioctl resumed>) = 0 [pid 5942] <... ioctl resumed>) = 0 [pid 5940] munmap(0x7f0356e00000, 138412032 [pid 5943] close(3 [pid 5942] close(3 [pid 5940] <... munmap resumed>) = 0 [pid 5943] <... close resumed>) = 0 [pid 5942] <... close resumed>) = 0 [pid 5943] close(4 [pid 5942] close(4 [pid 5940] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5942] <... close resumed>) = 0 [pid 5940] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5940] close(5 [pid 5944] <... write resumed>) = 524288 [pid 5940] <... close resumed>) = 0 [pid 5943] <... close resumed>) = 0 [pid 5942] mkdir("./bus", 0777 [pid 5943] mkdir("./bus", 0777 [pid 5941] <... creat resumed>) = 4 [pid 5944] munmap(0x7f0356e00000, 138412032 [pid 5943] <... mkdir resumed>) = 0 [pid 5942] <... mkdir resumed>) = 0 [pid 5941] rename("./bus", "./file2" [pid 5074] <... ioctl resumed>) = 0 [pid 5944] <... munmap resumed>) = 0 [ 162.132285][ T5942] loop2: detected capacity change from 0 to 1024 [ 162.134420][ T5943] loop0: detected capacity change from 0 to 1024 [pid 5943] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5942] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5944] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5941] <... rename resumed>) = -1 EEXIST (File exists) [pid 5944] <... openat resumed>) = 4 [pid 5944] ioctl(4, LOOP_SET_FD, 3 [pid 5941] memfd_create("syzkaller", 0) = 5 [pid 5940] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5941] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] close(3 [pid 5941] <... mmap resumed>) = 0x7f0356e00000 [pid 5074] <... close resumed>) = 0 [pid 5941] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5945 attached [pid 5940] <... open resumed>) = 5 [pid 5945] set_robust_list(0x55556e32a660, 24 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 5945 [pid 5945] <... set_robust_list resumed>) = 0 [pid 5945] chdir("./140") = 0 [pid 5945] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5945] setpgid(0, 0) = 0 [pid 5945] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5940] ftruncate(5, 0) = 0 [pid 5945] <... openat resumed>) = 3 [pid 5945] write(3, "1000", 4 [pid 5940] exit_group(0 [pid 5945] <... write resumed>) = 4 [pid 5945] close(3 [pid 5943] <... mount resumed>) = 0 [pid 5945] <... close resumed>) = 0 [pid 5945] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5943] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5940] <... exit_group resumed>) = ? [pid 5945] memfd_create("syzkaller", 0 [pid 5944] <... ioctl resumed>) = 0 [pid 5943] <... openat resumed>) = 3 [pid 5942] <... mount resumed>) = 0 [pid 5940] +++ exited with 0 +++ [pid 5945] <... memfd_create resumed>) = 3 [pid 5945] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5944] close(3 [pid 5943] chdir("./bus" [pid 5942] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5943] <... chdir resumed>) = 0 [pid 5942] <... openat resumed>) = 3 [pid 5945] <... mmap resumed>) = 0x7f0356e00000 [pid 5944] <... close resumed>) = 0 [pid 5943] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5942] chdir("./bus" [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5940, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5945] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5944] close(4 [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 5943] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... restart_syscall resumed>) = 0 [pid 5944] <... close resumed>) = 0 [pid 5943] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5942] <... chdir resumed>) = 0 [pid 5941] <... write resumed>) = 524288 [pid 5077] umount2("./142", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5944] mkdir("./bus", 0777 [pid 5943] <... symlink resumed>) = 0 [pid 5942] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./142", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5941] munmap(0x7f0356e00000, 138412032 [pid 5077] newfstatat(3, "", [pid 5944] <... mkdir resumed>) = 0 [pid 5942] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 162.184754][ T5944] loop3: detected capacity change from 0 to 1024 [pid 5945] <... write resumed>) = 524288 [pid 5943] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5942] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5941] <... munmap resumed>) = 0 [pid 5944] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5941] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5941] close(5 [pid 5077] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5945] munmap(0x7f0356e00000, 138412032 [pid 5077] umount2("./142/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5945] <... munmap resumed>) = 0 [pid 5944] <... mount resumed>) = 0 [pid 5943] <... creat resumed>) = 4 [pid 5942] <... symlink resumed>) = 0 [pid 5944] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5943] rename("./bus", "./file2" [pid 5942] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5944] <... openat resumed>) = 3 [pid 5943] <... rename resumed>) = -1 EEXIST (File exists) [pid 5945] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5944] chdir("./bus" [pid 5943] memfd_create("syzkaller", 0 [pid 5941] <... close resumed>) = 0 [pid 5945] <... openat resumed>) = 4 [pid 5944] <... chdir resumed>) = 0 [pid 5943] <... memfd_create resumed>) = 5 [pid 5945] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5944] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5943] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5944] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5943] <... mmap resumed>) = 0x7f0356e00000 [pid 5941] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5944] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5943] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5942] <... creat resumed>) = 4 [pid 5942] rename("./bus", "./file2" [pid 5945] close(3 [pid 5941] <... open resumed>) = 5 [pid 5944] <... symlink resumed>) = 0 [pid 5945] <... close resumed>) = 0 [pid 5941] ftruncate(5, 0 [pid 5945] close(4 [pid 5941] <... ftruncate resumed>) = 0 [pid 5945] <... close resumed>) = 0 [pid 5945] mkdir("./bus", 0777 [pid 5944] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5942] <... rename resumed>) = -1 EEXIST (File exists) [pid 5077] <... umount2 resumed>) = 0 [pid 5942] memfd_create("syzkaller", 0 [pid 5941] exit_group(0 [pid 5944] <... creat resumed>) = 4 [pid 5942] <... memfd_create resumed>) = 5 [pid 5941] <... exit_group resumed>) = ? [pid 5077] umount2("./142/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5945] <... mkdir resumed>) = 0 [pid 5944] rename("./bus", "./file2" [pid 5942] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5945] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5943] <... write resumed>) = 524288 [pid 5942] <... mmap resumed>) = 0x7f0356e00000 [pid 5941] +++ exited with 0 +++ [pid 5077] newfstatat(AT_FDCWD, "./142/bus", [pid 5944] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5941, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] umount2("./142/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5944] memfd_create("syzkaller", 0 [pid 5077] openat(AT_FDCWD, "./142/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5944] <... memfd_create resumed>) = 5 [pid 5077] <... openat resumed>) = 4 [pid 5944] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] umount2("./142", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] newfstatat(4, "", [pid 5944] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./142", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5078] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] umount2("./142/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5945] <... mount resumed>) = 0 [pid 5077] getdents64(4, [ 162.257730][ T5945] loop1: detected capacity change from 0 to 1024 [pid 5945] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5945] <... openat resumed>) = 3 [pid 5943] munmap(0x7f0356e00000, 138412032 [pid 5945] chdir("./bus" [pid 5943] <... munmap resumed>) = 0 [pid 5077] getdents64(4, [pid 5945] <... chdir resumed>) = 0 [pid 5945] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5945] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5942] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5944] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] close(4 [pid 5945] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5943] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5078] <... umount2 resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5943] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] rmdir("./142/bus" [pid 5943] close(5 [pid 5945] <... creat resumed>) = 4 [pid 5943] <... close resumed>) = 0 [pid 5078] umount2("./142/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... rmdir resumed>) = 0 [pid 5077] umount2("./142/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./142/binderfs", [pid 5945] rename("./bus", "./file2" [pid 5944] <... write resumed>) = 524288 [pid 5942] <... write resumed>) = 524288 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5942] munmap(0x7f0356e00000, 138412032 [pid 5077] unlink("./142/binderfs" [pid 5942] <... munmap resumed>) = 0 [pid 5078] newfstatat(AT_FDCWD, "./142/bus", [pid 5945] <... rename resumed>) = -1 EEXIST (File exists) [pid 5942] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 5942] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] getdents64(3, [pid 5942] close(5 [pid 5945] memfd_create("syzkaller", 0 [pid 5078] umount2("./142/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5945] <... memfd_create resumed>) = 5 [pid 5943] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] close(3 [pid 5945] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5944] munmap(0x7f0356e00000, 138412032 [pid 5942] <... close resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./142/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... close resumed>) = 0 [pid 5945] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... openat resumed>) = 4 [pid 5945] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5944] <... munmap resumed>) = 0 [pid 5942] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] newfstatat(4, "", [pid 5077] rmdir("./142" [pid 5944] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5943] <... open resumed>) = 5 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5078] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5078] close(4 [pid 5944] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... close resumed>) = 0 [pid 5078] rmdir("./142/bus" [pid 5944] close(5 [pid 5943] ftruncate(5, 0 [pid 5942] <... open resumed>) = 5 [pid 5078] <... rmdir resumed>) = 0 [pid 5077] mkdir("./143", 0777 [pid 5943] <... ftruncate resumed>) = 0 [pid 5942] ftruncate(5, 0 [pid 5078] umount2("./142/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5943] exit_group(0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5943] <... exit_group resumed>) = ? [pid 5942] <... ftruncate resumed>) = 0 [pid 5078] newfstatat(AT_FDCWD, "./142/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 5944] <... close resumed>) = 0 [pid 5943] +++ exited with 0 +++ [pid 5942] exit_group(0 [pid 5078] unlink("./142/binderfs") = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5943, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5078] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5942] <... exit_group resumed>) = ? [pid 5078] close(3 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] <... close resumed>) = 0 [pid 5078] rmdir("./142" [pid 5077] <... openat resumed>) = 3 [pid 5078] <... rmdir resumed>) = 0 [pid 5078] mkdir("./143", 0777 [pid 5945] <... write resumed>) = 524288 [pid 5078] <... mkdir resumed>) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] umount2("./140", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5945] munmap(0x7f0356e00000, 138412032 [pid 5944] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5942] +++ exited with 0 +++ [pid 5078] <... openat resumed>) = 3 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5942, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=3 /* 0.03 s */} --- [pid 5073] openat(AT_FDCWD, "./140", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5073] <... openat resumed>) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] umount2("./140", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5945] <... munmap resumed>) = 0 [pid 5073] getdents64(3, [pid 5945] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] umount2("./140/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "./140", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5945] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... openat resumed>) = 3 [pid 5944] <... open resumed>) = 5 [pid 5945] close(5 [pid 5075] newfstatat(3, "", [pid 5944] ftruncate(5, 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5944] <... ftruncate resumed>) = 0 [pid 5075] getdents64(3, [pid 5945] <... close resumed>) = 0 [pid 5944] exit_group(0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] <... umount2 resumed>) = 0 [pid 5945] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5944] <... exit_group resumed>) = ? [pid 5073] umount2("./140/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5944] +++ exited with 0 +++ [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5944, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] umount2("./140/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5945] <... open resumed>) = 5 [pid 5945] ftruncate(5, 0) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5945] exit_group(0) = ? [pid 5073] newfstatat(AT_FDCWD, "./140/bus", [pid 5076] umount2("./143", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5945] +++ exited with 0 +++ [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5945, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] openat(AT_FDCWD, "./143", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] umount2("./140", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] newfstatat(3, "", [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./140/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, [pid 5075] <... umount2 resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./140", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] <... openat resumed>) = 3 [pid 5073] openat(AT_FDCWD, "./140/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] umount2("./143/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] newfstatat(3, "", [pid 5073] <... openat resumed>) = 4 [pid 5075] umount2("./140/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... ioctl resumed>) = 0 [pid 5077] <... ioctl resumed>) = 0 [pid 5074] getdents64(3, [pid 5073] newfstatat(4, "", [pid 5075] newfstatat(AT_FDCWD, "./140/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./140/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = 0 [pid 5076] umount2("./143/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./140/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5075] newfstatat(4, "", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, [pid 5076] newfstatat(AT_FDCWD, "./143/bus", [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] getdents64(4, [pid 5076] umount2("./143/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] umount2("./140/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] getdents64(4, [pid 5078] close(3) = 0 [pid 5075] close(4) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5946 attached [pid 5077] close(3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] rmdir("./140/bus" [pid 5074] <... umount2 resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5946] set_robust_list(0x55556e32a660, 24 [pid 5077] <... close resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./143/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... rmdir resumed>) = 0 [pid 5074] umount2("./140/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] getdents64(4, [pid 5946] <... set_robust_list resumed>) = 0 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 5946 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... openat resumed>) = 4 [pid 5075] umount2("./140/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5947 attached [pid 5946] chdir("./143" [pid 5076] newfstatat(4, "", [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./140/bus", [pid 5073] close(4 [pid 5946] <... chdir resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5946] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5073] <... close resumed>) = 0 [pid 5074] umount2("./140/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5946] <... prctl resumed>) = 0 [pid 5073] rmdir("./140/bus" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5946] setpgid(0, 0 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 5947 [pid 5076] getdents64(4, [pid 5946] <... setpgid resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./140/binderfs", [pid 5074] openat(AT_FDCWD, "./140/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... rmdir resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5946] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] getdents64(4, [pid 5075] unlink("./140/binderfs" [pid 5074] <... openat resumed>) = 4 [pid 5073] umount2("./140/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5947] set_robust_list(0x55556e32a660, 24 [pid 5946] <... openat resumed>) = 3 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5074] newfstatat(4, "", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5947] <... set_robust_list resumed>) = 0 [pid 5946] write(3, "1000", 4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] newfstatat(AT_FDCWD, "./140/binderfs", [pid 5947] chdir("./143" [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] getdents64(4, [pid 5947] <... chdir resumed>) = 0 [pid 5073] unlink("./140/binderfs" [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] close(4 [pid 5075] getdents64(3, [pid 5947] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] <... close resumed>) = 0 [pid 5074] getdents64(4, [pid 5073] <... unlink resumed>) = 0 [pid 5946] <... write resumed>) = 4 [pid 5947] <... prctl resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5946] close(3 [pid 5073] getdents64(3, [pid 5947] setpgid(0, 0 [pid 5946] <... close resumed>) = 0 [pid 5074] close(4 [pid 5947] <... setpgid resumed>) = 0 [pid 5946] symlink("/dev/binderfs", "./binderfs" [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] <... close resumed>) = 0 [pid 5947] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] rmdir("./143/bus" [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5946] <... symlink resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] close(3 [pid 5074] rmdir("./140/bus" [pid 5073] close(3 [pid 5075] <... close resumed>) = 0 [pid 5076] umount2("./143/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] rmdir("./140" [pid 5073] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] rmdir("./140" [pid 5947] <... openat resumed>) = 3 [pid 5076] newfstatat(AT_FDCWD, "./143/binderfs", [pid 5946] memfd_create("syzkaller", 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./143/binderfs" [pid 5947] write(3, "1000", 4 [pid 5946] <... memfd_create resumed>) = 3 [pid 5076] <... unlink resumed>) = 0 [pid 5074] umount2("./140/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... rmdir resumed>) = 0 [pid 5075] mkdir("./141", 0777 [pid 5947] <... write resumed>) = 4 [pid 5946] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] getdents64(3, [pid 5075] <... mkdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] mkdir("./141", 0777 [pid 5947] close(3 [pid 5946] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] <... close resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5073] <... mkdir resumed>) = 0 [pid 5076] rmdir("./143") = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5076] mkdir("./144", 0777 [pid 5947] <... close resumed>) = 0 [pid 5946] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] newfstatat(AT_FDCWD, "./140/binderfs", [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5947] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... mkdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5947] <... symlink resumed>) = 0 [pid 5946] <... write resumed>) = 524288 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5947] memfd_create("syzkaller", 0 [pid 5076] <... openat resumed>) = 3 [pid 5074] unlink("./140/binderfs" [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5947] <... memfd_create resumed>) = 3 [pid 5947] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5947] <... mmap resumed>) = 0x7f0356e00000 [pid 5946] munmap(0x7f0356e00000, 138412032 [pid 5074] <... unlink resumed>) = 0 [pid 5947] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5946] <... munmap resumed>) = 0 [pid 5074] getdents64(3, [pid 5947] <... write resumed>) = 524288 [pid 5946] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5947] munmap(0x7f0356e00000, 138412032 [pid 5946] <... openat resumed>) = 4 [pid 5075] <... ioctl resumed>) = 0 [pid 5074] close(3 [pid 5073] <... ioctl resumed>) = 0 [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5947] <... munmap resumed>) = 0 [pid 5946] ioctl(4, LOOP_SET_FD, 3 [pid 5074] <... close resumed>) = 0 ./strace-static-x86_64: Process 5948 attached [pid 5948] set_robust_list(0x55556e32a660, 24 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 5948 [pid 5074] rmdir("./140" [pid 5946] <... ioctl resumed>) = 0 [pid 5948] <... set_robust_list resumed>) = 0 [pid 5948] chdir("./141" [pid 5074] <... rmdir resumed>) = 0 [pid 5948] <... chdir resumed>) = 0 [pid 5948] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5948] setpgid(0, 0) = 0 [pid 5948] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5947] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] mkdir("./141", 0777 [pid 5948] <... openat resumed>) = 3 [pid 5948] write(3, "1000", 4 [pid 5947] <... openat resumed>) = 4 [pid 5074] <... mkdir resumed>) = 0 [pid 5948] <... write resumed>) = 4 [pid 5948] close(3 [pid 5947] ioctl(4, LOOP_SET_FD, 3 [pid 5075] close(3 [pid 5948] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5948] symlink("/dev/binderfs", "./binderfs" [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... openat resumed>) = 3 [pid 5948] <... symlink resumed>) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5948] memfd_create("syzkaller", 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 5949 [pid 5946] close(3 [pid 5076] close(3 [pid 5948] <... memfd_create resumed>) = 3 [pid 5947] <... ioctl resumed>) = 0 [pid 5946] <... close resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5948] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5947] close(3 [pid 5946] close(4 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5948] <... mmap resumed>) = 0x7f0356e00000 [pid 5946] <... close resumed>) = 0 ./strace-static-x86_64: Process 5949 attached ./strace-static-x86_64: Process 5950 attached [pid 5949] set_robust_list(0x55556e32a660, 24 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 5950 [pid 5950] set_robust_list(0x55556e32a660, 24 [pid 5949] <... set_robust_list resumed>) = 0 [pid 5948] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5947] <... close resumed>) = 0 [pid 5946] mkdir("./bus", 0777 [pid 5947] close(4) = 0 [pid 5949] chdir("./141") = 0 [pid 5946] <... mkdir resumed>) = 0 [pid 5947] mkdir("./bus", 0777 [pid 5946] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5950] <... set_robust_list resumed>) = 0 [pid 5950] chdir("./144") = 0 [pid 5949] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5950] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5949] <... prctl resumed>) = 0 [pid 5950] <... prctl resumed>) = 0 [ 162.577198][ T5946] loop5: detected capacity change from 0 to 1024 [ 162.590568][ T5947] loop4: detected capacity change from 0 to 1024 [pid 5949] setpgid(0, 0 [pid 5950] setpgid(0, 0 [pid 5949] <... setpgid resumed>) = 0 [pid 5947] <... mkdir resumed>) = 0 [pid 5946] <... mount resumed>) = 0 [pid 5950] <... setpgid resumed>) = 0 [pid 5949] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5947] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5946] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5950] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5949] <... openat resumed>) = 3 [pid 5949] write(3, "1000", 4 [pid 5946] <... openat resumed>) = 3 [pid 5950] <... openat resumed>) = 3 [pid 5949] <... write resumed>) = 4 [pid 5946] chdir("./bus" [pid 5950] write(3, "1000", 4 [pid 5949] close(3 [pid 5950] <... write resumed>) = 4 [pid 5949] <... close resumed>) = 0 [pid 5950] close(3 [pid 5949] symlink("/dev/binderfs", "./binderfs" [pid 5950] <... close resumed>) = 0 [pid 5949] <... symlink resumed>) = 0 [pid 5950] symlink("/dev/binderfs", "./binderfs" [pid 5949] memfd_create("syzkaller", 0 [pid 5950] <... symlink resumed>) = 0 [pid 5946] <... chdir resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5950] memfd_create("syzkaller", 0 [pid 5949] <... memfd_create resumed>) = 3 [pid 5946] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5949] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5950] <... memfd_create resumed>) = 3 [pid 5949] <... mmap resumed>) = 0x7f0356e00000 [pid 5950] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5949] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5950] <... mmap resumed>) = 0x7f0356e00000 [pid 5950] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5948] <... write resumed>) = 524288 [pid 5946] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5948] munmap(0x7f0356e00000, 138412032) = 0 [pid 5948] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5948] ioctl(4, LOOP_SET_FD, 3 [pid 5946] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5074] close(3) = 0 [pid 5949] <... write resumed>) = 524288 [pid 5946] <... symlink resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556e32a650) = 5951 ./strace-static-x86_64: Process 5951 attached [pid 5947] <... mount resumed>) = 0 [pid 5947] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5951] set_robust_list(0x55556e32a660, 24 [pid 5947] <... openat resumed>) = 3 [pid 5947] chdir("./bus") = 0 [pid 5946] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5947] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5951] <... set_robust_list resumed>) = 0 [pid 5950] <... write resumed>) = 524288 [pid 5947] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5951] chdir("./141" [pid 5947] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5951] <... chdir resumed>) = 0 [pid 5947] <... symlink resumed>) = 0 [pid 5946] <... creat resumed>) = 4 [pid 5951] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5950] munmap(0x7f0356e00000, 138412032 [pid 5947] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5946] rename("./bus", "./file2" [pid 5951] <... prctl resumed>) = 0 [pid 5950] <... munmap resumed>) = 0 [pid 5949] munmap(0x7f0356e00000, 138412032 [pid 5948] <... ioctl resumed>) = 0 [pid 5951] setpgid(0, 0 [pid 5949] <... munmap resumed>) = 0 [pid 5948] close(3 [pid 5946] <... rename resumed>) = -1 EEXIST (File exists) [pid 5951] <... setpgid resumed>) = 0 [pid 5950] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5948] <... close resumed>) = 0 [pid 5951] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5950] <... openat resumed>) = 4 [pid 5949] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5948] close(4 [pid 5951] <... openat resumed>) = 3 [pid 5950] ioctl(4, LOOP_SET_FD, 3 [pid 5949] <... openat resumed>) = 4 [pid 5948] <... close resumed>) = 0 [pid 5951] write(3, "1000", 4 [pid 5947] <... creat resumed>) = 4 [pid 5946] memfd_create("syzkaller", 0 [pid 5951] <... write resumed>) = 4 [pid 5946] <... memfd_create resumed>) = 5 [pid 5951] close(3 [pid 5946] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5951] <... close resumed>) = 0 [pid 5946] <... mmap resumed>) = 0x7f0356e00000 [pid 5951] symlink("/dev/binderfs", "./binderfs" [pid 5948] mkdir("./bus", 0777 [pid 5951] <... symlink resumed>) = 0 [pid 5948] <... mkdir resumed>) = 0 [pid 5948] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5951] memfd_create("syzkaller", 0 [ 162.672017][ T5948] loop0: detected capacity change from 0 to 1024 [ 162.710804][ T5950] loop3: detected capacity change from 0 to 1024 [pid 5949] ioctl(4, LOOP_SET_FD, 3 [pid 5950] <... ioctl resumed>) = 0 [pid 5951] <... memfd_create resumed>) = 3 [pid 5947] rename("./bus", "./file2" [pid 5946] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5950] close(3) = 0 [pid 5950] close(4) = 0 [pid 5950] mkdir("./bus", 0777) = 0 [pid 5951] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5950] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5948] <... mount resumed>) = 0 [pid 5947] <... rename resumed>) = -1 EEXIST (File exists) [pid 5951] <... mmap resumed>) = 0x7f0356e00000 [pid 5948] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5947] memfd_create("syzkaller", 0 [pid 5948] <... openat resumed>) = 3 [pid 5947] <... memfd_create resumed>) = 5 [pid 5950] <... mount resumed>) = 0 [pid 5949] <... ioctl resumed>) = 0 [pid 5948] chdir("./bus" [pid 5947] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5950] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5949] close(3 [pid 5948] <... chdir resumed>) = 0 [pid 5951] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5947] <... mmap resumed>) = 0x7f0356e00000 [pid 5950] <... openat resumed>) = 3 [pid 5948] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5947] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5950] chdir("./bus" [pid 5949] <... close resumed>) = 0 [pid 5948] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5950] <... chdir resumed>) = 0 [pid 5949] close(4 [pid 5948] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5950] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5949] <... close resumed>) = 0 [pid 5946] <... write resumed>) = 524288 [pid 5950] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5949] mkdir("./bus", 0777 [pid 5946] munmap(0x7f0356e00000, 138412032 [pid 5950] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5949] <... mkdir resumed>) = 0 [pid 5948] <... symlink resumed>) = 0 [pid 5947] <... write resumed>) = 524288 [pid 5946] <... munmap resumed>) = 0 [pid 5949] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5948] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5951] <... write resumed>) = 524288 [pid 5950] <... symlink resumed>) = 0 [pid 5948] <... creat resumed>) = 4 [pid 5946] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5951] munmap(0x7f0356e00000, 138412032 [pid 5950] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5948] rename("./bus", "./file2" [pid 5951] <... munmap resumed>) = 0 [pid 5951] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5948] <... rename resumed>) = -1 EEXIST (File exists) [ 162.732018][ T5949] loop2: detected capacity change from 0 to 1024 [pid 5946] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5951] <... openat resumed>) = 4 [pid 5950] <... creat resumed>) = 4 [pid 5949] <... mount resumed>) = 0 [pid 5948] memfd_create("syzkaller", 0 [pid 5947] munmap(0x7f0356e00000, 138412032 [pid 5946] close(5 [pid 5951] ioctl(4, LOOP_SET_FD, 3 [pid 5950] rename("./bus", "./file2" [pid 5949] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5948] <... memfd_create resumed>) = 5 [pid 5947] <... munmap resumed>) = 0 [pid 5949] <... openat resumed>) = 3 [pid 5948] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5949] chdir("./bus") = 0 [pid 5947] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5949] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5947] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5949] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5948] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5947] close(5 [pid 5949] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5950] <... rename resumed>) = -1 EEXIST (File exists) [pid 5949] <... symlink resumed>) = 0 [pid 5947] <... close resumed>) = 0 [pid 5950] memfd_create("syzkaller", 0) = 5 [pid 5950] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5946] <... close resumed>) = 0 [pid 5951] <... ioctl resumed>) = 0 [pid 5950] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5949] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5946] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5951] close(3) = 0 [pid 5948] <... write resumed>) = 524288 [pid 5946] <... open resumed>) = 5 [pid 5951] close(4) = 0 [pid 5947] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5951] mkdir("./bus", 0777 [pid 5949] <... creat resumed>) = 4 [pid 5946] ftruncate(5, 0 [pid 5949] rename("./bus", "./file2" [pid 5951] <... mkdir resumed>) = 0 [pid 5949] <... rename resumed>) = -1 EEXIST (File exists) [pid 5946] <... ftruncate resumed>) = 0 [pid 5950] <... write resumed>) = 524288 [ 162.795203][ T5951] loop1: detected capacity change from 0 to 1024 [pid 5949] memfd_create("syzkaller", 0 [pid 5951] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5947] <... open resumed>) = 5 [pid 5946] exit_group(0 [pid 5949] <... memfd_create resumed>) = 5 [pid 5947] ftruncate(5, 0 [pid 5949] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5947] <... ftruncate resumed>) = 0 [pid 5946] <... exit_group resumed>) = ? [pid 5949] <... mmap resumed>) = 0x7f0356e00000 [pid 5947] exit_group(0 [pid 5949] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5947] <... exit_group resumed>) = ? [pid 5946] +++ exited with 0 +++ [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5946, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5948] munmap(0x7f0356e00000, 138412032 [pid 5947] +++ exited with 0 +++ [pid 5948] <... munmap resumed>) = 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5947, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5951] <... mount resumed>) = 0 [pid 5078] umount2("./143", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5951] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5951] <... openat resumed>) = 3 [pid 5948] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5078] openat(AT_FDCWD, "./143", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5951] chdir("./bus" [pid 5948] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5951] <... chdir resumed>) = 0 [pid 5949] <... write resumed>) = 524288 [pid 5948] close(5 [pid 5078] <... openat resumed>) = 3 [pid 5951] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5950] munmap(0x7f0356e00000, 138412032 [pid 5078] newfstatat(3, "", [pid 5077] umount2("./143", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5951] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5950] <... munmap resumed>) = 0 [pid 5948] <... close resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5950] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5950] close(5 [pid 5951] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] getdents64(3, [pid 5077] openat(AT_FDCWD, "./143", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5951] <... symlink resumed>) = 0 [pid 5950] <... close resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] newfstatat(3, "", [pid 5951] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] umount2("./143/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5949] munmap(0x7f0356e00000, 138412032 [pid 5948] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] getdents64(3, [pid 5949] <... munmap resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5950] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5949] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5077] umount2("./143/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5949] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5949] close(5 [pid 5951] <... creat resumed>) = 4 [pid 5949] <... close resumed>) = 0 [pid 5078] <... umount2 resumed>) = 0 [pid 5948] <... open resumed>) = 5 [pid 5951] rename("./bus", "./file2" [pid 5948] ftruncate(5, 0) = 0 [pid 5951] <... rename resumed>) = -1 EEXIST (File exists) [pid 5948] exit_group(0 [pid 5951] memfd_create("syzkaller", 0 [pid 5950] <... open resumed>) = 5 [pid 5951] <... memfd_create resumed>) = 5 [pid 5948] <... exit_group resumed>) = ? [pid 5951] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5950] ftruncate(5, 0 [pid 5948] +++ exited with 0 +++ [pid 5951] <... mmap resumed>) = 0x7f0356e00000 [pid 5950] <... ftruncate resumed>) = 0 [pid 5078] umount2("./143/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5948, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5950] exit_group(0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5951] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] newfstatat(AT_FDCWD, "./143/bus", [pid 5950] <... exit_group resumed>) = ? [pid 5949] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5073] umount2("./141", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5950] +++ exited with 0 +++ [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] umount2("./143/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] umount2("./143/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] openat(AT_FDCWD, "./141", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5950, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5073] <... openat resumed>) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5949] <... open resumed>) = 5 [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5073] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] umount2("./141/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5949] ftruncate(5, 0) = 0 [pid 5078] openat(AT_FDCWD, "./143/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] newfstatat(AT_FDCWD, "./143/bus", [pid 5076] <... restart_syscall resumed>) = 0 [pid 5951] <... write resumed>) = 524288 [pid 5073] <... umount2 resumed>) = 0 [pid 5951] munmap(0x7f0356e00000, 138412032 [pid 5949] exit_group(0 [pid 5078] <... openat resumed>) = 4 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] umount2("./143/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./141/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./144", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] openat(AT_FDCWD, "./143/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] newfstatat(4, "", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... openat resumed>) = 4 [pid 5073] newfstatat(AT_FDCWD, "./141/bus", [pid 5949] <... exit_group resumed>) = ? [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] newfstatat(4, "", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5951] <... munmap resumed>) = 0 [pid 5949] +++ exited with 0 +++ [pid 5078] getdents64(4, [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./141/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5951] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5077] getdents64(4, [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5949, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5076] openat(AT_FDCWD, "./144", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5951] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] getdents64(4, [pid 5077] getdents64(4, [pid 5076] <... openat resumed>) = 3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] openat(AT_FDCWD, "./141/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5951] close(5 [pid 5078] close(4 [pid 5077] close(4 [pid 5076] newfstatat(3, "", [pid 5075] umount2("./141", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... openat resumed>) = 4 [pid 5078] <... close resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(4, "", [pid 5078] rmdir("./143/bus" [pid 5077] rmdir("./143/bus" [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] openat(AT_FDCWD, "./141", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5076] getdents64(3, [pid 5073] getdents64(4, [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] newfstatat(3, "", [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, [pid 5077] <... rmdir resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] umount2("./144/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] close(4 [pid 5078] <... rmdir resumed>) = 0 [pid 5077] umount2("./143/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] getdents64(3, [pid 5073] <... close resumed>) = 0 [pid 5951] <... close resumed>) = 0 [pid 5078] umount2("./143/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] rmdir("./141/bus") = 0 [pid 5073] umount2("./141/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5951] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./143/binderfs", [pid 5076] umount2("./144/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./141/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] newfstatat(AT_FDCWD, "./143/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./141/binderfs", [pid 5078] unlink("./143/binderfs" [pid 5077] unlink("./143/binderfs" [pid 5076] newfstatat(AT_FDCWD, "./144/bus", [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5951] <... open resumed>) = 5 [pid 5078] <... unlink resumed>) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./141/binderfs" [pid 5951] ftruncate(5, 0) = 0 [pid 5076] umount2("./144/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... unlink resumed>) = 0 [pid 5078] getdents64(3, [pid 5077] getdents64(3, [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5951] exit_group(0) = ? [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] openat(AT_FDCWD, "./144/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] close(3 [pid 5077] close(3 [pid 5076] <... openat resumed>) = 4 [pid 5073] getdents64(3, [pid 5078] <... close resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5076] newfstatat(4, "", [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5078] rmdir("./143" [pid 5951] +++ exited with 0 +++ [pid 5077] rmdir("./143" [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] close(3 [pid 5078] <... rmdir resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] getdents64(4, [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5951, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5075] <... umount2 resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5078] mkdir("./144", 0777 [pid 5077] mkdir("./144", 0777 [pid 5075] umount2("./141/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] rmdir("./141" [pid 5078] <... mkdir