./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3989715250 <...> Warning: Permanently added '10.128.0.123' (ED25519) to the list of known hosts. execve("./syz-executor3989715250", ["./syz-executor3989715250"], 0x7ffd038330f0 /* 10 vars */) = 0 brk(NULL) = 0x55555683c000 brk(0x55555683cd00) = 0x55555683cd00 arch_prctl(ARCH_SET_FS, 0x55555683c380) = 0 set_tid_address(0x55555683c650) = 5062 set_robust_list(0x55555683c660, 24) = 0 rseq(0x55555683cca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3989715250", 4096) = 28 getrandom("\x5c\x99\x79\x8c\x53\xac\xa3\x85", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555683cd00 brk(0x55555685dd00) = 0x55555685dd00 brk(0x55555685e000) = 0x55555685e000 mprotect(0x7f2089cbc000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555683c650) = 5063 ./strace-static-x86_64: Process 5063 attached [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] set_robust_list(0x55555683c660, 24) = 0 ./strace-static-x86_64: Process 5064 attached [pid 5063] mkdir("./syzkaller.4j71LN", 0700 [pid 5064] set_robust_list(0x55555683c660, 24 [pid 5062] <... clone resumed>, child_tidptr=0x55555683c650) = 5064 [pid 5064] <... set_robust_list resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] mkdir("./syzkaller.gXtEPo", 0700./strace-static-x86_64: Process 5065 attached [pid 5062] <... clone resumed>, child_tidptr=0x55555683c650) = 5065 [pid 5064] <... mkdir resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] set_robust_list(0x55555683c660, 24 [pid 5064] chmod("./syzkaller.gXtEPo", 0777 [pid 5063] chmod("./syzkaller.4j71LN", 0777 [pid 5065] <... set_robust_list resumed>) = 0 [pid 5064] <... chmod resumed>) = 0 [pid 5063] <... chmod resumed>) = 0 [pid 5065] mkdir("./syzkaller.6f7vWC", 0700./strace-static-x86_64: Process 5066 attached [pid 5064] chdir("./syzkaller.gXtEPo" [pid 5063] chdir("./syzkaller.4j71LN" [pid 5062] <... clone resumed>, child_tidptr=0x55555683c650) = 5066 [pid 5066] set_robust_list(0x55555683c660, 24 [pid 5064] <... chdir resumed>) = 0 [pid 5063] <... chdir resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] mkdir("./0", 0777 [pid 5066] <... set_robust_list resumed>) = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 5066] mkdir("./syzkaller.zmBaNL", 0700 [pid 5063] mkdir("./0", 0777 [pid 5064] <... mkdir resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5067 attached [pid 5067] set_robust_list(0x55555683c660, 24) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x55555683c650) = 5067 [pid 5065] chmod("./syzkaller.6f7vWC", 0777 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5066] chmod("./syzkaller.zmBaNL", 0777 [pid 5067] mkdir("./syzkaller.nO7ak3", 0700 [pid 5065] <... chmod resumed>) = 0 [pid 5066] <... chmod resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5066] chdir("./syzkaller.zmBaNL" [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] <... openat resumed>) = 3 [pid 5066] <... chdir resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5066] mkdir("./0", 0777 [pid 5065] chdir("./syzkaller.6f7vWC" [pid 5067] chmod("./syzkaller.nO7ak3", 0777 [pid 5065] <... chdir resumed>) = 0 [pid 5064] close(3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5067] <... chmod resumed>) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 5065] mkdir("./0", 0777 [pid 5064] <... close resumed>) = 0 [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] close(3 [pid 5067] chdir("./syzkaller.nO7ak3" [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] <... mkdir resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... chdir resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5067] mkdir("./0", 0777 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... mkdir resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 5069 attached ./strace-static-x86_64: Process 5068 attached [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] <... openat resumed>) = 3 [pid 5066] close(3 [pid 5067] <... openat resumed>) = 3 [pid 5066] <... close resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] set_robust_list(0x55555683c660, 24 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5068] set_robust_list(0x55555683c660, 24 [pid 5064] <... clone resumed>, child_tidptr=0x55555683c650) = 5069 [pid 5063] <... clone resumed>, child_tidptr=0x55555683c650) = 5068 [pid 5068] <... set_robust_list resumed>) = 0 [pid 5069] <... set_robust_list resumed>) = 0 [pid 5068] chdir("./0" [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 5071 attached [pid 5069] chdir("./0" [pid 5066] <... clone resumed>, child_tidptr=0x55555683c650) = 5071 [pid 5065] close(3 [pid 5069] <... chdir resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5071] set_robust_list(0x55555683c660, 24 [pid 5069] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] <... chdir resumed>) = 0 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... set_robust_list resumed>) = 0 [pid 5069] <... prctl resumed>) = 0 [pid 5068] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] <... prctl resumed>) = 0 [pid 5068] setpgid(0, 0 [pid 5067] close(3 [pid 5068] <... setpgid resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5071] chdir("./0" [pid 5069] setpgid(0, 0 [pid 5068] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5072 attached [pid 5071] <... chdir resumed>) = 0 [pid 5069] <... setpgid resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5065] <... clone resumed>, child_tidptr=0x55555683c650) = 5072 [pid 5071] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5072] set_robust_list(0x55555683c660, 24 [pid 5071] <... prctl resumed>) = 0 [pid 5069] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5073 attached [pid 5072] <... set_robust_list resumed>) = 0 [pid 5071] setpgid(0, 0 [pid 5069] write(3, "1000", 4 [pid 5068] write(3, "1000", 4 [pid 5073] set_robust_list(0x55555683c660, 24 [pid 5072] chdir("./0" [pid 5071] <... setpgid resumed>) = 0 [pid 5069] <... write resumed>) = 4 [pid 5068] <... write resumed>) = 4 [pid 5067] <... clone resumed>, child_tidptr=0x55555683c650) = 5073 [pid 5073] <... set_robust_list resumed>) = 0 [pid 5072] <... chdir resumed>) = 0 [pid 5069] close(3 [pid 5068] close(3 [pid 5072] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] <... close resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5073] chdir("./0" [pid 5072] <... prctl resumed>) = 0 [pid 5071] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] symlink("/dev/binderfs", "./binderfs" [pid 5068] symlink("/dev/binderfs", "./binderfs" [pid 5072] setpgid(0, 0 [pid 5071] <... openat resumed>) = 3 [pid 5072] <... setpgid resumed>) = 0 [pid 5072] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5073] <... chdir resumed>) = 0 [pid 5072] <... openat resumed>) = 3 [pid 5068] <... symlink resumed>) = 0 [pid 5072] write(3, "1000", 4 [pid 5068] memfd_create("syzkaller", 0 [pid 5072] <... write resumed>) = 4 [pid 5072] close(3) = 0 [pid 5072] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... memfd_create resumed>) = 3 [pid 5072] <... symlink resumed>) = 0 [pid 5068] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] write(3, "1000", 4 [pid 5069] <... symlink resumed>) = 0 [pid 5071] <... write resumed>) = 4 [pid 5073] <... prctl resumed>) = 0 [pid 5071] close(3 [pid 5068] <... mmap resumed>) = 0x7f2081800000 [pid 5073] setpgid(0, 0 [pid 5071] <... close resumed>) = 0 [pid 5069] memfd_create("syzkaller", 0 [pid 5073] <... setpgid resumed>) = 0 [pid 5071] symlink("/dev/binderfs", "./binderfs" [pid 5069] <... memfd_create resumed>) = 3 [pid 5073] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5072] memfd_create("syzkaller", 0 [pid 5071] <... symlink resumed>) = 0 [pid 5069] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] <... memfd_create resumed>) = 3 [pid 5071] memfd_create("syzkaller", 0 [pid 5069] <... mmap resumed>) = 0x7f2081800000 [pid 5072] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081800000 [pid 5073] <... openat resumed>) = 3 [pid 5071] <... memfd_create resumed>) = 3 [pid 5071] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081800000 [pid 5073] write(3, "1000", 4) = 4 [pid 5073] close(3) = 0 [pid 5073] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5073] memfd_create("syzkaller", 0) = 3 [pid 5073] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081800000 [pid 5071] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5069] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5068] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5072] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5073] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5068] <... write resumed>) = 16777216 [pid 5071] <... write resumed>) = 16777216 [pid 5068] munmap(0x7f2081800000, 138412032 [pid 5071] munmap(0x7f2081800000, 138412032 [pid 5069] <... write resumed>) = 16777216 [pid 5068] <... munmap resumed>) = 0 [pid 5069] munmap(0x7f2081800000, 138412032 [pid 5068] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5071] <... munmap resumed>) = 0 [pid 5068] <... openat resumed>) = 4 [pid 5068] ioctl(4, LOOP_SET_FD, 3 [pid 5071] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5071] ioctl(4, LOOP_SET_FD, 3 [pid 5068] <... ioctl resumed>) = 0 [pid 5068] close(3) = 0 [pid 5068] close(4) = 0 [pid 5068] mkdir("./file0", 0777) = 0 [pid 5068] mount("/dev/loop0", "./file0", "jfs", MS_NOSUID|MS_NODIRATIME|MS_STRICTATIME, "iocharset=cp850,errors=continue,resize,errors=continue,resize=0x0000000000000000," [pid 5072] <... write resumed>) = 16777216 [pid 5071] <... ioctl resumed>) = 0 [pid 5069] <... munmap resumed>) = 0 [pid 5072] munmap(0x7f2081800000, 138412032 [ 78.789588][ T5068] loop0: detected capacity change from 0 to 32768 [ 78.810645][ T5071] loop3: detected capacity change from 0 to 32768 [pid 5071] close(3) = 0 [pid 5069] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5071] close(4) = 0 [pid 5069] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5073] <... write resumed>) = 16777216 [pid 5071] mkdir("./file0", 0777) = 0 [pid 5071] mount("/dev/loop3", "./file0", "jfs", MS_NOSUID|MS_NODIRATIME|MS_STRICTATIME, "iocharset=cp850,errors=continue,resize,errors=continue,resize=0x0000000000000000," [pid 5073] munmap(0x7f2081800000, 138412032 [pid 5069] close(3) = 0 [pid 5069] close(4) = 0 [pid 5069] mkdir("./file0", 0777) = 0 [ 78.849040][ T5069] loop1: detected capacity change from 0 to 32768 [ 78.864973][ T5068] [ 78.864973][ T5068] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 78.864973][ T5068] [pid 5069] mount("/dev/loop1", "./file0", "jfs", MS_NOSUID|MS_NODIRATIME|MS_STRICTATIME, "iocharset=cp850,errors=continue,resize,errors=continue,resize=0x0000000000000000," [pid 5073] <... munmap resumed>) = 0 [pid 5072] <... munmap resumed>) = 0 [pid 5068] <... mount resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5068] chdir("./file0") = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5068] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|FASYNC, 000 [pid 5072] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5068] <... openat resumed>) = 4 [pid 5068] exit_group(0) = ? [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 78.903225][ T5071] [ 78.903225][ T5071] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 78.903225][ T5071] [ 78.924098][ T5069] [ 78.924098][ T5069] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 78.924098][ T5069] [pid 5072] ioctl(4, LOOP_SET_FD, 3 [pid 5073] ioctl(4, LOOP_SET_FD, 3 [pid 5071] <... mount resumed>) = 0 [pid 5068] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5068, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=31 /* 0.31 s */} --- [pid 5063] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... ioctl resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] <... openat resumed>) = 3 [pid 5071] <... openat resumed>) = 3 [pid 5071] chdir("./file0") = 0 [pid 5073] close(3 [pid 5071] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5069] <... mount resumed>) = 0 [pid 5063] newfstatat(3, "", [pid 5073] <... close