resumed>) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 5076] getdents64(4, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] newfstatat(AT_FDCWD, "./141/bus", [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] umount2("./141", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... rmdir resumed>) = 0 [pid 5076] close(4 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... openat resumed>) = 3 [pid 5073] mkdir("./142", 0777 [pid 5076] <... close resumed>) = 0 [pid 5075] umount2("./141/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] openat(AT_FDCWD, "./141", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5076] rmdir("./144/bus" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... openat resumed>) = 3 [pid 5073] <... mkdir resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./141/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... rmdir resumed>) = 0 [pid 5074] newfstatat(3, "", [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] umount2("./144/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... openat resumed>) = 4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] newfstatat(4, "", [pid 5074] getdents64(3, [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] getdents64(4, [pid 5074] umount2("./141/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] <... openat resumed>) = 3 [pid 5076] newfstatat(AT_FDCWD, "./144/binderfs", [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] getdents64(4, [pid 5076] unlink("./144/binderfs") = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] getdents64(3, [pid 5075] close(4 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5075] rmdir("./141/bus" [pid 5074] umount2("./141/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] close(3) = 0 [pid 5076] rmdir("./144") = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./141/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] newfstatat(AT_FDCWD, "./141/bus", [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] mkdir("./145", 0777 [pid 5078] <... ioctl resumed>) = 0 [pid 5077] <... ioctl resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./141/binderfs", [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] close(3 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./141/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... ioctl resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5077] close(3 [pid 5075] unlink("./141/binderfs" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] <... close resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] <... unlink resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5953 attached [pid 5075] getdents64(3, [pid 5074] openat(AT_FDCWD, "./141/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] <... openat resumed>) = 4 [pid 5953] set_robust_list(0x55556e32a660, 24 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 5952 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 5953 [pid 5075] close(3 [pid 5074] newfstatat(4, "", [pid 5953] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 5952 attached [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... close resumed>) = 0 [pid 5074] getdents64(4, [pid 5075] rmdir("./141" [pid 5952] set_robust_list(0x55556e32a660, 24 [pid 5953] chdir("./144" [pid 5952] <... set_robust_list resumed>) = 0 [pid 5953] <... chdir resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] close(3 [pid 5953] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] mkdir("./142", 0777 [pid 5074] getdents64(4, [pid 5073] <... close resumed>) = 0 [pid 5952] chdir("./144" [pid 5953] <... prctl resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5952] <... chdir resumed>) = 0 [pid 5953] setpgid(0, 0 [pid 5952] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5952] setpgid(0, 0) = 0 [pid 5952] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5953] <... setpgid resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 5954 [pid 5075] <... openat resumed>) = 3 [pid 5952] write(3, "1000", 4) = 4 ./strace-static-x86_64: Process 5954 attached [pid 5952] close(3 [pid 5954] set_robust_list(0x55556e32a660, 24 [pid 5952] <... close resumed>) = 0 [pid 5954] <... set_robust_list resumed>) = 0 [pid 5952] symlink("/dev/binderfs", "./binderfs" [pid 5954] chdir("./142" [pid 5952] <... symlink resumed>) = 0 [pid 5953] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] close(4 [pid 5954] <... chdir resumed>) = 0 [pid 5952] memfd_create("syzkaller", 0 [pid 5074] <... close resumed>) = 0 [pid 5953] <... openat resumed>) = 3 [pid 5954] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5952] <... memfd_create resumed>) = 3 [pid 5953] write(3, "1000", 4 [pid 5074] rmdir("./141/bus" [pid 5953] <... write resumed>) = 4 [pid 5954] <... prctl resumed>) = 0 [pid 5952] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5954] setpgid(0, 0 [pid 5952] <... mmap resumed>) = 0x7f0356e00000 [pid 5953] close(3 [pid 5074] <... rmdir resumed>) = 0 [pid 5953] <... close resumed>) = 0 [pid 5074] umount2("./141/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5954] <... setpgid resumed>) = 0 [pid 5953] symlink("/dev/binderfs", "./binderfs" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5954] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5953] <... symlink resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./141/binderfs", [pid 5954] <... openat resumed>) = 3 [pid 5954] write(3, "1000", 4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5954] <... write resumed>) = 4 [pid 5952] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5953] memfd_create("syzkaller", 0 [pid 5074] unlink("./141/binderfs" [pid 5954] close(3 [pid 5953] <... memfd_create resumed>) = 3 [pid 5074] <... unlink resumed>) = 0 [pid 5954] <... close resumed>) = 0 [pid 5953] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] getdents64(3, [pid 5954] symlink("/dev/binderfs", "./binderfs" [pid 5953] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] <... ioctl resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5954] <... symlink resumed>) = 0 [pid 5076] close(3 [pid 5074] close(3 [pid 5954] memfd_create("syzkaller", 0 [pid 5076] <... close resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5954] <... memfd_create resumed>) = 3 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] rmdir("./141") = 0 [pid 5074] mkdir("./142", 0777./strace-static-x86_64: Process 5955 attached [pid 5954] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5953] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... mkdir resumed>) = 0 [pid 5955] set_robust_list(0x55556e32a660, 24 [pid 5954] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 5955 [pid 5955] <... set_robust_list resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5954] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5955] chdir("./145" [pid 5952] <... write resumed>) = 524288 [pid 5953] <... write resumed>) = 524288 [pid 5075] close(3 [pid 5952] munmap(0x7f0356e00000, 138412032 [pid 5955] <... chdir resumed>) = 0 [pid 5955] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] <... close resumed>) = 0 [pid 5955] <... prctl resumed>) = 0 [pid 5952] <... munmap resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5955] setpgid(0, 0) = 0 [pid 5952] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5955] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5952] <... openat resumed>) = 4 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 5956 [pid 5952] ioctl(4, LOOP_SET_FD, 3 [pid 5955] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5956 attached [pid 5955] write(3, "1000", 4 [pid 5954] <... write resumed>) = 524288 [pid 5074] <... ioctl resumed>) = 0 [pid 5956] set_robust_list(0x55556e32a660, 24 [pid 5955] <... write resumed>) = 4 [pid 5954] munmap(0x7f0356e00000, 138412032 [pid 5952] <... ioctl resumed>) = 0 [pid 5953] munmap(0x7f0356e00000, 138412032 [pid 5956] <... set_robust_list resumed>) = 0 [pid 5955] close(3 [pid 5954] <... munmap resumed>) = 0 [pid 5952] close(3 [pid 5953] <... munmap resumed>) = 0 [pid 5074] close(3 [pid 5956] chdir("./142" [pid 5955] <... close resumed>) = 0 [pid 5954] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5952] <... close resumed>) = 0 [pid 5953] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5952] close(4 [pid 5953] <... openat resumed>) = 4 [pid 5955] symlink("/dev/binderfs", "./binderfs" [pid 5954] <... openat resumed>) = 4 [pid 5952] <... close resumed>) = 0 [pid 5953] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5954] ioctl(4, LOOP_SET_FD, 3 [pid 5952] mkdir("./bus", 0777 [pid 5955] <... symlink resumed>) = 0 [pid 5952] <... mkdir resumed>) = 0 [pid 5952] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5956] <... chdir resumed>) = 0 [pid 5955] memfd_create("syzkaller", 0 [pid 5954] <... ioctl resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5956] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5955] <... memfd_create resumed>) = 3 [pid 5956] <... prctl resumed>) = 0 [pid 5956] setpgid(0, 0) = 0 [pid 5952] <... mount resumed>) = 0 [pid 5952] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5952] chdir("./bus") = 0 [pid 5956] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5952] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5955] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5956] <... openat resumed>) = 3 [pid 5952] <... openat resumed>) = -1 EBUSY (Device or resource busy) ./strace-static-x86_64: Process 5957 attached [pid 5952] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5957] set_robust_list(0x55556e32a660, 24) = 0 [pid 5953] close(3 [pid 5957] chdir("./142" [pid 5952] <... symlink resumed>) = 0 [pid 5953] <... close resumed>) = 0 [pid 5957] <... chdir resumed>) = 0 [pid 5953] close(4 [pid 5957] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5952] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5953] <... close resumed>) = 0 [pid 5957] <... prctl resumed>) = 0 [pid 5956] write(3, "1000", 4 [pid 5955] <... mmap resumed>) = 0x7f0356e00000 [pid 5954] close(3 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 5957 [pid 5957] setpgid(0, 0 [pid 5956] <... write resumed>) = 4 [pid 5953] mkdir("./bus", 0777 [pid 5957] <... setpgid resumed>) = 0 [pid 5956] close(3 [pid 5955] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5954] <... close resumed>) = 0 [pid 5953] <... mkdir resumed>) = 0 [pid 5957] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5956] <... close resumed>) = 0 [pid 5954] close(4 [pid 5953] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5956] symlink("/dev/binderfs", "./binderfs" [pid 5954] <... close resumed>) = 0 [pid 5952] <... creat resumed>) = 4 [pid 5957] <... openat resumed>) = 3 [pid 5956] <... symlink resumed>) = 0 [pid 5954] mkdir("./bus", 0777 [pid 5952] rename("./bus", "./file2" [pid 5957] write(3, "1000", 4 [pid 5956] memfd_create("syzkaller", 0 [pid 5955] <... write resumed>) = 524288 [pid 5954] <... mkdir resumed>) = 0 [pid 5952] <... rename resumed>) = -1 EEXIST (File exists) [pid 5957] <... write resumed>) = 4 [pid 5956] <... memfd_create resumed>) = 3 [pid 5954] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5952] memfd_create("syzkaller", 0 [pid 5953] <... mount resumed>) = 0 [ 163.187308][ T5952] loop5: detected capacity change from 0 to 1024 [ 163.209678][ T5953] loop4: detected capacity change from 0 to 1024 [ 163.217621][ T5954] loop0: detected capacity change from 0 to 1024 [pid 5957] close(3 [pid 5956] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5955] munmap(0x7f0356e00000, 138412032 [pid 5952] <... memfd_create resumed>) = 5 [pid 5953] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5957] <... close resumed>) = 0 [pid 5955] <... munmap resumed>) = 0 [pid 5952] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5953] <... openat resumed>) = 3 [pid 5957] symlink("/dev/binderfs", "./binderfs" [pid 5952] <... mmap resumed>) = 0x7f0356e00000 [pid 5953] chdir("./bus" [pid 5957] <... symlink resumed>) = 0 [pid 5956] <... mmap resumed>) = 0x7f0356e00000 [pid 5955] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5952] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5953] <... chdir resumed>) = 0 [pid 5955] <... openat resumed>) = 4 [pid 5953] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5955] ioctl(4, LOOP_SET_FD, 3 [pid 5953] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5957] memfd_create("syzkaller", 0) = 3 [pid 5957] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5953] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5957] <... mmap resumed>) = 0x7f0356e00000 [pid 5955] <... ioctl resumed>) = 0 [pid 5953] <... symlink resumed>) = 0 [pid 5957] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5955] close(3 [pid 5954] <... mount resumed>) = 0 [pid 5952] <... write resumed>) = 524288 [pid 5955] <... close resumed>) = 0 [pid 5954] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5955] close(4 [pid 5956] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5955] <... close resumed>) = 0 [pid 5954] <... openat resumed>) = 3 [pid 5955] mkdir("./bus", 0777 [pid 5954] chdir("./bus" [pid 5955] <... mkdir resumed>) = 0 [pid 5954] <... chdir resumed>) = 0 [pid 5953] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5955] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5954] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5956] <... write resumed>) = 524288 [pid 5955] <... mount resumed>) = 0 [pid 5954] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5953] <... creat resumed>) = 4 [pid 5955] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5954] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5953] rename("./bus", "./file2" [pid 5955] <... openat resumed>) = 3 [pid 5953] <... rename resumed>) = -1 EEXIST (File exists) [pid 5957] <... write resumed>) = 524288 [pid 5956] munmap(0x7f0356e00000, 138412032 [pid 5955] chdir("./bus" [pid 5954] <... symlink resumed>) = 0 [pid 5952] munmap(0x7f0356e00000, 138412032) = 0 [pid 5955] <... chdir resumed>) = 0 [pid 5954] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [ 163.276460][ T5955] loop3: detected capacity change from 0 to 1024 [pid 5953] memfd_create("syzkaller", 0 [pid 5956] <... munmap resumed>) = 0 [pid 5955] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5954] <... creat resumed>) = 4 [pid 5952] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5953] <... memfd_create resumed>) = 5 [pid 5957] munmap(0x7f0356e00000, 138412032 [pid 5955] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5953] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5955] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5954] rename("./bus", "./file2" [pid 5953] <... mmap resumed>) = 0x7f0356e00000 [pid 5954] <... rename resumed>) = -1 EEXIST (File exists) [pid 5952] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5952] close(5 [pid 5954] memfd_create("syzkaller", 0) = 5 [pid 5954] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5957] <... munmap resumed>) = 0 [pid 5956] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5954] <... mmap resumed>) = 0x7f0356e00000 [pid 5956] <... openat resumed>) = 4 [pid 5956] ioctl(4, LOOP_SET_FD, 3 [pid 5957] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5954] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5957] <... openat resumed>) = 4 [pid 5955] <... symlink resumed>) = 0 [pid 5952] <... close resumed>) = 0 [pid 5953] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5952] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5957] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5956] <... ioctl resumed>) = 0 [pid 5955] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5954] <... write resumed>) = 524288 [pid 5952] <... open resumed>) = 5 [pid 5953] <... write resumed>) = 524288 [pid 5957] close(3 [pid 5956] close(3 [pid 5955] <... creat resumed>) = 4 [pid 5954] munmap(0x7f0356e00000, 138412032 [pid 5952] ftruncate(5, 0 [pid 5956] <... close resumed>) = 0 [pid 5952] <... ftruncate resumed>) = 0 [pid 5957] <... close resumed>) = 0 [pid 5956] close(4 [pid 5955] rename("./bus", "./file2" [pid 5954] <... munmap resumed>) = 0 [pid 5952] exit_group(0 [pid 5957] close(4 [pid 5956] <... close resumed>) = 0 [pid 5952] <... exit_group resumed>) = ? [pid 5956] mkdir("./bus", 0777 [pid 5955] <... rename resumed>) = -1 EEXIST (File exists) [pid 5954] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5953] munmap(0x7f0356e00000, 138412032 [pid 5955] memfd_create("syzkaller", 0 [pid 5954] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5953] <... munmap resumed>) = 0 [pid 5955] <... memfd_create resumed>) = 5 [pid 5957] <... close resumed>) = 0 [pid 5956] <... mkdir resumed>) = 0 [pid 5955] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5954] close(5 [pid 5957] mkdir("./bus", 0777 [pid 5956] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5955] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5954] <... close resumed>) = 0 [pid 5952] +++ exited with 0 +++ [pid 5953] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5952, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5953] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 163.351408][ T5956] loop2: detected capacity change from 0 to 1024 [ 163.371326][ T5957] loop1: detected capacity change from 0 to 1024 [pid 5953] close(5 [pid 5957] <... mkdir resumed>) = 0 [pid 5078] umount2("./144", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5954] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5957] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5956] <... mount resumed>) = 0 [pid 5955] <... write resumed>) = 524288 [pid 5953] <... close resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5955] munmap(0x7f0356e00000, 138412032 [pid 5956] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5955] <... munmap resumed>) = 0 [pid 5957] <... mount resumed>) = 0 [pid 5956] chdir("./bus" [pid 5954] <... open resumed>) = 5 [pid 5953] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] openat(AT_FDCWD, "./144", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5957] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5956] <... chdir resumed>) = 0 [pid 5956] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] <... openat resumed>) = 3 [pid 5956] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] newfstatat(3, "", [pid 5956] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5955] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5954] ftruncate(5, 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5955] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5954] <... ftruncate resumed>) = 0 [pid 5078] getdents64(3, [pid 5955] close(5 [pid 5954] exit_group(0 [pid 5957] <... openat resumed>) = 3 [pid 5956] <... symlink resumed>) = 0 [pid 5955] <... close resumed>) = 0 [pid 5954] <... exit_group resumed>) = ? [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5957] chdir("./bus" [pid 5956] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5953] <... open resumed>) = 5 [pid 5078] umount2("./144/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5957] <... chdir resumed>) = 0 [pid 5957] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5953] ftruncate(5, 0 [pid 5957] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5953] <... ftruncate resumed>) = 0 [pid 5956] <... creat resumed>) = 4 [pid 5953] exit_group(0 [pid 5956] rename("./bus", "./file2" [pid 5953] <... exit_group resumed>) = ? [pid 5955] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5954] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5954, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5956] <... rename resumed>) = -1 EEXIST (File exists) [pid 5956] memfd_create("syzkaller", 0 [pid 5955] <... open resumed>) = 5 [pid 5956] <... memfd_create resumed>) = 5 [pid 5073] umount2("./142", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5957] <... symlink resumed>) = 0 [pid 5955] ftruncate(5, 0 [pid 5957] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5956] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5955] <... ftruncate resumed>) = 0 [pid 5953] +++ exited with 0 +++ [pid 5078] <... umount2 resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./142", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5956] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5953, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5073] <... openat resumed>) = 3 [pid 5077] umount2("./144", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./144", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5955] exit_group(0) = ? [pid 5077] newfstatat(3, "", [pid 5956] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5955] +++ exited with 0 +++ [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] newfstatat(3, "", [pid 5078] umount2("./144/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] getdents64(3, [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5955, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5957] <... creat resumed>) = 4 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5957] rename("./bus", "./file2" [pid 5078] newfstatat(AT_FDCWD, "./144/bus", [pid 5073] getdents64(3, [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./145", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./144/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./145", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] umount2("./142/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] openat(AT_FDCWD, "./144/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] umount2("./144/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... openat resumed>) = 3 [pid 5957] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] <... openat resumed>) = 4 [pid 5076] newfstatat(3, "", [pid 5957] memfd_create("syzkaller", 0 [pid 5956] <... write resumed>) = 524288 [pid 5078] newfstatat(4, "", [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5957] <... memfd_create resumed>) = 5 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, [pid 5957] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5956] munmap(0x7f0356e00000, 138412032 [pid 5078] getdents64(4, [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] umount2("./145/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = 0 [pid 5957] <... mmap resumed>) = 0x7f0356e00000 [pid 5956] <... munmap resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] <... umount2 resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5957] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5956] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] getdents64(4, [pid 5073] umount2("./142/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./145/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] umount2("./144/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5956] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] close(4 [pid 5956] close(5 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./145/bus", [pid 5078] rmdir("./144/bus" [pid 5077] newfstatat(AT_FDCWD, "./144/bus", [pid 5073] newfstatat(AT_FDCWD, "./142/bus", [pid 5078] <... rmdir resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] umount2("./144/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] umount2("./144/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./145/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] newfstatat(AT_FDCWD, "./144/binderfs", [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./142/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] openat(AT_FDCWD, "./145/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... openat resumed>) = 4 [pid 5076] newfstatat(4, "", [pid 5073] openat(AT_FDCWD, "./142/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] openat(AT_FDCWD, "./144/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... openat resumed>) = 4 [pid 5077] <... openat resumed>) = 4 [pid 5078] unlink("./144/binderfs") = 0 [pid 5077] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] newfstatat(4, "", [pid 5078] getdents64(3, [pid 5077] getdents64(4, [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, [pid 5073] getdents64(4, [pid 5078] close(3 [pid 5077] getdents64(4, [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5956] <... close resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] getdents64(4, [pid 5073] getdents64(4, [pid 5956] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] rmdir("./144" [pid 5077] close(4 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] <... close resumed>) = 0 [pid 5076] close(4 [pid 5073] close(4 [pid 5077] rmdir("./144/bus" [pid 5076] <... close resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5076] rmdir("./145/bus" [pid 5073] rmdir("./142/bus" [pid 5077] <... rmdir resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5076] umount2("./145/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./142/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... rmdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./145/binderfs", [pid 5073] newfstatat(AT_FDCWD, "./142/binderfs", [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] mkdir("./145", 0777 [pid 5077] umount2("./144/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] unlink("./145/binderfs" [pid 5957] <... write resumed>) = 524288 [pid 5076] <... unlink resumed>) = 0 [pid 5073] unlink("./142/binderfs" [pid 5956] <... open resumed>) = 5 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5957] munmap(0x7f0356e00000, 138412032 [pid 5956] ftruncate(5, 0 [pid 5078] <... mkdir resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./144/binderfs", [pid 5073] <... unlink resumed>) = 0 [pid 5076] getdents64(3, [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5956] <... ftruncate resumed>) = 0 [pid 5076] close(3 [pid 5957] <... munmap resumed>) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] unlink("./144/binderfs" [pid 5076] <... close resumed>) = 0 [pid 5073] getdents64(3, [pid 5956] exit_group(0 [pid 5078] <... openat resumed>) = 3 [pid 5076] rmdir("./145" [pid 5957] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5956] <... exit_group resumed>) = ? [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5077] <... unlink resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3 [pid 5076] <... rmdir resumed>) = 0 [pid 5957] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... close resumed>) = 0 [pid 5957] close(5 [pid 5077] getdents64(3, [pid 5076] mkdir("./146", 0777 [pid 5073] rmdir("./142" [pid 5956] +++ exited with 0 +++ [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5077] close(3 [pid 5073] mkdir("./143", 0777 [pid 5077] <... close resumed>) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5956, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5073] <... mkdir resumed>) = 0 [pid 5957] <... close resumed>) = 0 [pid 5077] rmdir("./144" [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 5076] <... openat resumed>) = 3 [pid 5075] <... restart_syscall resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5957] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] <... rmdir resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5077] mkdir("./145", 0777) = 0 [pid 5075] umount2("./142", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5075] openat(AT_FDCWD, "./142", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5957] <... open resumed>) = 5 [pid 5077] <... openat resumed>) = 3 [pid 5075] newfstatat(3, "", [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5957] ftruncate(5, 0 [pid 5075] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] umount2("./142/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5957] <... ftruncate resumed>) = 0 [pid 5957] exit_group(0) = ? [pid 5075] <... umount2 resumed>) = 0 [pid 5075] umount2("./142/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./142/bus", [pid 5957] +++ exited with 0 +++ [pid 5076] <... ioctl resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5957, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5074] umount2("./142", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./142/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./142/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] openat(AT_FDCWD, "./142", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... ioctl resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 5074] <... openat resumed>) = 3 [pid 5075] newfstatat(4, "", [pid 5074] newfstatat(3, "", [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, [pid 5074] getdents64(3, [pid 5076] close(3) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] <... ioctl resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] close(3 [pid 5075] getdents64(4, [pid 5074] umount2("./142/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] close(4./strace-static-x86_64: Process 5958 attached [pid 5078] <... close resumed>) = 0 [pid 5077] <... ioctl resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 5958 [pid 5075] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5073] close(3 [pid 5958] set_robust_list(0x55556e32a660, 24 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] close(3 [pid 5075] rmdir("./142/bus" [pid 5958] <... set_robust_list resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5073] <... close resumed>) = 0 ./strace-static-x86_64: Process 5959 attached [pid 5958] chdir("./146" [pid 5077] <... close resumed>) = 0 [pid 5075] umount2("./142/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5958] <... chdir resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] umount2("./142/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./142/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./142/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./142/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5074] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] close(4 [pid 5075] newfstatat(AT_FDCWD, "./142/binderfs", [pid 5959] set_robust_list(0x55556e32a660, 24 [pid 5958] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] <... close resumed>) = 0 ./strace-static-x86_64: Process 5960 attached [pid 5958] <... prctl resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 5960 [pid 5958] setpgid(0, 0 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 5961 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] rmdir("./142/bus" [pid 5960] set_robust_list(0x55556e32a660, 24 [pid 5958] <... setpgid resumed>) = 0 [pid 5960] <... set_robust_list resumed>) = 0 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 5959 [pid 5959] <... set_robust_list resumed>) = 0 [pid 5958] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] unlink("./142/binderfs" [pid 5960] chdir("./143" [pid 5074] <... rmdir resumed>) = 0 [pid 5960] <... chdir resumed>) = 0 [pid 5960] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5959] chdir("./145" [pid 5958] <... openat resumed>) = 3 [pid 5075] <... unlink resumed>) = 0 [pid 5074] umount2("./142/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5960] <... prctl resumed>) = 0 [pid 5958] write(3, "1000", 4 [pid 5960] setpgid(0, 0) = 0 [pid 5958] <... write resumed>) = 4 ./strace-static-x86_64: Process 5961 attached [pid 5959] <... chdir resumed>) = 0 [pid 5075] getdents64(3, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5961] set_robust_list(0x55556e32a660, 24 [pid 5959] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5958] close(3 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5961] <... set_robust_list resumed>) = 0 [pid 5959] <... prctl resumed>) = 0 [pid 5958] <... close resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./142/binderfs", [pid 5961] chdir("./145" [pid 5960] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5959] setpgid(0, 0 [pid 5958] symlink("/dev/binderfs", "./binderfs" [pid 5075] close(3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5961] <... chdir resumed>) = 0 [pid 5959] <... setpgid resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5074] unlink("./142/binderfs" [pid 5961] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5959] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] rmdir("./142" [pid 5074] <... unlink resumed>) = 0 [pid 5961] <... prctl resumed>) = 0 [pid 5960] <... openat resumed>) = 3 [pid 5959] <... openat resumed>) = 3 [pid 5958] <... symlink resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] getdents64(3, [pid 5961] setpgid(0, 0 [pid 5960] write(3, "1000", 4 [pid 5959] write(3, "1000", 4 [pid 5958] memfd_create("syzkaller", 0 [pid 5075] mkdir("./143", 0777 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5961] <... setpgid resumed>) = 0 [pid 5959] <... write resumed>) = 4 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] close(3 [pid 5961] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5960] <... write resumed>) = 4 [pid 5959] close(3 [pid 5958] <... memfd_create resumed>) = 3 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] <... close resumed>) = 0 [pid 5961] <... openat resumed>) = 3 [pid 5960] close(3 [pid 5959] <... close resumed>) = 0 [pid 5958] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... openat resumed>) = 3 [pid 5074] rmdir("./142" [pid 5960] <... close resumed>) = 0 [pid 5960] symlink("/dev/binderfs", "./binderfs" [pid 5959] symlink("/dev/binderfs", "./binderfs" [pid 5958] <... mmap resumed>) = 0x7f0356e00000 [pid 5074] <... rmdir resumed>) = 0 [pid 5960] <... symlink resumed>) = 0 [pid 5959] <... symlink resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] mkdir("./143", 0777 [pid 5959] memfd_create("syzkaller", 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5961] write(3, "1000", 4 [pid 5959] <... memfd_create resumed>) = 3 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5961] <... write resumed>) = 4 [pid 5960] memfd_create("syzkaller", 0 [pid 5959] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... openat resumed>) = 3 [pid 5961] close(3 [pid 5959] <... mmap resumed>) = 0x7f0356e00000 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5961] <... close resumed>) = 0 [pid 5960] <... memfd_create resumed>) = 3 [pid 5958] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5960] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5961] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5961] memfd_create("syzkaller", 0) = 3 [pid 5959] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5961] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5960] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5961] <... mmap resumed>) = 0x7f0356e00000 [pid 5960] <... write resumed>) = 524288 [pid 5959] <... write resumed>) = 524288 [pid 5960] munmap(0x7f0356e00000, 138412032 [pid 5961] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5959] munmap(0x7f0356e00000, 138412032 [pid 5958] <... write resumed>) = 524288 [pid 5075] <... ioctl resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5075] close(3 [pid 5960] <... munmap resumed>) = 0 [pid 5961] <... write resumed>) = 524288 [pid 5959] <... munmap resumed>) = 0 [pid 5958] munmap(0x7f0356e00000, 138412032 [pid 5075] <... close resumed>) = 0 [pid 5074] close(3 [pid 5958] <... munmap resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5958] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5958] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5962 attached [pid 5962] set_robust_list(0x55556e32a660, 24 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 5962 [pid 5962] <... set_robust_list resumed>) = 0 [pid 5960] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5959] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5960] <... openat resumed>) = 4 [pid 5959] <... openat resumed>) = 4 [pid 5962] chdir("./143" [pid 5959] ioctl(4, LOOP_SET_FD, 3 [pid 5962] <... chdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5961] munmap(0x7f0356e00000, 138412032 [pid 5960] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5963 attached [pid 5962] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5961] <... munmap resumed>) = 0 [pid 5961] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5958] <... ioctl resumed>) = 0 [pid 5961] ioctl(4, LOOP_SET_FD, 3 [pid 5958] close(3 [pid 5963] set_robust_list(0x55556e32a660, 24 [pid 5962] <... prctl resumed>) = 0 [pid 5958] <... close resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 5963 [pid 5962] setpgid(0, 0) = 0 [pid 5963] <... set_robust_list resumed>) = 0 [pid 5958] close(4 [pid 5963] chdir("./143" [pid 5958] <... close resumed>) = 0 [pid 5963] <... chdir resumed>) = 0 [pid 5962] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5958] mkdir("./bus", 0777 [pid 5963] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5962] <... openat resumed>) = 3 [pid 5960] <... ioctl resumed>) = 0 [pid 5961] <... ioctl resumed>) = 0 [pid 5959] <... ioctl resumed>) = 0 [pid 5958] <... mkdir resumed>) = 0 [pid 5958] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5963] <... prctl resumed>) = 0 [pid 5962] write(3, "1000", 4 [pid 5963] setpgid(0, 0 [pid 5962] <... write resumed>) = 4 [pid 5961] close(3 [pid 5960] close(3 [pid 5959] close(3 [pid 5963] <... setpgid resumed>) = 0 [pid 5962] close(3 [pid 5961] <... close resumed>) = 0 [pid 5960] <... close resumed>) = 0 [pid 5959] <... close resumed>) = 0 [pid 5963] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5962] <... close resumed>) = 0 [pid 5961] close(4 [pid 5960] close(4 [pid 5959] close(4 [pid 5963] <... openat resumed>) = 3 [pid 5962] symlink("/dev/binderfs", "./binderfs" [pid 5961] <... close resumed>) = 0 [pid 5960] <... close resumed>) = 0 [pid 5959] <... close resumed>) = 0 [pid 5962] <... symlink resumed>) = 0 [pid 5961] mkdir("./bus", 0777 [pid 5960] mkdir("./bus", 0777 [pid 5959] mkdir("./bus", 0777 [pid 5958] <... mount resumed>) = 0 [pid 5958] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5958] chdir("./bus" [pid 5963] write(3, "1000", 4 [pid 5962] memfd_create("syzkaller", 0 [pid 5961] <... mkdir resumed>) = 0 [pid 5960] <... mkdir resumed>) = 0 [pid 5959] <... mkdir resumed>) = 0 [pid 5963] <... write resumed>) = 4 [pid 5959] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5962] <... memfd_create resumed>) = 3 [pid 5960] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5958] <... chdir resumed>) = 0 [pid 5958] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5963] close(3 [pid 5962] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5961] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [ 163.793147][ T5958] loop3: detected capacity change from 0 to 1024 [ 163.802335][ T5959] loop5: detected capacity change from 0 to 1024 [ 163.810660][ T5960] loop0: detected capacity change from 0 to 1024 [ 163.821193][ T5961] loop4: detected capacity change from 0 to 1024 [pid 5958] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5962] <... mmap resumed>) = 0x7f0356e00000 [pid 5963] <... close resumed>) = 0 [pid 5958] <... symlink resumed>) = 0 [pid 5958] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5962] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5963] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5963] memfd_create("syzkaller", 0) = 3 [pid 5963] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5961] <... mount resumed>) = 0 [pid 5960] <... mount resumed>) = 0 [pid 5959] <... mount resumed>) = 0 [pid 5958] <... creat resumed>) = 4 [pid 5958] rename("./bus", "./file2" [pid 5961] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5960] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5959] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5958] <... rename resumed>) = -1 EEXIST (File exists) [pid 5961] <... openat resumed>) = 3 [pid 5960] <... openat resumed>) = 3 [pid 5959] <... openat resumed>) = 3 [pid 5958] memfd_create("syzkaller", 0 [pid 5960] chdir("./bus" [pid 5958] <... memfd_create resumed>) = 5 [pid 5961] chdir("./bus" [pid 5960] <... chdir resumed>) = 0 [pid 5959] chdir("./bus" [pid 5958] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5961] <... chdir resumed>) = 0 [pid 5960] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5958] <... mmap resumed>) = 0x7f0356e00000 [pid 5959] <... chdir resumed>) = 0 [pid 5961] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5960] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5959] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5958] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5963] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5960] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5959] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5962] <... write resumed>) = 524288 [pid 5961] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5959] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5960] <... symlink resumed>) = 0 [pid 5960] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5961] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5959] <... symlink resumed>) = 0 [pid 5961] <... symlink resumed>) = 0 [pid 5959] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5961] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5960] <... creat resumed>) = 4 [pid 5960] rename("./bus", "./file2" [pid 5962] munmap(0x7f0356e00000, 138412032) = 0 [pid 5961] <... creat resumed>) = 4 [pid 5960] <... rename resumed>) = -1 EEXIST (File exists) [pid 5959] <... creat resumed>) = 4 [pid 5960] memfd_create("syzkaller", 0) = 5 [pid 5959] rename("./bus", "./file2" [pid 5960] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5963] <... write resumed>) = 524288 [pid 5962] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5961] rename("./bus", "./file2" [pid 5960] <... mmap resumed>) = 0x7f0356e00000 [pid 5959] <... rename resumed>) = -1 EEXIST (File exists) [pid 5963] munmap(0x7f0356e00000, 138412032 [pid 5962] <... openat resumed>) = 4 [pid 5961] <... rename resumed>) = -1 EEXIST (File exists) [pid 5958] <... write resumed>) = 524288 [pid 5961] memfd_create("syzkaller", 0 [pid 5962] ioctl(4, LOOP_SET_FD, 3 [pid 5961] <... memfd_create resumed>) = 5 [pid 5958] munmap(0x7f0356e00000, 138412032) = 0 [pid 5960] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5958] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5963] <... munmap resumed>) = 0 [pid 5961] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5958] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5958] close(5 [pid 5961] <... mmap resumed>) = 0x7f0356e00000 [pid 5959] memfd_create("syzkaller", 0 [pid 5963] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5961] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5959] <... memfd_create resumed>) = 5 [pid 5963] <... openat resumed>) = 4 [pid 5959] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5963] ioctl(4, LOOP_SET_FD, 3 [pid 5959] <... mmap resumed>) = 0x7f0356e00000 [pid 5960] <... write resumed>) = 524288 [pid 5959] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5958] <... close resumed>) = 0 [pid 5958] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5962] <... ioctl resumed>) = 0 [pid 5962] close(3) = 0 [pid 5961] <... write resumed>) = 524288 [pid 5958] <... open resumed>) = 5 [pid 5960] munmap(0x7f0356e00000, 138412032) = 0 [pid 5963] <... ioctl resumed>) = 0 [pid 5963] close(3 [pid 5962] close(4 [pid 5963] <... close resumed>) = 0 [pid 5962] <... close resumed>) = 0 [pid 5960] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5962] mkdir("./bus", 0777 [pid 5960] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5963] close(4 [pid 5962] <... mkdir resumed>) = 0 [pid 5960] close(5 [pid 5963] <... close resumed>) = 0 [pid 5963] mkdir("./bus", 0777 [pid 5960] <... close resumed>) = 0 [pid 5958] ftruncate(5, 0 [pid 5962] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5963] <... mkdir resumed>) = 0 [pid 5959] <... write resumed>) = 524288 [pid 5958] <... ftruncate resumed>) = 0 [pid 5958] exit_group(0) = ? [pid 5963] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5959] munmap(0x7f0356e00000, 138412032 [pid 5958] +++ exited with 0 +++ [pid 5961] munmap(0x7f0356e00000, 138412032 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5958, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5961] <... munmap resumed>) = 0 [pid 5959] <... munmap resumed>) = 0 [pid 5961] openat(AT_FDCWD, "/dev/loop4", O_RDWR [ 163.929990][ T5962] loop2: detected capacity change from 0 to 1024 [ 163.954812][ T5963] loop1: detected capacity change from 0 to 1024 [pid 5959] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5961] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5959] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5961] close(5 [pid 5959] close(5 [pid 5960] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5076] umount2("./146", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5961] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./146", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5962] <... mount resumed>) = 0 [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5962] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5960] <... open resumed>) = 5 [pid 5076] getdents64(3, [pid 5962] <... openat resumed>) = 3 [pid 5960] ftruncate(5, 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5962] chdir("./bus" [pid 5960] <... ftruncate resumed>) = 0 [pid 5076] umount2("./146/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5962] <... chdir resumed>) = 0 [pid 5960] exit_group(0 [pid 5959] <... close resumed>) = 0 [pid 5962] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5960] <... exit_group resumed>) = ? [pid 5962] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5961] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5959] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5963] <... mount resumed>) = 0 [pid 5960] +++ exited with 0 +++ [pid 5963] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5959] <... open resumed>) = 5 [pid 5963] <... openat resumed>) = 3 [pid 5962] <... symlink resumed>) = 0 [pid 5959] ftruncate(5, 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5960, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5963] chdir("./bus") = 0 [pid 5961] <... open resumed>) = 5 [pid 5959] <... ftruncate resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5073] umount2("./143", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5963] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5962] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5961] ftruncate(5, 0 [pid 5959] exit_group(0 [pid 5963] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5959] <... exit_group resumed>) = ? [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5963] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5962] <... creat resumed>) = 4 [pid 5961] <... ftruncate resumed>) = 0 [pid 5959] +++ exited with 0 +++ [pid 5076] umount2("./146/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] openat(AT_FDCWD, "./143", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5963] <... symlink resumed>) = 0 [pid 5962] rename("./bus", "./file2" [pid 5961] exit_group(0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5959, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... openat resumed>) = 3 [pid 5963] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5961] <... exit_group resumed>) = ? [pid 5073] newfstatat(3, "", [pid 5962] <... rename resumed>) = -1 EEXIST (File exists) [pid 5076] newfstatat(AT_FDCWD, "./146/bus", [pid 5962] memfd_create("syzkaller", 0 [pid 5078] umount2("./145", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5962] <... memfd_create resumed>) = 5 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5962] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] openat(AT_FDCWD, "./145", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] umount2("./146/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5963] <... creat resumed>) = 4 [pid 5962] <... mmap resumed>) = 0x7f0356e00000 [pid 5961] +++ exited with 0 +++ [pid 5078] <... openat resumed>) = 3 [pid 5073] getdents64(3, [pid 5962] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5961, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5076] openat(AT_FDCWD, "./146/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5963] rename("./bus", "./file2" [pid 5076] <... openat resumed>) = 4 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] umount2("./143/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] newfstatat(4, "", [pid 5078] getdents64(3, [pid 5077] umount2("./145", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5963] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] getdents64(4, [pid 5963] memfd_create("syzkaller", 0) = 5 [pid 5078] umount2("./145/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] openat(AT_FDCWD, "./145", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5963] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5077] <... openat resumed>) = 3 [pid 5076] getdents64(4, [pid 5073] <... umount2 resumed>) = 0 [pid 5077] newfstatat(3, "", [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] close(4 [pid 5077] getdents64(3, [pid 5076] <... close resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] rmdir("./146/bus" [pid 5963] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] umount2("./145/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... rmdir resumed>) = 0 [pid 5073] umount2("./143/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5963] <... write resumed>) = 524288 [pid 5962] <... write resumed>) = 524288 [pid 5078] <... umount2 resumed>) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5076] umount2("./146/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] newfstatat(AT_FDCWD, "./143/bus", [pid 5963] munmap(0x7f0356e00000, 138412032 [pid 5962] munmap(0x7f0356e00000, 138412032 [pid 5077] umount2("./145/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] newfstatat(AT_FDCWD, "./146/binderfs", [pid 5073] umount2("./143/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] unlink("./146/binderfs" [pid 5073] openat(AT_FDCWD, "./143/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5962] <... munmap resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./145/bus", [pid 5076] <... unlink resumed>) = 0 [pid 5073] <... openat resumed>) = 4 [pid 5073] newfstatat(4, "", [pid 5076] getdents64(3, [pid 5963] <... munmap resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] getdents64(4, [pid 5076] close(3 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5078] umount2("./145/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5963] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5962] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] <... close resumed>) = 0 [pid 5073] getdents64(4, [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] rmdir("./146" [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5963] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5962] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] umount2("./145/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5963] close(5 [pid 5962] close(5 [pid 5078] newfstatat(AT_FDCWD, "./145/bus", [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... rmdir resumed>) = 0 [pid 5073] close(4 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] mkdir("./147", 0777 [pid 5073] <... close resumed>) = 0 [pid 5078] umount2("./145/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... mkdir resumed>) = 0 [pid 5073] rmdir("./143/bus" [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./145/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... rmdir resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./145/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... openat resumed>) = 4 [pid 5077] <... openat resumed>) = 4 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] umount2("./143/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] newfstatat(4, "", [pid 5077] newfstatat(4, "", [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] getdents64(4, [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] newfstatat(AT_FDCWD, "./143/binderfs", [pid 5963] <... close resumed>) = 0 [pid 5962] <... close resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] getdents64(4, [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] close(4) = 0 [pid 5963] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5962] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] getdents64(4, [pid 5077] rmdir("./145/bus" [pid 5073] unlink("./143/binderfs" [pid 5963] <... open resumed>) = 5 [pid 5962] <... open resumed>) = 5 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5962] ftruncate(5, 0 [pid 5078] close(4 [pid 5077] umount2("./145/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5963] ftruncate(5, 0 [pid 5078] <... close resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] getdents64(3, [pid 5963] <... ftruncate resumed>) = 0 [pid 5962] <... ftruncate resumed>) = 0 [pid 5078] rmdir("./145/bus" [pid 5077] newfstatat(AT_FDCWD, "./145/binderfs", [pid 5962] exit_group(0 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5962] <... exit_group resumed>) = ? [pid 5073] close(3 [pid 5963] exit_group(0 [pid 5078] <... rmdir resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./143" [pid 5963] <... exit_group resumed>) = ? [pid 5962] +++ exited with 0 +++ [pid 5078] umount2("./145/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... rmdir resumed>) = 0 [pid 5077] unlink("./145/binderfs" [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5962, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... unlink resumed>) = 0 [pid 5078] newfstatat(AT_FDCWD, "./145/binderfs", [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 5963] +++ exited with 0 +++ [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] getdents64(3, [pid 5075] <... restart_syscall resumed>) = 0 [pid 5073] mkdir("./144", 0777 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5963, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5078] unlink("./145/binderfs" [pid 5074] <... restart_syscall resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 5077] close(3) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] umount2("./143", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] getdents64(3, [pid 5077] rmdir("./145" [pid 5075] umount2("./143", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... openat resumed>) = 3 [pid 5077] <... rmdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./143", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... openat resumed>) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5075] openat(AT_FDCWD, "./143", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] newfstatat(3, "", [pid 5078] close(3 [pid 5077] mkdir("./146", 0777 [pid 5075] <... openat resumed>) = 3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] <... close resumed>) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 5074] getdents64(3, [pid 5078] rmdir("./145" [pid 5075] newfstatat(3, "", [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] <... rmdir resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] umount2("./143/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] getdents64(3, [pid 5078] mkdir("./146", 0777 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] <... ioctl resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] umount2("./143/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./143/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... openat resumed>) = 3 [pid 5074] newfstatat(AT_FDCWD, "./143/bus", [pid 5078] <... mkdir resumed>) = 0 [pid 5076] close(3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5076] <... close resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5964 attached [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 5964 [pid 5075] <... umount2 resumed>) = 0 [pid 5074] umount2("./143/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5964] set_robust_list(0x55556e32a660, 24 [pid 5078] <... openat resumed>) = 3 [pid 5964] <... set_robust_list resumed>) = 0 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5075] umount2("./143/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5964] chdir("./147" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./143/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5964] <... chdir resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./143/bus", [pid 5074] <... openat resumed>) = 4 [pid 5964] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] newfstatat(4, "", [pid 5964] <... prctl resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5964] setpgid(0, 0 [pid 5074] getdents64(4, [pid 5964] <... setpgid resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5964] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] getdents64(4, [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./143/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5964] <... openat resumed>) = 3 [pid 5075] openat(AT_FDCWD, "./143/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] close(4 [pid 5964] write(3, "1000", 4 [pid 5075] <... openat resumed>) = 4 [pid 5074] <... close resumed>) = 0 [pid 5964] <... write resumed>) = 4 [pid 5075] newfstatat(4, "", [pid 5074] rmdir("./143/bus" [pid 5964] close(3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5964] <... close resumed>) = 0 [pid 5075] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] close(4 [pid 5964] symlink("/dev/binderfs", "./binderfs" [pid 5075] <... close resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5075] rmdir("./143/bus" [pid 5964] <... symlink resumed>) = 0 [pid 5074] umount2("./143/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5964] memfd_create("syzkaller", 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./143/binderfs", [pid 5964] <... memfd_create resumed>) = 3 [pid 5077] <... ioctl resumed>) = 0 [pid 5075] umount2("./143/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] close(3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5964] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5964] <... mmap resumed>) = 0x7f0356e00000 [pid 5074] unlink("./143/binderfs") = 0 [pid 5074] getdents64(3, [pid 5073] <... ioctl resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 5074] rmdir("./143" [pid 5077] <... close resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./143/binderfs", [pid 5074] <... rmdir resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] mkdir("./144", 0777 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] unlink("./143/binderfs" [pid 5074] <... mkdir resumed>) = 0 [pid 5964] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... unlink resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] getdents64(3, ./strace-static-x86_64: Process 5965 attached [pid 5078] <... ioctl resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5073] close(3 [pid 5965] set_robust_list(0x55556e32a660, 24 [pid 5075] close(3 [pid 5964] <... write resumed>) = 524288 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 5965 [pid 5965] <... set_robust_list resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5078] close(3 [pid 5965] chdir("./146" [pid 5078] <... close resumed>) = 0 [pid 5075] rmdir("./143" [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] <... close resumed>) = 0 [pid 5965] <... chdir resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... rmdir resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5966 attached [pid 5965] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] mkdir("./144", 0777 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 5967 ./strace-static-x86_64: Process 5967 attached [pid 5967] set_robust_list(0x55556e32a660, 24) = 0 [pid 5967] chdir("./144" [pid 5966] set_robust_list(0x55556e32a660, 24 [pid 5965] <... prctl resumed>) = 0 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 5966 [pid 5075] <... mkdir resumed>) = 0 [pid 5965] setpgid(0, 0 [pid 5966] <... set_robust_list resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5967] <... chdir resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5967] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5967] setpgid(0, 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5966] chdir("./146" [pid 5967] <... setpgid resumed>) = 0 [pid 5967] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5966] <... chdir resumed>) = 0 [pid 5965] <... setpgid resumed>) = 0 [pid 5964] munmap(0x7f0356e00000, 138412032 [pid 5966] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5965] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5964] <... munmap resumed>) = 0 [pid 5966] <... prctl resumed>) = 0 [pid 5967] <... openat resumed>) = 3 [pid 5966] setpgid(0, 0 [pid 5967] write(3, "1000", 4) = 4 [pid 5964] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5967] close(3 [pid 5966] <... setpgid resumed>) = 0 [pid 5965] <... openat resumed>) = 3 [pid 5964] <... openat resumed>) = 4 [pid 5967] <... close resumed>) = 0 [pid 5964] ioctl(4, LOOP_SET_FD, 3 [pid 5967] symlink("/dev/binderfs", "./binderfs" [pid 5966] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5965] write(3, "1000", 4) = 4 [pid 5965] close(3) = 0 [pid 5967] <... symlink resumed>) = 0 [pid 5966] <... openat resumed>) = 3 [pid 5967] memfd_create("syzkaller", 0 [pid 5966] write(3, "1000", 4 [pid 5965] symlink("/dev/binderfs", "./binderfs" [pid 5966] <... write resumed>) = 4 [pid 5967] <... memfd_create resumed>) = 3 [pid 5966] close(3) = 0 [pid 5967] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5965] <... symlink resumed>) = 0 [pid 5966] symlink("/dev/binderfs", "./binderfs" [pid 5964] <... ioctl resumed>) = 0 [pid 5967] <... mmap resumed>) = 0x7f0356e00000 [pid 5966] <... symlink resumed>) = 0 [pid 5965] memfd_create("syzkaller", 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5967] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5966] memfd_create("syzkaller", 0 [pid 5965] <... memfd_create resumed>) = 3 [pid 5966] <... memfd_create resumed>) = 3 [pid 5965] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] close(3 [pid 5966] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5964] close(3 [pid 5074] <... close resumed>) = 0 [pid 5966] <... mmap resumed>) = 0x7f0356e00000 [pid 5965] <... mmap resumed>) = 0x7f0356e00000 [pid 5964] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5967] <... write resumed>) = 524288 [pid 5966] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5965] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5964] close(4) = 0 [pid 5964] mkdir("./bus", 0777) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 5968 [pid 5964] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, ""./strace-static-x86_64: Process 5968 attached [pid 5968] set_robust_list(0x55556e32a660, 24) = 0 [pid 5968] chdir("./144" [pid 5964] <... mount resumed>) = 0 [pid 5968] <... chdir resumed>) = 0 [ 164.294673][ T5964] loop3: detected capacity change from 0 to 1024 [pid 5964] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5964] chdir("./bus") = 0 [pid 5964] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5968] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5967] munmap(0x7f0356e00000, 138412032 [pid 5964] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5968] <... prctl resumed>) = 0 [pid 5967] <... munmap resumed>) = 0 [pid 5964] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5968] setpgid(0, 0 [pid 5964] <... symlink resumed>) = 0 [pid 5968] <... setpgid resumed>) = 0 [pid 5967] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5964] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5968] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5967] ioctl(4, LOOP_SET_FD, 3 [pid 5075] <... ioctl resumed>) = 0 [pid 5968] <... openat resumed>) = 3 [pid 5965] <... write resumed>) = 524288 [pid 5075] close(3 [pid 5968] write(3, "1000", 4 [pid 5966] <... write resumed>) = 524288 [pid 5968] <... write resumed>) = 4 [pid 5968] close(3 [pid 5965] munmap(0x7f0356e00000, 138412032 [pid 5075] <... close resumed>) = 0 [pid 5966] munmap(0x7f0356e00000, 138412032 [pid 5968] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5969 attached [pid 5968] symlink("/dev/binderfs", "./binderfs" [pid 5966] <... munmap resumed>) = 0 [pid 5965] <... munmap resumed>) = 0 [pid 5969] set_robust_list(0x55556e32a660, 24 [pid 5968] <... symlink resumed>) = 0 [pid 5966] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5965] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5964] <... creat resumed>) = 4 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 5969 [pid 5969] <... set_robust_list resumed>) = 0 [pid 5966] <... openat resumed>) = 4 [pid 5965] <... openat resumed>) = 4 [pid 5969] chdir("./144" [pid 5968] memfd_create("syzkaller", 0 [pid 5967] <... ioctl resumed>) = 0 [pid 5966] ioctl(4, LOOP_SET_FD, 3 [ 164.368855][ T5967] loop0: detected capacity change from 0 to 1024 [pid 5965] ioctl(4, LOOP_SET_FD, 3 [pid 5964] rename("./bus", "./file2" [pid 5969] <... chdir resumed>) = 0 [pid 5967] close(3) = 0 [pid 5967] close(4 [pid 5969] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5967] <... close resumed>) = 0 [pid 5969] <... prctl resumed>) = 0 [pid 5968] <... memfd_create resumed>) = 3 [pid 5967] mkdir("./bus", 0777) = 0 [pid 5964] <... rename resumed>) = -1 EEXIST (File exists) [pid 5964] memfd_create("syzkaller", 0 [pid 5967] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5964] <... memfd_create resumed>) = 5 [pid 5964] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5969] setpgid(0, 0 [pid 5968] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5966] <... ioctl resumed>) = 0 [pid 5965] <... ioctl resumed>) = 0 [pid 5964] <... mmap resumed>) = 0x7f0356e00000 [pid 5969] <... setpgid resumed>) = 0 [pid 5968] <... mmap resumed>) = 0x7f0356e00000 [pid 5966] close(3 [pid 5965] close(3 [pid 5969] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5968] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5966] <... close resumed>) = 0 [pid 5965] <... close resumed>) = 0 [pid 5964] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5969] <... openat resumed>) = 3 [pid 5966] close(4 [pid 5965] close(4 [pid 5969] write(3, "1000", 4 [pid 5966] <... close resumed>) = 0 [pid 5965] <... close resumed>) = 0 [pid 5969] <... write resumed>) = 4 [pid 5966] mkdir("./bus", 0777 [pid 5965] mkdir("./bus", 0777 [pid 5969] close(3) = 0 [pid 5966] <... mkdir resumed>) = 0 [pid 5969] symlink("/dev/binderfs", "./binderfs" [pid 5966] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5965] <... mkdir resumed>) = 0 [pid 5969] <... symlink resumed>) = 0 [pid 5968] <... write resumed>) = 524288 [pid 5965] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5967] <... mount resumed>) = 0 [pid 5964] <... write resumed>) = 524288 [pid 5969] memfd_create("syzkaller", 0 [pid 5967] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5966] <... mount resumed>) = 0 [pid 5969] <... memfd_create resumed>) = 3 [pid 5967] <... openat resumed>) = 3 [pid 5969] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5967] chdir("./bus" [pid 5969] <... mmap resumed>) = 0x7f0356e00000 [pid 5967] <... chdir resumed>) = 0 [pid 5969] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5967] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5966] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5967] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5966] <... openat resumed>) = 3 [pid 5967] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5966] chdir("./bus" [pid 5965] <... mount resumed>) = 0 [pid 5964] munmap(0x7f0356e00000, 138412032 [pid 5967] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5966] <... chdir resumed>) = 0 [pid 5965] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [ 164.412273][ T5966] loop5: detected capacity change from 0 to 1024 [ 164.420663][ T5965] loop4: detected capacity change from 0 to 1024 [pid 5968] munmap(0x7f0356e00000, 138412032 [pid 5966] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5965] <... openat resumed>) = 3 [pid 5964] <... munmap resumed>) = 0 [pid 5969] <... write resumed>) = 524288 [pid 5968] <... munmap resumed>) = 0 [pid 5967] <... creat resumed>) = 4 [pid 5966] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5965] chdir("./bus" [pid 5964] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5965] <... chdir resumed>) = 0 [pid 5966] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5965] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5964] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5964] close(5 [pid 5968] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5967] rename("./bus", "./file2" [pid 5965] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5968] <... openat resumed>) = 4 [pid 5965] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5968] ioctl(4, LOOP_SET_FD, 3 [pid 5966] <... symlink resumed>) = 0 [pid 5964] <... close resumed>) = 0 [pid 5969] munmap(0x7f0356e00000, 138412032 [pid 5967] <... rename resumed>) = -1 EEXIST (File exists) [pid 5966] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5965] <... symlink resumed>) = 0 [pid 5964] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5967] memfd_create("syzkaller", 0 [pid 5965] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5967] <... memfd_create resumed>) = 5 [pid 5967] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5969] <... munmap resumed>) = 0 [pid 5966] <... creat resumed>) = 4 [pid 5965] <... creat resumed>) = 4 [pid 5964] <... open resumed>) = 5 [pid 5967] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5968] <... ioctl resumed>) = 0 [pid 5967] <... write resumed>) = 524288 [pid 5965] rename("./bus", "./file2" [pid 5968] close(3 [pid 5966] rename("./bus", "./file2" [pid 5964] ftruncate(5, 0 [pid 5968] <... close resumed>) = 0 [pid 5968] close(4) = 0 [pid 5968] mkdir("./bus", 0777) = 0 [pid 5968] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5967] munmap(0x7f0356e00000, 138412032 [pid 5965] <... rename resumed>) = -1 EEXIST (File exists) [pid 5967] <... munmap resumed>) = 0 [pid 5965] memfd_create("syzkaller", 0 [pid 5967] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5965] <... memfd_create resumed>) = 5 [pid 5967] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5965] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5967] close(5 [pid 5965] <... mmap resumed>) = 0x7f0356e00000 [pid 5969] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5966] <... rename resumed>) = -1 EEXIST (File exists) [pid 5964] <... ftruncate resumed>) = 0 [pid 5969] <... openat resumed>) = 4 [pid 5966] memfd_create("syzkaller", 0 [pid 5965] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5964] exit_group(0 [pid 5969] ioctl(4, LOOP_SET_FD, 3 [pid 5966] <... memfd_create resumed>) = 5 [pid 5964] <... exit_group resumed>) = ? [ 164.491347][ T5968] loop1: detected capacity change from 0 to 1024 [ 164.506782][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 164.506799][ T28] audit: type=1800 audit(1710613046.614:873): pid=5964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop3" ino=20 res=0 errno=0 [pid 5966] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5967] <... close resumed>) = 0 [pid 5968] <... mount resumed>) = 0 [pid 5966] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5965] <... write resumed>) = 524288 [pid 5964] +++ exited with 0 +++ [pid 5968] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5964, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5967] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5965] munmap(0x7f0356e00000, 138412032 [pid 5076] umount2("./147", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5968] <... openat resumed>) = 3 [pid 5968] chdir("./bus" [pid 5965] <... munmap resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5968] <... chdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./147", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5968] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] <... openat resumed>) = 3 [pid 5076] newfstatat(3, "", [pid 5968] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5968] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5965] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5965] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] getdents64(3, [pid 5965] close(5 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5969] <... ioctl resumed>) = 0 [pid 5969] close(3 [pid 5967] <... open resumed>) = 5 [pid 5076] umount2("./147/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5969] <... close resumed>) = 0 [pid 5967] ftruncate(5, 0 [pid 5969] close(4 [pid 5967] <... ftruncate resumed>) = 0 [pid 5969] <... close resumed>) = 0 [pid 5968] <... symlink resumed>) = 0 [pid 5969] mkdir("./bus", 0777 [pid 5968] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5969] <... mkdir resumed>) = 0 [pid 5967] exit_group(0) = ? [ 164.567254][ T5969] loop2: detected capacity change from 0 to 1024 [pid 5969] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5967] +++ exited with 0 +++ [pid 5966] <... write resumed>) = 524288 [pid 5965] <... close resumed>) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5967, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5968] <... creat resumed>) = 4 [pid 5966] munmap(0x7f0356e00000, 138412032 [pid 5965] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5076] <... umount2 resumed>) = 0 [pid 5968] rename("./bus", "./file2" [pid 5966] <... munmap resumed>) = 0 [pid 5965] <... open resumed>) = 5 [pid 5965] ftruncate(5, 0) = 0 [pid 5968] <... rename resumed>) = -1 EEXIST (File exists) [ 164.621309][ T28] audit: type=1800 audit(1710613046.714:874): pid=5967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop0" ino=20 res=0 errno=0 [pid 5966] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] umount2("./144", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5969] <... mount resumed>) = 0 [pid 5968] memfd_create("syzkaller", 0 [pid 5966] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5965] exit_group(0 [pid 5076] umount2("./147/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5968] <... memfd_create resumed>) = 5 [pid 5966] close(5 [pid 5073] openat(AT_FDCWD, "./144", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./147/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./147/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./147/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5965] <... exit_group resumed>) = ? [pid 5076] <... openat resumed>) = 4 [pid 5969] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5968] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5966] <... close resumed>) = 0 [pid 5076] newfstatat(4, "", [pid 5073] <... openat resumed>) = 3 [pid 5968] <... mmap resumed>) = 0x7f0356e00000 [pid 5073] newfstatat(3, "", [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5965] +++ exited with 0 +++ [pid 5076] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] close(4) = 0 [pid 5968] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] rmdir("./147/bus" [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5965, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5077] umount2("./146", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... rmdir resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5969] <... openat resumed>) = 3 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./146", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5969] chdir("./bus" [pid 5073] umount2("./144/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./147/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./147/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./147/binderfs") = 0 [pid 5076] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3) = 0 [pid 5969] <... chdir resumed>) = 0 [pid 5968] <... write resumed>) = 524288 [pid 5966] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] <... openat resumed>) = 3 [pid 5076] rmdir("./147" [pid 5073] <... umount2 resumed>) = 0 [pid 5969] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5968] munmap(0x7f0356e00000, 138412032 [pid 5077] newfstatat(3, "", [pid 5076] <... rmdir resumed>) = 0 [pid 5073] umount2("./144/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5969] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5968] <... munmap resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] mkdir("./148", 0777 [ 164.667221][ T28] audit: type=1800 audit(1710613046.754:875): pid=5965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop4" ino=20 res=0 errno=0 [pid 5969] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5966] <... open resumed>) = 5 [pid 5077] getdents64(3, [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5969] <... symlink resumed>) = 0 [pid 5966] ftruncate(5, 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] <... mkdir resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./144/bus", [pid 5969] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5966] <... ftruncate resumed>) = 0 [pid 5077] umount2("./146/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5969] <... creat resumed>) = 4 [pid 5073] umount2("./144/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5969] rename("./bus", "./file2" [pid 5966] exit_group(0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5969] <... rename resumed>) = -1 EEXIST (File exists) [pid 5073] openat(AT_FDCWD, "./144/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5969] memfd_create("syzkaller", 0 [pid 5966] <... exit_group resumed>) = ? [pid 5073] <... openat resumed>) = 4 [pid 5969] <... memfd_create resumed>) = 5 [pid 5966] +++ exited with 0 +++ [pid 5073] newfstatat(4, "", [pid 5969] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5966, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5969] <... mmap resumed>) = 0x7f0356e00000 [pid 5073] getdents64(4, [pid 5969] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5968] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5078] umount2("./146", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] getdents64(4, [pid 5968] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... openat resumed>) = 3 [pid 5968] close(5 [pid 5078] openat(AT_FDCWD, "./146", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5968] <... close resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5077] <... umount2 resumed>) = 0 [pid 5073] close(4 [pid 5969] <... write resumed>) = 524288 [pid 5968] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] newfstatat(3, "", [pid 5077] umount2("./146/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5969] munmap(0x7f0356e00000, 138412032 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... close resumed>) = 0 [pid 5969] <... munmap resumed>) = 0 [pid 5968] <... open resumed>) = 5 [pid 5078] getdents64(3, [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] rmdir("./144/bus" [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] <... rmdir resumed>) = 0 [pid 5078] umount2("./146/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] newfstatat(AT_FDCWD, "./146/bus", [pid 5969] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./144/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5969] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5969] close(5 [pid 5077] umount2("./146/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./144/binderfs", [pid 5077] openat(AT_FDCWD, "./146/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] <... openat resumed>) = 4 [pid 5073] unlink("./144/binderfs" [pid 5077] newfstatat(4, "", [pid 5073] <... unlink resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, [pid 5077] getdents64(4, [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] close(3 [pid 5077] getdents64(4, [pid 5073] <... close resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [ 164.723645][ T28] audit: type=1800 audit(1710613046.824:876): pid=5966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop5" ino=20 res=0 errno=0 [pid 5073] rmdir("./144" [pid 5969] <... close resumed>) = 0 [pid 5077] close(4 [pid 5073] <... rmdir resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5077] rmdir("./146/bus") = 0 [pid 5073] mkdir("./145", 0777 [pid 5077] umount2("./146/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... mkdir resumed>) = 0 [pid 5969] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./146/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] unlink("./146/binderfs" [pid 5969] <... open resumed>) = 5 [pid 5968] ftruncate(5, 0 [pid 5078] <... umount2 resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5969] ftruncate(5, 0 [pid 5078] umount2("./146/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... unlink resumed>) = 0 [pid 5969] <... ftruncate resumed>) = 0 [pid 5968] <... ftruncate resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... openat resumed>) = 3 [pid 5078] newfstatat(AT_FDCWD, "./146/bus", [pid 5969] exit_group(0 [pid 5968] exit_group(0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] getdents64(3, [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5969] <... exit_group resumed>) = ? [pid 5078] umount2("./146/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5969] +++ exited with 0 +++ [pid 5968] <... exit_group resumed>) = ? [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] close(3) = 0 [pid 5077] rmdir("./146") = 0 [pid 5968] +++ exited with 0 +++ [pid 5078] openat(AT_FDCWD, "./146/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... ioctl resumed>) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5969, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5078] <... openat resumed>) = 4 [pid 5078] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] mkdir("./147", 0777) = 0 [pid 5078] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5078] close(4) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5968, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5075] umount2("./144", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] rmdir("./146/bus" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./144", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... rmdir resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./144", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] umount2("./146/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] close(3 [pid 5075] <... openat resumed>) = 3 [pid 5074] openat(AT_FDCWD, "./144", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... openat resumed>) = 3 [pid 5076] <... close resumed>) = 0 [pid 5075] newfstatat(3, "", [pid 5074] <... openat resumed>) = 3 [pid 5078] newfstatat(AT_FDCWD, "./146/binderfs", [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] newfstatat(3, "", [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] getdents64(3, [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] unlink("./146/binderfs" [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] getdents64(3, [pid 5073] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 5970 attached [pid 5078] <... unlink resumed>) = 0 [pid 5075] umount2("./144/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] getdents64(3, [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 5970 [pid 5074] umount2("./144/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3 [pid 5078] close(3 [pid 5073] <... close resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5970] set_robust_list(0x55556e32a660, 24 [pid 5078] rmdir("./146") = 0 [ 164.759496][ T28] audit: type=1800 audit(1710613046.864:877): pid=5968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 164.782674][ T28] audit: type=1800 audit(1710613046.894:878): pid=5969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop2" ino=20 res=0 errno=0 [pid 5078] mkdir("./147", 0777) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 5971 ./strace-static-x86_64: Process 5971 attached [pid 5970] <... set_robust_list resumed>) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5971] set_robust_list(0x55556e32a660, 24 [pid 5970] chdir("./148" [pid 5075] <... umount2 resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5971] <... set_robust_list resumed>) = 0 [pid 5970] <... chdir resumed>) = 0 [pid 5075] umount2("./144/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./144/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5970] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5970] <... prctl resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./144/bus", [pid 5970] setpgid(0, 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5970] <... setpgid resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./144/bus", [pid 