resumed>) = 0 [pid 5071] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5069] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] close(4 [pid 5071] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|FASYNC, 000 [pid 5069] <... openat resumed>) = 3 [pid 5063] getdents64(3, [pid 5069] chdir("./file0") = 0 [pid 5063] <... getdents64 resumed>0x55555683d6f0 /* 4 entries */, 32768) = 112 [pid 5069] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5069] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|FASYNC, 000 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... close resumed>) = 0 [pid 5071] <... openat resumed>) = 4 [pid 5073] mkdir("./file0", 0777 [pid 5071] exit_group(0 [pid 5069] <... openat resumed>) = 4 [pid 5071] <... exit_group resumed>) = ? [pid 5069] exit_group(0 [pid 5063] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5073] <... mkdir resumed>) = 0 [pid 5071] +++ exited with 0 +++ [pid 5069] <... exit_group resumed>) = ? [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] mount("/dev/loop4", "./file0", "jfs", MS_NOSUID|MS_NODIRATIME|MS_STRICTATIME, "iocharset=cp850,errors=continue,resize,errors=continue,resize=0x0000000000000000," [pid 5069] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5069, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=33 /* 0.33 s */} --- [pid 5063] unlink("./0/binderfs" [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5071, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=30 /* 0.30 s */} --- [pid 5063] <... unlink resumed>) = 0 [ 78.968410][ T5073] loop4: detected capacity change from 0 to 32768 [ 78.970683][ T5072] loop2: detected capacity change from 0 to 32768 [pid 5066] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5063] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... ioctl resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] close(3 [pid 5066] <... openat resumed>) = 3 [pid 5064] <... openat resumed>) = 3 [pid 5072] <... close resumed>) = 0 [pid 5066] newfstatat(3, "", [pid 5064] newfstatat(3, "", [pid 5072] close(4 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... close resumed>) = 0 [pid 5066] getdents64(3, [pid 5064] getdents64(3, [pid 5072] mkdir("./file0", 0777 [pid 5066] <... getdents64 resumed>0x55555683d6f0 /* 4 entries */, 32768) = 112 [pid 5064] <... getdents64 resumed>0x55555683d6f0 /* 4 entries */, 32768) = 112 [pid 5072] <... mkdir resumed>) = 0 [pid 5066] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5064] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] unlink("./0/binderfs" [pid 5064] unlink("./0/binderfs" [pid 5072] mount("/dev/loop2", "./file0", "jfs", MS_NOSUID|MS_NODIRATIME|MS_STRICTATIME, "iocharset=cp850,errors=continue,resize,errors=continue,resize=0x0000000000000000," [pid 5066] <... unlink resumed>) = 0 [pid 5064] <... unlink resumed>) = 0 [pid 5066] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... mount resumed>) = 0 [ 79.035196][ T5073] [ 79.035196][ T5073] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.035196][ T5073] [ 79.047649][ T49] [ 79.047649][ T49] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.047649][ T49] [ 79.058837][ T2820] [ 79.058837][ T2820] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.058837][ T2820] [ 79.069661][ T1101] [ 79.069661][ T1101] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.069661][ T1101] [pid 5073] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5073] chdir("./file0") = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5073] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|FASYNC, 000) = 4 [ 79.083575][ T49] [ 79.083575][ T49] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.083575][ T49] [ 79.097147][ T2820] [ 79.097147][ T2820] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.097147][ T2820] [ 79.103591][ T5072] [ 79.103591][ T5072] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.103591][ T5072] [ 79.109324][ T1101] [ 79.109324][ T1101] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.109324][ T1101] [pid 5073] exit_group(0) = ? [pid 5072] <... mount resumed>) = 0 [ 79.135777][ T5063] [ 79.135777][ T5063] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.135777][ T5063] [ 79.147905][ T5066] [ 79.147905][ T5066] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.147905][ T5066] [ 79.157268][ T110] [ 79.157268][ T110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.157268][ T110] [ 79.159554][ T5064] [ 79.159554][ T5064] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.159554][ T5064] [ 79.170726][ T5063] [pid 5073] +++ exited with 0 +++ [pid 5072] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5073, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=31 /* 0.31 s */} --- [pid 5067] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] getdents64(3, 0x55555683d6f0 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] unlink("./0/binderfs") = 0 [pid 5072] <... openat resumed>) = 3 [pid 5067] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] chdir("./file0") = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [ 79.170726][ T5063] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.170726][ T5063] [ 79.193799][ T62] [ 79.193799][ T62] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.193799][ T62] [ 79.204696][ T110] [ 79.204696][ T110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.204696][ T110] [ 79.216722][ T109] [ 79.216722][ T109] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.216722][ T109] [ 79.229040][ T62] [pid 5072] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|FASYNC, 000) = 4 [pid 5072] exit_group(0) = ? [pid 5072] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5072, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=45 /* 0.45 s */} --- [pid 5065] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, 0x55555683d6f0 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./0/binderfs") = 0 [ 79.229040][ T62] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.229040][ T62] [ 79.241306][ T5064] [ 79.241306][ T5064] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.241306][ T5064] [ 79.249071][ T109] [ 79.249071][ T109] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.249071][ T109] [ 79.251882][ T5066] [ 79.251882][ T5066] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.251882][ T5066] [ 79.275109][ T5067] [ 79.275109][ T5067] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.275109][ T5067] [pid 5065] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] <... umount2 resumed>) = 0 [ 79.296571][ T5067] [ 79.296571][ T5067] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.296571][ T5067] [ 79.296580][ T49] [ 79.296580][ T49] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.296580][ T49] [ 79.296601][ T49] [ 79.296601][ T49] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.296601][ T49] [ 79.332714][ T110] [ 79.332714][ T110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.332714][ T110] [pid 5063] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = 0 [pid 5064] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./0/file0", [pid 5063] <... openat resumed>) = 4 [pid 5067] newfstatat(AT_FDCWD, "./0/file0", [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] newfstatat(4, "", [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] getdents64(4, [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = 0 [pid 5064] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... getdents64 resumed>0x555556845730 /* 2 entries */, 32768) = 48 [pid 5067] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... openat resumed>) = 4 [pid 5067] <... openat resumed>) = 4 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(4, "", [pid 5063] getdents64(4, [pid 5067] newfstatat(4, "", [pid 5066] newfstatat(AT_FDCWD, "./0/file0", [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... getdents64 resumed>0x555556845730 /* 0 entries */, 32768) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] getdents64(4, [pid 5063] close(4 [pid 5067] getdents64(4, [pid 5066] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... getdents64 resumed>0x555556845730 /* 2 entries */, 32768) = 48 [pid 5063] <... close resumed>) = 0 [pid 5067] <... getdents64 resumed>0x555556845730 /* 2 entries */, 32768) = 48 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] getdents64(4, [pid 5067] getdents64(4, [pid 5066] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... getdents64 resumed>0x555556845730 /* 0 entries */, 32768) = 0 [pid 5063] rmdir("./0/file0" [pid 5067] <... getdents64 resumed>0x555556845730 /* 0 entries */, 32768) = 0 [pid 5066] <... openat resumed>) = 4 [pid 5064] close(4 [pid 5063] <... rmdir resumed>) = 0 [pid 5067] close(4 [pid 5066] newfstatat(4, "", [pid 5064] <... close resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] getdents64(4, [pid 5064] rmdir("./0/file0" [pid 5066] <... getdents64 resumed>0x555556845730 /* 2 entries */, 32768) = 48 [pid 5064] <... rmdir resumed>) = 0 [pid 5066] getdents64(4, 0x555556845730 /* 0 entries */, 32768) = 0 [pid 5064] getdents64(3, [pid 5066] close(4 [pid 5064] <... getdents64 resumed>0x55555683d6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... close resumed>) = 0 [pid 5064] close(3 [pid 5066] rmdir("./0/file0" [pid 5064] <... close resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5064] rmdir("./0" [pid 5067] <... close resumed>) = 0 [pid 5066] getdents64(3, [pid 5064] <... rmdir resumed>) = 0 [pid 5067] rmdir("./0/file0" [pid 5066] <... getdents64 resumed>0x55555683d6f0 /* 0 entries */, 32768) = 0 [pid 5064] mkdir("./1", 0777 [pid 5067] <... rmdir resumed>) = 0 [pid 5066] close(3 [pid 5063] getdents64(3, [pid 5066] <... close resumed>) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 5067] getdents64(3, [pid 5066] rmdir("./0" [pid 5067] <... getdents64 resumed>0x55555683d6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5066] mkdir("./1", 0777 [pid 5063] <... getdents64 resumed>0x55555683d6f0 /* 0 entries */, 32768) = 0 [pid 5067] close(3 [pid 5066] <... mkdir resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5063] close(3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5067] <... close resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5067] rmdir("./0" [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5065] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] rmdir("./0" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5065] getdents64(4, 0x555556845730 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555556845730 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./0/file0" [pid 5067] <... rmdir resumed>) = 0 [pid 5067] mkdir("./1", 0777 [pid 5065] <... rmdir resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5063] mkdir("./1", 0777 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5065] getdents64(3, [pid 5063] <... mkdir resumed>) = 0 [ 79.349498][ T5065] [ 79.349498][ T5065] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.349498][ T5065] [ 79.362080][ T5065] [ 79.362080][ T5065] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.362080][ T5065] [pid 5067] <... openat resumed>) = 3 [pid 5065] <... getdents64 resumed>0x55555683d6f0 /* 0 entries */, 32768) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5065] close(3 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5065] <... close resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5065] rmdir("./0" [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5065] <... rmdir resumed>) = 0 [pid 5065] mkdir("./1", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5064] <... ioctl resumed>) = 0 [pid 5064] close(3 [pid 5067] <... ioctl resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... ioctl resumed>) = 0 [pid 5064] <... clone resumed>, child_tidptr=0x55555683c650) = 5078 ./strace-static-x86_64: Process 5078 attached [pid 5078] set_robust_list(0x55555683c660, 24) = 0 [pid 5078] chdir("./1") = 0 [pid 5067] close(3 [pid 5078] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] <... close resumed>) = 0 [pid 5066] <... ioctl resumed>) = 0 [pid 5063] close(3 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] <... prctl resumed>) = 0 [pid 5078] setpgid(0, 0) = 0 [pid 5078] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5078] write(3, "1000", 4) = 4 [pid 5078] close(3) = 0 [pid 5078] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5078] memfd_create("syzkaller", 0) = 3 [pid 5078] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081800000 [pid 5067] <... clone resumed>, child_tidptr=0x55555683c650) = 5079 ./strace-static-x86_64: Process 5079 attached [pid 5063] <... close resumed>) = 0 [pid 5079] set_robust_list(0x55555683c660, 24) = 0 [pid 5066] close(3 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5079] chdir("./1" [pid 5066] <... close resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x55555683c650) = 5080 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5080 attached [pid 5080] set_robust_list(0x55555683c660, 24) = 0 [pid 5080] chdir("./1"./strace-static-x86_64: Process 5081 attached ) = 0 [pid 5079] <... chdir resumed>) = 0 [pid 5079] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] <... clone resumed>, child_tidptr=0x55555683c650) = 5081 [pid 5080] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5081] set_robust_list(0x55555683c660, 24 [pid 5080] <... prctl resumed>) = 0 [pid 5079] <... prctl resumed>) = 0 [pid 5080] setpgid(0, 0) = 0 [pid 5080] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5081] <... set_robust_list resumed>) = 0 [pid 5080] <... openat resumed>) = 3 [pid 5079] setpgid(0, 0 [pid 5081] chdir("./1" [pid 5080] write(3, "1000", 4 [pid 5079] <... setpgid resumed>) = 0 [pid 5081] <... chdir resumed>) = 0 [pid 5081] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5080] <... write resumed>) = 4 [pid 5079] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5080] close(3 [pid 5081] setpgid(0, 0 [pid 5079] <... openat resumed>) = 3 [pid 5081] <... setpgid resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 5079] write(3, "1000", 4 [pid 5081] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5080] symlink("/dev/binderfs", "./binderfs" [pid 5079] <... write resumed>) = 4 [pid 5079] close(3 [pid 5081] <... openat resumed>) = 3 [pid 5080] <... symlink resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 5081] write(3, "1000", 4 [pid 5080] memfd_create("syzkaller", 0 [pid 5079] symlink("/dev/binderfs", "./binderfs" [pid 5065] <... ioctl resumed>) = 0 [pid 5080] <... memfd_create resumed>) = 3 [pid 5080] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5081] <... write resumed>) = 4 [pid 5080] <... mmap resumed>) = 0x7f2081800000 [pid 5079] <... symlink resumed>) = 0 [pid 5081] close(3) = 0 [pid 5081] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5081] memfd_create("syzkaller", 0 [pid 5079] memfd_create("syzkaller", 0 [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] <... memfd_create resumed>) = 3 [pid 5079] <... memfd_create resumed>) = 3 [pid 5065] <... clone resumed>, child_tidptr=0x55555683c650) = 5082 [pid 5081] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5079] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5081] <... mmap resumed>) = 0x7f2081800000 [pid 5079] <... mmap resumed>) = 0x7f2081800000 ./strace-static-x86_64: Process 5082 attached [pid 5082] set_robust_list(0x55555683c660, 24) = 0 [pid 5082] chdir("./1") = 0 [pid 5082] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5082] setpgid(0, 0) = 0 [pid 5082] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5082] write(3, "1000", 4) = 4 [pid 5082] close(3) = 0 [pid 5082] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5082] memfd_create("syzkaller", 0) = 3 [pid 5082] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081800000 [pid 5078] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5080] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5081] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5079] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5082] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5080] <... write resumed>) = 16777216 [pid 5080] munmap(0x7f2081800000, 138412032 [pid 5081] <... write resumed>) = 16777216 [pid 5078] <... write resumed>) = 16777216 [pid 5078] munmap(0x7f2081800000, 138412032 [pid 5081] munmap(0x7f2081800000, 138412032 [pid 5080] <... munmap resumed>) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5081] <... munmap resumed>) = 0 [pid 5080] <... openat resumed>) = 4 [pid 5079] <... write resumed>) = 16777216 [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5080] ioctl(4, LOOP_SET_FD, 3 [pid 5081] <... openat resumed>) = 4 [pid 5079] munmap(0x7f2081800000, 138412032 [pid 5081] ioctl(4, LOOP_SET_FD, 3 [pid 5078] <... munmap resumed>) = 0 [pid 5082] <... write resumed>) = 16777216 [pid 5080] <... ioctl resumed>) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5081] <... ioctl resumed>) = 0 [pid 5081] close(3 [pid 5080] close(3 [pid 5078] <... openat resumed>) = 4 [pid 5081] <... close resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 5082] munmap(0x7f2081800000, 138412032 [pid 5081] close(4 [pid 5080] close(4 [pid 5079] <... munmap resumed>) = 0 [ 80.975564][ T5080] loop0: detected capacity change from 0 to 32768 [ 80.987593][ T5081] loop3: detected capacity change from 0 to 32768 [pid 5078] ioctl(4, LOOP_SET_FD, 3 [pid 5081] <... close resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 5080] mkdir("./file0", 0777 [pid 5079] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5080] <... mkdir resumed>) = 0 [pid 5079] <... openat resumed>) = 4 [pid 5079] ioctl(4, LOOP_SET_FD, 3 [pid 5081] mkdir("./file0", 0777) = 0 [pid 5082] <... munmap resumed>) = 0 [pid 5081] mount("/dev/loop3", "./file0", "jfs", MS_NOSUID|MS_NODIRATIME|MS_STRICTATIME, "iocharset=cp850,errors=continue,resize,errors=continue,resize=0x0000000000000000," [pid 5080] mount("/dev/loop0", "./file0", "jfs", MS_NOSUID|MS_NODIRATIME|MS_STRICTATIME, "iocharset=cp850,errors=continue,resize,errors=continue,resize=0x0000000000000000," [pid 5078] <... ioctl resumed>) = 0 [pid 5078] close(3 [pid 5082] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] <... close resumed>) = 0 [ 81.020293][ T5078] loop1: detected capacity change from 0 to 32768 [ 81.029718][ T5079] loop4: detected capacity change from 0 to 32768 [ 81.054186][ T5081] [ 81.054186][ T5081] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.054186][ T5081] [pid 5082] <... openat resumed>) = 4 [pid 5079] <... ioctl resumed>) = 0 [pid 5078] close(4 [pid 5082] ioctl(4, LOOP_SET_FD, 3 [pid 5079] close(3 [pid 5078] <... close resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 5078] mkdir("./file0", 0777) = 0 [pid 5081] <... mount resumed>) = 0 [pid 5081] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5079] close(4 [pid 5081] <... openat resumed>) = 3 [pid 5079] <... close resumed>) = 0 [pid 5081] chdir("./file0") = 0 [pid 5079] mkdir("./file0", 0777 [pid 5078] mount("/dev/loop1", "./file0", "jfs", MS_NOSUID|MS_NODIRATIME|MS_STRICTATIME, "iocharset=cp850,errors=continue,resize,errors=continue,resize=0x0000000000000000," [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5079] <... mkdir resumed>) = 0 [pid 5081] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|FASYNC, 000 [pid 5080] <... mount resumed>) = 0 [pid 5079] mount("/dev/loop4", "./file0", "jfs", MS_NOSUID|MS_NODIRATIME|MS_STRICTATIME, "iocharset=cp850,errors=continue,resize,errors=continue,resize=0x0000000000000000," [pid 5080] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5081] <... openat resumed>) = 4 [pid 5080] <... openat resumed>) = 3 [pid 5080] chdir("./file0" [pid 5081] exit_group(0) = ? [pid 5080] <... chdir resumed>) = 0 [pid 5082] <... ioctl resumed>) = 0 [ 81.069608][ T5080] [ 81.069608][ T5080] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.069608][ T5080] [ 81.070477][ T5082] loop2: detected capacity change from 0 to 32768 [pid 5082] close(3 [pid 5081] +++ exited with 0 +++ [pid 5080] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5081, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=28 /* 0.28 s */} --- [pid 5080] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 5080] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|FASYNC, 000 [pid 5066] <... restart_syscall resumed>) = 0 [pid 5082] <... close resumed>) = 0 [pid 5082] close(4) = 0 [pid 5082] mkdir("./file0", 0777 [pid 5066] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5082] <... mkdir resumed>) = 0 [pid 5080] <... openat resumed>) = 4 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] mount("/dev/loop2", "./file0", "jfs", MS_NOSUID|MS_NODIRATIME|MS_STRICTATIME, "iocharset=cp850,errors=continue,resize,errors=continue,resize=0x0000000000000000," [pid 5080] exit_group(0 [pid 5066] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] getdents64(3, 0x55555683d6f0 /* 4 entries */, 32768) = 112 [pid 5080] <... exit_group resumed>) = ? [pid 5066] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 81.132168][ T5079] [ 81.132168][ T5079] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.132168][ T5079] [ 81.145288][ T5078] [ 81.145288][ T5078] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.145288][ T5078] [pid 5066] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5080] +++ exited with 0 +++ [pid 5079] <... mount resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5079] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5066] unlink("./1/binderfs" [pid 5079] <... openat resumed>) = 3 [pid 5066] <... unlink resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5080, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=25 /* 0.25 s */} --- [pid 5079] chdir("./file0" [pid 5066] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... chdir resumed>) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5063] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x55555683d6f0 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5079] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] unlink("./1/binderfs" [pid 5079] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|FASYNC, 000) = 4 [pid 5063] <... unlink resumed>) = 0 [pid 5063] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] exit_group(0 [pid 5078] <... mount resumed>) = 0 [pid 5079] <... exit_group resumed>) = ? [pid 5078] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5078] chdir("./file0" [pid 5079] +++ exited with 0 +++ [pid 5078] <... chdir resumed>) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [ 81.178244][ T5082] [ 81.178244][ T5082] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.178244][ T5082] [ 81.197048][ T62] [ 81.197048][ T62] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.197048][ T62] [ 81.221201][ T2820] [pid 5078] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|FASYNC, 000 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5079, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=31 /* 0.31 s */} --- [pid 5078] <... openat resumed>) = 4 [pid 5078] exit_group(0 [pid 5082] <... mount resumed>) = 0 [pid 5078] <... exit_group resumed>) = ? [pid 5067] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5082] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] chdir("./file0" [pid 5078] +++ exited with 0 +++ [pid 5082] <... chdir resumed>) = 0 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5078, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=32 /* 0.32 s */} --- [pid 5082] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5067] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5082] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|FASYNC, 000 [pid 5064] <... openat resumed>) = 3 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5064] getdents64(3, [pid 5067] newfstatat(3, "", [pid 5064] <... getdents64 resumed>0x55555683d6f0 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] <... openat resumed>) = 4 [pid 5064] unlink("./1/binderfs") = 0 [pid 5082] exit_group(0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] getdents64(3, [pid 