5075] umount2("./144/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5970] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./144/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5971] chdir("./145" [pid 5970] <... openat resumed>) = 3 [pid 5078] <... openat resumed>) = 3 [pid 5077] <... ioctl resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 5074] umount2("./144/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5075] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(4, [pid 5074] openat(AT_FDCWD, "./144/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5970] write(3, "1000", 4 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5970] <... write resumed>) = 4 [pid 5075] getdents64(4, [pid 5074] <... openat resumed>) = 4 [pid 5970] close(3 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] newfstatat(4, "", [pid 5971] <... chdir resumed>) = 0 [pid 5970] <... close resumed>) = 0 [pid 5075] close(4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5971] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5970] symlink("/dev/binderfs", "./binderfs" [pid 5075] <... close resumed>) = 0 [pid 5074] getdents64(4, [pid 5971] <... prctl resumed>) = 0 [pid 5970] <... symlink resumed>) = 0 [pid 5075] rmdir("./144/bus" [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, [pid 5077] close(3) = 0 [pid 5971] setpgid(0, 0 [pid 5970] memfd_create("syzkaller", 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5971] <... setpgid resumed>) = 0 [pid 5075] umount2("./144/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] close(4 [pid 5971] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./144/bus") = 0 [pid 5074] umount2("./144/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./144/binderfs", [pid 5075] newfstatat(AT_FDCWD, "./144/binderfs", [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5971] <... openat resumed>) = 3 [pid 5970] <... memfd_create resumed>) = 3 [pid 5078] <... ioctl resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./144/binderfs" [pid 5970] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] unlink("./144/binderfs" [pid 5074] <... unlink resumed>) = 0 [pid 5971] write(3, "1000", 4 [pid 5075] <... unlink resumed>) = 0 [pid 5971] <... write resumed>) = 4 ./strace-static-x86_64: Process 5972 attached [pid 5971] close(3 [pid 5075] getdents64(3, [pid 5074] getdents64(3, [pid 5972] set_robust_list(0x55556e32a660, 24 [pid 5971] <... close resumed>) = 0 [pid 5972] <... set_robust_list resumed>) = 0 [pid 5971] symlink("/dev/binderfs", "./binderfs" [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5972] chdir("./147" [pid 5971] <... symlink resumed>) = 0 [pid 5075] close(3 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] <... close resumed>) = 0 [pid 5972] <... chdir resumed>) = 0 [pid 5971] memfd_create("syzkaller", 0 [pid 5970] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] close(3 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 5972 [pid 5074] close(3 [pid 5078] <... close resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5972] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5971] <... memfd_create resumed>) = 3 [pid 5075] rmdir("./144" [pid 5074] <... close resumed>) = 0 [pid 5972] <... prctl resumed>) = 0 [pid 5971] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] rmdir("./144" [pid 5972] setpgid(0, 0 [pid 5971] <... mmap resumed>) = 0x7f0356e00000 ./strace-static-x86_64: Process 5973 attached [pid 5972] <... setpgid resumed>) = 0 [pid 5971] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5970] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5973] set_robust_list(0x55556e32a660, 24 [pid 5972] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] mkdir("./145", 0777 [pid 5074] <... rmdir resumed>) = 0 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 5973 [pid 5972] <... openat resumed>) = 3 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] mkdir("./145", 0777 [pid 5973] <... set_robust_list resumed>) = 0 [pid 5973] chdir("./147" [pid 5972] write(3, "1000", 4 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] <... mkdir resumed>) = 0 [pid 5972] <... write resumed>) = 4 [pid 5075] <... openat resumed>) = 3 [pid 5973] <... chdir resumed>) = 0 [pid 5972] close(3 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5973] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5972] <... close resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] <... openat resumed>) = 3 [pid 5973] <... prctl resumed>) = 0 [pid 5972] symlink("/dev/binderfs", "./binderfs" [pid 5971] <... write resumed>) = 524288 [pid 5970] <... write resumed>) = 524288 [pid 5973] setpgid(0, 0 [pid 5972] <... symlink resumed>) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5973] <... setpgid resumed>) = 0 [pid 5972] memfd_create("syzkaller", 0 [pid 5973] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5972] <... memfd_create resumed>) = 3 [pid 5973] <... openat resumed>) = 3 [pid 5973] write(3, "1000", 4) = 4 [pid 5973] close(3) = 0 [pid 5973] symlink("/dev/binderfs", "./binderfs" [pid 5970] munmap(0x7f0356e00000, 138412032 [pid 5973] <... symlink resumed>) = 0 [pid 5972] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5973] memfd_create("syzkaller", 0 [pid 5972] <... mmap resumed>) = 0x7f0356e00000 [pid 5971] munmap(0x7f0356e00000, 138412032 [pid 5970] <... munmap resumed>) = 0 [pid 5973] <... memfd_create resumed>) = 3 [pid 5973] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5970] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5973] <... mmap resumed>) = 0x7f0356e00000 [pid 5970] <... openat resumed>) = 4 [pid 5972] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5971] <... munmap resumed>) = 0 [pid 5970] ioctl(4, LOOP_SET_FD, 3 [pid 5973] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5971] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5973] <... write resumed>) = 524288 [pid 5971] <... openat resumed>) = 4 [pid 5970] <... ioctl resumed>) = 0 [pid 5971] ioctl(4, LOOP_SET_FD, 3 [pid 5973] munmap(0x7f0356e00000, 138412032 [pid 5972] <... write resumed>) = 524288 [pid 5970] close(3 [pid 5973] <... munmap resumed>) = 0 [pid 5972] munmap(0x7f0356e00000, 138412032 [pid 5970] <... close resumed>) = 0 [pid 5970] close(4) = 0 [pid 5973] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5970] mkdir("./bus", 0777 [pid 5973] <... openat resumed>) = 4 [pid 5972] <... munmap resumed>) = 0 [pid 5970] <... mkdir resumed>) = 0 [pid 5973] ioctl(4, LOOP_SET_FD, 3 [pid 5972] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5075] <... ioctl resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5970] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5972] <... openat resumed>) = 4 [pid 5972] ioctl(4, LOOP_SET_FD, 3 [pid 5971] <... ioctl resumed>) = 0 [pid 5075] close(3 [pid 5074] close(3) = 0 [pid 5971] close(3 [pid 5075] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5973] <... ioctl resumed>) = 0 [pid 5973] close(3./strace-static-x86_64: Process 5975 attached ./strace-static-x86_64: Process 5974 attached ) = 0 [pid 5972] <... ioctl resumed>) = 0 [pid 5971] <... close resumed>) = 0 [pid 5970] <... mount resumed>) = 0 [pid 5975] set_robust_list(0x55556e32a660, 24 [pid 5973] close(4 [pid 5970] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5971] close(4 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 5974 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 5975 [pid 5975] <... set_robust_list resumed>) = 0 [pid 5973] <... close resumed>) = 0 [pid 5971] <... close resumed>) = 0 [pid 5975] chdir("./145" [pid 5974] set_robust_list(0x55556e32a660, 24 [pid 5973] mkdir("./bus", 0777 [pid 5972] close(3 [pid 5971] mkdir("./bus", 0777 [pid 5970] <... openat resumed>) = 3 [pid 5975] <... chdir resumed>) = 0 [pid 5974] <... set_robust_list resumed>) = 0 [pid 5973] <... mkdir resumed>) = 0 [pid 5970] chdir("./bus" [pid 5975] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5975] setpgid(0, 0 [pid 5971] <... mkdir resumed>) = 0 [pid 5970] <... chdir resumed>) = 0 [pid 5975] <... setpgid resumed>) = 0 [pid 5974] chdir("./145" [pid 5970] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5975] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5970] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5975] <... openat resumed>) = 3 [pid 5971] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5970] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5975] write(3, "1000", 4) = 4 [pid 5974] <... chdir resumed>) = 0 [pid 5973] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5972] <... close resumed>) = 0 [pid 5975] close(3 [pid 5974] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5972] close(4 [pid 5970] <... symlink resumed>) = 0 [pid 5975] <... close resumed>) = 0 [pid 5974] <... prctl resumed>) = 0 [pid 5972] <... close resumed>) = 0 [pid 5975] symlink("/dev/binderfs", "./binderfs" [pid 5974] setpgid(0, 0 [pid 5972] mkdir("./bus", 0777 [pid 5975] <... symlink resumed>) = 0 [pid 5974] <... setpgid resumed>) = 0 [pid 5972] <... mkdir resumed>) = 0 [pid 5970] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5975] memfd_create("syzkaller", 0 [pid 5974] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [ 164.972325][ T5970] loop3: detected capacity change from 0 to 1024 [ 164.986297][ T5971] loop0: detected capacity change from 0 to 1024 [ 164.996700][ T5973] loop5: detected capacity change from 0 to 1024 [ 165.006614][ T5972] loop4: detected capacity change from 0 to 1024 [pid 5972] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5975] <... memfd_create resumed>) = 3 [pid 5975] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5974] <... openat resumed>) = 3 [pid 5970] <... creat resumed>) = 4 [pid 5975] <... mmap resumed>) = 0x7f0356e00000 [pid 5974] write(3, "1000", 4) = 4 [pid 5974] close(3 [pid 5973] <... mount resumed>) = 0 [pid 5974] <... close resumed>) = 0 [pid 5973] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5970] rename("./bus", "./file2" [pid 5974] symlink("/dev/binderfs", "./binderfs" [pid 5973] <... openat resumed>) = 3 [pid 5974] <... symlink resumed>) = 0 [pid 5973] chdir("./bus" [pid 5971] <... mount resumed>) = 0 [pid 5973] <... chdir resumed>) = 0 [pid 5971] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5973] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5972] <... mount resumed>) = 0 [pid 5971] <... openat resumed>) = 3 [pid 5970] <... rename resumed>) = -1 EEXIST (File exists) [pid 5975] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5974] memfd_create("syzkaller", 0 [pid 5973] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5972] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5971] chdir("./bus" [pid 5975] <... write resumed>) = 524288 [pid 5974] <... memfd_create resumed>) = 3 [pid 5973] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5972] <... openat resumed>) = 3 [pid 5970] memfd_create("syzkaller", 0 [pid 5971] <... chdir resumed>) = 0 [pid 5971] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5970] <... memfd_create resumed>) = 5 [pid 5971] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5970] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5972] chdir("./bus" [pid 5973] <... symlink resumed>) = 0 [pid 5974] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5971] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5974] <... mmap resumed>) = 0x7f0356e00000 [pid 5972] <... chdir resumed>) = 0 [pid 5974] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5973] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5972] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5971] <... symlink resumed>) = 0 [pid 5970] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5972] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5971] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5975] munmap(0x7f0356e00000, 138412032 [pid 5972] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5975] <... munmap resumed>) = 0 [pid 5975] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5972] <... symlink resumed>) = 0 [pid 5975] <... openat resumed>) = 4 [pid 5971] <... creat resumed>) = 4 [pid 5973] <... creat resumed>) = 4 [pid 5971] rename("./bus", "./file2" [pid 5975] ioctl(4, LOOP_SET_FD, 3 [pid 5972] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5971] <... rename resumed>) = -1 EEXIST (File exists) [pid 5973] rename("./bus", "./file2" [pid 5970] <... write resumed>) = 524288 [pid 5971] memfd_create("syzkaller", 0 [pid 5973] <... rename resumed>) = -1 EEXIST (File exists) [pid 5972] <... creat resumed>) = 4 [pid 5971] <... memfd_create resumed>) = 5 [pid 5972] rename("./bus", "./file2" [pid 5971] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5974] <... write resumed>) = 524288 [pid 5973] memfd_create("syzkaller", 0 [pid 5971] <... mmap resumed>) = 0x7f0356e00000 [pid 5970] munmap(0x7f0356e00000, 138412032 [pid 5972] <... rename resumed>) = -1 EEXIST (File exists) [pid 5972] memfd_create("syzkaller", 0) = 5 [pid 5972] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5972] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5971] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5970] <... munmap resumed>) = 0 [pid 5973] <... memfd_create resumed>) = 5 [pid 5973] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5973] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5970] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5975] <... ioctl resumed>) = 0 [pid 5974] munmap(0x7f0356e00000, 138412032 [pid 5975] close(3 [pid 5974] <... munmap resumed>) = 0 [pid 5970] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5975] <... close resumed>) = 0 [pid 5970] close(5 [pid 5975] close(4 [pid 5972] <... write resumed>) = 524288 [pid 5970] <... close resumed>) = 0 [pid 5975] <... close resumed>) = 0 [pid 5974] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5975] mkdir("./bus", 0777 [pid 5973] <... write resumed>) = 524288 [pid 5971] <... write resumed>) = 524288 [pid 5975] <... mkdir resumed>) = 0 [ 165.104794][ T5975] loop2: detected capacity change from 0 to 1024 [pid 5970] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5974] <... openat resumed>) = 4 [pid 5974] ioctl(4, LOOP_SET_FD, 3 [pid 5971] munmap(0x7f0356e00000, 138412032 [pid 5970] <... open resumed>) = 5 [pid 5975] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5973] munmap(0x7f0356e00000, 138412032) = 0 [pid 5973] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5972] munmap(0x7f0356e00000, 138412032 [pid 5973] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5972] <... munmap resumed>) = 0 [pid 5973] close(5 [pid 5972] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5974] <... ioctl resumed>) = 0 [pid 5972] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5972] close(5 [pid 5974] close(3) = 0 [pid 5974] close(4) = 0 [pid 5974] mkdir("./bus", 0777) = 0 [pid 5973] <... close resumed>) = 0 [pid 5971] <... munmap resumed>) = 0 [pid 5970] ftruncate(5, 0 [pid 5974] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5971] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5970] <... ftruncate resumed>) = 0 [pid 5972] <... close resumed>) = 0 [pid 5973] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5972] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5970] exit_group(0 [pid 5973] <... open resumed>) = 5 [pid 5971] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5970] <... exit_group resumed>) = ? [ 165.156324][ T5974] loop1: detected capacity change from 0 to 1024 [ 165.163596][ T28] audit: type=1800 audit(1710613047.264:879): pid=5970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop3" ino=20 res=0 errno=0 [pid 5973] ftruncate(5, 0 [pid 5971] close(5 [pid 5970] +++ exited with 0 +++ [pid 5973] <... ftruncate resumed>) = 0 [pid 5973] exit_group(0) = ? [pid 5973] +++ exited with 0 +++ [pid 5971] <... close resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5970, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5971] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5973, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5972] <... open resumed>) = 5 [pid 5078] umount2("./147", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./148", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5972] ftruncate(5, 0 [pid 5078] openat(AT_FDCWD, "./147", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./148", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5972] <... ftruncate resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5076] <... openat resumed>) = 3 [pid 5972] exit_group(0 [pid 5078] newfstatat(3, "", [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 165.200539][ T28] audit: type=1800 audit(1710613047.304:880): pid=5973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop5" ino=20 res=0 errno=0 [pid 5975] <... mount resumed>) = 0 [pid 5974] <... mount resumed>) = 0 [pid 5972] <... exit_group resumed>) = ? [pid 5971] <... open resumed>) = 5 [pid 5078] getdents64(3, [pid 5076] getdents64(3, [pid 5975] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5974] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5975] <... openat resumed>) = 3 [pid 5974] chdir("./bus" [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] umount2("./148/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5975] chdir("./bus" [pid 5974] <... chdir resumed>) = 0 [pid 5974] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5975] <... chdir resumed>) = 0 [pid 5974] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5975] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5974] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] umount2("./147/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5975] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5975] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5972] +++ exited with 0 +++ [pid 5974] <... symlink resumed>) = 0 [pid 5971] ftruncate(5, 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5972, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5974] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5975] <... symlink resumed>) = 0 [pid 5974] <... creat resumed>) = 4 [pid 5971] <... ftruncate resumed>) = 0 [pid 5975] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5974] rename("./bus", "./file2" [pid 5971] exit_group(0) = ? [pid 5971] +++ exited with 0 +++ [ 165.243865][ T28] audit: type=1800 audit(1710613047.334:881): pid=5972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop4" ino=20 res=0 errno=0 [pid 5974] <... rename resumed>) = -1 EEXIST (File exists) [pid 5077] umount2("./147", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5971, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5975] <... creat resumed>) = 4 [pid 5974] memfd_create("syzkaller", 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5974] <... memfd_create resumed>) = 5 [pid 5077] openat(AT_FDCWD, "./147", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5974] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] <... openat resumed>) = 3 [pid 5073] umount2("./145", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5975] rename("./bus", "./file2" [pid 5077] newfstatat(3, "", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./145", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5077] getdents64(3, [pid 5073] newfstatat(3, "", [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] umount2("./147/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5974] <... mmap resumed>) = 0x7f0356e00000 [pid 5073] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5974] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] umount2("./145/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = 0 [pid 5975] <... rename resumed>) = -1 EEXIST (File exists) [pid 5974] <... write resumed>) = 524288 [pid 5078] <... umount2 resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5975] memfd_create("syzkaller", 0 [pid 5974] munmap(0x7f0356e00000, 138412032 [pid 5078] umount2("./147/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./145/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5975] <... memfd_create resumed>) = 5 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./145/bus", [pid 5974] <... munmap resumed>) = 0 [pid 5078] newfstatat(AT_FDCWD, "./147/bus", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 165.293662][ T28] audit: type=1800 audit(1710613047.344:882): pid=5971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor910" name="file1" dev="loop0" ino=20 res=0 errno=0 [pid 5975] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5974] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5076] umount2("./148/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./145/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5975] <... mmap resumed>) = 0x7f0356e00000 [pid 5974] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] umount2("./147/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./145/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", [pid 5975] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5974] close(5 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] umount2("./147/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] newfstatat(AT_FDCWD, "./148/bus", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] openat(AT_FDCWD, "./147/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] getdents64(4, [pid 5078] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(4, [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] umount2("./148/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5974] <... close resumed>) = 0 [pid 5078] getdents64(4, [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] getdents64(4, [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] newfstatat(AT_FDCWD, "./147/bus", [pid 5076] openat(AT_FDCWD, "./148/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] close(4 [pid 5078] close(4 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5073] <... close resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5077] umount2("./147/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] rmdir("./145/bus" [pid 5078] rmdir("./147/bus" [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(4, "", [pid 5078] <... rmdir resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./147/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... rmdir resumed>) = 0 [pid 5078] umount2("./147/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... openat resumed>) = 4 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(4, "", [pid 5073] umount2("./145/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] newfstatat(AT_FDCWD, "./147/binderfs", [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5975] <... write resumed>) = 524288 [pid 5974] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] getdents64(4, [pid 5076] getdents64(4, [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5975] munmap(0x7f0356e00000, 138412032 [pid 5078] unlink("./147/binderfs" [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] newfstatat(AT_FDCWD, "./145/binderfs", [pid 5076] getdents64(4, [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5975] <... munmap resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5077] getdents64(4, [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] unlink("./145/binderfs" [pid 5975] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] getdents64(3, [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] close(4 [pid 5073] <... unlink resumed>) = 0 [pid 5975] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5974] <... open resumed>) = 5 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] close(4 [pid 5076] <... close resumed>) = 0 [pid 5073] getdents64(3, [pid 5975] close(5 [pid 5974] ftruncate(5, 0 [pid 5078] close(3 [pid 5077] <... close resumed>) = 0 [pid 5076] rmdir("./148/bus" [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5974] <... ftruncate resumed>) = 0 [pid 5077] rmdir("./147/bus" [pid 5076] <... rmdir resumed>) = 0 [pid 5073] close(3 [pid 5078] <... close resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] umount2("./148/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... close resumed>) = 0 [pid 5974] exit_group(0 [pid 5078] rmdir("./147" [pid 5077] umount2("./147/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] rmdir("./145" [pid 5974] <... exit_group resumed>) = ? [pid 5078] <... rmdir resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./148/binderfs", [pid 5073] <... rmdir resumed>) = 0 [pid 5975] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] mkdir("./146", 0777 [pid 5975] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] newfstatat(AT_FDCWD, "./147/binderfs", [pid 5076] unlink("./148/binderfs" [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 5077] unlink("./147/binderfs" [pid 5078] mkdir("./148", 0777 [pid 5077] <... unlink resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5077] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5077] close(3) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5975] <... open resumed>) = 5 [pid 5077] rmdir("./147" [pid 5078] <... mkdir resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5077] mkdir("./148", 0777 [pid 5975] ftruncate(5, 0 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] <... mkdir resumed>) = 0 [pid 5076] getdents64(3, [pid 5975] <... ftruncate resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5974] +++ exited with 0 +++ [pid 5975] exit_group(0 [pid 5078] <... openat resumed>) = 3 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] close(3 [pid 5975] <... exit_group resumed>) = ? [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5076] <... close resumed>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5974, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5074] umount2("./145", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] rmdir("./148" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./145", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... openat resumed>) = 3 [pid 5975] +++ exited with 0 +++ [pid 5076] <... rmdir resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5076] mkdir("./149", 0777 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5975, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5074] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] <... mkdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5074] umount2("./145/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... openat resumed>) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] umount2("./145", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./145", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] umount2("./145/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] newfstatat(3, "", [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./145/bus", [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] umount2("./145/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./145/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5074] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] close(3 [pid 5074] getdents64(4, [pid 5073] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] close(4 [pid 5075] umount2("./145/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5976 attached [pid 5074] <... close resumed>) = 0 [pid 5976] set_robust_list(0x55556e32a660, 24) = 0 [pid 5976] chdir("./146" [pid 5077] <... ioctl resumed>) = 0 [pid 5078] <... ioctl resumed>) = 0 [pid 5976] <... chdir resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 5976 [pid 5976] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5078] close(3 [pid 5077] close(3 [pid 5976] setpgid(0, 0 [pid 5077] <... close resumed>) = 0 [pid 5976] <... setpgid resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5976] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] rmdir("./145/bus") = 0 [pid 5074] umount2("./145/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5977 attached ) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./145/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./145/binderfs" [pid 5977] set_robust_list(0x55556e32a660, 24 [pid 5976] <... openat resumed>) = 3 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 5977 [pid 5075] <... umount2 resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5074] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5976] write(3, "1000", 4 [pid 5074] close(3 [pid 5977] <... set_robust_list resumed>) = 0 [pid 5976] <... write resumed>) = 4 ./strace-static-x86_64: Process 5978 attached [pid 5977] chdir("./148" [pid 5976] close(3 [pid 5074] <... close resumed>) = 0 [pid 5978] set_robust_list(0x55556e32a660, 24 [pid 5976] <... close resumed>) = 0 [pid 5074] rmdir("./145" [pid 5978] <... set_robust_list resumed>) = 0 [pid 5977] <... chdir resumed>) = 0 [pid 5976] symlink("/dev/binderfs", "./binderfs" [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 5978 [pid 5074] <... rmdir resumed>) = 0 [pid 5978] chdir("./148") = 0 [pid 5977] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5976] <... symlink resumed>) = 0 [pid 5978] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5977] <... prctl resumed>) = 0 [pid 5976] memfd_create("syzkaller", 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5075] umount2("./145/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] mkdir("./146", 0777 [pid 5976] <... memfd_create resumed>) = 3 [pid 5978] <... prctl resumed>) = 0 [pid 5977] setpgid(0, 0 [pid 5976] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... mkdir resumed>) = 0 [pid 5978] setpgid(0, 0 [pid 5977] <... setpgid resumed>) = 0 [pid 5976] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] newfstatat(AT_FDCWD, "./145/bus", [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5978] <... setpgid resumed>) = 0 [pid 5977] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5976] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5977] <... openat resumed>) = 3 [pid 5976] <... write resumed>) = 524288 [pid 5977] write(3, "1000", 4) = 4 [pid 5976] munmap(0x7f0356e00000, 138412032 [pid 5977] close(3) = 0 [pid 5978] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5977] symlink("/dev/binderfs", "./binderfs" [pid 5075] umount2("./145/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] close(3 [pid 5978] <... openat resumed>) = 3 [pid 5075] openat(AT_FDCWD, "./145/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5978] write(3, "1000", 4 [pid 5076] <... close resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 5075] newfstatat(4, "", [pid 5976] <... munmap resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5978] <... write resumed>) = 4 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5977] <... symlink resumed>) = 0 [pid 5978] close(3 [pid 5075] getdents64(4, [pid 5978] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5978] symlink("/dev/binderfs", "./binderfs" [pid 5075] getdents64(4, [pid 5978] <... symlink resumed>) = 0 [pid 5976] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 5979 [pid 5978] memfd_create("syzkaller", 0 [pid 5977] memfd_create("syzkaller", 0 [pid 5976] <... openat resumed>) = 4 [pid 5075] close(4 [pid 5978] <... memfd_create resumed>) = 3 [pid 5075] <... close resumed>) = 0 ./strace-static-x86_64: Process 5979 attached [pid 5978] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] rmdir("./145/bus" [pid 5979] set_robust_list(0x55556e32a660, 24 [pid 5978] <... mmap resumed>) = 0x7f0356e00000 [pid 5977] <... memfd_create resumed>) = 3 [pid 5976] ioctl(4, LOOP_SET_FD, 3 [pid 5075] <... rmdir resumed>) = 0 [pid 5977] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5979] <... set_robust_list resumed>) = 0 [pid 5978] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] umount2("./145/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5979] chdir("./149" [pid 5977] <... mmap resumed>) = 0x7f0356e00000 [pid 5976] <... ioctl resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5979] <... chdir resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./145/binderfs", [pid 5979] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5979] <... prctl resumed>) = 0 [pid 5976] close(3 [pid 5075] unlink("./145/binderfs" [pid 5979] setpgid(0, 0 [pid 5978] <... write resumed>) = 524288 [pid 5977] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5976] <... close resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5979] <... setpgid resumed>) = 0 [pid 5075] getdents64(3, [pid 5979] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5976] close(4 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [ 165.567713][ T5976] loop0: detected capacity change from 0 to 1024 [pid 5979] <... openat resumed>) = 3 [pid 5977] <... write resumed>) = 524288 [pid 5976] <... close resumed>) = 0 [pid 5075] close(3 [pid 5978] munmap(0x7f0356e00000, 138412032) = 0 [pid 5978] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5978] ioctl(4, LOOP_SET_FD, 3 [pid 5977] munmap(0x7f0356e00000, 138412032 [pid 5074] <... ioctl resumed>) = 0 [pid 5074] close(3 [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./145") = 0 [pid 5074] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5976] mkdir("./bus", 0777 [pid 5977] <... munmap resumed>) = 0 [pid 5976] <... mkdir resumed>) = 0 [pid 5979] write(3, "1000", 4) = 4 [pid 5978] <... ioctl resumed>) = 0 [pid 5075] mkdir("./146", 0777 [pid 5979] close(3 [pid 5978] close(3 [pid 5976] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5075] <... mkdir resumed>) = 0 [pid 5979] <... close resumed>) = 0 [pid 5978] <... close resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5978] close(4 [pid 5977] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... openat resumed>) = 3 [pid 5979] symlink("/dev/binderfs", "./binderfs" [pid 5978] <... close resumed>) = 0 [pid 5977] <... openat resumed>) = 4 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5979] <... symlink resumed>) = 0 [pid 5978] mkdir("./bus", 0777 [pid 5977] ioctl(4, LOOP_SET_FD, 3 [pid 5978] <... mkdir resumed>) = 0 [pid 5979] memfd_create("syzkaller", 0 [pid 5978] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 5980 [pid 5979] <... memfd_create resumed>) = 3 [pid 5979] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5979] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288./strace-static-x86_64: Process 5980 attached [pid 5980] set_robust_list(0x55556e32a660, 24 [pid 5976] <... mount resumed>) = 0 [pid 5980] <... set_robust_list resumed>) = 0 [pid 5976] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5980] chdir("./146" [pid 5976] <... openat resumed>) = 3 [pid 5976] chdir("./bus" [pid 5980] <... chdir resumed>) = 0 [pid 5979] <... write resumed>) = 524288 [pid 5978] <... mount resumed>) = 0 [pid 5977] <... ioctl resumed>) = 0 [pid 5976] <... chdir resumed>) = 0 [pid 5980] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5977] close(3 [pid 5976] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5980] <... prctl resumed>) = 0 [pid 5978] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5976] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5980] setpgid(0, 0 [pid 5978] <... openat resumed>) = 3 [pid 5976] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5980] <... setpgid resumed>) = 0 [pid 5978] chdir("./bus" [pid 5977] <... close resumed>) = 0 [pid 5980] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5978] <... chdir resumed>) = 0 [pid 5980] <... openat resumed>) = 3 [pid 5978] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5977] close(4 [pid 5976] <... symlink resumed>) = 0 [pid 5980] write(3, "1000", 4 [pid 5978] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... ioctl resumed>) = 0 [pid 5978] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5976] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5980] <... write resumed>) = 4 [ 165.619013][ T5978] loop4: detected capacity change from 0 to 1024 [ 165.640082][ T5977] loop5: detected capacity change from 0 to 1024 [pid 5980] close(3 [pid 5979] munmap(0x7f0356e00000, 138412032 [pid 5978] <... symlink resumed>) = 0 [pid 5977] <... close resumed>) = 0 [pid 5979] <... munmap resumed>) = 0 [pid 5977] mkdir("./bus", 0777 [pid 5976] <... creat resumed>) = 4 [pid 5978] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5976] rename("./bus", "./file2" [pid 5980] <... close resumed>) = 0 [pid 5977] <... mkdir resumed>) = 0 [pid 5976] <... rename resumed>) = -1 EEXIST (File exists) [pid 5980] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5979] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5978] <... creat resumed>) = 4 [pid 5976] memfd_create("syzkaller", 0 [pid 5979] <... openat resumed>) = 4 [pid 5976] <... memfd_create resumed>) = 5 [pid 5979] ioctl(4, LOOP_SET_FD, 3 [pid 5976] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5980] memfd_create("syzkaller", 0 [pid 5979] <... ioctl resumed>) = 0 [pid 5978] rename("./bus", "./file2" [pid 5977] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5976] <... mmap resumed>) = 0x7f0356e00000 [pid 5980] <... memfd_create resumed>) = 3 [pid 5980] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] close(3) = 0 [pid 5980] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5980] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5977] <... mount resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 5981 [pid 5978] <... rename resumed>) = -1 EEXIST (File exists) [pid 5978] memfd_create("syzkaller", 0) = 5 [pid 5977] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5976] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288./strace-static-x86_64: Process 5981 attached [pid 5978] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5977] <... openat resumed>) = 3 [pid 5981] set_robust_list(0x55556e32a660, 24 [pid 5978] <... mmap resumed>) = 0x7f0356e00000 [pid 5981] <... set_robust_list resumed>) = 0 [pid 5977] chdir("./bus" [pid 5981] chdir("./146" [pid 5977] <... chdir resumed>) = 0 [pid 5976] <... write resumed>) = 524288 [pid 5977] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5981] <... chdir resumed>) = 0 [pid 5980] <... write resumed>) = 524288 [pid 5977] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5977] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5981] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5978] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5981] <... prctl resumed>) = 0 [pid 5980] munmap(0x7f0356e00000, 138412032 [pid 5977] <... symlink resumed>) = 0 [pid 5981] setpgid(0, 0 [pid 5979] close(3 [pid 5981] <... setpgid resumed>) = 0 [pid 5979] <... close resumed>) = 0 [ 165.699518][ T5979] loop3: detected capacity change from 0 to 1024 [pid 5981] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5980] <... munmap resumed>) = 0 [pid 5979] close(4 [pid 5977] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5981] <... openat resumed>) = 3 [pid 5979] <... close resumed>) = 0 [pid 5981] write(3, "1000", 4 [pid 5979] mkdir("./bus", 0777 [pid 5976] munmap(0x7f0356e00000, 138412032 [pid 5981] <... write resumed>) = 4 [pid 5980] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5979] <... mkdir resumed>) = 0 [pid 5976] <... munmap resumed>) = 0 [pid 5981] close(3 [pid 5980] <... openat resumed>) = 4 [pid 5979] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5978] <... write resumed>) = 524288 [pid 5976] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5981] <... close resumed>) = 0 [pid 5980] ioctl(4, LOOP_SET_FD, 3 [pid 5978] munmap(0x7f0356e00000, 138412032 [pid 5977] <... creat resumed>) = 4 [pid 5976] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5981] symlink("/dev/binderfs", "./binderfs" [pid 5978] <... munmap resumed>) = 0 [pid 5976] close(5 [pid 5981] <... symlink resumed>) = 0 [pid 5976] <... close resumed>) = 0 [pid 5981] memfd_create("syzkaller", 0 [pid 5978] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5981] <... memfd_create resumed>) = 3 [pid 5978] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5981] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5978] close(5 [pid 5977] rename("./bus", "./file2" [pid 5981] <... mmap resumed>) = 0x7f0356e00000 [pid 5978] <... close resumed>) = 0 [pid 5977] <... rename resumed>) = -1 EEXIST (File exists) [pid 5977] memfd_create("syzkaller", 0 [pid 5980] <... ioctl resumed>) = 0 [pid 5977] <... memfd_create resumed>) = 5 [pid 5976] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5980] close(3 [pid 5977] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5980] <... close resumed>) = 0 [pid 5980] close(4 [pid 5981] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5980] <... close resumed>) = 0 [pid 5979] <... mount resumed>) = 0 [pid 5978] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5977] <... mmap resumed>) = 0x7f0356e00000 [pid 5976] <... open resumed>) = 5 [pid 5980] mkdir("./bus", 0777 [pid 5981] <... write resumed>) = 524288 [pid 5980] <... mkdir resumed>) = 0 [pid 5979] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5977] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5976] ftruncate(5, 0) = 0 [pid 5976] exit_group(0 [pid 5978] <... open resumed>) = 5 [pid 5976] <... exit_group resumed>) = ? [pid 5980] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5979] <... openat resumed>) = 3 [pid 5978] ftruncate(5, 0 [pid 5976] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5976, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5979] chdir("./bus" [pid 5978] <... ftruncate resumed>) = 0 [pid 5979] <... chdir resumed>) = 0 [ 165.779323][ T5980] loop1: detected capacity change from 0 to 1024 [pid 5978] exit_group(0 [pid 5979] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5978] <... exit_group resumed>) = ? [pid 5073] umount2("./146", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./146", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5979] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5978] +++ exited with 0 +++ [pid 5073] <... openat resumed>) = 3 [pid 5979] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5978, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] umount2("./148", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./146/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./148", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5077] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5981] munmap(0x7f0356e00000, 138412032 [pid 5980] <... mount resumed>) = 0 [pid 5979] <... symlink resumed>) = 0 [pid 5077] getdents64(3, [pid 5073] <... umount2 resumed>) = 0 [pid 5979] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5981] <... munmap resumed>) = 0 [pid 5980] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5979] <... creat resumed>) = 4 [pid 5977] <... write resumed>) = 524288 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] umount2("./146/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5980] <... openat resumed>) = 3 [pid 5077] umount2("./148/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5979] rename("./bus", "./file2" [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5979] <... rename resumed>) = -1 EEXIST (File exists) [pid 5073] newfstatat(AT_FDCWD, "./146/bus", [pid 5981] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5980] chdir("./bus" [pid 5979] memfd_create("syzkaller", 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5980] <... chdir resumed>) = 0 [pid 5979] <... memfd_create resumed>) = 5 [pid 5977] munmap(0x7f0356e00000, 138412032 [pid 5077] <... umount2 resumed>) = 0 [pid 5073] umount2("./146/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5980] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5979] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5981] <... openat resumed>) = 4 [pid 5980] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5977] <... munmap resumed>) = 0 [pid 5980] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5981] ioctl(4, LOOP_SET_FD, 3 [pid 5073] openat(AT_FDCWD, "./146/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5979] <... mmap resumed>) = 0x7f0356e00000 [pid 5980] <... symlink resumed>) = 0 [pid 5977] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5980] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5977] close(5 [pid 5980] <... creat resumed>) = 4 [pid 5980] rename("./bus", "./file2" [pid 5981] <... ioctl resumed>) = 0 [pid 5979] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5977] <... close resumed>) = 0 [pid 5077] umount2("./148/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... openat resumed>) = 4 [pid 5981] close(3 [pid 5980] <... rename resumed>) = -1 EEXIST (File exists) [pid 5977] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(4, "", [pid 5981] <... close resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./148/bus", [pid 5981] close(4 [pid 5980] memfd_create("syzkaller", 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5981] <... close resumed>) = 0 [pid 5980] <... memfd_create resumed>) = 5 [pid 5979] <... write resumed>) = 524288 [pid 5977] <... open resumed>) = 5 [pid 5077] umount2("./148/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] getdents64(4, [pid 5981] mkdir("./bus", 0777 [pid 5980] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5979] munmap(0x7f0356e00000, 138412032 [pid 5977] ftruncate(5, 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5981] <... mkdir resumed>) = 0 [pid 5980] <... mmap resumed>) = 0x7f0356e00000 [pid 5979] <... munmap resumed>) = 0 [pid 5977] <... ftruncate resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./148/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] getdents64(4, [pid 5981] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5980] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5977] exit_group(0 [pid 5077] <... openat resumed>) = 4 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] newfstatat(4, "", [pid 5073] close(4 [pid 5979] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5977] <... exit_group resumed>) = ? [pid 5073] <... close resumed>) = 0 [pid 5979] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5977] +++ exited with 0 +++ [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5977, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5981] <... mount resumed>) = 0 [pid 5979] close(5 [pid 5077] getdents64(4, [pid 5073] rmdir("./146/bus" [pid 5981] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5979] <... close resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] <... rmdir resumed>) = 0 [pid 5078] umount2("./148", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5981] <... openat resumed>) = 3 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] close(4 [pid 5073] umount2("./146/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5981] chdir("./bus" [pid 5078] openat(AT_FDCWD, "./148", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] rmdir("./148/bus" [pid 5073] newfstatat(AT_FDCWD, "./146/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5981] <... chdir resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5077] <... rmdir resumed>) = 0 [ 165.880491][ T5981] loop2: detected capacity change from 0 to 1024 [pid 5073] unlink("./146/binderfs" [pid 5981] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5980] <... write resumed>) = 524288 [pid 5979] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] newfstatat(3, "", [pid 5077] umount2("./148/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... unlink resumed>) = 0 [pid 5981] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5980] munmap(0x7f0356e00000, 138412032 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] getdents64(3, [pid 5078] getdents64(3, [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] rmdir("./146" [pid 5981] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5980] <... munmap resumed>) = 0 [pid 5078] umount2("./148/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] newfstatat(AT_FDCWD, "./148/binderfs", [pid 5073] <... rmdir resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] mkdir("./147", 0777 [pid 5077] unlink("./148/binderfs" [pid 5981] <... symlink resumed>) = 0 [pid 5980] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5979] <... open resumed>) = 5 [pid 5077] <... unlink resumed>) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 5981] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5980] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5979] ftruncate(5, 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5980] close(5 [pid 5979] <... ftruncate resumed>) = 0 [pid 5077] getdents64(3, [pid 5073] <... openat resumed>) = 3 [pid 5981] <... creat resumed>) = 4 [pid 5980] <... close resumed>) = 0 [pid 5979] exit_group(0 [pid 5078] <... umount2 resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5981] rename("./bus", "./file2" [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5077] close(3) = 0 [pid 5981] <... rename resumed>) = -1 EEXIST (File exists) [pid 5077] rmdir("./148" [pid 5078] umount2("./148/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5979] <... exit_group resumed>) = ? [pid 5981] memfd_create("syzkaller", 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... rmdir resumed>) = 0 [pid 5077] mkdir("./149", 0777 [pid 5981] <... memfd_create resumed>) = 5 [pid 5980] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5979] +++ exited with 0 +++ [pid 5078] newfstatat(AT_FDCWD, "./148/bus", [pid 5981] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5979, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5981] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] umount2("./148/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5980] <... open resumed>) = 5 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] openat(AT_FDCWD, "./148/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] umount2("./149", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... openat resumed>) = 4 [pid 5078] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(4, [pid 5980] ftruncate(5, 0 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... openat resumed>) = 3 [pid 5078] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5078] close(4) = 0 [pid 5078] rmdir("./148/bus" [pid 5981] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... rmdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./149", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5980] <... ftruncate resumed>) = 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5078] umount2("./148/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5981] <... write resumed>) = 524288 [pid 5980] exit_group(0 [pid 5076] <... openat resumed>) = 3 [pid 5981] munmap(0x7f0356e00000, 138412032 [pid 5980] <... exit_group resumed>) = ? [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(3, "", [pid 5073] <... ioctl resumed>) = 0 [pid 5981] <... munmap resumed>) = 0 [pid 5981] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5981] close(5) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] close(3 [pid 5078] newfstatat(AT_FDCWD, "./148/binderfs", [pid 5981] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5980] +++ exited with 0 +++ [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] getdents64(3, [pid 5073] <... close resumed>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5980, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5078] unlink("./148/binderfs" [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5981] <... open resumed>) = 5 [pid 5078] <... unlink resumed>) = 0 [pid 5077] <... ioctl resumed>) = 0 [pid 5076] umount2("./149/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./146", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5981] ftruncate(5, 0 [pid 5078] getdents64(3, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 5982 ./strace-static-x86_64: Process 5982 attached [pid 5074] openat(AT_FDCWD, "./146", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5982] set_robust_list(0x55556e32a660, 24 [pid 5981] <... ftruncate resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5074] newfstatat(3, "", [pid 5982] <... set_robust_list resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5982] chdir("./147" [pid 5981] exit_group(0 [pid 5078] close(3 [pid 5077] close(3 [pid 5074] getdents64(3, [pid 5982] <... chdir resumed>) = 0 [pid 5981] <... exit_group resumed>) = ? [pid 5078] <... close resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5982] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5981] +++ exited with 0 +++ [pid 5078] rmdir("./148" [pid 5076] <... umount2 resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5982] <... prctl resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] umount2("./149/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5981, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5074] umount2("./146/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5982] setpgid(0, 0 [pid 5078] mkdir("./149", 0777 [pid 5982] <... setpgid resumed>) = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./149/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./149/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5076] openat(AT_FDCWD, "./149/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5982] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5078] <... openat resumed>) = 3 [pid 5076] <... openat resumed>) = 4 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 5983 [pid 5076] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] close(4) = 0 ./strace-static-x86_64: Process 5983 attached [pid 5982] <... openat resumed>) = 3 [pid 5076] rmdir("./149/bus" [pid 5075] umount2("./146", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./146/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "./146", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./146/bus", [pid 5983] set_robust_list(0x55556e32a660, 24 [pid 5982] write(3, "1000", 4 [pid 5075] <... openat resumed>) = 3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5983] <... set_robust_list resumed>) = 0 [pid 5982] <... write resumed>) = 4 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] newfstatat(3, "", [pid 5074] umount2("./146/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5983] chdir("./149" [pid 5982] close(3) = 0 [pid 5076] umount2("./149/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5983] <... chdir resumed>) = 0 [pid 5982] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5983] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5982] <... symlink resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./149/binderfs", [pid 5074] openat(AT_FDCWD, "./146/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5983] <... prctl resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5982] memfd_create("syzkaller", 0 [pid 5075] getdents64(3, [pid 5074] <... openat resumed>) = 4 [pid 5983] setpgid(0, 0 [pid 5076] unlink("./149/binderfs" [pid 5983] <... setpgid resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] newfstatat(4, "", [pid 5982] <... memfd_create resumed>) = 3 [pid 5982] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5983] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] getdents64(3, [pid 5075] umount2("./146/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5982] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... ioctl resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] getdents64(4, [pid 5983] <... openat resumed>) = 3 [pid 5983] write(3, "1000", 4 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5983] <... write resumed>) = 4 [pid 5983] close(3) = 0 [pid 5076] close(3 [pid 5074] getdents64(4, [pid 5983] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] rmdir("./149" [pid 5983] <... symlink resumed>) = 0 [pid 5074] close(4 [pid 5983] memfd_create("syzkaller", 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5983] <... memfd_create resumed>) = 3 [pid 5076] mkdir("./150", 0777 [pid 5074] rmdir("./146/bus" [pid 5983] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5078] close(3 [pid 5076] <... mkdir resumed>) = 0 [pid 5074] umount2("./146/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5983] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5982] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5074] newfstatat(AT_FDCWD, "./146/binderfs", [pid 5076] <... openat resumed>) = 3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 5984 attached [pid 5982] <... write resumed>) = 524288 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5074] unlink("./146/binderfs" [pid 5984] set_robust_list(0x55556e32a660, 24) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5984] chdir("./149" [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 5984 [pid 5984] <... chdir resumed>) = 0 [pid 5984] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5983] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... unlink resumed>) = 0 [pid 5075] umount2("./146/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] getdents64(3, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./146/bus", [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5984] <... prctl resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] close(3 [pid 5075] umount2("./146/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./146/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] rmdir("./146" [pid 5984] setpgid(0, 0 [pid 5075] <... openat resumed>) = 4 [pid 5984] <... setpgid resumed>) = 0 [pid 5075] newfstatat(4, "", [pid 5074] <... rmdir resumed>) = 0 [pid 5074] mkdir("./147", 0777 [pid 5984] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5984] <... openat resumed>) = 3 [pid 5984] write(3, "1000", 4) = 4 [pid 5984] close(3) = 0 [pid 5984] symlink("/dev/binderfs", "./binderfs" [pid 5075] getdents64(4, [pid 5984] <... symlink resumed>) = 0 [pid 5984] memfd_create("syzkaller", 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5984] <... memfd_create resumed>) = 3 [pid 5982] munmap(0x7f0356e00000, 138412032 [pid 5075] getdents64(4, [pid 5074] <... openat resumed>) = 3 [pid 5984] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5982] <... munmap resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] close(4 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5984] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] <... close resumed>) = 0 [pid 5984] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5982] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5982] ioctl(4, LOOP_SET_FD, 3 [pid 5983] <... write resumed>) = 524288 [pid 5075] rmdir("./146/bus" [pid 5984] <... write resumed>) = 524288 [pid 5075] <... rmdir resumed>) = 0 [pid 5983] munmap(0x7f0356e00000, 138412032 [pid 5075] umount2("./146/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5982] <... ioctl resumed>) = 0 [pid 5984] munmap(0x7f0356e00000, 138412032 [pid 5983] <... munmap resumed>) = 0 [pid 5982] close(3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5984] <... munmap resumed>) = 0 [pid 5983] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5982] <... close resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./146/binderfs", [pid 5983] <... openat resumed>) = 4 [pid 5982] close(4 [pid 5076] <... ioctl resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5983] ioctl(4, LOOP_SET_FD, 3 [pid 5982] <... close resumed>) = 0 [pid 5075] unlink("./146/binderfs") = 0 [pid 5984] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5982] mkdir("./bus", 0777 [pid 5075] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 5075] rmdir("./146") = 0 [pid 5075] mkdir("./147", 0777 [pid 5074] close(3 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 [ 166.147898][ T5982] loop0: detected capacity change from 0 to 1024 [ 166.183746][ T5983] loop4: detected capacity change from 0 to 1024 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5984] <... openat resumed>) = 4 [pid 5982] <... mkdir resumed>) = 0 [pid 5076] close(3 [pid 5984] ioctl(4, LOOP_SET_FD, 3 [pid 5982] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5076] <... close resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 5985 ./strace-static-x86_64: Process 5985 attached [pid 5985] set_robust_list(0x55556e32a660, 24) = 0 [pid 5985] chdir("./147" [pid 5984] <... ioctl resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5985] <... chdir resumed>) = 0 [pid 5985] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5983] <... ioctl resumed>) = 0 [pid 5985] <... prctl resumed>) = 0 [pid 5985] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 5986 attached [pid 5982] <... mount resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 5986 [pid 5986] set_robust_list(0x55556e32a660, 24 [pid 5985] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5983] close(3 [pid 5982] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5986] <... set_robust_list resumed>) = 0 [pid 5983] <... close resumed>) = 0 [pid 5982] <... openat resumed>) = 3 [pid 5986] chdir("./150" [pid 5983] close(4 [pid 5982] chdir("./bus" [pid 5986] <... chdir resumed>) = 0 [pid 5983] <... close resumed>) = 0 [pid 5982] <... chdir resumed>) = 0 [pid 5986] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5985] <... openat resumed>) = 3 [pid 5984] close(3 [pid 5983] mkdir("./bus", 0777 [pid 5982] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5986] <... prctl resumed>) = 0 [pid 5985] write(3, "1000", 4 [pid 5984] <... close resumed>) = 0 [pid 5983] <... mkdir resumed>) = 0 [pid 5986] setpgid(0, 0 [pid 5985] <... write resumed>) = 4 [pid 5984] close(4 [pid 5983] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5982] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5986] <... setpgid resumed>) = 0 [pid 5985] close(3 [pid 5984] <... close resumed>) = 0 [pid 5982] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5075] <... ioctl resumed>) = 0 [pid 5986] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5985] <... close resumed>) = 0 [pid 5984] mkdir("./bus", 0777 [pid 5983] <... mount resumed>) = 0 [pid 5986] <... openat resumed>) = 3 [pid 5985] symlink("/dev/binderfs", "./binderfs" [pid 5986] write(3, "1000", 4 [pid 5985] <... symlink resumed>) = 0 [pid 5984] <... mkdir resumed>) = 0 [pid 5986] <... write resumed>) = 4 [pid 5986] close(3) = 0 [ 166.199532][ T5984] loop5: detected capacity change from 0 to 1024 [pid 5983] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5985] memfd_create("syzkaller", 0 [pid 5983] <... openat resumed>) = 3 [pid 5986] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5985] <... memfd_create resumed>) = 3 [pid 5983] chdir("./bus" [pid 5985] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5983] <... chdir resumed>) = 0 [pid 5985] <... mmap resumed>) = 0x7f0356e00000 [pid 5984] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5983] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5986] memfd_create("syzkaller", 0 [pid 5983] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5982] <... symlink resumed>) = 0 [pid 5986] <... memfd_create resumed>) = 3 [pid 5983] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5986] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5982] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5983] <... symlink resumed>) = 0 [pid 5075] close(3 [pid 5983] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5985] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5982] <... creat resumed>) = 4 [pid 5075] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5982] rename("./bus", "./file2" [pid 5986] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5984] <... mount resumed>) = 0 [pid 5982] <... rename resumed>) = -1 EEXIST (File exists) [pid 5983] <... creat resumed>) = 4 ./strace-static-x86_64: Process 5987 attached [pid 5985] <... write resumed>) = 524288 [pid 5984] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5983] rename("./bus", "./file2" [pid 5982] memfd_create("syzkaller", 0 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 5987 [pid 5987] set_robust_list(0x55556e32a660, 24 [pid 5986] <... write resumed>) = 524288 [pid 5985] munmap(0x7f0356e00000, 138412032 [pid 5984] <... openat resumed>) = 3 [pid 5983] <... rename resumed>) = -1 EEXIST (File exists) [pid 5982] <... memfd_create resumed>) = 5 [pid 5987] <... set_robust_list resumed>) = 0 [pid 5985] <... munmap resumed>) = 0 [pid 5984] chdir("./bus" [pid 5983] memfd_create("syzkaller", 0 [pid 5982] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5987] chdir("./147" [pid 5984] <... chdir resumed>) = 0 [pid 5983] <... memfd_create resumed>) = 5 [pid 5982] <... mmap resumed>) = 0x7f0356e00000 [pid 5987] <... chdir resumed>) = 0 [pid 5986] munmap(0x7f0356e00000, 138412032 [pid 5985] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5984] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5983] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5987] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5985] <... openat resumed>) = 4 [pid 5984] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5983] <... mmap resumed>) = 0x7f0356e00000 [pid 5987] <... prctl resumed>) = 0 [pid 5986] <... munmap resumed>) = 0 [pid 5985] ioctl(4, LOOP_SET_FD, 3 [pid 5984] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5987] setpgid(0, 0) = 0 [pid 5987] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5986] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5982] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5987] <... openat resumed>) = 3 [pid 5986] <... openat resumed>) = 4 [pid 5986] ioctl(4, LOOP_SET_FD, 3 [pid 5987] write(3, "1000", 4 [pid 5983] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5987] <... write resumed>) = 4 [pid 5987] close(3) = 0 [pid 5987] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5987] memfd_create("syzkaller", 0 [pid 5984] <... symlink resumed>) = 0 [pid 5986] <... ioctl resumed>) = 0 [pid 5987] <... memfd_create resumed>) = 3 [pid 5986] close(3 [pid 5984] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5987] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5986] <... close resumed>) = 0 [pid 5983] <... write resumed>) = 524288 [pid 5982] <... write resumed>) = 524288 [pid 5986] close(4) = 0 [pid 5985] <... ioctl resumed>) = 0 [pid 5986] mkdir("./bus", 0777 [pid 5985] close(3) = 0 [pid 5982] munmap(0x7f0356e00000, 138412032 [pid 5985] close(4) = 0 [pid 5985] mkdir("./bus", 0777 [pid 5986] <... mkdir resumed>) = 0 [pid 5985] <... mkdir resumed>) = 0 [pid 5982] <... munmap resumed>) = 0 [pid 5987] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5985] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5982] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5986] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5982] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5985] <... mount resumed>) = 0 [pid 5984] <... creat resumed>) = 4 [pid 5983] munmap(0x7f0356e00000, 138412032 [pid 5982] close(5 [pid 5984] rename("./bus", "./file2" [pid 5983] <... munmap resumed>) = 0 [pid 5985] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [ 166.324734][ T5985] loop1: detected capacity change from 0 to 1024 [ 166.338776][ T5986] loop3: detected capacity change from 0 to 1024 [pid 5983] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5985] chdir("./bus" [pid 5983] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5985] <... chdir resumed>) = 0 [pid 5984] <... rename resumed>) = -1 EEXIST (File exists) [pid 5985] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5983] close(5 [pid 5987] <... write resumed>) = 524288 [pid 5985] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5984] memfd_create("syzkaller", 0 [pid 5982] <... close resumed>) = 0 [pid 5986] <... mount resumed>) = 0 [pid 5984] <... memfd_create resumed>) = 5 [pid 5986] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5984] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5985] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5986] <... openat resumed>) = 3 [pid 5984] <... mmap resumed>) = 0x7f0356e00000 [pid 5986] chdir("./bus" [pid 5982] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5986] <... chdir resumed>) = 0 [pid 5986] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5985] <... symlink resumed>) = 0 [pid 5982] <... open resumed>) = 5 [pid 5987] munmap(0x7f0356e00000, 138412032 [pid 5986] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5985] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5983] <... close resumed>) = 0 [pid 5986] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5982] ftruncate(5, 0 [pid 5987] <... munmap resumed>) = 0 [pid 5983] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5986] <... symlink resumed>) = 0 [pid 5984] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5982] <... ftruncate resumed>) = 0 [pid 5987] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5985] <... creat resumed>) = 4 [pid 5982] exit_group(0 [pid 5987] <... openat resumed>) = 4 [pid 5987] ioctl(4, LOOP_SET_FD, 3 [pid 5985] rename("./bus", "./file2" [pid 5983] <... open resumed>) = 5 [pid 5982] <... exit_group resumed>) = ? [pid 5986] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5982] +++ exited with 0 +++ [pid 5983] ftruncate(5, 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5982, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5073] umount2("./147", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./147", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5983] <... ftruncate resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5073] newfstatat(3, "", [pid 5983] exit_group(0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5983] <... exit_group resumed>) = ? [pid 5073] umount2("./147/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5985] <... rename resumed>) = -1 EEXIST (File exists) [pid 5985] memfd_create("syzkaller", 0) = 5 [pid 5985] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5983] +++ exited with 0 +++ [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5983, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5986] <... creat resumed>) = 4 [pid 5986] rename("./bus", "./file2" [pid 5077] umount2("./149", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5986] <... rename resumed>) = -1 EEXIST (File exists) [pid 5984] <... write resumed>) = 524288 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = 0 [pid 5986] memfd_create("syzkaller", 0 [pid 5984] munmap(0x7f0356e00000, 138412032 [pid 5077] openat(AT_FDCWD, "./149", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5987] <... ioctl resumed>) = 0 [pid 5986] <... memfd_create resumed>) = 5 [pid 5077] <... openat resumed>) = 3 [pid 5987] close(3 [pid 5986] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5984] <... munmap resumed>) = 0 [pid 5077] newfstatat(3, "", [pid 5987] <... close resumed>) = 0 [pid 5986] <... mmap resumed>) = 0x7f0356e00000 [pid 5985] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5987] close(4 [pid 5984] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] getdents64(3, [pid 5073] umount2("./147/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5987] <... close resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5986] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] umount2("./149/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5987] mkdir("./bus", 0777) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5984] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5984] close(5 [ 166.421660][ T5987] loop2: detected capacity change from 0 to 1024 [pid 5073] newfstatat(AT_FDCWD, "./147/bus", [pid 5986] <... write resumed>) = 524288 [pid 5984] <... close resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./147/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./147/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5987] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5073] <... openat resumed>) = 4 [pid 5985] <... write resumed>) = 524288 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, [pid 5985] munmap(0x7f0356e00000, 138412032) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5987] <... mount resumed>) = 0 [pid 5073] getdents64(4, [pid 5984] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5987] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5073] close(4 [pid 5987] chdir("./bus" [pid 5986] munmap(0x7f0356e00000, 138412032 [pid 5985] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] <... close resumed>) = 0 [pid 5987] <... chdir resumed>) = 0 [pid 5986] <... munmap resumed>) = 0 [pid 5985] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5987] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5073] rmdir("./147/bus" [pid 5987] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5985] close(5 [pid 5987] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5986] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5984] <... open resumed>) = 5 [pid 5073] <... rmdir resumed>) = 0 [pid 5986] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5984] ftruncate(5, 0 [pid 5986] close(5 [pid 5985] <... close resumed>) = 0 [pid 5984] <... ftruncate resumed>) = 0 [pid 5077] umount2("./149/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./147/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5987] <... symlink resumed>) = 0 [pid 5986] <... close resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5984] exit_group(0 [pid 5077] newfstatat(AT_FDCWD, "./149/bus", [pid 5073] newfstatat(AT_FDCWD, "./147/binderfs", [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5987] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5077] umount2("./149/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] unlink("./147/binderfs" [pid 5984] <... exit_group resumed>) = ? [pid 5077] openat(AT_FDCWD, "./149/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] <... unlink resumed>) = 0 [pid 5077] newfstatat(4, "", [pid 5985] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] getdents64(4, [pid 5073] getdents64(3, [pid 5986] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5987] <... creat resumed>) = 4 [pid 5985] <... open resumed>) = 5 [pid 5984] +++ exited with 0 +++ [pid 5077] getdents64(4, [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5987] rename("./bus", "./file2" [pid 5985] ftruncate(5, 0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] close(3 [pid 5987] <... rename resumed>) = -1 EEXIST (File exists) [pid 5986] <... open resumed>) = 5 [pid 5985] <... ftruncate resumed>) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5984, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5077] close(4 [pid 5987] memfd_create("syzkaller", 0 [pid 5986] ftruncate(5, 0 [pid 5985] exit_group(0 [pid 5078] restart_syscall(<... resuming interrupted clone ...> [pid 5073] <... close resumed>) = 0 [pid 5078] <... restart_syscall resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5073] rmdir("./147" [pid 5987] <... memfd_create resumed>) = 5 [pid 5986] <... ftruncate resumed>) = 0 [pid 5985] <... exit_group resumed>) = ? [pid 5077] rmdir("./149/bus" [pid 5987] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5986] exit_group(0 [pid 5077] <... rmdir resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5986] <... exit_group resumed>) = ? [pid 5078] umount2("./149", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] umount2("./149/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] mkdir("./148", 0777 [pid 5987] <... mmap resumed>) = 0x7f0356e00000 [pid 5986] +++ exited with 0 +++ [pid 5985] +++ exited with 0 +++ [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./149", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] newfstatat(AT_FDCWD, "./149/binderfs", [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5986, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5073] <... mkdir resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5987] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... openat resumed>) = 3 [pid 5077] unlink("./149/binderfs" [pid 5076] umount2("./150", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5985, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5073] <... openat resumed>) = 3 [pid 5078] newfstatat(3, "", [pid 5077] <... unlink resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] getdents64(3, [pid 5076] openat(AT_FDCWD, "./150", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... restart_syscall resumed>) = 0 [pid 5078] getdents64(3, [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] close(3 [pid 5076] newfstatat(3, "", [pid 5078] umount2("./149/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] umount2("./147", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] rmdir("./149" [pid 5076] getdents64(3, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./147", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5077] <... rmdir resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5076] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5987] <... write resumed>) = 524288 [pid 5077] mkdir("./150", 0777 [pid 5074] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, [pid 5987] munmap(0x7f0356e00000, 138412032 [pid 5078] <... umount2 resumed>) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5987] <... munmap resumed>) = 0 [pid 5078] umount2("./149/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./147/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5987] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... openat resumed>) = 3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5987] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] newfstatat(AT_FDCWD, "./149/bus", [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5987] close(5) = 0 [pid 5078] umount2("./149/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./150/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./150/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] getdents64(4, [pid 5078] openat(AT_FDCWD, "./149/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5078] <... openat resumed>) = 4 [pid 5076] getdents64(4, [pid 5078] newfstatat(4, "", [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] close(4 [pid 5078] getdents64(4, [pid 5076] <... close resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] rmdir("./150/bus" [pid 5078] getdents64(4, [pid 5076] <... rmdir resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] umount2("./150/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./147/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5987] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] close(4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... close resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./150/binderfs", [pid 5074] newfstatat(AT_FDCWD, "./147/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./147/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] rmdir("./149/bus" [pid 5076] unlink("./150/binderfs" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... unlink resumed>) = 0 [pid 5987] <... open resumed>) = 5 [pid 5076] getdents64(3, [pid 5074] openat(AT_FDCWD, "./147/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... ioctl resumed>) = 0 [pid 5987] ftruncate(5, 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] <... openat resumed>) = 4 [pid 5073] close(3 [pid 5987] <... ftruncate resumed>) = 0 [pid 5078] umount2("./149/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] close(3 [pid 5074] newfstatat(4, "", [pid 5073] <... close resumed>) = 0 [pid 5987] exit_group(0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... close resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5987] <... exit_group resumed>) = ? [pid 5078] newfstatat(AT_FDCWD, "./149/binderfs", [pid 5076] rmdir("./150" [pid 5074] getdents64(4, [pid 5076] <... rmdir resumed>) = 0 [pid 5076] mkdir("./151", 0777 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5078] unlink("./149/binderfs" [pid 5076] <... mkdir resumed>) = 0 [pid 5074] close(4) = 0 [pid 5074] rmdir("./147/bus" [pid 5078] <... unlink resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5074] <... rmdir resumed>) = 0 [pid 5987] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5987, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5075] umount2("./147", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./147/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./147", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... openat resumed>) = 3 [pid 5076] <... openat resumed>) = 3 [pid 5075] newfstatat(3, "", [pid 5074] newfstatat(AT_FDCWD, "./147/binderfs", [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] umount2("./147/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] unlink("./147/binderfs" [pid 5078] getdents64(3, [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5074] <... unlink resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 5988 [pid 5078] close(3./strace-static-x86_64: Process 5988 attached ) = 0 [pid 5074] getdents64(3, [pid 5078] rmdir("./149" [pid 5077] <... ioctl resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5077] close(3 [pid 5074] close(3 [pid 5988] set_robust_list(0x55556e32a660, 24 [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./147" [pid 5075] <... umount2 resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5988] <... set_robust_list resumed>) = 0 [pid 5078] mkdir("./150", 0777 [pid 5077] <... close resumed>) = 0 [pid 5988] chdir("./148" [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] umount2("./147/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] mkdir("./148", 0777 [pid 5988] <... chdir resumed>) = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... mkdir resumed>) = 0 [pid 5988] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] newfstatat(AT_FDCWD, "./147/bus", ./strace-static-x86_64: Process 5989 attached [pid 5988] <... prctl resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 5989 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5989] set_robust_list(0x55556e32a660, 24 [pid 5988] setpgid(0, 0 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5075] umount2("./147/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... openat resumed>) = 3 [pid 5988] <... setpgid resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5989] <... set_robust_list resumed>) = 0 [pid 5988] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] openat(AT_FDCWD, "./147/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5989] chdir("./150" [pid 5988] <... openat resumed>) = 3 [pid 5075] <... openat resumed>) = 4 [pid 5989] <... chdir resumed>) = 0 [pid 5988] write(3, "1000", 4 [pid 5075] newfstatat(4, "", [pid 5989] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5988] <... write resumed>) = 4 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5989] <... prctl resumed>) = 0 [pid 5988] close(3 [pid 5075] getdents64(4, [pid 5989] setpgid(0, 0 [pid 5988] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5989] <... setpgid resumed>) = 0 [pid 5988] symlink("/dev/binderfs", "./binderfs" [pid 5075] getdents64(4, [pid 5989] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] close(4) = 0 [pid 5075] rmdir("./147/bus" [pid 5989] <... openat resumed>) = 3 [pid 5075] <... rmdir resumed>) = 0 [pid 5075] umount2("./147/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5988] <... symlink resumed>) = 0 [pid 5989] write(3, "1000", 4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5988] memfd_create("syzkaller", 0 [pid 5989] <... write resumed>) = 4 [pid 5075] newfstatat(AT_FDCWD, "./147/binderfs", [pid 5989] close(3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5989] <... close resumed>) = 0 [pid 5075] unlink("./147/binderfs" [pid 5989] symlink("/dev/binderfs", "./binderfs" [pid 5988] <... memfd_create resumed>) = 3 [pid 5076] <... ioctl resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5989] <... symlink resumed>) = 0 [pid 5988] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5989] memfd_create("syzkaller", 0 [pid 5988] <... mmap resumed>) = 0x7f0356e00000 [pid 5989] <... memfd_create resumed>) = 3 [pid 5989] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] getdents64(3, [pid 5989] <... mmap resumed>) = 0x7f0356e00000 [pid 5988] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] close(3) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 5990 [pid 5989] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288./strace-static-x86_64: Process 5990 attached [pid 5990] set_robust_list(0x55556e32a660, 24 [pid 5988] <... write resumed>) = 524288 [pid 5075] close(3 [pid 5990] <... set_robust_list resumed>) = 0 [pid 5990] chdir("./151") = 0 [pid 5989] <... write resumed>) = 524288 [pid 5075] <... close resumed>) = 0 [pid 5990] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5990] setpgid(0, 0) = 0 [pid 