5082] <... exit_group resumed>) = ? [pid 5082] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5082, si_uid=0, si_status=0, si_utime=12 /* 0.12 s */, si_stime=35 /* 0.35 s */} --- [pid 5065] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, 0x55555683d6f0 /* 4 entries */, 32768) = 112 [ 81.221201][ T2820] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.221201][ T2820] [ 81.248261][ T62] [ 81.248261][ T62] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.248261][ T62] [ 81.266859][ T2820] [ 81.266859][ T2820] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.266859][ T2820] [pid 5065] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] <... getdents64 resumed>0x55555683d6f0 /* 4 entries */, 32768) = 112 [pid 5065] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5067] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./1/binderfs") = 0 [pid 5065] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 81.279057][ T5066] [ 81.279057][ T5066] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.279057][ T5066] [ 81.280116][ T62] [ 81.280116][ T62] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.280116][ T62] [ 81.296376][ T110] [ 81.296376][ T110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.296376][ T110] [ 81.304982][ T62] [ 81.304982][ T62] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.304982][ T62] [ 81.316285][ T109] [pid 5067] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] unlink("./1/binderfs") = 0 [ 81.316285][ T109] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.316285][ T109] [ 81.325532][ T5064] [ 81.325532][ T5064] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.325532][ T5064] [ 81.332131][ T1101] [ 81.332131][ T1101] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.332131][ T1101] [ 81.354708][ T5064] [ 81.354708][ T5064] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.354708][ T5064] [ 81.366867][ T5066] [ 81.366867][ T5066] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.366867][ T5066] [ 81.367588][ T110] [ 81.367588][ T110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.367588][ T110] [ 81.387928][ T1101] [ 81.387928][ T1101] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.387928][ T1101] [ 81.388757][ T5063] [ 81.388757][ T5063] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.388757][ T5063] [ 81.411385][ T49] [ 81.411385][ T49] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.411385][ T49] [ 81.416737][ T5063] [ 81.416737][ T5063] ... Log Wrap ... Log Wrap ... Log Wrap ... [pid 5067] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = 0 [ 81.416737][ T5063] [ 81.433137][ T5065] [ 81.433137][ T5065] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.433137][ T5065] [ 81.435207][ T49] [ 81.435207][ T49] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.435207][ T49] [ 81.446881][ T109] [ 81.446881][ T109] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.446881][ T109] [ 81.465340][ T5067] [ 81.465340][ T5067] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.465340][ T5067] [ 81.467694][ T5065] [pid 5066] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] getdents64(4, 0x555556845730 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x555556845730 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./1/file0") = 0 [pid 5066] getdents64(3, 0x55555683d6f0 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./1") = 0 [pid 5066] mkdir("./2", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5063] <... umount2 resumed>) = 0 [pid 5067] <... umount2 resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5067] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(AT_FDCWD, "./1/file0", [pid 5063] newfstatat(AT_FDCWD, "./1/file0", [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... openat resumed>) = 4 [pid 5065] newfstatat(AT_FDCWD, "./1/file0", [pid 5063] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] newfstatat(4, "", [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... openat resumed>) = 4 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] getdents64(4, [pid 5065] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] newfstatat(4, "", [pid 5067] <... getdents64 resumed>0x555556845730 /* 2 entries */, 32768) = 48 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] getdents64(4, [pid 5065] <... openat resumed>) = 4 [pid 5063] getdents64(4, [pid 5067] <... getdents64 resumed>0x555556845730 /* 0 entries */, 32768) = 0 [pid 5067] close(4 [pid 5065] newfstatat(4, "", [pid 5063] <... getdents64 resumed>0x555556845730 /* 2 entries */, 32768) = 48 [pid 5067] <... close resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] rmdir("./1/file0" [pid 5065] getdents64(4, [ 81.467694][ T5065] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.467694][ T5065] [ 81.477843][ T5067] [ 81.477843][ T5067] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.477843][ T5067] [ 81.498484][ T110] [ 81.498484][ T110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.498484][ T110] [pid 5063] getdents64(4, [pid 5067] <... rmdir resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555556845730 /* 2 entries */, 32768) = 48 [pid 5063] <... getdents64 resumed>0x555556845730 /* 0 entries */, 32768) = 0 [pid 5065] getdents64(4, 0x555556845730 /* 0 entries */, 32768) = 0 [pid 5063] close(4 [pid 5065] close(4 [pid 5063] <... close resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5063] rmdir("./1/file0" [pid 5065] rmdir("./1/file0" [pid 5063] <... rmdir resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5067] getdents64(3, [pid 5063] getdents64(3, 0x55555683d6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5067] <... getdents64 resumed>0x55555683d6f0 /* 0 entries */, 32768) = 0 [pid 5067] close(3 [pid 5063] rmdir("./1" [pid 5067] <... close resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5067] rmdir("./1" [pid 5065] getdents64(3, [pid 5063] mkdir("./2", 0777 [pid 5067] <... rmdir resumed>) = 0 [pid 5065] <... getdents64 resumed>0x55555683d6f0 /* 0 entries */, 32768) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5067] mkdir("./2", 0777 [pid 5065] close(3 [pid 5067] <... mkdir resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./1") = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5065] mkdir("./2", 0777 [pid 5063] <... openat resumed>) = 3 [pid 5067] <... openat resumed>) = 3 [pid 5065] <... mkdir resumed>) = 0 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5064] <... umount2 resumed>) = 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5064] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... ioctl resumed>) = 0 [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 5083 attached [pid 5066] <... clone resumed>, child_tidptr=0x55555683c650) = 5083 [pid 5064] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(4, 0x555556845730 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555556845730 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./1/file0" [pid 5083] set_robust_list(0x55555683c660, 24 [pid 5064] <... rmdir resumed>) = 0 [pid 5083] <... set_robust_list resumed>) = 0 [pid 5083] chdir("./2" [pid 5064] getdents64(3, 0x55555683d6f0 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./1") = 0 [pid 5064] mkdir("./2", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5083] <... chdir resumed>) = 0 [pid 5083] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5083] setpgid(0, 0) = 0 [pid 5083] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5083] write(3, "1000", 4) = 4 [pid 5083] close(3) = 0 [pid 5083] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5083] memfd_create("syzkaller", 0) = 3 [pid 5083] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081800000 [pid 5067] <... ioctl resumed>) = 0 [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555683c650) = 5084 ./strace-static-x86_64: Process 5084 attached [pid 5084] set_robust_list(0x55555683c660, 24) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5084] chdir("./2") = 0 [pid 5084] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] close(3 [pid 5084] <... prctl resumed>) = 0 [pid 5084] setpgid(0, 0) = 0 [pid 5084] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... close resumed>) = 0 [pid 5084] <... openat resumed>) = 3 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5084] write(3, "1000", 4 [pid 5063] <... clone resumed>, child_tidptr=0x55555683c650) = 5085 ./strace-static-x86_64: Process 5085 attached [pid 5085] set_robust_list(0x55555683c660, 24) = 0 [pid 5085] chdir("./2") = 0 [pid 5085] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5085] setpgid(0, 0) = 0 [pid 5085] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5085] write(3, "1000", 4 [pid 5084] <... write resumed>) = 4 [pid 5085] <... write resumed>) = 4 [pid 5084] close(3 [pid 5085] close(3 [pid 5084] <... close resumed>) = 0 [pid 5085] <... close resumed>) = 0 [pid 5084] symlink("/dev/binderfs", "./binderfs" [pid 5085] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5084] <... symlink resumed>) = 0 [pid 5085] memfd_create("syzkaller", 0 [pid 5084] memfd_create("syzkaller", 0 [pid 5085] <... memfd_create resumed>) = 3 [pid 5085] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081800000 [pid 5084] <... memfd_create resumed>) = 3 [pid 5084] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5064] <... ioctl resumed>) = 0 [pid 5084] <... mmap resumed>) = 0x7f2081800000 [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555683c650) = 5086 [pid 5065] <... ioctl resumed>) = 0 [pid 5065] close(3) = 0 ./strace-static-x86_64: Process 5086 attached [pid 5086] set_robust_list(0x55555683c660, 24 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5086] <... set_robust_list resumed>) = 0 [pid 5086] chdir("./2") = 0 [pid 5086] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5086] setpgid(0, 0) = 0 [pid 5086] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] <... clone resumed>, child_tidptr=0x55555683c650) = 5087 [pid 5086] <... openat resumed>) = 3 [pid 5086] write(3, "1000", 4) = 4 [pid 5086] close(3) = 0 [pid 5086] symlink("/dev/binderfs", "./binderfs") = 0 ./strace-static-x86_64: Process 5087 attached [pid 5087] set_robust_list(0x55555683c660, 24) = 0 [pid 5086] memfd_create("syzkaller", 0 [pid 5087] chdir("./2") = 0 [pid 5086] <... memfd_create resumed>) = 3 [pid 5087] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5086] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5087] setpgid(0, 0 [pid 5086] <... mmap resumed>) = 0x7f2081800000 [pid 5087] <... setpgid resumed>) = 0 [pid 5087] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5083] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5087] write(3, "1000", 4) = 4 [pid 5087] close(3) = 0 [pid 5087] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5087] memfd_create("syzkaller", 0) = 3 [pid 5087] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081800000 [pid 5085] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5084] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5086] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5087] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5083] <... write resumed>) = 16777216 [pid 5083] munmap(0x7f2081800000, 138412032) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5083] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5083] close(3) = 0 [pid 5083] close(4) = 0 [pid 5083] mkdir("./file0", 0777) = 0 [ 82.855558][ T5083] loop3: detected capacity change from 0 to 32768 [pid 5083] mount("/dev/loop3", "./file0", "jfs", MS_NOSUID|MS_NODIRATIME|MS_STRICTATIME, "iocharset=cp850,errors=continue,resize,errors=continue,resize=0x0000000000000000,") = 0 [pid 5083] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5083] chdir("./file0") = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5083] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|FASYNC, 000) = 4 [pid 5083] exit_group(0) = ? [ 82.908480][ T5083] [ 82.908480][ T5083] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 