5990] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5990] write(3, "1000", 4 [pid 5075] rmdir("./147" [pid 5990] <... write resumed>) = 4 [pid 5990] close(3) = 0 [pid 5990] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5990] memfd_create("syzkaller", 0 [pid 5078] <... ioctl resumed>) = 0 [pid 5075] mkdir("./148", 0777 [pid 5990] <... memfd_create resumed>) = 3 [pid 5988] munmap(0x7f0356e00000, 138412032 [pid 5078] close(3 [pid 5075] <... mkdir resumed>) = 0 [pid 5988] <... munmap resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5990] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5990] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] <... ioctl resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5990] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5989] munmap(0x7f0356e00000, 138412032 [pid 5988] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] close(3./strace-static-x86_64: Process 5991 attached [pid 5988] <... openat resumed>) = 4 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 5991 [pid 5074] <... close resumed>) = 0 [pid 5991] set_robust_list(0x55556e32a660, 24 [pid 5989] <... munmap resumed>) = 0 [pid 5991] <... set_robust_list resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5991] chdir("./150") = 0 [pid 5991] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5988] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5992 attached [pid 5991] setpgid(0, 0 [pid 5989] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 5992 [pid 5992] set_robust_list(0x55556e32a660, 24 [pid 5991] <... setpgid resumed>) = 0 [pid 5989] <... openat resumed>) = 4 [pid 5992] <... set_robust_list resumed>) = 0 [pid 5989] ioctl(4, LOOP_SET_FD, 3 [pid 5991] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5992] chdir("./148" [pid 5991] <... openat resumed>) = 3 [pid 5991] write(3, "1000", 4) = 4 [pid 5991] close(3) = 0 [pid 5991] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5991] memfd_create("syzkaller", 0 [pid 5992] <... chdir resumed>) = 0 [pid 5989] <... ioctl resumed>) = 0 [pid 5988] <... ioctl resumed>) = 0 [pid 5991] <... memfd_create resumed>) = 3 [pid 5991] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5992] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5991] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5990] <... write resumed>) = 524288 [pid 5989] close(3 [pid 5988] close(3 [pid 5992] <... prctl resumed>) = 0 [pid 5989] <... close resumed>) = 0 [pid 5988] <... close resumed>) = 0 [pid 5992] setpgid(0, 0 [pid 5989] close(4 [pid 5988] close(4 [pid 5992] <... setpgid resumed>) = 0 [pid 5989] <... close resumed>) = 0 [pid 5988] <... close resumed>) = 0 [pid 5992] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5990] munmap(0x7f0356e00000, 138412032 [pid 5989] mkdir("./bus", 0777 [pid 5988] mkdir("./bus", 0777 [pid 5992] <... openat resumed>) = 3 [pid 5991] <... write resumed>) = 524288 [pid 5989] <... mkdir resumed>) = 0 [pid 5988] <... mkdir resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5989] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5988] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5990] <... munmap resumed>) = 0 [pid 5991] munmap(0x7f0356e00000, 138412032 [pid 5992] write(3, "1000", 4 [pid 5990] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5992] <... write resumed>) = 4 [pid 5990] <... openat resumed>) = 4 [pid 5992] close(3 [pid 5991] <... munmap resumed>) = 0 [pid 5990] ioctl(4, LOOP_SET_FD, 3 [pid 5988] <... mount resumed>) = 0 [pid 5075] close(3 [pid 5992] <... close resumed>) = 0 [ 166.743324][ T5988] loop0: detected capacity change from 0 to 1024 [ 166.763817][ T5989] loop4: detected capacity change from 0 to 1024 [pid 5991] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5991] ioctl(4, LOOP_SET_FD, 3 [pid 5992] symlink("/dev/binderfs", "./binderfs" [pid 5990] <... ioctl resumed>) = 0 [pid 5989] <... mount resumed>) = 0 [pid 5988] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5075] <... close resumed>) = 0 [pid 5992] <... symlink resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5988] <... openat resumed>) = 3 [pid 5988] chdir("./bus" [pid 5989] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5992] memfd_create("syzkaller", 0 [pid 5989] <... openat resumed>) = 3 [pid 5988] <... chdir resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 5993 [pid 5992] <... memfd_create resumed>) = 3 [pid 5990] close(3 [pid 5989] chdir("./bus" [pid 5988] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5992] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5990] <... close resumed>) = 0 [pid 5989] <... chdir resumed>) = 0 [pid 5988] <... openat resumed>) = -1 EBUSY (Device or resource busy) ./strace-static-x86_64: Process 5993 attached [pid 5992] <... mmap resumed>) = 0x7f0356e00000 [pid 5990] close(4 [pid 5989] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5988] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5993] set_robust_list(0x55556e32a660, 24 [pid 5990] <... close resumed>) = 0 [pid 5989] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5993] <... set_robust_list resumed>) = 0 [pid 5993] chdir("./148" [pid 5990] mkdir("./bus", 0777 [pid 5989] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5993] <... chdir resumed>) = 0 [pid 5993] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5990] <... mkdir resumed>) = 0 [pid 5993] setpgid(0, 0 [pid 5990] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5993] <... setpgid resumed>) = 0 [pid 5993] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5993] write(3, "1000", 4) = 4 [pid 5993] close(3) = 0 [pid 5989] <... symlink resumed>) = 0 [pid 5993] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5991] <... ioctl resumed>) = 0 [pid 5993] memfd_create("syzkaller", 0 [pid 5991] close(3 [pid 5990] <... mount resumed>) = 0 [pid 5989] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5988] <... symlink resumed>) = 0 [pid 5993] <... memfd_create resumed>) = 3 [pid 5991] <... close resumed>) = 0 [pid 5990] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5988] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5993] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5992] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5991] close(4 [pid 5989] <... creat resumed>) = 4 [pid 5993] <... mmap resumed>) = 0x7f0356e00000 [pid 5991] <... close resumed>) = 0 [pid 5989] rename("./bus", "./file2" [pid 5993] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5991] mkdir("./bus", 0777 [pid 5990] <... openat resumed>) = 3 [pid 5989] <... rename resumed>) = -1 EEXIST (File exists) [pid 5991] <... mkdir resumed>) = 0 [pid 5989] memfd_create("syzkaller", 0) = 5 [pid 5989] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5991] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5989] <... mmap resumed>) = 0x7f0356e00000 [pid 5990] chdir("./bus") = 0 [pid 5988] <... creat resumed>) = 4 [ 166.813599][ T5990] loop3: detected capacity change from 0 to 1024 [ 166.817606][ T5991] loop5: detected capacity change from 0 to 1024 [pid 5990] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5988] rename("./bus", "./file2" [pid 5990] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5989] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5993] <... write resumed>) = 524288 [pid 5992] <... write resumed>) = 524288 [pid 5988] <... rename resumed>) = -1 EEXIST (File exists) [pid 5990] <... symlink resumed>) = 0 [pid 5988] memfd_create("syzkaller", 0) = 5 [pid 5990] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5988] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5992] munmap(0x7f0356e00000, 138412032 [pid 5993] munmap(0x7f0356e00000, 138412032 [pid 5991] <... mount resumed>) = 0 [pid 5990] <... creat resumed>) = 4 [pid 5989] <... write resumed>) = 524288 [pid 5988] <... mmap resumed>) = 0x7f0356e00000 [pid 5993] <... munmap resumed>) = 0 [pid 5992] <... munmap resumed>) = 0 [pid 5991] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5990] rename("./bus", "./file2" [pid 5993] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5992] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5991] <... openat resumed>) = 3 [pid 5990] <... rename resumed>) = -1 EEXIST (File exists) [pid 5989] munmap(0x7f0356e00000, 138412032 [pid 5988] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5993] <... openat resumed>) = 4 [pid 5992] <... openat resumed>) = 4 [pid 5991] chdir("./bus" [pid 5990] memfd_create("syzkaller", 0 [pid 5989] <... munmap resumed>) = 0 [pid 5991] <... chdir resumed>) = 0 [pid 5990] <... memfd_create resumed>) = 5 [pid 5991] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5990] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5993] ioctl(4, LOOP_SET_FD, 3 [pid 5992] ioctl(4, LOOP_SET_FD, 3 [pid 5991] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5990] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5991] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5989] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5989] close(5 [pid 5993] <... ioctl resumed>) = 0 [pid 5991] <... symlink resumed>) = 0 [pid 5988] <... write resumed>) = 524288 [pid 5993] close(3 [pid 5989] <... close resumed>) = 0 [pid 5993] <... close resumed>) = 0 [pid 5993] close(4 [pid 5991] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5993] <... close resumed>) = 0 [pid 5993] mkdir("./bus", 0777) = 0 [pid 5993] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5989] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5992] <... ioctl resumed>) = 0 [pid 5992] close(3) = 0 [pid 5993] <... mount resumed>) = 0 [pid 5992] close(4 [pid 5991] <... creat resumed>) = 4 [pid 5990] <... write resumed>) = 524288 [pid 5989] <... open resumed>) = 5 [pid 5993] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5992] <... close resumed>) = 0 [pid 5989] ftruncate(5, 0 [pid 5993] <... openat resumed>) = 3 [pid 5989] <... ftruncate resumed>) = 0 [pid 5988] munmap(0x7f0356e00000, 138412032 [ 166.919193][ T5992] loop1: detected capacity change from 0 to 1024 [ 166.926688][ T5993] loop2: detected capacity change from 0 to 1024 [pid 5992] mkdir("./bus", 0777 [pid 5989] exit_group(0 [pid 5988] <... munmap resumed>) = 0 [pid 5991] rename("./bus", "./file2" [pid 5993] chdir("./bus" [pid 5992] <... mkdir resumed>) = 0 [pid 5989] <... exit_group resumed>) = ? [pid 5993] <... chdir resumed>) = 0 [pid 5992] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5991] <... rename resumed>) = -1 EEXIST (File exists) [pid 5989] +++ exited with 0 +++ [pid 5988] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5993] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5991] memfd_create("syzkaller", 0 [pid 5990] munmap(0x7f0356e00000, 138412032 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5989, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5993] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5991] <... memfd_create resumed>) = 5 [pid 5991] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5990] <... munmap resumed>) = 0 [pid 5988] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5993] <... symlink resumed>) = 0 [pid 5991] <... mmap resumed>) = 0x7f0356e00000 [pid 5990] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5077] umount2("./150", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5993] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5988] close(5 [pid 5991] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5990] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5988] <... close resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5993] <... creat resumed>) = 4 [pid 5992] <... mount resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./150", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5993] rename("./bus", "./file2" [pid 5992] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5993] <... rename resumed>) = -1 EEXIST (File exists) [pid 5992] <... openat resumed>) = 3 [pid 5992] chdir("./bus" [pid 5993] memfd_create("syzkaller", 0 [pid 5992] <... chdir resumed>) = 0 [pid 5993] <... memfd_create resumed>) = 5 [pid 5992] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5992] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5993] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5990] close(5 [pid 5077] <... openat resumed>) = 3 [pid 5993] <... mmap resumed>) = 0x7f0356e00000 [pid 5992] <... symlink resumed>) = 0 [pid 5988] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5990] <... close resumed>) = 0 [pid 5077] newfstatat(3, "", [pid 5988] <... open resumed>) = 5 [pid 5993] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5992] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5988] ftruncate(5, 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5988] <... ftruncate resumed>) = 0 [pid 5077] getdents64(3, [pid 5988] exit_group(0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5988] <... exit_group resumed>) = ? [pid 5077] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5992] <... creat resumed>) = 4 [pid 5992] rename("./bus", "./file2" [pid 5990] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5992] <... rename resumed>) = -1 EEXIST (File exists) [pid 5988] +++ exited with 0 +++ [pid 5991] <... write resumed>) = 524288 [pid 5990] <... open resumed>) = 5 [pid 5992] memfd_create("syzkaller", 0 [pid 5991] munmap(0x7f0356e00000, 138412032 [pid 5990] ftruncate(5, 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5988, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5992] <... memfd_create resumed>) = 5 [pid 5992] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5991] <... munmap resumed>) = 0 [pid 5990] <... ftruncate resumed>) = 0 [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 5992] <... mmap resumed>) = 0x7f0356e00000 [pid 5990] exit_group(0 [pid 5073] <... restart_syscall resumed>) = 0 [pid 5992] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5991] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5990] <... exit_group resumed>) = ? [pid 5991] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... umount2 resumed>) = 0 [pid 5073] umount2("./148", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5991] close(5 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./148", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5993] <... write resumed>) = 524288 [pid 5990] +++ exited with 0 +++ [pid 5073] <... openat resumed>) = 3 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5990, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5073] newfstatat(3, "", [pid 5992] <... write resumed>) = 524288 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] umount2("./151", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] getdents64(3, [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./151", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] newfstatat(AT_FDCWD, "./150/bus", [pid 5076] <... openat resumed>) = 3 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] newfstatat(3, "", [pid 5077] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] getdents64(3, [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5991] <... close resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./150/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] umount2("./148/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5993] munmap(0x7f0356e00000, 138412032 [pid 5991] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] <... openat resumed>) = 4 [pid 5076] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5993] <... munmap resumed>) = 0 [pid 5077] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5993] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5077] close(4 [pid 5993] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... close resumed>) = 0 [pid 5993] close(5 [pid 5077] rmdir("./150/bus") = 0 [pid 5992] munmap(0x7f0356e00000, 138412032 [pid 5993] <... close resumed>) = 0 [pid 5992] <... munmap resumed>) = 0 [pid 5991] <... open resumed>) = 5 [pid 5077] umount2("./150/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5993] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./150/binderfs", [pid 5992] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5992] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5991] ftruncate(5, 0 [pid 5077] unlink("./150/binderfs" [pid 5076] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./148/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5992] close(5 [pid 5991] <... ftruncate resumed>) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 5991] exit_group(0 [pid 5077] getdents64(3, [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5993] <... open resumed>) = 5 [pid 5991] <... exit_group resumed>) = ? [pid 5076] newfstatat(AT_FDCWD, "./151/bus", [pid 5073] newfstatat(AT_FDCWD, "./148/bus", [pid 5992] <... close resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5993] ftruncate(5, 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./148/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5993] <... ftruncate resumed>) = 0 [pid 5077] close(3 [pid 5076] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5992] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5991] +++ exited with 0 +++ [pid 5077] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./148/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5993] exit_group(0 [pid 5077] rmdir("./150" [pid 5076] openat(AT_FDCWD, "./151/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... openat resumed>) = 4 [pid 5993] <... exit_group resumed>) = ? [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5991, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5076] <... openat resumed>) = 4 [pid 5073] newfstatat(4, "", [pid 5993] +++ exited with 0 +++ [pid 5992] <... open resumed>) = 5 [pid 5078] umount2("./150", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... rmdir resumed>) = 0 [pid 5076] newfstatat(4, "", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, [pid 5992] ftruncate(5, 0 [pid 5078] openat(AT_FDCWD, "./150", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5993, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5992] <... ftruncate resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5077] mkdir("./151", 0777 [pid 5076] getdents64(4, [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 5073] getdents64(4, [pid 5078] newfstatat(3, "", [pid 5992] exit_group(0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] <... restart_syscall resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, [pid 5073] close(4 [pid 5992] <... exit_group resumed>) = ? [pid 5078] getdents64(3, [pid 5077] <... mkdir resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] <... close resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5076] close(4 [pid 5078] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... close resumed>) = 0 [pid 5073] rmdir("./148/bus" [pid 5076] rmdir("./151/bus" [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] <... rmdir resumed>) = 0 [pid 5075] umount2("./148", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... rmdir resumed>) = 0 [pid 5073] umount2("./148/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... openat resumed>) = 3 [pid 5992] +++ exited with 0 +++ [pid 5078] <... umount2 resumed>) = 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5076] umount2("./151/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./148", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5992, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5073] newfstatat(AT_FDCWD, "./148/binderfs", [pid 5078] newfstatat(AT_FDCWD, "./150/bus", [pid 5076] newfstatat(AT_FDCWD, "./151/binderfs", [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5078] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] newfstatat(3, "", [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] unlink("./151/binderfs" [pid 5074] umount2("./148", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] unlink("./148/binderfs" [pid 5078] openat(AT_FDCWD, "./150/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... unlink resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... openat resumed>) = 4 [pid 5076] getdents64(3, [pid 5075] getdents64(3, [pid 5074] openat(AT_FDCWD, "./148", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... unlink resumed>) = 0 [pid 5078] newfstatat(4, "", [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] <... openat resumed>) = 3 [pid 5073] getdents64(3, [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] newfstatat(3, "", [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] umount2("./148/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3 [pid 5074] getdents64(3, [pid 5073] close(3 [pid 5078] getdents64(4, [pid 5076] <... close resumed>) = 0 [pid 5076] rmdir("./151" [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] <... rmdir resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5078] getdents64(4, [pid 5074] umount2("./148/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] rmdir("./148" [pid 5078] close(4 [pid 5076] mkdir("./152", 0777 [pid 5073] <... rmdir resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5073] mkdir("./149", 0777 [pid 5078] rmdir("./150/bus" [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] umount2("./148/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./148/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... mkdir resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./148/bus", [pid 5074] newfstatat(AT_FDCWD, "./148/bus", [pid 5078] <... rmdir resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] umount2("./150/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./148/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./148/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] newfstatat(AT_FDCWD, "./150/binderfs", [pid 5073] <... openat resumed>) = 3 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5078] unlink("./150/binderfs") = 0 [pid 5075] openat(AT_FDCWD, "./148/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] openat(AT_FDCWD, "./148/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... openat resumed>) = 4 [pid 5074] <... openat resumed>) = 4 [pid 5075] newfstatat(4, "", [pid 5078] getdents64(3, [pid 5077] <... ioctl resumed>) = 0 [pid 5074] newfstatat(4, "", [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] close(3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] close(3 [pid 5077] <... close resumed>) = 0 [pid 5075] getdents64(4, [pid 5074] getdents64(4, [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5078] <... close resumed>) = 0 [pid 5075] getdents64(4, [pid 5074] getdents64(4, [pid 5078] rmdir("./150") = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5994 attached [pid 5075] close(4 [pid 5074] close(4 [pid 5994] set_robust_list(0x55556e32a660, 24) = 0 [pid 5075] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5075] rmdir("./148/bus" [pid 5074] rmdir("./148/bus" [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5078] mkdir("./151", 0777 [pid 5075] umount2("./148/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./148/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... mkdir resumed>) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 5994 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./148/binderfs", [pid 5074] newfstatat(AT_FDCWD, "./148/binderfs", [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./148/binderfs" [pid 5074] unlink("./148/binderfs" [pid 5994] chdir("./151" [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... unlink resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5994] <... chdir resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5075] getdents64(3, [pid 5994] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5074] getdents64(3, [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5994] <... prctl resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5994] setpgid(0, 0 [pid 5075] close(3 [pid 5074] close(3 [pid 5994] <... setpgid resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 5994] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] <... ioctl resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5073] close(3 [pid 5075] rmdir("./148" [pid 5073] <... close resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] mkdir("./149", 0777 [pid 5074] rmdir("./148" [pid 5076] close(3 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] mkdir("./149", 0777 [pid 5994] <... openat resumed>) = 3 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] <... mkdir resumed>) = 0 [pid 5994] write(3, "1000", 4 [pid 5075] <... openat resumed>) = 3 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5994] <... write resumed>) = 4 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5994] close(3 [pid 5074] <... openat resumed>) = 3 [pid 5994] <... close resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 5996 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5994] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 5995 ./strace-static-x86_64: Process 5996 attached [pid 5996] set_robust_list(0x55556e32a660, 24 [pid 5994] memfd_create("syzkaller", 0./strace-static-x86_64: Process 5995 attached [pid 5996] <... set_robust_list resumed>) = 0 [pid 5994] <... memfd_create resumed>) = 3 [pid 5995] set_robust_list(0x55556e32a660, 24 [pid 5996] chdir("./152" [pid 5078] <... ioctl resumed>) = 0 [pid 5995] <... set_robust_list resumed>) = 0 [pid 5996] <... chdir resumed>) = 0 [pid 5995] chdir("./149" [pid 5996] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5995] <... chdir resumed>) = 0 [pid 5996] <... prctl resumed>) = 0 [pid 5995] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5996] setpgid(0, 0 [pid 5994] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5996] <... setpgid resumed>) = 0 [pid 5995] setpgid(0, 0 [pid 5994] <... mmap resumed>) = 0x7f0356e00000 [pid 5996] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5078] close(3 [pid 5995] <... setpgid resumed>) = 0 [pid 5996] <... openat resumed>) = 3 [pid 5078] <... close resumed>) = 0 [pid 5996] write(3, "1000", 4 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5996] <... write resumed>) = 4 ./strace-static-x86_64: Process 5997 attached [pid 5995] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5996] close(3 [pid 5997] set_robust_list(0x55556e32a660, 24 [pid 5995] <... openat resumed>) = 3 [pid 5996] <... close resumed>) = 0 [pid 5994] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 5997 [pid 5995] write(3, "1000", 4 [pid 5996] symlink("/dev/binderfs", "./binderfs" [pid 5997] <... set_robust_list resumed>) = 0 [pid 5997] chdir("./151") = 0 [pid 5995] <... write resumed>) = 4 [pid 5996] <... symlink resumed>) = 0 [pid 5997] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5995] close(3 [pid 5996] memfd_create("syzkaller", 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5996] <... memfd_create resumed>) = 3 [pid 5996] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5995] <... close resumed>) = 0 [pid 5997] <... prctl resumed>) = 0 [pid 5995] symlink("/dev/binderfs", "./binderfs" [pid 5996] <... mmap resumed>) = 0x7f0356e00000 [pid 5997] setpgid(0, 0 [pid 5995] <... symlink resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5997] <... setpgid resumed>) = 0 [pid 5997] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5995] memfd_create("syzkaller", 0 [pid 5997] <... openat resumed>) = 3 [pid 5997] write(3, "1000", 4 [pid 5075] close(3 [pid 5996] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5997] <... write resumed>) = 4 [pid 5995] <... memfd_create resumed>) = 3 [pid 5075] <... close resumed>) = 0 [pid 5997] close(3) = 0 [pid 5997] symlink("/dev/binderfs", "./binderfs" [pid 5995] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5997] <... symlink resumed>) = 0 [pid 5997] memfd_create("syzkaller", 0 [pid 5995] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] close(3 [pid 5997] <... memfd_create resumed>) = 3 [pid 5074] <... close resumed>) = 0 [pid 5997] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5998 attached [pid 5997] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5998] set_robust_list(0x55556e32a660, 24 [pid 5994] <... write resumed>) = 524288 [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 5998 [pid 5995] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5994] munmap(0x7f0356e00000, 138412032 [pid 5998] <... set_robust_list resumed>) = 0 [pid 5998] chdir("./149" [pid 5994] <... munmap resumed>) = 0 [pid 5998] <... chdir resumed>) = 0 [pid 5998] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 5999 ./strace-static-x86_64: Process 5999 attached [pid 5998] <... prctl resumed>) = 0 [pid 5996] <... write resumed>) = 524288 [pid 5994] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5999] set_robust_list(0x55556e32a660, 24 [pid 5998] setpgid(0, 0 [pid 5997] <... write resumed>) = 524288 [pid 5995] <... write resumed>) = 524288 [pid 5999] <... set_robust_list resumed>) = 0 [pid 5998] <... setpgid resumed>) = 0 [pid 5994] <... openat resumed>) = 4 [pid 5998] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5999] chdir("./149" [pid 5998] <... openat resumed>) = 3 [pid 5994] ioctl(4, LOOP_SET_FD, 3 [pid 5999] <... chdir resumed>) = 0 [pid 5998] write(3, "1000", 4 [pid 5999] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5996] munmap(0x7f0356e00000, 138412032 [pid 5998] <... write resumed>) = 4 [pid 5998] close(3 [pid 5999] setpgid(0, 0 [pid 5998] <... close resumed>) = 0 [pid 5996] <... munmap resumed>) = 0 [pid 5999] <... setpgid resumed>) = 0 [pid 5998] symlink("/dev/binderfs", "./binderfs" [pid 5996] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5999] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5998] <... symlink resumed>) = 0 [pid 5997] munmap(0x7f0356e00000, 138412032 [pid 5996] <... openat resumed>) = 4 [pid 5999] <... openat resumed>) = 3 [pid 5998] memfd_create("syzkaller", 0 [pid 5997] <... munmap resumed>) = 0 [pid 5996] ioctl(4, LOOP_SET_FD, 3 [pid 5999] write(3, "1000", 4 [pid 5998] <... memfd_create resumed>) = 3 [pid 5997] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5995] munmap(0x7f0356e00000, 138412032 [pid 5998] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5997] <... openat resumed>) = 4 [pid 5998] <... mmap resumed>) = 0x7f0356e00000 [pid 5997] ioctl(4, LOOP_SET_FD, 3 [pid 5999] <... write resumed>) = 4 [pid 5995] <... munmap resumed>) = 0 [pid 5996] <... ioctl resumed>) = 0 [pid 5999] close(3 [pid 5995] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5999] <... close resumed>) = 0 [pid 5996] close(3 [pid 5999] symlink("/dev/binderfs", "./binderfs" [pid 5998] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5995] <... openat resumed>) = 4 [pid 5996] <... close resumed>) = 0 [pid 5999] <... symlink resumed>) = 0 [pid 5995] ioctl(4, LOOP_SET_FD, 3 [pid 5996] close(4 [pid 5994] <... ioctl resumed>) = 0 [pid 5996] <... close resumed>) = 0 [pid 5994] close(3 [pid 5996] mkdir("./bus", 0777 [pid 5999] memfd_create("syzkaller", 0 [pid 5996] <... mkdir resumed>) = 0 [pid 5994] <... close resumed>) = 0 [pid 5999] <... memfd_create resumed>) = 3 [pid 5994] close(4 [pid 5999] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5994] <... close resumed>) = 0 [pid 5999] <... mmap resumed>) = 0x7f0356e00000 [pid 5997] <... ioctl resumed>) = 0 [pid 5997] close(3) = 0 [pid 5998] <... write resumed>) = 524288 [pid 5997] close(4 [pid 5996] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5997] <... close resumed>) = 0 [pid 5997] mkdir("./bus", 0777 [pid 5999] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5997] <... mkdir resumed>) = 0 [pid 5997] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5998] munmap(0x7f0356e00000, 138412032 [pid 5994] mkdir("./bus", 0777 [pid 5998] <... munmap resumed>) = 0 [pid 5997] <... mount resumed>) = 0 [pid 5995] <... ioctl resumed>) = 0 [pid 5994] <... mkdir resumed>) = 0 [pid 5996] <... mount resumed>) = 0 [ 167.350659][ T5994] loop4: detected capacity change from 0 to 1024 [ 167.369053][ T5996] loop3: detected capacity change from 0 to 1024 [ 167.375381][ T5997] loop5: detected capacity change from 0 to 1024 [ 167.391036][ T5995] loop0: detected capacity change from 0 to 1024 [pid 5999] <... write resumed>) = 524288 [pid 5997] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5995] close(3 [pid 5996] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5994] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5998] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5997] <... openat resumed>) = 3 [pid 5995] <... close resumed>) = 0 [pid 5997] chdir("./bus" [pid 5995] close(4 [pid 5998] <... openat resumed>) = 4 [pid 5997] <... chdir resumed>) = 0 [pid 5995] <... close resumed>) = 0 [pid 5998] ioctl(4, LOOP_SET_FD, 3 [pid 5997] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5995] mkdir("./bus", 0777 [pid 5997] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5997] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5997] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5999] munmap(0x7f0356e00000, 138412032 [pid 5998] <... ioctl resumed>) = 0 [pid 5995] <... mkdir resumed>) = 0 [pid 5996] <... openat resumed>) = 3 [pid 5994] <... mount resumed>) = 0 [pid 5999] <... munmap resumed>) = 0 [pid 5998] close(3 [pid 5995] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5996] chdir("./bus" [pid 5994] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5998] <... close resumed>) = 0 [pid 5996] <... chdir resumed>) = 0 [pid 5994] <... openat resumed>) = 3 [pid 5999] <... openat resumed>) = 4 [pid 5998] close(4 [pid 5997] <... creat resumed>) = 4 [pid 5996] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5994] chdir("./bus" [pid 5999] ioctl(4, LOOP_SET_FD, 3 [pid 5998] <... close resumed>) = 0 [pid 5996] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5994] <... chdir resumed>) = 0 [pid 5998] mkdir("./bus", 0777 [pid 5996] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5994] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5997] rename("./bus", "./file2" [pid 5994] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5998] <... mkdir resumed>) = 0 [pid 5996] <... symlink resumed>) = 0 [pid 5994] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5998] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5997] <... rename resumed>) = -1 EEXIST (File exists) [pid 5997] memfd_create("syzkaller", 0 [pid 5996] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5997] <... memfd_create resumed>) = 5 [pid 5997] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5997] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5999] <... ioctl resumed>) = 0 [pid 5999] close(3 [pid 5998] <... mount resumed>) = 0 [pid 5995] <... mount resumed>) = 0 [pid 5999] <... close resumed>) = 0 [pid 5998] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5995] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5996] <... creat resumed>) = 4 [pid 5994] <... symlink resumed>) = 0 [pid 5999] close(4 [pid 5998] <... openat resumed>) = 3 [pid 5995] <... openat resumed>) = 3 [pid 5996] rename("./bus", "./file2" [pid 5994] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5999] <... close resumed>) = 0 [pid 5998] chdir("./bus" [pid 5995] chdir("./bus" [pid 5998] <... chdir resumed>) = 0 [pid 5998] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5999] mkdir("./bus", 0777 [pid 5998] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5995] <... chdir resumed>) = 0 [pid 5996] <... rename resumed>) = -1 EEXIST (File exists) [pid 5999] <... mkdir resumed>) = 0 [pid 5998] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5995] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5996] memfd_create("syzkaller", 0 [pid 5999] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5998] <... symlink resumed>) = 0 [pid 5998] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5996] <... memfd_create resumed>) = 5 [pid 5994] <... creat resumed>) = 4 [pid 5995] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5995] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5996] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5994] rename("./bus", "./file2" [pid 5997] <... write resumed>) = 524288 [pid 5996] <... mmap resumed>) = 0x7f0356e00000 [pid 5998] <... creat resumed>) = 4 [pid 5998] rename("./bus", "./file2" [pid 5997] munmap(0x7f0356e00000, 138412032 [pid 5995] <... symlink resumed>) = 0 [pid 5994] <... rename resumed>) = -1 EEXIST (File exists) [pid 5998] <... rename resumed>) = -1 EEXIST (File exists) [pid 5997] <... munmap resumed>) = 0 [pid 5994] memfd_create("syzkaller", 0 [pid 5998] memfd_create("syzkaller", 0 [pid 5995] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5998] <... memfd_create resumed>) = 5 [ 167.426001][ T5998] loop2: detected capacity change from 0 to 1024 [ 167.450525][ T5999] loop1: detected capacity change from 0 to 1024 [pid 5997] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5994] <... memfd_create resumed>) = 5 [pid 5998] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5997] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5994] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5998] <... mmap resumed>) = 0x7f0356e00000 [pid 5996] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5994] <... mmap resumed>) = 0x7f0356e00000 [pid 5998] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5997] close(5) = 0 [pid 5999] <... mount resumed>) = 0 [pid 5999] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5994] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5995] <... creat resumed>) = 4 [pid 5999] chdir("./bus" [pid 5995] rename("./bus", "./file2" [pid 5999] <... chdir resumed>) = 0 [pid 5999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5995] <... rename resumed>) = -1 EEXIST (File exists) [pid 5999] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5995] memfd_create("syzkaller", 0 [pid 5999] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5997] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5995] <... memfd_create resumed>) = 5 [pid 5996] <... write resumed>) = 524288 [pid 5995] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5996] munmap(0x7f0356e00000, 138412032 [pid 5997] <... open resumed>) = 5 [pid 5995] <... mmap resumed>) = 0x7f0356e00000 [pid 5999] <... symlink resumed>) = 0 [pid 5998] <... write resumed>) = 524288 [pid 5997] ftruncate(5, 0) = 0 [pid 5996] <... munmap resumed>) = 0 [pid 5999] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5997] exit_group(0 [pid 5998] munmap(0x7f0356e00000, 138412032 [pid 5994] <... write resumed>) = 524288 [pid 5997] <... exit_group resumed>) = ? [pid 5998] <... munmap resumed>) = 0 [pid 5996] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5994] munmap(0x7f0356e00000, 138412032 [pid 5995] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5996] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5994] <... munmap resumed>) = 0 [pid 5998] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5999] <... creat resumed>) = 4 [pid 5998] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5996] close(5 [pid 5994] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5999] rename("./bus", "./file2" [pid 5998] close(5 [pid 5997] +++ exited with 0 +++ [pid 5996] <... close resumed>) = 0 [pid 5994] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5997, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5078] umount2("./151", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./151", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5994] close(5 [pid 5999] <... rename resumed>) = -1 EEXIST (File exists) [pid 5998] <... close resumed>) = 0 [pid 5998] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5994] <... close resumed>) = 0 [pid 5078] newfstatat(3, "", [pid 5999] memfd_create("syzkaller", 0) = 5 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5999] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] getdents64(3, [pid 5999] <... mmap resumed>) = 0x7f0356e00000 [pid 5998] <... open resumed>) = 5 [pid 5996] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5998] ftruncate(5, 0 [pid 5078] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5998] <... ftruncate resumed>) = 0 [pid 5998] exit_group(0 [pid 5995] <... write resumed>) = 524288 [pid 5998] <... exit_group resumed>) = ? [pid 5994] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5999] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5995] munmap(0x7f0356e00000, 138412032 [pid 5996] <... open resumed>) = 5 [pid 5998] +++ exited with 0 +++ [pid 5995] <... munmap resumed>) = 0 [pid 5995] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5996] ftruncate(5, 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5998, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5999] <... write resumed>) = 524288 [pid 5995] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5996] <... ftruncate resumed>) = 0 [pid 5994] <... open resumed>) = 5 [pid 5078] <... umount2 resumed>) = 0 [pid 5999] munmap(0x7f0356e00000, 138412032 [pid 5995] close(5 [pid 5994] ftruncate(5, 0 [pid 5075] umount2("./149", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./149", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5995] <... close resumed>) = 0 [pid 5078] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... openat resumed>) = 3 [pid 5996] exit_group(0 [pid 5994] <... ftruncate resumed>) = 0 [pid 5075] newfstatat(3, "", [pid 5996] <... exit_group resumed>) = ? [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5999] <... munmap resumed>) = 0 [pid 5075] getdents64(3, [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] newfstatat(AT_FDCWD, "./151/bus", [pid 5075] umount2("./149/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5994] exit_group(0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5994] <... exit_group resumed>) = ? [pid 5999] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5996] +++ exited with 0 +++ [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5999] close(5 [pid 5994] +++ exited with 0 +++ [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5996, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] <... umount2 resumed>) = 0 [pid 5999] <... close resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./151/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5994, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5077] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5078] <... openat