82.908480][ T5083] [pid 5083] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5083, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=34 /* 0.34 s */} --- [pid 5066] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] getdents64(3, 0x55555683d6f0 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] unlink("./2/binderfs") = 0 [ 83.019454][ T1101] [ 83.019454][ T1101] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.019454][ T1101] [ 83.058981][ T1101] [ 83.058981][ T1101] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.058981][ T1101] [ 83.096899][ T5066] [ 83.096899][ T5066] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.096899][ T5066] [ 83.126660][ T109] [ 83.126660][ T109] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.126660][ T109] [ 83.138000][ T5066] [ 83.138000][ T5066] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.138000][ T5066] [pid 5066] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5066] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] getdents64(4, 0x555556845730 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x555556845730 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./2/file0") = 0 [pid 5066] getdents64(3, 0x55555683d6f0 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./2") = 0 [pid 5066] mkdir("./3", 0777 [pid 5085] <... write resumed>) = 16777216 [pid 5066] <... mkdir resumed>) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5085] munmap(0x7f2081800000, 138412032 [pid 5084] <... write resumed>) = 16777216 [pid 5084] munmap(0x7f2081800000, 138412032 [pid 5085] <... munmap resumed>) = 0 [pid 5085] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5084] <... munmap resumed>) = 0 [pid 5085] ioctl(4, LOOP_SET_FD, 3 [pid 5086] <... write resumed>) = 16777216 [pid 5085] <... ioctl resumed>) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5085] close(3 [pid 5084] <... openat resumed>) = 4 [pid 5084] ioctl(4, LOOP_SET_FD, 3 [pid 5085] <... close resumed>) = 0 [pid 5085] close(4) = 0 [pid 5086] munmap(0x7f2081800000, 138412032 [pid 5085] mkdir("./file0", 0777) = 0 [pid 5085] mount("/dev/loop0", "./file0", "jfs", MS_NOSUID|MS_NODIRATIME|MS_STRICTATIME, "iocharset=cp850,errors=continue,resize,errors=continue,resize=0x0000000000000000," [pid 5087] <... write resumed>) = 16777216 [pid 5084] <... ioctl resumed>) = 0 [pid 5084] close(3) = 0 [pid 5087] munmap(0x7f2081800000, 138412032 [pid 5084] close(4) = 0 [pid 5084] mkdir("./file0", 0777) = 0 [pid 5086] <... munmap resumed>) = 0 [pid 5086] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 83.307453][ T5085] loop0: detected capacity change from 0 to 32768 [ 83.332304][ T5084] loop4: detected capacity change from 0 to 32768 [pid 5086] ioctl(4, LOOP_SET_FD, 3 [pid 5084] mount("/dev/loop4", "./file0", "jfs", MS_NOSUID|MS_NODIRATIME|MS_STRICTATIME, "iocharset=cp850,errors=continue,resize,errors=continue,resize=0x0000000000000000," [pid 5086] <... ioctl resumed>) = 0 [pid 5086] close(3) = 0 [pid 5086] close(4 [pid 5085] <... mount resumed>) = 0 [pid 5086] <... close resumed>) = 0 [pid 5086] mkdir("./file0", 0777 [pid 5085] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5086] <... mkdir resumed>) = 0 [pid 5085] <... openat resumed>) = 3 [pid 5085] chdir("./file0") = 0 [ 83.386950][ T5085] [ 83.386950][ T5085] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.386950][ T5085] [ 83.406608][ T5086] loop1: detected capacity change from 0 to 32768 [pid 5086] mount("/dev/loop1", "./file0", "jfs", MS_NOSUID|MS_NODIRATIME|MS_STRICTATIME, "iocharset=cp850,errors=continue,resize,errors=continue,resize=0x0000000000000000," [pid 5085] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5087] <... munmap resumed>) = 0 [pid 5085] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5085] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|FASYNC, 000) = 4 [pid 5087] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5085] exit_group(0) = ? [pid 5087] <... openat resumed>) = 4 [pid 5085] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5085, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=31 /* 0.31 s */} --- [pid 5087] ioctl(4, LOOP_SET_FD, 3 [pid 5084] <... mount resumed>) = 0 [pid 5063] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x55555683d6f0 /* 4 entries */, 32768) = 112 [pid 5084] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./2/binderfs" [pid 5084] <... openat resumed>) = 3 [pid 5063] <... unlink resumed>) = 0 [pid 5063] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] chdir("./file0") = 0 [pid 5087] <... ioctl resumed>) = 0 [pid 5087] close(3 [pid 5084] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5087] <... close resumed>) = 0 [pid 5084] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5087] close(4 [pid 5084] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|FASYNC, 000 [pid 5087] <... close resumed>) = 0 [pid 5087] mkdir("./file0", 0777) = 0 [pid 5084] <... openat resumed>) = 4 [pid 5087] mount("/dev/loop2", "./file0", "jfs", MS_NOSUID|MS_NODIRATIME|MS_STRICTATIME, "iocharset=cp850,errors=continue,resize,errors=continue,resize=0x0000000000000000," [pid 5084] exit_group(0) = ? [ 83.450304][ T5084] [ 83.450304][ T5084] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.450304][ T5084] [ 83.457931][ T5086] [ 83.457931][ T5086] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.457931][ T5086] [ 83.480826][ T5087] loop2: detected capacity change from 0 to 32768 [pid 5084] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5084, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=27 /* 0.27 s */} --- [pid 5067] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] getdents64(3, 0x55555683d6f0 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] unlink("./2/binderfs" [pid 5086] <... mount resumed>) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 5086] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5086] <... openat resumed>) = 3 [pid 5086] chdir("./file0") = 0 [pid 5086] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [ 83.522181][ T49] [ 83.522181][ T49] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.522181][ T49] [ 83.530662][ T5087] [ 83.530662][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.530662][ T5087] [ 83.560898][ T49] [ 83.560898][ T49] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.560898][ T49] [pid 5086] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|FASYNC, 000) = 4 [pid 5086] exit_group(0) = ? [pid 5086] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5086, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=35 /* 0.35 s */} --- [pid 5064] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, 0x55555683d6f0 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] unlink("./2/binderfs") = 0 [pid 5064] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5087] <... mount resumed>) = 0 [pid 5087] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 83.575815][ T2814] [ 83.575815][ T2814] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.575815][ T2814] [ 83.599192][ T62] [ 83.599192][ T62] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.599192][ T62] [ 83.610806][ T62] [ 83.610806][ T62] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.610806][ T62] [pid 5087] chdir("./file0") = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5087] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|FASYNC, 000) = 4 [pid 5087] exit_group(0) = ? [pid 5087] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5087, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=28 /* 0.28 s */} --- [pid 5065] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, 0x55555683d6f0 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 83.627391][ T2814] [ 83.627391][ T2814] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.627391][ T2814] [ 83.639421][ T5063] [ 83.639421][ T5063] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.639421][ T5063] [pid 5065] unlink("./2/binderfs") = 0 [ 83.686993][ T109] [ 83.686993][ T109] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.686993][ T109] [ 83.697899][ T5064] [ 83.697899][ T5064] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.697899][ T5064] [ 83.706219][ T5063] [ 83.706219][ T5063] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.706219][ T5063] [ 83.709008][ T2820] [ 83.709008][ T2820] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.709008][ T2820] [ 83.718864][ T109] [pid 5065] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... ioctl resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 83.718864][ T109] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.718864][ T109] [ 83.740953][ T5067] [ 83.740953][ T5067] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.740953][ T5067] [ 83.763097][ T109] [ 83.763097][ T109] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.763097][ T109] [ 83.772344][ T2820] [ 83.772344][ T2820] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.772344][ T2820] [ 83.776022][ T5064] [pid 5066] close(3 [pid 5064] <... umount2 resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./2/file0", [pid 5066] <... close resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555683c650) = 5088 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 5088 attached [pid 5063] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5088] set_robust_list(0x55555683c660, 24 [pid 5064] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5088] <... set_robust_list resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5088] chdir("./3" [pid 5067] <... umount2 resumed>) = 0 [pid 5064] newfstatat(AT_FDCWD, "./2/file0", [pid 5063] <... openat resumed>) = 4 [pid 5067] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] newfstatat(4, "", [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 83.776022][ T5064] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.776022][ T5064] [ 83.785018][ T5067] [ 83.785018][ T5067] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.785018][ T5067] [ 83.803157][ T109] [ 83.803157][ T109] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.803157][ T109] [ 83.819225][ T5065] [ 83.819225][ T5065] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.819225][ T5065] [ 83.832149][ T5065] [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5088] <... chdir resumed>) = 0 [pid 5063] getdents64(4, [pid 5088] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] newfstatat(AT_FDCWD, "./2/file0", [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... getdents64 resumed>0x555556845730 /* 2 entries */, 32768) = 48 [pid 5088] <... prctl resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] getdents64(4, [pid 5088] setpgid(0, 0 [pid 5067] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5088] <... setpgid resumed>) = 0 [pid 5064] <... openat resumed>) = 4 [pid 5063] <... getdents64 resumed>0x555556845730 /* 0 entries */, 32768) = 0 [pid 5088] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5088] <... openat resumed>) = 3 [pid 5067] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] newfstatat(4, "", [pid 5063] close(4 [pid 5088] write(3, "1000", 4) = 4 [pid 5063] <... close resumed>) = 0 [pid 5088] close(3) = 0 [pid 5088] symlink("/dev/binderfs", "./binderfs" [pid 5067] <... openat resumed>) = 4 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] rmdir("./2/file0" [pid 5067] newfstatat(4, "", [pid 5064] getdents64(4, [pid 5063] <... rmdir resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] <... getdents64 resumed>0x555556845730 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(3, [pid 5067] getdents64(4, [pid 5064] getdents64(4, [pid 5063] <... getdents64 resumed>0x55555683d6f0 /* 0 entries */, 32768) = 0 [pid 5067] <... getdents64 resumed>0x555556845730 /* 2 entries */, 32768) = 48 [pid 5064] <... getdents64 resumed>0x555556845730 /* 0 entries */, 32768) = 0 [pid 5063] close(3 [pid 5067] getdents64(4, [pid 5065] <... umount2 resumed>) = 0 [pid 5064] close(4 [pid 5063] <... close resumed>) = 0 [pid 