resumed>) = 4 [pid 5076] umount2("./152", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5995] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./152", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] umount2("./151", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... openat resumed>) = 3 [pid 5078] newfstatat(4, "", [pid 5999] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(3, "", [pid 5075] umount2("./149/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5995] <... open resumed>) = 5 [pid 5078] getdents64(4, [pid 5995] ftruncate(5, 0 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5995] <... ftruncate resumed>) = 0 [pid 5078] getdents64(4, [pid 5075] newfstatat(AT_FDCWD, "./149/bus", [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] openat(AT_FDCWD, "./151", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5999] <... open resumed>) = 5 [pid 5995] exit_group(0 [pid 5078] close(4 [pid 5077] <... openat resumed>) = 3 [pid 5076] getdents64(3, [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5995] <... exit_group resumed>) = ? [pid 5078] <... close resumed>) = 0 [pid 5075] umount2("./149/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] newfstatat(3, "", [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5078] rmdir("./151/bus" [pid 5999] ftruncate(5, 0 [pid 5076] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5077] getdents64(3, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5999] <... ftruncate resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] openat(AT_FDCWD, "./149/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... openat resumed>) = 4 [pid 5995] +++ exited with 0 +++ [pid 5075] newfstatat(4, "", [pid 5078] umount2("./151/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5995, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5999] exit_group(0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(4, [pid 5078] newfstatat(AT_FDCWD, "./151/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] umount2("./149", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5999] <... exit_group resumed>) = ? [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] unlink("./151/binderfs" [pid 5075] getdents64(4, [pid 5073] openat(AT_FDCWD, "./149", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5078] <... unlink resumed>) = 0 [pid 5075] close(4 [pid 5073] newfstatat(3, "", [pid 5075] <... close resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] rmdir("./149/bus" [pid 5073] getdents64(3, [pid 5078] getdents64(3, [pid 5076] <... umount2 resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] umount2("./149/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./149/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] close(3 [pid 5075] newfstatat(AT_FDCWD, "./149/binderfs", [pid 5078] <... close resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5999] +++ exited with 0 +++ [pid 5078] rmdir("./151" [pid 5075] unlink("./149/binderfs" [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5999, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5078] <... rmdir resumed>) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5076] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... unlink resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] mkdir("./152", 0777 [pid 5076] newfstatat(AT_FDCWD, "./152/bus", [pid 5075] getdents64(3, [pid 5078] <... mkdir resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] close(3 [pid 5078] <... openat resumed>) = 3 [pid 5075] <... close resumed>) = 0 [pid 5073] umount2("./149/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./149", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5076] openat(AT_FDCWD, "./152/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] rmdir("./149" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... openat resumed>) = 4 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./149", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] newfstatat(AT_FDCWD, "./149/bus", [pid 5077] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] newfstatat(4, "", [pid 5075] mkdir("./150", 0777 [pid 5074] <... openat resumed>) = 3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] newfstatat(3, "", [pid 5073] umount2("./149/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] newfstatat(AT_FDCWD, "./151/bus", [pid 5076] getdents64(4, [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] <... openat resumed>) = 3 [pid 5074] getdents64(3, [pid 5073] openat(AT_FDCWD, "./149/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5073] <... openat resumed>) = 4 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] getdents64(4, [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] newfstatat(4, "", [pid 5077] openat(AT_FDCWD, "./151/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] umount2("./149/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] <... openat resumed>) = 4 [pid 5076] close(4 [pid 5073] getdents64(4, [pid 5076] <... close resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] newfstatat(4, "", [pid 5076] rmdir("./152/bus" [pid 5073] getdents64(4, [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] close(4 [pid 5078] <... ioctl resumed>) = 0 [pid 5077] getdents64(4, [pid 5076] <... rmdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5077] getdents64(4, [pid 5073] <... close resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] close(4 [pid 5073] rmdir("./149/bus" [pid 5077] <... close resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5077] rmdir("./151/bus" [pid 5074] umount2("./149/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./149/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] close(3 [pid 5074] umount2("./149/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] <... close resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./149/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] umount2("./149/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] umount2("./152/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... openat resumed>) = 4 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6000 attached [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6000] set_robust_list(0x55556e32a660, 24 [pid 5076] newfstatat(AT_FDCWD, "./152/binderfs", [pid 6000] <... set_robust_list resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] newfstatat(4, "", [pid 5073] newfstatat(AT_FDCWD, "./149/binderfs", [pid 6000] chdir("./152" [pid 5076] unlink("./152/binderfs" [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6000] <... chdir resumed>) = 0 [pid 6000] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] unlink("./149/binderfs" [pid 6000] <... prctl resumed>) = 0 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6000 [pid 5074] getdents64(4, [pid 5073] <... unlink resumed>) = 0 [pid 6000] setpgid(0, 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, [pid 5073] getdents64(3, [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] close(4 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./149/bus" [pid 5073] close(3) = 0 [pid 6000] <... setpgid resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 6000] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5073] rmdir("./149" [pid 6000] <... openat resumed>) = 3 [pid 5075] close(3 [pid 6000] write(3, "1000", 4 [pid 5075] <... close resumed>) = 0 [pid 6000] <... write resumed>) = 4 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6001 attached [pid 6000] close(3 [pid 6001] set_robust_list(0x55556e32a660, 24 [pid 6000] <... close resumed>) = 0 [pid 6001] <... set_robust_list resumed>) = 0 [pid 6000] symlink("/dev/binderfs", "./binderfs" [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6001 [pid 6001] chdir("./150") = 0 [pid 6001] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6001] setpgid(0, 0) = 0 [pid 6001] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6001] write(3, "1000", 4) = 4 [pid 6001] close(3) = 0 [pid 6001] symlink("/dev/binderfs", "./binderfs" [pid 6000] <... symlink resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 6001] <... symlink resumed>) = 0 [pid 6000] memfd_create("syzkaller", 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] getdents64(3, [pid 5074] <... rmdir resumed>) = 0 [pid 5073] mkdir("./150", 0777 [pid 6000] <... memfd_create resumed>) = 3 [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3 [pid 5074] umount2("./149/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... mkdir resumed>) = 0 [pid 5076] rmdir("./152" [pid 5074] newfstatat(AT_FDCWD, "./149/binderfs", [pid 6001] memfd_create("syzkaller", 0 [pid 6000] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] umount2("./151/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] <... rmdir resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] mkdir("./153", 0777 [pid 5074] unlink("./149/binderfs" [pid 6001] <... memfd_create resumed>) = 3 [pid 6000] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... mkdir resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 6001] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] newfstatat(AT_FDCWD, "./151/binderfs", [pid 5074] <... unlink resumed>) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] getdents64(3, [pid 6001] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] unlink("./151/binderfs" [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6001] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6000] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... unlink resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5074] close(3 [pid 5076] <... openat resumed>) = 3 [pid 5074] <... close resumed>) = 0 [pid 5077] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] close(3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5074] rmdir("./149") = 0 [pid 5074] mkdir("./150", 0777 [pid 6001] <... write resumed>) = 524288 [pid 6000] <... write resumed>) = 524288 [pid 5077] <... close resumed>) = 0 [pid 6000] munmap(0x7f0356e00000, 138412032 [pid 5077] rmdir("./151" [pid 6001] munmap(0x7f0356e00000, 138412032 [pid 5077] <... rmdir resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5077] mkdir("./152", 0777 [pid 6001] <... munmap resumed>) = 0 [pid 6000] <... munmap resumed>) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6000] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6000] <... openat resumed>) = 4 [pid 5077] <... openat resumed>) = 3 [pid 6000] ioctl(4, LOOP_SET_FD, 3 [pid 6001] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5074] <... openat resumed>) = 3 [pid 6001] <... openat resumed>) = 4 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6001] ioctl(4, LOOP_SET_FD, 3 [pid 6000] <... ioctl resumed>) = 0 [pid 6000] close(3) = 0 [pid 6000] close(4) = 0 [pid 6000] mkdir("./bus", 0777 [pid 6001] <... ioctl resumed>) = 0 [pid 6000] <... mkdir resumed>) = 0 [pid 6001] close(3 [pid 5073] <... ioctl resumed>) = 0 [pid 6000] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6001] <... close resumed>) = 0 [pid 6001] close(4) = 0 [pid 6001] mkdir("./bus", 0777) = 0 [pid 6001] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6000] <... mount resumed>) = 0 [pid 6000] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5073] close(3 [pid 6000] chdir("./bus") = 0 [pid 5073] <... close resumed>) = 0 [pid 6000] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6000] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6000] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6002 ./strace-static-x86_64: Process 6002 attached [pid 6001] <... mount resumed>) = 0 [pid 6000] <... creat resumed>) = 4 [pid 5076] <... ioctl resumed>) = 0 [ 167.865882][ T6000] loop5: detected capacity change from 0 to 1024 [ 167.869109][ T6001] loop2: detected capacity change from 0 to 1024 [pid 6001] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6002] set_robust_list(0x55556e32a660, 24) = 0 [pid 6000] rename("./bus", "./file2" [pid 6002] chdir("./150" [pid 6001] chdir("./bus" [pid 6002] <... chdir resumed>) = 0 [pid 6002] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6002] setpgid(0, 0) = 0 [pid 6002] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6002] write(3, "1000", 4 [pid 6001] <... chdir resumed>) = 0 [pid 5076] close(3 [pid 6001] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6000] <... rename resumed>) = -1 EEXIST (File exists) [pid 5076] <... close resumed>) = 0 [pid 6002] <... write resumed>) = 4 [pid 6001] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6002] close(3) = 0 [pid 6002] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6002] memfd_create("syzkaller", 0 [pid 6001] <... symlink resumed>) = 0 [pid 6000] memfd_create("syzkaller", 0./strace-static-x86_64: Process 6003 attached [pid 6002] <... memfd_create resumed>) = 3 [pid 6000] <... memfd_create resumed>) = 5 [pid 6003] set_robust_list(0x55556e32a660, 24 [pid 6002] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6000] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... ioctl resumed>) = 0 [pid 6003] <... set_robust_list resumed>) = 0 [pid 6002] <... mmap resumed>) = 0x7f0356e00000 [pid 6000] <... mmap resumed>) = 0x7f0356e00000 [pid 6003] chdir("./153" [pid 6001] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6000] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... ioctl resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6003 [pid 5074] close(3 [pid 6003] <... chdir resumed>) = 0 [pid 6003] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6002] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... close resumed>) = 0 [pid 5077] close(3 [pid 6003] <... prctl resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6003] setpgid(0, 0) = 0 [pid 6003] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6004 attached [pid 6001] <... creat resumed>) = 4 [pid 6004] set_robust_list(0x55556e32a660, 24 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6004 [pid 6001] rename("./bus", "./file2" [pid 6003] write(3, "1000", 4./strace-static-x86_64: Process 6005 attached ) = 4 [pid 6005] set_robust_list(0x55556e32a660, 24 [pid 6003] close(3 [pid 6005] <... set_robust_list resumed>) = 0 [pid 6003] <... close resumed>) = 0 [pid 6005] chdir("./152" [pid 6003] symlink("/dev/binderfs", "./binderfs" [pid 6005] <... chdir resumed>) = 0 [pid 6003] <... symlink resumed>) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6005 [pid 6005] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6004] <... set_robust_list resumed>) = 0 [pid 6003] memfd_create("syzkaller", 0 [pid 6005] setpgid(0, 0) = 0 [pid 6005] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6004] chdir("./150" [pid 6005] <... openat resumed>) = 3 [pid 6004] <... chdir resumed>) = 0 [pid 6003] <... memfd_create resumed>) = 3 [pid 6002] <... write resumed>) = 524288 [pid 6001] <... rename resumed>) = -1 EEXIST (File exists) [pid 6005] write(3, "1000", 4 [pid 6003] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6001] memfd_create("syzkaller", 0 [pid 6000] <... write resumed>) = 524288 [pid 6005] <... write resumed>) = 4 [pid 6003] <... mmap resumed>) = 0x7f0356e00000 [pid 6005] close(3 [pid 6004] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6003] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6002] munmap(0x7f0356e00000, 138412032 [pid 6001] <... memfd_create resumed>) = 5 [pid 6005] <... close resumed>) = 0 [pid 6004] <... prctl resumed>) = 0 [pid 6002] <... munmap resumed>) = 0 [pid 6001] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6000] munmap(0x7f0356e00000, 138412032 [pid 6005] symlink("/dev/binderfs", "./binderfs" [pid 6004] setpgid(0, 0 [pid 6002] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6001] <... mmap resumed>) = 0x7f0356e00000 [pid 6000] <... munmap resumed>) = 0 [pid 6005] <... symlink resumed>) = 0 [pid 6004] <... setpgid resumed>) = 0 [pid 6002] <... openat resumed>) = 4 [pid 6005] memfd_create("syzkaller", 0 [pid 6004] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6002] ioctl(4, LOOP_SET_FD, 3 [pid 6000] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6005] <... memfd_create resumed>) = 3 [pid 6004] <... openat resumed>) = 3 [pid 6002] <... ioctl resumed>) = 0 [pid 6001] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6000] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6005] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6005] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6004] write(3, "1000", 4 [pid 6001] <... write resumed>) = 524288 [pid 6000] close(5 [pid 6004] <... write resumed>) = 4 [pid 6004] close(3 [pid 6000] <... close resumed>) = 0 [pid 6004] <... close resumed>) = 0 [pid 6004] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6001] munmap(0x7f0356e00000, 138412032 [pid 6005] <... write resumed>) = 524288 [pid 6004] memfd_create("syzkaller", 0 [pid 6003] <... write resumed>) = 524288 [pid 6002] close(3 [pid 6000] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6004] <... memfd_create resumed>) = 3 [pid 6003] munmap(0x7f0356e00000, 138412032 [pid 6005] munmap(0x7f0356e00000, 138412032 [pid 6004] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6003] <... munmap resumed>) = 0 [pid 6002] <... close resumed>) = 0 [pid 6001] <... munmap resumed>) = 0 [pid 6004] <... mmap resumed>) = 0x7f0356e00000 [pid 6002] close(4 [pid 6003] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6005] <... munmap resumed>) = 0 [pid 6004] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6002] <... close resumed>) = 0 [pid 6001] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6000] <... open resumed>) = 5 [ 168.008750][ T6002] loop0: detected capacity change from 0 to 1024 [pid 6005] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6003] <... openat resumed>) = 4 [pid 6002] mkdir("./bus", 0777 [pid 6001] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6001] close(5 [pid 6005] <... openat resumed>) = 4 [pid 6003] ioctl(4, LOOP_SET_FD, 3 [pid 6002] <... mkdir resumed>) = 0 [pid 6000] ftruncate(5, 0 [pid 6002] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6000] <... ftruncate resumed>) = 0 [pid 6005] ioctl(4, LOOP_SET_FD, 3 [pid 6000] exit_group(0 [pid 6004] <... write resumed>) = 524288 [pid 6002] <... mount resumed>) = 0 [pid 6000] <... exit_group resumed>) = ? [pid 6002] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6000] +++ exited with 0 +++ [pid 6002] <... openat resumed>) = 3 [pid 6004] munmap(0x7f0356e00000, 138412032 [pid 6002] chdir("./bus" [pid 6004] <... munmap resumed>) = 0 [pid 6002] <... chdir resumed>) = 0 [pid 6001] <... close resumed>) = 0 [pid 6004] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6002] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6000, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6004] <... openat resumed>) = 4 [pid 6002] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] restart_syscall(<... resuming interrupted clone ...> [pid 6004] ioctl(4, LOOP_SET_FD, 3 [pid 6002] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] <... restart_syscall resumed>) = 0 [pid 6001] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] umount2("./152", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./152", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5078] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6003] <... ioctl resumed>) = 0 [pid 5078] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6003] close(3) = 0 [pid 6005] <... ioctl resumed>) = 0 [pid 6003] close(4 [pid 6005] close(3 [pid 6003] <... close resumed>) = 0 [pid 6003] mkdir("./bus", 0777 [pid 6005] <... close resumed>) = 0 [pid 6005] close(4 [pid 6001] <... open resumed>) = 5 [pid 6005] <... close resumed>) = 0 [pid 6003] <... mkdir resumed>) = 0 [pid 6005] mkdir("./bus", 0777 [pid 6003] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6001] ftruncate(5, 0 [pid 6005] <... mkdir resumed>) = 0 [pid 6001] <... ftruncate resumed>) = 0 [pid 6005] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6002] <... symlink resumed>) = 0 [pid 6001] exit_group(0) = ? [pid 6002] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6001] +++ exited with 0 +++ [pid 5078] <... umount2 resumed>) = 0 [pid 6004] <... ioctl resumed>) = 0 [pid 6002] <... creat resumed>) = 4 [pid 5078] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6005] <... mount resumed>) = 0 [pid 6004] close(3 [pid 6002] rename("./bus", "./file2" [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6001, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6005] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6004] <... close resumed>) = 0 [pid 6003] <... mount resumed>) = 0 [pid 6002] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] newfstatat(AT_FDCWD, "./152/bus", [pid 5075] umount2("./150", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6005] <... openat resumed>) = 3 [pid 6004] close(4 [pid 6003] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6002] memfd_create("syzkaller", 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6005] chdir("./bus" [pid 6004] <... close resumed>) = 0 [pid 6003] <... openat resumed>) = 3 [pid 6002] <... memfd_create resumed>) = 5 [pid 5078] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "./150", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6005] <... chdir resumed>) = 0 [pid 6004] mkdir("./bus", 0777 [pid 6003] chdir("./bus" [pid 6002] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... openat resumed>) = 3 [pid 6005] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6003] <... chdir resumed>) = 0 [pid 6002] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] newfstatat(3, "", [pid 6005] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6004] <... mkdir resumed>) = 0 [pid 6003] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5078] openat(AT_FDCWD, "./152/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6005] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6003] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] getdents64(3, [pid 6004] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5078] <... openat resumed>) = 4 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6003] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] newfstatat(4, "", [pid 5075] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6005] <... symlink resumed>) = 0 [pid 6003] <... symlink resumed>) = 0 [pid 6002] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] getdents64(4, [pid 6005] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [ 168.073222][ T6003] loop3: detected capacity change from 0 to 1024 [ 168.081571][ T6005] loop4: detected capacity change from 0 to 1024 [ 168.098688][ T6004] loop1: detected capacity change from 0 to 1024 [pid 6003] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, [pid 6005] <... creat resumed>) = 4 [pid 6003] <... creat resumed>) = 4 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5078] close(4 [pid 6005] rename("./bus", "./file2" [pid 6004] <... mount resumed>) = 0 [pid 6003] rename("./bus", "./file2" [pid 5078] <... close resumed>) = 0 [pid 6005] <... rename resumed>) = -1 EEXIST (File exists) [pid 6004] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6003] <... rename resumed>) = -1 EEXIST (File exists) [pid 6002] <... write resumed>) = 524288 [pid 5078] rmdir("./152/bus" [pid 5075] <... umount2 resumed>) = 0 [pid 6005] memfd_create("syzkaller", 0) = 5 [pid 6003] memfd_create("syzkaller", 0 [pid 6005] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6004] <... openat resumed>) = 3 [pid 5078] <... rmdir resumed>) = 0 [pid 5075] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6005] <... mmap resumed>) = 0x7f0356e00000 [pid 6004] chdir("./bus" [pid 6003] <... memfd_create resumed>) = 5 [pid 6002] munmap(0x7f0356e00000, 138412032 [pid 5078] umount2("./152/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./150/bus", [pid 6005] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6004] <... chdir resumed>) = 0 [pid 6002] <... munmap resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6004] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5078] newfstatat(AT_FDCWD, "./152/binderfs", [pid 6004] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6003] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6004] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6003] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6002] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5075] openat(AT_FDCWD, "./150/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6002] close(5 [pid 5078] unlink("./152/binderfs" [pid 5075] <... openat resumed>) = 4 [pid 5075] newfstatat(4, "", [pid 5078] <... unlink resumed>) = 0 [pid 6004] <... symlink resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(3, [pid 5075] getdents64(4, [pid 6003] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] close(4 [pid 6004] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./150/bus" [pid 5078] close(3 [pid 5075] <... rmdir resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 6004] <... creat resumed>) = 4 [pid 5078] rmdir("./152" [pid 5075] umount2("./150/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./150/binderfs", [pid 5078] <... rmdir resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./150/binderfs" [pid 6005] <... write resumed>) = 524288 [pid 6004] rename("./bus", "./file2" [pid 6002] <... close resumed>) = 0 [pid 5078] mkdir("./153", 0777 [pid 5075] <... unlink resumed>) = 0 [pid 5075] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 6002] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5075] close(3) = 0 [pid 5075] rmdir("./150" [pid 6004] <... rename resumed>) = -1 EEXIST (File exists) [pid 5075] <... rmdir resumed>) = 0 [pid 6005] munmap(0x7f0356e00000, 138412032 [pid 5075] mkdir("./151", 0777 [pid 6005] <... munmap resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 6004] memfd_create("syzkaller", 0 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 6004] <... memfd_create resumed>) = 5 [pid 6005] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6004] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6005] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6004] <... mmap resumed>) = 0x7f0356e00000 [pid 6003] <... write resumed>) = 524288 [pid 6002] <... open resumed>) = 5 [pid 5075] <... openat resumed>) = 3 [pid 6005] close(5 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6003] munmap(0x7f0356e00000, 138412032 [pid 6002] ftruncate(5, 0 [pid 6003] <... munmap resumed>) = 0 [pid 6002] <... ftruncate resumed>) = 0 [pid 6005] <... close resumed>) = 0 [pid 6002] exit_group(0 [pid 6003] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6003] close(5 [pid 6004] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6003] <... close resumed>) = 0 [pid 6002] <... exit_group resumed>) = ? [pid 6002] +++ exited with 0 +++ [pid 6005] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6002, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5073] umount2("./150", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./150", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6005] <... open resumed>) = 5 [pid 6004] <... write resumed>) = 524288 [pid 6003] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5075] <... ioctl resumed>) = 0 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6005] ftruncate(5, 0) = 0 [pid 6005] exit_group(0) = ? [pid 6005] +++ exited with 0 +++ [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6005, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6004] munmap(0x7f0356e00000, 138412032 [pid 5078] <... ioctl resumed>) = 0 [pid 6003] <... open resumed>) = 5 [pid 6004] <... munmap resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5077] umount2("./152", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] close(3 [pid 6003] ftruncate(5, 0 [pid 5075] close(3 [pid 6004] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6003] <... ftruncate resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... close resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] openat(AT_FDCWD, "./152", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6003] exit_group(0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6006 attached [pid 5077] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6007 attached [pid 6006] set_robust_list(0x55556e32a660, 24 [pid 6004] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6003] <... exit_group resumed>) = ? [pid 5077] newfstatat(3, "", [pid 5073] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6007] set_robust_list(0x55556e32a660, 24 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6007] <... set_robust_list resumed>) = 0 [pid 6006] <... set_robust_list resumed>) = 0 [pid 5077] getdents64(3, [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6007 [pid 5073] newfstatat(AT_FDCWD, "./150/bus", [pid 6007] chdir("./151" [pid 6006] chdir("./153" [pid 6004] close(5 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6006 [pid 5077] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6007] <... chdir resumed>) = 0 [pid 6003] +++ exited with 0 +++ [pid 5073] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6007] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6007] <... prctl resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6003, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5073] openat(AT_FDCWD, "./150/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6007] setpgid(0, 0 [pid 6006] <... chdir resumed>) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 6004] <... close resumed>) = 0 [pid 5073] <... openat resumed>) = 4 [pid 6007] <... setpgid resumed>) = 0 [pid 6007] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6007] <... openat resumed>) = 3 [pid 5073] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6007] write(3, "1000", 4 [pid 5073] close(4 [pid 6007] <... write resumed>) = 4 [pid 6006] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6004] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5076] <... restart_syscall resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 6007] close(3 [pid 5077] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] rmdir("./150/bus" [pid 6007] <... close resumed>) = 0 [pid 6006] <... prctl resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... rmdir resumed>) = 0 [pid 6007] symlink("/dev/binderfs", "./binderfs" [pid 6006] setpgid(0, 0 [pid 5077] newfstatat(AT_FDCWD, "./152/bus", [pid 6007] <... symlink resumed>) = 0 [pid 6006] <... setpgid resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./153", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6007] memfd_create("syzkaller", 0 [pid 6006] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5077] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./150/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6007] <... memfd_create resumed>) = 3 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./153", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6007] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6006] <... openat resumed>) = 3 [pid 5077] openat(AT_FDCWD, "./152/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... openat resumed>) = 3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6004] <... open resumed>) = 5 [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6004] ftruncate(5, 0 [pid 5076] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6004] <... ftruncate resumed>) = 0 [pid 5076] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6007] <... mmap resumed>) = 0x7f0356e00000 [pid 6004] exit_group(0 [pid 5077] <... openat resumed>) = 4 [pid 5073] newfstatat(AT_FDCWD, "./150/binderfs", [pid 6006] write(3, "1000", 4 [pid 6004] <... exit_group resumed>) = ? [pid 6006] <... write resumed>) = 4 [pid 5077] newfstatat(4, "", [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6006] close(3) = 0 [pid 6006] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] unlink("./150/binderfs" [pid 6006] memfd_create("syzkaller", 0 [pid 5073] <... unlink resumed>) = 0 [pid 6007] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6004] +++ exited with 0 +++ [pid 5077] getdents64(4, [pid 5076] <... umount2 resumed>) = 0 [pid 6006] <... memfd_create resumed>) = 3 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(3, [pid 6006] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6004, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 6006] <... mmap resumed>) = 0x7f0356e00000 [pid 5074] <... restart_syscall resumed>) = 0 [pid 6006] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] umount2("./150", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5077] getdents64(4, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./150", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... openat resumed>) = 3 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] close(3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(3, "", [pid 5076] newfstatat(AT_FDCWD, "./153/bus", [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] close(4 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... close resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5074] getdents64(3, [pid 5077] rmdir("./152/bus" [pid 5076] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] rmdir("./150" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6007] <... write resumed>) = 524288 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./153/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... rmdir resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 6007] munmap(0x7f0356e00000, 138412032 [pid 5077] umount2("./152/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] newfstatat(4, "", [pid 5074] <... umount2 resumed>) = 0 [pid 5073] mkdir("./151", 0777 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] close(4 [pid 5073] <... openat resumed>) = 3 [pid 5076] <... close resumed>) = 0 [pid 6007] <... munmap resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./152/binderfs", [pid 5076] rmdir("./153/bus" [pid 6006] <... write resumed>) = 524288 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6007] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5077] unlink("./152/binderfs" [pid 5074] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./153/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... unlink resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6007] <... openat resumed>) = 4 [pid 6006] munmap(0x7f0356e00000, 138412032 [pid 5076] newfstatat(AT_FDCWD, "./153/binderfs", [pid 5074] newfstatat(AT_FDCWD, "./150/bus", [pid 5077] getdents64(3, [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./153/binderfs" [pid 6007] ioctl(4, LOOP_SET_FD, 3 [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6006] <... munmap resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6007] <... ioctl resumed>) = 0 [pid 6006] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] close(3 [pid 5076] <... unlink resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./150/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6007] close(3 [pid 6006] <... openat resumed>) = 4 [pid 5077] <... close resumed>) = 0 [pid 5076] getdents64(3, [pid 5074] <... openat resumed>) = 4 [pid 6007] <... close resumed>) = 0 [pid 5074] newfstatat(4, "", [pid 6007] close(4 [pid 6006] ioctl(4, LOOP_SET_FD, 3 [pid 5077] rmdir("./152" [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6007] <... close resumed>) = 0 [pid 5076] close(3 [pid 5077] <... rmdir resumed>) = 0 [pid 6007] mkdir("./bus", 0777 [pid 6006] <... ioctl resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5074] getdents64(4, [pid 5076] rmdir("./153") = 0 [pid 5076] mkdir("./154", 0777 [pid 6007] <... mkdir resumed>) = 0 [pid 6006] close(3 [pid 5077] mkdir("./153", 0777 [pid 5076] <... mkdir resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6007] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6006] <... close resumed>) = 0 [pid 5074] getdents64(4, [pid 6006] close(4 [pid 5077] <... mkdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6006] <... close resumed>) = 0 [pid 5074] close(4 [pid 6006] mkdir("./bus", 0777 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] <... openat resumed>) = 3 [pid 5074] <... close resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5074] rmdir("./150/bus" [pid 6006] <... mkdir resumed>) = 0 [pid 6006] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5074] <... rmdir resumed>) = 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5074] umount2("./150/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./150/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./150/binderfs") = 0 [pid 5074] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 5074] rmdir("./150") = 0 [pid 5073] <... ioctl resumed>) = 0 [ 168.388681][ T6007] loop2: detected capacity change from 0 to 1024 [ 168.402403][ T6006] loop5: detected capacity change from 0 to 1024 [pid 5074] mkdir("./151", 0777) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6006] <... mount resumed>) = 0 [pid 6007] <... mount resumed>) = 0 [pid 6006] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6007] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6006] <... openat resumed>) = 3 [pid 5073] close(3 [pid 6006] chdir("./bus") = 0 [pid 6007] <... openat resumed>) = 3 [pid 6006] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] <... close resumed>) = 0 [pid 6006] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6008 attached [pid 6007] chdir("./bus" [pid 6006] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5077] <... ioctl resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5077] close(3) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6009 attached [pid 6008] set_robust_list(0x55556e32a660, 24 [pid 6007] <... chdir resumed>) = 0 [pid 6006] <... symlink resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6008 [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6009 [pid 5076] close(3 [pid 6008] <... set_robust_list resumed>) = 0 [pid 6007] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6006] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5076] <... close resumed>) = 0 [pid 6008] chdir("./151" [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6008] <... chdir resumed>) = 0 [pid 6007] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6006] <... creat resumed>) = 4 [pid 6009] set_robust_list(0x55556e32a660, 24 [pid 6008] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6007] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6006] rename("./bus", "./file2" [pid 6008] <... prctl resumed>) = 0 [pid 6009] <... set_robust_list resumed>) = 0 [pid 6009] chdir("./153" [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6010 [pid 6008] setpgid(0, 0 [pid 6009] <... chdir resumed>) = 0 [pid 6007] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 6010 attached [pid 6009] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6008] <... setpgid resumed>) = 0 [pid 6007] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6006] <... rename resumed>) = -1 EEXIST (File exists) [pid 6010] set_robust_list(0x55556e32a660, 24) = 0 [pid 6010] chdir("./154" [pid 6009] <... prctl resumed>) = 0 [pid 6008] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6006] memfd_create("syzkaller", 0 [pid 5074] close(3 [pid 6009] setpgid(0, 0 [pid 6006] <... memfd_create resumed>) = 5 [pid 6009] <... setpgid resumed>) = 0 [pid 6008] <... openat resumed>) = 3 [pid 6006] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6010] <... chdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 6009] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6010] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6009] <... openat resumed>) = 3 [pid 6008] write(3, "1000", 4 [pid 6007] <... creat resumed>) = 4 [pid 6006] <... mmap resumed>) = 0x7f0356e00000 [pid 6009] write(3, "1000", 4 [pid 6010] <... prctl resumed>) = 0 [pid 6009] <... write resumed>) = 4 [pid 6009] close(3) = 0 [pid 6009] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6009] memfd_create("syzkaller", 0 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6011 [pid 6009] <... memfd_create resumed>) = 3 [pid 6006] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6010] setpgid(0, 0 [pid 6009] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6008] <... write resumed>) = 4 [pid 6007] rename("./bus", "./file2"./strace-static-x86_64: Process 6011 attached [pid 6010] <... setpgid resumed>) = 0 [pid 6009] <... mmap resumed>) = 0x7f0356e00000 [pid 6008] close(3 [pid 6007] <... rename resumed>) = -1 EEXIST (File exists) [pid 6011] set_robust_list(0x55556e32a660, 24 [pid 6010] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6009] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6008] <... close resumed>) = 0 [pid 6007] memfd_create("syzkaller", 0 [pid 6011] <... set_robust_list resumed>) = 0 [pid 6010] <... openat resumed>) = 3 [pid 6010] write(3, "1000", 4 [pid 6008] symlink("/dev/binderfs", "./binderfs" [pid 6007] <... memfd_create resumed>) = 5 [pid 6011] chdir("./151" [pid 6010] <... write resumed>) = 4 [pid 6008] <... symlink resumed>) = 0 [pid 6007] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6011] <... chdir resumed>) = 0 [pid 6010] close(3 [pid 6011] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6010] <... close resumed>) = 0 [pid 6008] memfd_create("syzkaller", 0 [pid 6007] <... mmap resumed>) = 0x7f0356e00000 [pid 6011] <... prctl resumed>) = 0 [pid 6010] symlink("/dev/binderfs", "./binderfs" [pid 6008] <... memfd_create resumed>) = 3 [pid 6011] setpgid(0, 0 [pid 6007] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6006] <... write resumed>) = 524288 [pid 6011] <... setpgid resumed>) = 0 [pid 6011] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6010] <... symlink resumed>) = 0 [pid 6010] memfd_create("syzkaller", 0 [pid 6008] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6006] munmap(0x7f0356e00000, 138412032 [pid 6011] <... openat resumed>) = 3 [pid 6011] write(3, "1000", 4) = 4 [pid 6006] <... munmap resumed>) = 0 [pid 6011] close(3 [pid 6010] <... memfd_create resumed>) = 3 [pid 6008] <... mmap resumed>) = 0x7f0356e00000 [pid 6011] <... close resumed>) = 0 [pid 6010] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6011] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6010] <... mmap resumed>) = 0x7f0356e00000 [pid 6011] memfd_create("syzkaller", 0) = 3 [pid 6009] <... write resumed>) = 524288 [pid 6011] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6011] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6009] munmap(0x7f0356e00000, 138412032 [pid 6006] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6006] close(5 [pid 6009] <... munmap resumed>) = 0 [pid 6006] <... close resumed>) = 0 [pid 6009] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6009] ioctl(4, LOOP_SET_FD, 3 [pid 6010] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6008] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6006] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6011] <... write resumed>) = 524288 [pid 6009] <... ioctl resumed>) = 0 [pid 6007] <... write resumed>) = 524288 [pid 6011] munmap(0x7f0356e00000, 138412032 [pid 6010] <... write resumed>) = 524288 [pid 6009] close(3 [pid 6008] <... write resumed>) = 524288 [pid 6006] <... open resumed>) = 5 [pid 6009] <... close resumed>) = 0 [pid 6009] close(4 [pid 6006] ftruncate(5, 0) = 0 [pid 6006] exit_group(0 [pid 6009] <... close resumed>) = 0 [pid 6011] <... munmap resumed>) = 0 [pid 6009] mkdir("./bus", 0777 [pid 6008] munmap(0x7f0356e00000, 138412032 [pid 6006] <... exit_group resumed>) = ? [pid 6009] <... mkdir resumed>) = 0 [pid 6008] <... munmap resumed>) = 0 [pid 6006] +++ exited with 0 +++ [pid 6011] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6009] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6008] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6007] munmap(0x7f0356e00000, 138412032 [pid 6011] <... openat resumed>) = 4 [pid 6010] munmap(0x7f0356e00000, 138412032 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6006, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6011] ioctl(4, LOOP_SET_FD, 3 [pid 6010] <... munmap resumed>) = 0 [pid 6008] <... openat resumed>) = 4 [pid 6007] <... munmap resumed>) = 0 [pid 5078] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 6010] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 168.607666][ T6009] loop4: detected capacity change from 0 to 1024 [ 168.645248][ T6011] loop1: detected capacity change from 0 to 1024 [ 168.647881][ T6010] loop3: detected capacity change from 0 to 1024 [pid 6010] ioctl(4, LOOP_SET_FD, 3 [pid 6011] <... ioctl resumed>) = 0 [pid 6008] ioctl(4, LOOP_SET_FD, 3 [pid 6007] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6011] close(3 [pid 6007] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] umount2("./153", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6010] <... ioctl resumed>) = 0 [pid 6011] <... close resumed>) = 0 [pid 6009] <... mount resumed>) = 0 [pid 6008] <... ioctl resumed>) = 0 [pid 6007] close(5 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6011] close(4 [pid 6009] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6008] close(3 [pid 6011] <... close resumed>) = 0 [pid 6010] close(3 [pid 6009] <... openat resumed>) = 3 [pid 5078] openat(AT_FDCWD, "./153", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6011] mkdir("./bus", 0777) = 0 [pid 6010] <... close resumed>) = 0 [pid 6009] chdir("./bus" [pid 6011] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6010] close(4 [pid 6011] <... mount resumed>) = 0 [pid 6010] <... close resumed>) = 0 [pid 6009] <... chdir resumed>) = 0 [pid 6007] <... close resumed>) = 0 [pid 6011] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6010] mkdir("./bus", 0777 [pid 6009] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6008] <... close resumed>) = 0 [pid 6007] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] <... openat resumed>) = 3 [pid 6011] <... openat resumed>) = 3 [pid 6010] <... mkdir resumed>) = 0 [pid 6009] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6008] close(4 [pid 5078] newfstatat(3, "", [pid 6011] chdir("./bus") = 0 [pid 6009] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6008] <... close resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6011] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6010] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6008] mkdir("./bus", 0777 [pid 6007] <... open resumed>) = 5 [pid 6011] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6009] <... symlink resumed>) = 0 [pid 6008] <... mkdir resumed>) = 0 [pid 6007] ftruncate(5, 0 [pid 5078] getdents64(3, [pid 6011] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6009] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6007] <... ftruncate resumed>) = 0 [pid 6007] exit_group(0 [pid 5078] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6011] <... symlink resumed>) = 0 [pid 6008] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6007] <... exit_group resumed>) = ? [pid 6011] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 4 [pid 6009] <... creat resumed>) = 4 [pid 6011] rename("./bus", "./file2" [pid 6009] rename("./bus", "./file2" [pid 5078] <... umount2 resumed>) = 0 [ 168.660344][ T6008] loop0: detected capacity change from 0 to 1024 [pid 6009] <... rename resumed>) = -1 EEXIST (File exists) [pid 6009] memfd_create("syzkaller", 0 [pid 6008] <... mount resumed>) = 0 [pid 6007] +++ exited with 0 +++ [pid 6009] <... memfd_create resumed>) = 5 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6007, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6008] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5075] umount2("./151", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6008] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6008] chdir("./bus" [pid 5075] openat(AT_FDCWD, "./151", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6011] <... rename resumed>) = -1 EEXIST (File exists) [pid 6010] <... mount resumed>) = 0 [pid 6009] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6008] <... chdir resumed>) = 0 [pid 5078] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... openat resumed>) = 3 [pid 6011] memfd_create("syzkaller", 0 [pid 6010] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6009] <... mmap resumed>) = 0x7f0356e00000 [pid 6008] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(3, "", [pid 6011] <... memfd_create resumed>) = 5 [pid 6010] <... openat resumed>) = 3 [pid 6008] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6011] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6010] chdir("./bus" [pid 6009] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6008] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] newfstatat(AT_FDCWD, "./153/bus", [pid 5075] getdents64(3, [pid 6011] <... mmap resumed>) = 0x7f0356e00000 [pid 6010] <... chdir resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6010] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5078] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6010] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6008] <... symlink resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6010] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5078] openat(AT_FDCWD, "./153/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6008] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] <... openat resumed>) = 4 [pid 5078] newfstatat(4, "", [pid 6010] <... symlink resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6011] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] getdents64(4, [pid 6010] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6009] <... write resumed>) = 524288 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5075] <... umount2 resumed>) = 0 [pid 6011] <... write resumed>) = 524288 [pid 6009] munmap(0x7f0356e00000, 138412032 [pid 6008] <... creat resumed>) = 4 [pid 5078] getdents64(4, [pid 5075] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6009] <... munmap resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] close(4 [pid 5075] newfstatat(AT_FDCWD, "./151/bus", [pid 5078] <... close resumed>) = 0 [pid 6008] rename("./bus", "./file2" [pid 5078] rmdir("./153/bus" [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 6010] <... creat resumed>) = 4 [pid 5078] umount2("./153/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6010] rename("./bus", "./file2" [pid 6009] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6010] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] newfstatat(AT_FDCWD, "./153/binderfs", [pid 5075] openat(AT_FDCWD, "./151/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6010] memfd_create("syzkaller", 0 [pid 6009] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6008] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... openat resumed>) = 4 [pid 6008] memfd_create("syzkaller", 0) = 5 [pid 6008] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6011] munmap(0x7f0356e00000, 138412032) = 0 [pid 6011] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6010] <... memfd_create resumed>) = 5 [pid 5078] unlink("./153/binderfs" [pid 5075] newfstatat(4, "", [pid 6011] close(5 [pid 6010] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6009] close(5 [pid 6008] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... unlink resumed>) = 0 [pid 6011] <... close resumed>) = 0 [pid 6010] <... mmap resumed>) = 0x7f0356e00000 [pid 6009] <... close resumed>) = 0 [pid 5078] getdents64(3, [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6010] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] close(3 [pid 5075] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5078] <... close resumed>) = 0 [pid 5075] getdents64(4, [pid 5078] rmdir("./153" [pid 5075] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6011] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6010] <... write resumed>) = 524288 [pid 6009] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6008] <... write resumed>) = 524288 [pid 5078] <... rmdir resumed>) = 0 [pid 5075] close(4 [pid 5078] mkdir("./154", 0777 [pid 5075] <... close resumed>) = 0 [pid 6010] munmap(0x7f0356e00000, 138412032 [pid 6008] munmap(0x7f0356e00000, 138412032 [pid 5075] rmdir("./151/bus" [pid 6010] <... munmap resumed>) = 0 [pid 6008] <... munmap resumed>) = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 6011] <... open resumed>) = 5 [pid 5075] <... rmdir resumed>) = 0 [pid 6011] ftruncate(5, 0 [pid 6010] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6009] <... open resumed>) = 5 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6010] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6008] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5078] <... openat resumed>) = 3 [pid 5075] umount2("./151/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6011] <... ftruncate resumed>) = 0 [pid 6009] ftruncate(5, 0 [pid 6008] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] ioctl(3, LOOP_CLR_FD [pid 6010] close(5 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./151/binderfs", [pid 6009] <... ftruncate resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./151/binderfs") = 0 [pid 5075] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 6011] exit_group(0 [pid 6010] <... close resumed>) = 0 [pid 6009] exit_group(0 [pid 6008] close(5 [pid 6011] <... exit_group resumed>) = ? [pid 6009] <... exit_group resumed>) = ? [pid 5075] close(3 [pid 6011] +++ exited with 0 +++ [pid 6010] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6008] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 6008] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5075] rmdir("./151" [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6011, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6009] +++ exited with 0 +++ [pid 5075] <... rmdir resumed>) = 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6009, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6010] <... open resumed>) = 5 [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 6010] ftruncate(5, 0 [pid 5077] <... restart_syscall resumed>) = 0 [pid 5075] mkdir("./152", 0777 [pid 5074] umount2("./151", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6010] <... ftruncate resumed>) = 0 [pid 6008] <... open resumed>) = 5 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6010] exit_group(0 [pid 6008] ftruncate(5, 0 [pid 6010] <... exit_group resumed>) = ? [pid 5077] umount2("./153", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6008] <... ftruncate resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... mkdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./151", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6008] exit_group(0 [pid 5077] openat(AT_FDCWD, "./153", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] <... openat resumed>) = 3 [pid 6008] <... exit_group resumed>) = ? [pid 5077] <... openat resumed>) = 3 [pid 5077] newfstatat(3, "", [pid 5074] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5074] getdents64(3, [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6010] +++ exited with 0 +++ [pid 5077] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6008] +++ exited with 0 +++ [pid 5078] <... ioctl resumed>) = 0 [pid 5077] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6010, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5074] <... umount2 resumed>) = 0 [pid 5078] close(3 [pid 5077] <... umount2 resumed>) = 0 [pid 5076] umount2("./154", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./154", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6008, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5078] <... close resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 5076] newfstatat(3, "", [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] newfstatat(AT_FDCWD, "./151/bus", [pid 5073] <... restart_syscall resumed>) = 0 [pid 5076] getdents64(3, [pid 5078] <... clone resumed>, child_tidptr=0x55556e32a650) = 6012 [pid 5077] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 ./strace-static-x86_64: Process 6012 attached [pid 5077] newfstatat(AT_FDCWD, "./153/bus", [pid 5076] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./151", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6012] set_robust_list(0x55556e32a660, 24 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6012] <... set_robust_list resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6012] chdir("./154" [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./151", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6012] <... chdir resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./153/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] openat(AT_FDCWD, "./151/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6012] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5073] <... openat resumed>) = 3 [pid 5077] <... openat resumed>) = 4 [pid 5073] newfstatat(3, "", [pid 5077] newfstatat(4, "", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6012] <... prctl resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... openat resumed>) = 4 [pid 6012] setpgid(0, 0 [pid 5073] getdents64(3, [pid 5074] newfstatat(4, "", [pid 6012] <... setpgid resumed>) = 0 [pid 5077] getdents64(4, [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6012] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5077] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] getdents64(4, [pid 5074] getdents64(4, [pid 6012] <... openat resumed>) = 3 [pid 5077] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] close(4 [pid 6012] write(3, "1000", 4 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] <... umount2 resumed>) = 0 [pid 6012] <... write resumed>) = 4 [pid 5077] <... close resumed>) = 0 [pid 5074] getdents64(4, [pid 5077] rmdir("./153/bus") = 0 [pid 5077] umount2("./153/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./153/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] unlink("./153/binderfs" [pid 5076] <... umount2 resumed>) = 0 [pid 6012] close(3 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6012] <... close resumed>) = 0 [pid 5076] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... ioctl resumed>) = 0 [pid 5074] close(4 [pid 6012] symlink("/dev/binderfs", "./binderfs" [pid 5074] <... close resumed>) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 5073] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6012] <... symlink resumed>) = 0 [pid 5074] rmdir("./151/bus" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6012] memfd_create("syzkaller", 0 [pid 5077] getdents64(3, [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] newfstatat(AT_FDCWD, "./154/bus", [pid 5074] <... rmdir resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./151/bus", [pid 6012] <... memfd_create resumed>) = 3 [pid 5077] close(3 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./151/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] <... close resumed>) = 0 [pid 5076] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6012] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6012] <... mmap resumed>) = 0x7f0356e00000 [pid 5077] rmdir("./153" [pid 5074] newfstatat(AT_FDCWD, "./151/binderfs", [pid 5077] <... rmdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./151/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] mkdir("./154", 0777 [pid 5073] close(4 [pid 6012] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... mkdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./154/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] close(3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./151/bus" [pid 5076] <... openat resumed>) = 4 [pid 5074] unlink("./151/binderfs" [pid 5073] <... rmdir resumed>) = 0 [pid 5076] newfstatat(4, "", [pid 5075] <... close resumed>) = 0 [pid 5073] umount2("./151/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... unlink resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... openat resumed>) = 3 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, [pid 5076] getdents64(4, [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5074] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5073] newfstatat(AT_FDCWD, "./151/binderfs", [pid 5076] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./151/binderfs" [pid 5074] close(3 [pid 5076] getdents64(4, [pid 5073] <... unlink resumed>) = 0 [pid 5076] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5074] <... close resumed>) = 0 [pid 5073] getdents64(3, [pid 5076] close(4 [pid 5074] rmdir("./151" [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] <... close resumed>) = 0 [pid 5073] close(3./strace-static-x86_64: Process 6013 attached [pid 5075] <... clone resumed>, child_tidptr=0x55556e32a650) = 6013 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 6013] set_robust_list(0x55556e32a660, 24 [pid 5076] rmdir("./154/bus" [pid 5074] mkdir("./152", 0777 [pid 5073] rmdir("./151" [pid 6013] <... set_robust_list resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 6013] chdir("./152" [pid 5076] umount2("./154/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... mkdir resumed>) = 0 [pid 5073] mkdir("./152", 0777 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6013] <... chdir resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./154/binderfs", [pid 6013] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 6013] setpgid(0, 0 [pid 5074] <... openat resumed>) = 3 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6013] <... setpgid resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6013] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] unlink("./154/binderfs" [pid 5073] <... openat resumed>) = 3 [pid 5076] <... unlink resumed>) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6013] <... openat resumed>) = 3 [pid 6012] <... write resumed>) = 524288 [pid 5076] getdents64(3, [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5076] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3 [pid 6013] write(3, "1000", 4) = 4 [pid 6013] close(3 [pid 6012] munmap(0x7f0356e00000, 138412032 [pid 6013] <... close resumed>) = 0 [pid 6013] symlink("/dev/binderfs", "./binderfs" [pid 6012] <... munmap resumed>) = 0 [pid 6013] <... symlink resumed>) = 0 [pid 6013] memfd_create("syzkaller", 0 [pid 6012] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5076] <... close resumed>) = 0 [pid 6012] ioctl(4, LOOP_SET_FD, 3 [pid 6013] <... memfd_create resumed>) = 3 [pid 5077] <... ioctl resumed>) = 0 [pid 5076] rmdir("./154" [pid 6013] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 5076] <... rmdir resumed>) = 0 [pid 6012] <... ioctl resumed>) = 0 [pid 6013] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] mkdir("./155", 0777 [pid 5073] <... ioctl resumed>) = 0 [pid 6012] close(3) = 0 [pid 6012] close(4) = 0 [pid 6012] mkdir("./bus", 0777 [pid 5077] close(3 [pid 5076] <... mkdir resumed>) = 0 [pid 6012] <... mkdir resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6012] mount("/dev/loop5", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 5073] close(3 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... openat resumed>) = 3 [pid 5074] <... ioctl resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6014 attached [pid 5077] <... clone resumed>, child_tidptr=0x55556e32a650) = 6014 [pid 6014] set_robust_list(0x55556e32a660, 24 [pid 6012] <... mount resumed>) = 0 [pid 6012] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5073] <... clone resumed>, child_tidptr=0x55556e32a650) = 6015 [pid 6014] <... set_robust_list resumed>) = 0 [pid 6013] <... write resumed>) = 524288 [pid 6012] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6015 attached [pid 6014] chdir("./154" [pid 6015] set_robust_list(0x55556e32a660, 24) = 0 [pid 6012] chdir("./bus" [pid 6015] chdir("./152" [pid 6012] <... chdir resumed>) = 0 [pid 6014] <... chdir resumed>) = 0 [pid 6014] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6012] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6014] <... prctl resumed>) = 0 [pid 6012] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6015] <... chdir resumed>) = 0 [pid 6012] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6015] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6014] setpgid(0, 0 [pid 6012] <... symlink resumed>) = 0 [pid 5074] close(3 [pid 6015] <... prctl resumed>) = 0 [pid 6014] <... setpgid resumed>) = 0 [pid 6013] munmap(0x7f0356e00000, 138412032 [ 168.987229][ T6012] loop5: detected capacity change from 0 to 1024 [pid 6015] setpgid(0, 0 [pid 5074] <... close resumed>) = 0 [pid 6015] <... setpgid resumed>) = 0 [pid 6014] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6013] <... munmap resumed>) = 0 [pid 6012] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6015] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6012] <... creat resumed>) = 4 [pid 6015] write(3, "1000", 4 [pid 6012] rename("./bus", "./file2" [pid 6015] <... write resumed>) = 4 [pid 6012] <... rename resumed>) = -1 EEXIST (File exists) [pid 6015] close(3) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x55556e32a650) = 6016 [pid 6015] symlink("/dev/binderfs", "./binderfs" [pid 6012] memfd_create("syzkaller", 0./strace-static-x86_64: Process 6016 attached [pid 6015] <... symlink resumed>) = 0 [pid 6012] <... memfd_create resumed>) = 5 [pid 6016] set_robust_list(0x55556e32a660, 24 [pid 6012] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6016] <... set_robust_list resumed>) = 0 [pid 6015] memfd_create("syzkaller", 0 [pid 6014] <... openat resumed>) = 3 [pid 6013] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6012] <... mmap resumed>) = 0x7f0356e00000 [pid 6016] chdir("./152" [pid 6014] write(3, "1000", 4 [pid 6013] <... openat resumed>) = 4 [pid 6015] <... memfd_create resumed>) = 3 [pid 6014] <... write resumed>) = 4 [pid 6013] ioctl(4, LOOP_SET_FD, 3 [pid 6016] <... chdir resumed>) = 0 [pid 6014] close(3 [pid 6016] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6014] <... close resumed>) = 0 [pid 6016] <... prctl resumed>) = 0 [pid 6016] setpgid(0, 0) = 0 [pid 6015] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6016] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6015] <... mmap resumed>) = 0x7f0356e00000 [pid 6014] symlink("/dev/binderfs", "./binderfs" [pid 6016] <... openat resumed>) = 3 [pid 6014] <... symlink resumed>) = 0 [pid 6012] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6016] write(3, "1000", 4) = 4 [pid 6016] close(3) = 0 [pid 6015] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6016] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6016] memfd_create("syzkaller", 0 [pid 6014] memfd_create("syzkaller", 0) = 3 [pid 6012] <... write resumed>) = 524288 [pid 5076] <... ioctl resumed>) = 0 [pid 6014] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] close(3 [pid 6016] <... memfd_create resumed>) = 3 [pid 6014] <... mmap resumed>) = 0x7f0356e00000 [pid 5076] <... close resumed>) = 0 [pid 6013] <... ioctl resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6016] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 ./strace-static-x86_64: Process 6017 attached [pid 6016] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6014] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... clone resumed>, child_tidptr=0x55556e32a650) = 6017 [pid 6017] set_robust_list(0x55556e32a660, 24) = 0 [pid 6013] close(3) = 0 [pid 6017] chdir("./155" [pid 6013] close(4 [pid 6015] <... write resumed>) = 524288 [pid 6012] munmap(0x7f0356e00000, 138412032 [pid 6017] <... chdir resumed>) = 0 [pid 6013] <... close resumed>) = 0 [pid 6017] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6013] mkdir("./bus", 0777 [pid 6012] <... munmap resumed>) = 0 [pid 6017] <... prctl resumed>) = 0 [pid 6017] setpgid(0, 0 [pid 6012] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6017] <... setpgid resumed>) = 0 [pid 6012] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 169.073955][ T6013] loop2: detected capacity change from 0 to 1024 [pid 6017] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6015] munmap(0x7f0356e00000, 138412032 [pid 6014] <... write resumed>) = 524288 [pid 6013] <... mkdir resumed>) = 0 [pid 6012] close(5 [pid 6017] <... openat resumed>) = 3 [pid 6015] <... munmap resumed>) = 0 [pid 6013] mount("/dev/loop2", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6012] <... close resumed>) = 0 [pid 6017] write(3, "1000", 4 [pid 6014] munmap(0x7f0356e00000, 138412032 [pid 6017] <... write resumed>) = 4 [pid 6014] <... munmap resumed>) = 0 [pid 6017] close(3) = 0 [pid 6015] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6017] symlink("/dev/binderfs", "./binderfs" [pid 6015] <... openat resumed>) = 4 [pid 6014] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6015] ioctl(4, LOOP_SET_FD, 3 [pid 6017] <... symlink resumed>) = 0 [pid 6014] <... openat resumed>) = 4 [pid 6014] ioctl(4, LOOP_SET_FD, 3 [pid 6017] memfd_create("syzkaller", 0 [pid 6016] <... write resumed>) = 524288 [pid 6016] munmap(0x7f0356e00000, 138412032 [pid 6012] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6016] <... munmap resumed>) = 0 [pid 6016] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6017] <... memfd_create resumed>) = 3 [pid 6016] <... openat resumed>) = 4 [pid 6016] ioctl(4, LOOP_SET_FD, 3 [pid 6013] <... mount resumed>) = 0 [pid 6017] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6016] <... ioctl resumed>) = 0 [pid 6014] <... ioctl resumed>) = 0 [pid 6013] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6017] <... mmap resumed>) = 0x7f0356e00000 [pid 6015] <... ioctl resumed>) = 0 [pid 6014] close(3 [pid 6013] <... openat resumed>) = 3 [pid 6015] close(3 [pid 6014] <... close resumed>) = 0 [pid 6013] chdir("./bus" [pid 6015] <... close resumed>) = 0 [pid 6014] close(4 [pid 6013] <... chdir resumed>) = 0 [pid 6012] <... open resumed>) = 5 [pid 6015] close(4 [pid 6014] <... close resumed>) = 0 [pid 6013] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6015] <... close resumed>) = 0 [pid 6012] ftruncate(5, 0 [pid 6015] mkdir("./bus", 0777 [pid 6014] mkdir("./bus", 0777 [pid 6013] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6012] <... ftruncate resumed>) = 0 [pid 6017] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6015] <... mkdir resumed>) = 0 [pid 6012] exit_group(0 [pid 6015] mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6014] <... mkdir resumed>) = 0 [pid 6013] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6012] <... exit_group resumed>) = ? [pid 6013] <... symlink resumed>) = 0 [pid 6012] +++ exited with 0 +++ [pid 6014] mount("/dev/loop4", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6016] close(3 [pid 6013] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6012, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6016] <... close resumed>) = 0 [pid 6016] close(4 [pid 6015] <... mount resumed>) = 0 [pid 6016] <... close resumed>) = 0 [pid 6015] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6016] mkdir("./bus", 0777 [pid 6015] <... openat resumed>) = 3 [pid 6015] chdir("./bus" [pid 6013] <... creat resumed>) = 4 [pid 6015] <... chdir resumed>) = 0 [pid 6013] rename("./bus", "./file2" [pid 5078] umount2("./154", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6016] <... mkdir resumed>) = 0 [pid 6015] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6016] mount("/dev/loop1", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6015] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6013] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] openat(AT_FDCWD, "./154", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6015] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6013] memfd_create("syzkaller", 0 [pid 5078] <... openat resumed>) = 3 [pid 6017] <... write resumed>) = 524288 [pid 6013] <... memfd_create resumed>) = 5 [pid 5078] newfstatat(3, "", [ 169.152210][ T6015] loop0: detected capacity change from 0 to 1024 [ 169.160167][ T6014] loop4: detected capacity change from 0 to 1024 [ 169.178206][ T6016] loop1: detected capacity change from 0 to 1024 [pid 6017] munmap(0x7f0356e00000, 138412032 [pid 6013] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6015] <... symlink resumed>) = 0 [pid 6016] <... mount resumed>) = 0 [pid 6015] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6014] <... mount resumed>) = 0 [pid 6013] <... mmap resumed>) = 0x7f0356e00000 [pid 5078] getdents64(3, [pid 6016] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6017] <... munmap resumed>) = 0 [pid 6016] <... openat resumed>) = 3 [pid 6014] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6017] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6016] chdir("./bus" [pid 6015] <... creat resumed>) = 4 [pid 6014] <... openat resumed>) = 3 [pid 6013] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6017] <... openat resumed>) = 4 [pid 6016] <... chdir resumed>) = 0 [pid 6015] rename("./bus", "./file2" [pid 6014] chdir("./bus" [pid 6017] ioctl(4, LOOP_SET_FD, 3 [pid 6016] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6015] <... rename resumed>) = -1 EEXIST (File exists) [pid 6014] <... chdir resumed>) = 0 [pid 6016] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6016] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6015] memfd_create("syzkaller", 0 [pid 6014] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6016] <... symlink resumed>) = 0 [pid 6014] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6015] <... memfd_create resumed>) = 5 [pid 6016] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6015] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0356e00000 [pid 6015] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6014] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6013] <... write resumed>) = 524288 [pid 5078] <... umount2 resumed>) = 0 [pid 6017] <... ioctl resumed>) = 0 [pid 6016] <... creat resumed>) = 4 [pid 6014] <... symlink resumed>) = 0 [pid 5078] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6017] close(3 [pid 6016] rename("./bus", "./file2" [pid 6014] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6017] <... close resumed>) = 0 [pid 6017] close(4 [pid 6016] <... rename resumed>) = -1 EEXIST (File exists) [pid 6014] <... creat resumed>) = 4 [pid 6013] munmap(0x7f0356e00000, 138412032 [pid 5078] newfstatat(AT_FDCWD, "./154/bus", [pid 6017] <... close resumed>) = 0 [pid 6016] memfd_create("syzkaller", 0 [pid 6015] <... write resumed>) = 524288 [pid 6014] rename("./bus", "./file2" [pid 6013] <... munmap resumed>) = 0 [ 169.254845][ T6017] loop3: detected capacity change from 0 to 1024 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6017] mkdir("./bus", 0777 [pid 6016] <... memfd_create resumed>) = 5 [pid 6014] <... rename resumed>) = -1 EEXIST (File exists) [pid 5078] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6016] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6017] <... mkdir resumed>) = 0 [pid 6016] <... mmap resumed>) = 0x7f0356e00000 [pid 6014] memfd_create("syzkaller", 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6017] mount("/dev/loop3", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "" [pid 6016] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6014] <... memfd_create resumed>) = 5 [pid 6013] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] openat(AT_FDCWD, "./154/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6013] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... openat resumed>) = 4 [pid 6013] close(5 [pid 5078] newfstatat(4, "", [pid 6014] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6015] munmap(0x7f0356e00000, 138412032 [pid 6014] <... mmap resumed>) = 0x7f0356e00000 [pid 6013] <... close resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6015] <... munmap resumed>) = 0 [pid 6015] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5078] getdents64(4, [pid 6015] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6016] <... write resumed>) = 524288 [pid 6015] close(5 [pid 6014] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6017] <... mount resumed>) = 0 [pid 6013] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] getdents64(4, [pid 6015] <... close resumed>) = 0 [pid 6015] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5078] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 6017] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6015] <... open resumed>) = 5 [pid 6017] <... openat resumed>) = 3 [pid 6016] munmap(0x7f0356e00000, 138412032 [pid 5078] close(4 [pid 6015] ftruncate(5, 0 [pid 5078] <... close resumed>) = 0 [pid 6017] chdir("./bus" [pid 6016] <... munmap resumed>) = 0 [pid 6015] <... ftruncate resumed>) = 0 [pid 6013] <... open resumed>) = 5 [pid 6017] <... chdir resumed>) = 0 [pid 5078] rmdir("./154/bus" [pid 6013] ftruncate(5, 0 [pid 6016] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6015] exit_group(0 [pid 5078] <... rmdir resumed>) = 0 [pid 6017] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6016] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6015] <... exit_group resumed>) = ? [pid 6013] <... ftruncate resumed>) = 0 [pid 6017] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6016] close(5 [pid 6015] +++ exited with 0 +++ [pid 5078] umount2("./154/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6013] exit_group(0 [pid 6017] symlink("./bus", "./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 6014] <... write resumed>) = 524288 [pid 6013] <... exit_group resumed>) = ? [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6015, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5073] umount2("./152", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6016] <... close resumed>) = 0 [pid 6017] <... symlink resumed>) = 0 [pid 6014] munmap(0x7f0356e00000, 138412032 [pid 6013] +++ exited with 0 +++ [pid 5078] newfstatat(AT_FDCWD, "./154/binderfs", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6017] creat("./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6016] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6014] <... munmap resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6013, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5073] openat(AT_FDCWD, "./152", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] unlink("./154/binderfs" [pid 5073] <... openat resumed>) = 3 [pid 6017] <... creat resumed>) = 4 [pid 6014] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] <... unlink resumed>) = 0 [pid 5073] newfstatat(3, "", [pid 6017] rename("./bus", "./file2" [pid 5075] umount2("./152", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5073] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6017] <... rename resumed>) = -1 EEXIST (File exists) [pid 6016] <... open resumed>) = 5 [pid 6014] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] getdents64(3, [pid 5075] openat(AT_FDCWD, "./152", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... umount2 resumed>) = 0 [pid 6017] memfd_create("syzkaller", 0 [pid 5075] <... openat resumed>) = 3 [pid 6017] <... memfd_create resumed>) = 5 [pid 6016] ftruncate(5, 0 [pid 6014] close(5 [pid 5078] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5075] newfstatat(3, "", [pid 5073] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6017] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6016] <... ftruncate resumed>) = 0 [pid 5078] close(3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6017] <... mmap resumed>) = 0x7f0356e00000 [pid 5075] getdents64(3, [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6016] exit_group(0 [pid 6014] <... close resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 6016] <... exit_group resumed>) = ? [pid 5075] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] rmdir("./154" [pid 5073] newfstatat(AT_FDCWD, "./152/bus", [pid 5078] <... rmdir resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6016] +++ exited with 0 +++ [pid 6014] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5073] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6016, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6017] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... restart_syscall resumed>) = 0 [pid 5078] mkdir("./155", 0777 [pid 5073] openat(AT_FDCWD, "./152/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] umount2("./152", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... mkdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... openat resumed>) = 4 [pid 5078] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... umount2 resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./152", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] newfstatat(4, "", [pid 5078] <... openat resumed>) = 3 [pid 5074] <... openat resumed>) = 3 [pid 6014] <... open resumed>) = 5 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5074] newfstatat(3, "", [pid 6014] ftruncate(5, 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, 0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5074] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6014] <... ftruncate resumed>) = 0 [pid 6017] <... write resumed>) = 524288 [pid 6014] exit_group(0 [pid 5075] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6014] <... exit_group resumed>) = ? [pid 5074] <... umount2 resumed>) = 0 [pid 5073] getdents64(4, [pid 6017] munmap(0x7f0356e00000, 138412032 [pid 5074] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 6017] <... munmap resumed>) = 0 [pid 5073] getdents64(4, [pid 6014] +++ exited with 0 +++ [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6014, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 5074] newfstatat(AT_FDCWD, "./152/bus", [pid 5073] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5077] <... restart_syscall resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] close(4 [pid 6017] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] newfstatat(AT_FDCWD, "./152/bus", [pid 5074] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... close resumed>) = 0 [pid 6017] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] rmdir("./152/bus" [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./152/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] <... rmdir resumed>) = 0 [pid 5075] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, [pid 5077] umount2("./154", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5074] openat(AT_FDCWD, "./152/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6017] close(5 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./152/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] getdents64(4, 0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5075] close(4) = 0 [pid 5075] rmdir("./152/bus") = 0 [pid 5075] umount2("./152/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6017] <... close resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./154", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... openat resumed>) = 4 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6017] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5074] newfstatat(4, "", [pid 5073] newfstatat(AT_FDCWD, "./152/binderfs", [pid 5077] <... openat resumed>) = 3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] getdents64(4, [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] getdents64(3, [pid 5075] newfstatat(AT_FDCWD, "./152/binderfs", [pid 5077] <... getdents64 resumed>0x55556e32b6f0 /* 4 entries */, 32768) = 104 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... getdents64 resumed>0x55556e333730 /* 2 entries */, 32768) = 48 [pid 5073] unlink("./152/binderfs" [pid 5075] unlink("./152/binderfs" [pid 5074] getdents64(4, [pid 5077] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x55556e333730 /* 0 entries */, 32768) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 6017] <... open resumed>) = 5 [pid 5075] <... unlink resumed>) = 0 [pid 5075] getdents64(3, 0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] close(4 [pid 5075] close(3) = 0 [pid 5075] rmdir("./152" [pid 6017] ftruncate(5, 0 [pid 5078] <... ioctl resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5073] getdents64(3, [pid 5075] mkdir("./153", 0777 [pid 5073] <... getdents64 resumed>0x55556e32b6f0 /* 0 entries */, 32768) = 0 [pid 5074] rmdir("./152/bus" [pid 5073] close(3 [pid 6017] <... ftruncate resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... close resum