5067] <... getdents64 resumed>0x555556845730 /* 0 entries */, 32768) = 0 [pid 5064] <... close resumed>) = 0 [pid 5063] rmdir("./2" [pid 5067] close(4 [pid 5065] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] rmdir("./2/file0" [pid 5063] <... rmdir resumed>) = 0 [pid 5088] <... symlink resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] rmdir("./2/file0" [pid 5065] newfstatat(AT_FDCWD, "./2/file0", [pid 5064] <... rmdir resumed>) = 0 [pid 5063] mkdir("./3", 0777 [pid 5088] memfd_create("syzkaller", 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5088] <... memfd_create resumed>) = 3 [pid 5067] getdents64(3, [pid 5065] <... openat resumed>) = 4 [pid 5064] getdents64(3, [pid 5063] <... mkdir resumed>) = 0 [pid 5088] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] <... getdents64 resumed>0x55555683d6f0 /* 0 entries */, 32768) = 0 [pid 5065] newfstatat(4, "", [pid 5064] <... getdents64 resumed>0x55555683d6f0 /* 0 entries */, 32768) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5088] <... mmap resumed>) = 0x7f2081800000 [pid 5067] close(3 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] close(3 [pid 5063] <... openat resumed>) = 3 [pid 5067] <... close resumed>) = 0 [pid 5065] getdents64(4, [pid 5064] <... close resumed>) = 0 [pid 5067] rmdir("./2" [pid 5065] <... getdents64 resumed>0x555556845730 /* 2 entries */, 32768) = 48 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5065] getdents64(4, 0x555556845730 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./2/file0" [pid 5067] <... rmdir resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5067] mkdir("./3", 0777 [pid 5065] getdents64(3, [pid 5064] rmdir("./2" [pid 5065] <... getdents64 resumed>0x55555683d6f0 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5065] rmdir("./2" [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5065] <... rmdir resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5065] mkdir("./3", 0777 [pid 5064] mkdir("./3", 0777 [pid 5065] <... mkdir resumed>) = 0 [ 83.832149][ T5065] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.832149][ T5065] [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5064] <... mkdir resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] <... openat resumed>) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5064] <... openat resumed>) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5088] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5067] <... ioctl resumed>) = 0 [pid 5067] close(3 [pid 5063] <... ioctl resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5090 attached ./strace-static-x86_64: Process 5089 attached [pid 5090] set_robust_list(0x55555683c660, 24 [pid 5067] <... clone resumed>, child_tidptr=0x55555683c650) = 5090 [pid 5063] <... clone resumed>, child_tidptr=0x55555683c650) = 5089 [pid 5090] <... set_robust_list resumed>) = 0 [pid 5089] set_robust_list(0x55555683c660, 24 [pid 5090] chdir("./3" [pid 5089] <... set_robust_list resumed>) = 0 [pid 5090] <... chdir resumed>) = 0 [pid 5089] chdir("./3" [pid 5090] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5089] <... chdir resumed>) = 0 [pid 5090] <... prctl resumed>) = 0 [pid 5090] setpgid(0, 0 [pid 5089] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] <... ioctl resumed>) = 0 [pid 5090] <... setpgid resumed>) = 0 [pid 5089] <... prctl resumed>) = 0 [pid 5090] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5089] setpgid(0, 0) = 0 [pid 5089] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5090] <... openat resumed>) = 3 [pid 5089] <... openat resumed>) = 3 [pid 5090] write(3, "1000", 4 [pid 5089] write(3, "1000", 4 [pid 5064] close(3 [pid 5090] <... write resumed>) = 4 [pid 5089] <... write resumed>) = 4 [pid 5090] close(3 [pid 5089] close(3 [pid 5064] <... close resumed>) = 0 [pid 5090] <... close resumed>) = 0 [pid 5089] <... close resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5090] symlink("/dev/binderfs", "./binderfs" [pid 5089] symlink("/dev/binderfs", "./binderfs" [pid 5090] <... symlink resumed>) = 0 [pid 5089] <... symlink resumed>) = 0 [pid 5089] memfd_create("syzkaller", 0) = 3 [pid 5089] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081800000 ./strace-static-x86_64: Process 5091 attached [pid 5090] memfd_create("syzkaller", 0 [pid 5064] <... clone resumed>, child_tidptr=0x55555683c650) = 5091 [pid 5091] set_robust_list(0x55555683c660, 24) = 0 [pid 5090] <... memfd_create resumed>) = 3 [pid 5091] chdir("./3" [pid 5090] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] <... ioctl resumed>) = 0 [pid 5090] <... mmap resumed>) = 0x7f2081800000 [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5091] <... chdir resumed>) = 0 [pid 5091] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] <... clone resumed>, child_tidptr=0x55555683c650) = 5092 ./strace-static-x86_64: Process 5092 attached [pid 5091] <... prctl resumed>) = 0 [pid 5091] setpgid(0, 0 [pid 5092] set_robust_list(0x55555683c660, 24 [pid 5091] <... setpgid resumed>) = 0 [pid 5091] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5092] <... set_robust_list resumed>) = 0 [pid 5092] chdir("./3") = 0 [pid 5091] <... openat resumed>) = 3 [pid 5092] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5091] write(3, "1000", 4 [pid 5092] <... prctl resumed>) = 0 [pid 5092] setpgid(0, 0) = 0 [pid 5091] <... write resumed>) = 4 [pid 5091] close(3 [pid 5092] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5091] <... close resumed>) = 0 [pid 5091] symlink("/dev/binderfs", "./binderfs" [pid 5092] <... openat resumed>) = 3 [pid 5091] <... symlink resumed>) = 0 [pid 5092] write(3, "1000", 4) = 4 [pid 5092] close(3 [pid 5091] memfd_create("syzkaller", 0 [pid 5092] <... close resumed>) = 0 [pid 5092] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5091] <... memfd_create resumed>) = 3 [pid 5092] memfd_create("syzkaller", 0 [pid 5091] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081800000 [pid 5092] <... memfd_create resumed>) = 3 [pid 5092] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081800000 [pid 5088] <... write resumed>) = 16777216 [pid 5088] munmap(0x7f2081800000, 138412032) = 0 [pid 5089] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5088] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5088] ioctl(4, LOOP_SET_FD, 3 [pid 5090] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5088] <... ioctl resumed>) = 0 [pid 5088] close(3) = 0 [pid 5088] close(4) = 0 [pid 5088] mkdir("./file0", 0777) = 0 [ 84.759113][ T5088] loop3: detected capacity change from 0 to 32768 [pid 5088] mount("/dev/loop3", "./file0", "jfs", MS_NOSUID|MS_NODIRATIME|MS_STRICTATIME, "iocharset=cp850,errors=continue,resize,errors=continue,resize=0x0000000000000000," [pid 5091] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5088] <... mount resumed>) = 0 [pid 5088] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5088] chdir("./file0") = 0 [pid 5088] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [ 84.840474][ T5088] [ 84.840474][ T5088] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 84.840474][ T5088] [pid 5088] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|FASYNC, 000) = 4 [pid 5088] exit_group(0) = ? [pid 5088] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5088, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=28 /* 0.28 s */} --- [pid 5066] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] getdents64(3, 0x55555683d6f0 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] unlink("./3/binderfs") = 0 [pid 5066] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 84.938187][ T2820] [ 84.938187][ T2820] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 84.938187][ T2820] [ 84.954319][ T2820] [ 84.954319][ T2820] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 84.954319][ T2820] [ 84.987344][ T110] [ 84.987344][ T110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 84.987344][ T110] [ 84.999852][ T5066] [ 84.999852][ T5066] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 84.999852][ T5066] [ 85.027004][ T5066] [ 85.027004][ T5066] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.027004][ T5066] [pid 5092] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5066] <... umount2 resumed>) = 0 [pid 5066] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] getdents64(4, 0x555556845730 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x555556845730 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./3/file0") = 0 [pid 5066] getdents64(3, 0x55555683d6f0 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./3") = 0 [pid 5066] mkdir("./4", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5089] <... write resumed>) = 16777216 [pid 5090] <... write resumed>) = 16777216 [pid 5089] munmap(0x7f2081800000, 138412032 [pid 5090] munmap(0x7f2081800000, 138412032 [pid 5089] <... munmap resumed>) = 0 [pid 5089] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5089] ioctl(4, LOOP_SET_FD, 3 [pid 5090] <... munmap resumed>) = 0 [pid 5091] <... write resumed>) = 16777216 [pid 5091] munmap(0x7f2081800000, 138412032 [pid 5090] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5089] <... ioctl resumed>) = 0 [pid 5090] ioctl(4, LOOP_SET_FD, 3 [ 85.435117][ T5089] loop0: detected capacity change from 0 to 32768 [pid 5089] close(3) = 0 [pid 5089] close(4) = 0 [pid 5089] mkdir("./file0", 0777) = 0 [pid 5089] mount("/dev/loop0", "./file0", "jfs", MS_NOSUID|MS_NODIRATIME|MS_STRICTATIME, "iocharset=cp850,errors=continue,resize,errors=continue,resize=0x0000000000000000," [pid 5091] <... munmap resumed>) = 0 [pid 5090] <... ioctl resumed>) = 0 [pid 5090] close(3 [pid 5091] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5092] <... write resumed>) = 16777216 [pid 5090] <... close resumed>) = 0 [pid 5066] <... ioctl resumed>) = 0 [pid 5091] <... openat resumed>) = 4 [ 85.476954][ T5090] loop4: detected capacity change from 0 to 32768 [ 85.503572][ T5089] [ 85.503572][ T5089] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.503572][ T5089] [pid 5090] close(4 [pid 5066] close(3 [pid 5092] munmap(0x7f2081800000, 138412032 [pid 5090] <... close resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5090] mkdir("./file0", 0777 [pid 5091] ioctl(4, LOOP_SET_FD, 3 [pid 5090] <... mkdir resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5089] <... mount resumed>) = 0 [pid 5089] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5089] chdir("./file0") = 0 [pid 5089] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) ./strace-static-x86_64: Process 5093 attached [pid 5089] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|FASYNC, 000 [pid 5091] <... ioctl resumed>) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x55555683c650) = 5093 [pid 5089] <... openat resumed>) = 4 [pid 5090] mount("/dev/loop4", "./file0", "jfs", MS_NOSUID|MS_NODIRATIME|MS_STRICTATIME, "iocharset=cp850,errors=continue,resize,errors=continue,resize=0x0000000000000000," [pid 5093] set_robust_list(0x55555683c660, 24 [pid 5089] exit_group(0 [pid 5093] <... set_robust_list resumed>) = 0 [pid 5093] chdir("./4") = 0 [pid 5089] <... exit_group resumed>) = ? [pid 5093] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5089] +++ exited with 0 +++ [pid 5093] <... prctl resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5089, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=36 /* 0.36 s */} --- [pid 5093] setpgid(0, 0 [pid 5063] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5093] <... setpgid resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5093] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5093] <... openat resumed>) = 3 [pid 5063] <... openat resumed>) = 3 [pid 5093] write(3, "1000", 4 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x55555683d6f0 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./3/binderfs") = 0 [pid 5063] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5093] <... write resumed>) = 4 [pid 5093] close(3) = 0 [pid 5093] symlink("/dev/binderfs", "./binderfs") = 0 [ 85.528776][ T5091] loop1: detected capacity change from 0 to 32768 [ 85.559199][ T5090] [ 85.559199][ T5090] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.559199][ T5090] [ 85.575235][ T2820] [pid 5093] memfd_create("syzkaller", 0 [pid 5091] close(3) = 0 [pid 5091] close(4 [pid 5093] <... memfd_create resumed>) = 3 [pid 5093] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081800000 [pid 5091] <... close resumed>) = 0 [pid 5092] <... munmap resumed>) = 0 [pid 5091] mkdir("./file0", 0777 [pid 5092] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5091] <... mkdir resumed>) = 0 [pid 5092] ioctl(4, LOOP_SET_FD, 3 [pid 5091] mount("/dev/loop1", "./file0", "jfs", MS_NOSUID|MS_NODIRATIME|MS_STRICTATIME, "iocharset=cp850,errors=continue,resize,errors=continue,resize=0x0000000000000000," [pid 5092] <... ioctl resumed>) = 0 [pid 5090] <... mount resumed>) = 0 [pid 5092] close(3) = 0 [pid 5090] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5092] close(4 [pid 5090] <... openat resumed>) = 3 [ 85.575235][ T2820] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.575235][ T2820] [ 85.597473][ T5092] loop2: detected capacity change from 0 to 32768 [ 85.597958][ T2820] [ 85.597958][ T2820] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.597958][ T2820] [pid 5092] <... close resumed>) = 0 [pid 5090] chdir("./file0" [pid 5092] mkdir("./file0", 0777 [pid 5090] <... chdir resumed>) = 0 [pid 5092] <... mkdir resumed>) = 0 [pid 5090] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [ 85.628855][ T5091] [ 85.628855][ T5091] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.628855][ T5091] [pid 5092] mount("/dev/loop2", "./file0", "jfs", MS_NOSUID|MS_NODIRATIME|MS_STRICTATIME, "iocharset=cp850,errors=continue,resize,errors=continue,resize=0x0000000000000000," [pid 5090] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|FASYNC, 000) = 4 [pid 5091] <... mount resumed>) = 0 [pid 5090] exit_group(0 [pid 5091] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5090] <... exit_group resumed>) = ? [pid 5091] chdir("./file0") = 0 [pid 5091] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5091] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|FASYNC, 000) = 4 [pid 5090] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5090, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=25 /* 0.25 s */} --- [pid 5091] exit_group(0 [pid 5067] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] getdents64(3, 0x55555683d6f0 /* 4 entries */, 32768) = 112 [ 85.671387][ T110] [ 85.671387][ T110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.671387][ T110] [ 85.705216][ T5063] [ 85.705216][ T5063] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.705216][ T5063] [ 85.717589][ T5092] [pid 5067] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5091] <... exit_group resumed>) = ? [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5091] +++ exited with 0 +++ [pid 5067] unlink("./3/binderfs" [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5091, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=29 /* 0.29 s */} --- [pid 5064] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5064] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... unlink resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, 0x55555683d6f0 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] unlink("./3/binderfs") = 0 [ 85.717589][ T5092] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.717589][ T5092] [ 85.740701][ T2814] [ 85.740701][ T2814] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.740701][ T2814] [ 85.757355][ T2820] [ 85.757355][ T2820] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.757355][ T2820] [ 85.768054][ T5063] [pid 5064] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5092] <... mount resumed>) = 0 [pid 5092] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5092] chdir("./file0") = 0 [pid 5092] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [ 85.768054][ T5063] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.768054][ T5063] [ 85.776518][ T2814] [ 85.776518][ T2814] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.776518][ T2814] [ 85.794982][ T2820] [ 85.794982][ T2820] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.794982][ T2820] [ 85.807557][ T109] [ 85.807557][ T109] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.807557][ T109] [ 85.807909][ T5064] [pid 5092] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|FASYNC, 000) = 4 [pid 5092] exit_group(0) = ? [pid 5092] +++ exited with 0 +++ [pid 5063] <... umount2 resumed>) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5092, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=30 /* 0.30 s */} --- [pid 5065] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, 0x55555683d6f0 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./3/binderfs") = 0 [pid 5065] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 85.807909][ T5064] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.807909][ T5064] [ 85.826729][ T5067] [ 85.826729][ T5067] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.826729][ T5067] [ 85.840711][ T110] [ 85.840711][ T110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.840711][ T110] [ 85.866426][ T49] [pid 5063] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x555556845730 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555556845730 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./3/file0") = 0 [pid 5063] getdents64(3, 0x55555683d6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./3") = 0 [pid 5063] mkdir("./4", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5064] <... umount2 resumed>) = 0 [pid 5064] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(4, 0x555556845730 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555556845730 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./3/file0") = 0 [pid 5064] getdents64(3, 0x55555683d6f0 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./3") = 0 [pid 5064] mkdir("./4", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [ 85.866426][ T49] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.866426][ T49] [ 85.872852][ T5064] [ 85.872852][ T5064] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.872852][ T5064] [ 85.887807][ T5067] [ 85.887807][ T5067] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.887807][ T5067] [ 85.895065][ T49] [ 85.895065][ T49] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.895065][ T49] [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5067] <... umount2 resumed>) = 0 [pid 5067] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5067] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] getdents64(4, 0x555556845730 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, 0x555556845730 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5067] rmdir("./3/file0") = 0 [pid 5067] getdents64(3, 0x55555683d6f0 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./3") = 0 [pid 5067] mkdir("./4", 0777 [pid 5093] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5067] <... mkdir resumed>) = 0 [ 85.959352][ T5065] [ 85.959352][ T5065] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.959352][ T5065] [ 85.982274][ T109] [ 85.982274][ T109] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.982274][ T109] [ 86.006720][ T5065] [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5065] <... umount2 resumed>) = 0 [pid 5065] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 86.006720][ T5065] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 86.006720][ T5065] [pid 5065] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(4, 0x555556845730 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555556845730 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./3/file0") = 0 [pid 5065] getdents64(3, 0x55555683d6f0 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./3") = 0 [pid 5065] mkdir("./4", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5063] <... ioctl resumed>) = 0 [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555683c650) = 5094 ./strace-static-x86_64: Process 5094 attached [pid 5094] set_robust_list(0x55555683c660, 24) = 0 [pid 5094] chdir("./4") = 0 [pid 5094] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5094] setpgid(0, 0) = 0 [pid 5094] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5094] write(3, "1000", 4) = 4 [pid 5094] close(3) = 0 [pid 5094] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5094] memfd_create("syzkaller", 0) = 3 [pid 5094] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081800000 [pid 5064] <... ioctl resumed>) = 0 [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5095 attached , child_tidptr=0x55555683c650) = 5095 [pid 5095] set_robust_list(0x55555683c660, 24) = 0 [pid 5095] chdir("./4") = 0 [pid 5067] <... ioctl resumed>) = 0 [pid 5095] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5095] setpgid(0, 0) = 0 [pid 5095] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5096 attached [pid 5096] set_robust_list(0x55555683c660, 24) = 0 [pid 5096] chdir("./4") = 0 [pid 5095] <... openat resumed>) = 3 [pid 5067] <... clone resumed>, child_tidptr=0x55555683c650) = 5096 [pid 5096] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5095] write(3, "1000", 4 [pid 5096] <... prctl resumed>) = 0 [pid 5095] <... write resumed>) = 4 [pid 5096] setpgid(0, 0 [pid 5095] close(3) = 0 [pid 5095] symlink("/dev/binderfs", "./binderfs" [pid 5096] <... setpgid resumed>) = 0 [pid 5096] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5065] <... ioctl resumed>) = 0 [pid 5096] write(3, "1000", 4) = 4 [pid 5096] close(3) = 0 [pid 5096] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5095] <... symlink resumed>) = 0 [pid 5065] close(3 [pid 5096] memfd_create("syzkaller", 0 [pid 5095] memfd_create("syzkaller", 0 [pid 5065] <... close resumed>) = 0 [pid 5096] <... memfd_create resumed>) = 3 [pid 5095] <... memfd_create resumed>) = 3 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5096] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5095] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081800000 [pid 5096] <... mmap resumed>) = 0x7f2081800000 ./strace-static-x86_64: Process 5097 attached [pid 5097] set_robust_list(0x55555683c660, 24) = 0 [pid 5097] chdir("./4") = 0 [pid 5097] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5097] setpgid(0, 0) = 0 [pid 5097] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5097] write(3, "1000", 4) = 4 [pid 5097] close(3) = 0 [pid 5097] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5065] <... clone resumed>, child_tidptr=0x55555683c650) = 5097 [pid 5097] memfd_create("syzkaller", 0) = 3 [pid 5097] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081800000 [pid 5093] <... write resumed>) = 16777216 [pid 5093] munmap(0x7f2081800000, 138412032) = 0 [pid 5093] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5093] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5093] close(3) = 0 [pid 5093] close(4) = 0 [pid 5093] mkdir("./file0", 0777) = 0 [ 86.624175][ T5093] loop3: detected capacity change from 0 to 32768 [ 86.663222][ T5093] [ 86.663222][ T5093] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 86.663222][ T5093] [pid 5093] mount("/dev/loop3", "./file0", "jfs", MS_NOSUID|MS_NODIRATIME|MS_STRICTATIME, "iocharset=cp850,errors=continue,resize,errors=continue,resize=0x0000000000000000,") = 0 [pid 5093] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5093] chdir("./file0") = 0 [pid 5093] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5093] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|FASYNC, 000) = 4 [pid 5093] exit_group(0) = ? [pid 5093] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5093, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=35 /* 0.35 s */} --- [pid 5066] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] getdents64(3, 0x55555683d6f0 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] unlink("./4/binderfs") = 0 [pid 5066] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 86.794486][ T49] [ 86.794486][ T49] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 86.794486][ T49] [ 86.816114][ T49] [ 86.816114][ T49] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 86.816114][ T49] [ 86.847738][ T110] [ 86.847738][ T110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 86.847738][ T110] [ 86.905867][ T5066] [ 86.905867][ T5066] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 86.905867][ T5066] [ 86.955905][ T5066] [ 86.955905][ T5066] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 86.955905][ T5066] [pid 5094] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5096] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5066] <... umount2 resumed>) = 0 [pid 5066] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5095] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5097] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5066] newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] getdents64(4, 0x555556845730 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x555556845730 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./4/file0") = 0 [pid 5066] getdents64(3, 0x55555683d6f0 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./4") = 0 [pid 5066] mkdir("./5", 0777) = 0 [pid 5094] <... write resumed>) = 16777216 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5094] munmap(0x7f2081800000, 138412032 [ 87.258127][ T1155] cfg80211: failed to load regulatory.db [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5094] <... munmap resumed>) = 0 [pid 5094] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5094] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5094] close(3) = 0 [pid 5094] close(4) = 0 [pid 5094] mkdir("./file0", 0777) = 0 [ 87.352006][ T5094] loop0: detected capacity change from 0 to 32768 [pid 5094] mount("/dev/loop0", "./file0", "jfs", MS_NOSUID|MS_NODIRATIME|MS_STRICTATIME, "iocharset=cp850,errors=continue,resize,errors=continue,resize=0x0000000000000000,") = 0 [pid 5094] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5094] chdir("./file0") = 0 [pid 5094] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5094] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|FASYNC, 000) = 4 [pid 5094] exit_group(0) = ? [pid 5094] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5094, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=30 /* 0.30 s */} --- [pid 5063] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x55555683d6f0 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 87.412029][ T5094] [ 87.412029][ T5094] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.412029][ T5094] [pid 5063] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./4/binderfs") = 0 [pid 5063] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5097] <... write resumed>) = 16777216 [pid 5097] munmap(0x7f2081800000, 138412032 [pid 5095] <... write resumed>) = 16777216 [ 87.499389][ T49] [ 87.499389][ T49] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.499389][ T49] [ 87.536089][ T49] [ 87.536089][ T49] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.536089][ T49] [pid 5095] munmap(0x7f2081800000, 138412032 [pid 5097] <... munmap resumed>) = 0 [pid 5097] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 87.562273][ T5063] [ 87.562273][ T5063] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.562273][ T5063] [ 87.578330][ T5063] [ 87.578330][ T5063] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.578330][ T5063] [ 87.606065][ T110] [pid 5097] ioctl(4, LOOP_SET_FD, 3 [pid 5096] <... write resumed>) = 16777216 [pid 5095] <... munmap resumed>) = 0 [pid 5096] munmap(0x7f2081800000, 138412032 [pid 5095] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5063] <... umount2 resumed>) = 0 [pid 5097] <... ioctl resumed>) = 0 [pid 5063] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5097] close(3 [pid 5095] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5097] <... close resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./4/file0", [pid 5097] close(4 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5097] <... close resumed>) = 0 [pid 5063] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5097] mkdir("./file0", 0777 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5097] <... mkdir resumed>) = 0 [pid 5063] <... openat resumed>) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x555556845730 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555556845730 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5097] mount("/dev/loop2", "./file0", "jfs", MS_NOSUID|MS_NODIRATIME|MS_STRICTATIME, "iocharset=cp850,errors=continue,resize,errors=continue,resize=0x0000000000000000," [pid 5063] rmdir("./4/file0") = 0 [pid 5063] getdents64(3, [pid 5096] <... munmap resumed>) = 0 [pid 5095] <... ioctl resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55555683d6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... ioctl resumed>) = 0 [pid 5066] close(3 [pid 5063] close(3 [pid 5095] close(3 [pid 5066] <... close resumed>) = 0 [pid 5063] <... close resumed>) = 0 [ 87.606065][ T110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.606065][ T110] [ 87.610490][ T5097] loop2: detected capacity change from 0 to 32768 [ 87.640105][ T5095] loop1: detected capacity change from 0 to 32768 [pid 5095] <... close resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] rmdir("./4" [pid 5095] close(4 [pid 5063] <... rmdir resumed>) = 0 [pid 5095] <... close resumed>) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x55555683c650) = 5098 [pid 5063] mkdir("./5", 0777 [pid 5095] mkdir("./file0", 0777 [pid 5063] <... mkdir resumed>) = 0 [pid 5095] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5095] mount("/dev/loop1", "./file0", "jfs", MS_NOSUID|MS_NODIRATIME|MS_STRICTATIME, "iocharset=cp850,errors=continue,resize,errors=continue,resize=0x0000000000000000,"./strace-static-x86_64: Process 5098 attached [pid 5098] set_robust_list(0x55555683c660, 24 [pid 5096] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5098] <... set_robust_list resumed>) = 0 [pid 5098] chdir("./5" [pid 5096] <... openat resumed>) = 4 [pid 5098] <... chdir resumed>) = 0 [pid 5096] ioctl(4, LOOP_SET_FD, 3 [pid 5098] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5096] <... ioctl resumed>) = 0 [pid 5098] <... prctl resumed>) = 0 [pid 5097] <... mount resumed>) = 0 [pid 5097] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5097] chdir("./file0") = 0 [pid 5097] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5098] setpgid(0, 0 [pid 5097] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5098] <... setpgid resumed>) = 0 [pid 5097] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|FASYNC, 000 [pid 5098] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5096] close(3 [pid 5097] <... openat resumed>) = 4 [pid 5098] <... openat resumed>) = 3 [pid 5097] exit_group(0 [pid 5096] <... close resumed>) = 0 [pid 5098] write(3, "1000", 4 [pid 5097] <... exit_group resumed>) = ? [pid 5096] close(4 [pid 5098] <... write resumed>) = 4 [pid 5097] +++ exited with 0 +++ [pid 5098] close(3 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5097, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=31 /* 0.31 s */} --- [pid 5098] <... close resumed>) = 0 [pid 5096] <... close resumed>) = 0 [pid 5095] <... mount resumed>) = 0 [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 5098] symlink("/dev/binderfs", "./binderfs" [pid 5096] mkdir("./file0", 0777 [pid 5095] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] <... restart_syscall resumed>) = 0 [pid 5098] <... symlink resumed>) = 0 [pid 5096] <... mkdir resumed>) = 0 [pid 5096] mount("/dev/loop4", "./file0", "jfs", MS_NOSUID|MS_NODIRATIME|MS_STRICTATIME, "iocharset=cp850,errors=continue,resize,errors=continue,resize=0x0000000000000000," [pid 5098] memfd_create("syzkaller", 0) = 3 [ 87.670790][ T5097] [ 87.670790][ T5097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.670790][ T5097] [ 87.689709][ T5096] loop4: detected capacity change from 0 to 32768 [ 87.702446][ T5095] [ 87.702446][ T5095] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.702446][ T5095] [pid 5095] <... openat resumed>) = 3 [pid 5098] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5095] chdir("./file0" [pid 5065] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5098] <... mmap resumed>) = 0x7f2081800000 [pid 5095] <... chdir resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5095] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5095] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|FASYNC, 000 [pid 5065] <... openat resumed>) = 3 [pid 5065] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, 0x55555683d6f0 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5096] <... mount resumed>) = 0 [pid 5095] <... openat resumed>) = 4 [pid 5096] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5095] exit_group(0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5096] <... openat resumed>) = 3 [pid 5095] <... exit_group resumed>) = ? [pid 5096] chdir("./file0") = 0 [pid 5096] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5096] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|FASYNC, 000 [pid 5095] +++ exited with 0 +++ [pid 5096] <... openat resumed>) = 4 [pid 5096] exit_group(0) = ? [pid 5065] newfstatat(AT_FDCWD, "./4/binderfs", [pid 5096] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5095, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=30 /* 0.30 s */} --- [ 87.765580][ T5096] [ 87.765580][ T5096] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.765580][ T5096] [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5096, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=33 /* 0.33 s */} --- [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] unlink("./4/binderfs" [pid 5064] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] <... unlink resumed>) = 0 [pid 5067] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] newfstatat(3, "", [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5064] getdents64(3, 0x55555683d6f0 /* 4 entries */, 32768) = 112 [pid 5067] newfstatat(3, "", [pid 5064] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] newfstatat(AT_FDCWD, "./4/binderfs", [pid 5067] getdents64(3, [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... getdents64 resumed>0x55555683d6f0 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] unlink("./4/binderfs" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(AT_FDCWD, "./4/binderfs", [pid 5064] <... unlink resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] unlink("./4/binderfs") = 0 [ 87.824799][ T2814] [ 87.824799][ T2814] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.824799][ T2814] [ 87.862813][ T2814] [ 87.862813][ T2814] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.862813][ T2814] [ 87.874889][ T49] [ 87.874889][ T49] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.874889][ T49] [ 87.886558][ T62] [ 87.886558][ T62] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.886558][ T62] [ 87.896437][ T49] [ 87.896437][ T49] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.896437][ T49] [ 87.917141][ T109] [ 87.917141][ T109] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.917141][ T109] [ 87.928502][ T62] [ 87.928502][ T62] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.928502][ T62] [ 87.939629][ T5064] [ 87.939629][ T5064] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.939629][ T5064] [ 87.955735][ T5065] [ 87.955735][ T5065] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.955735][ T5065] [ 87.963391][ T5064] [ 87.963391][ T5064] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.963391][ T5064] [ 87.970447][ T5067] [ 87.970447][ T5067] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.970447][ T5067] [ 87.995174][ T110] [ 87.995174][ T110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.995174][ T110] [ 88.015741][ T5065] [ 88.015741][ T5065] ... Log Wrap ... Log Wrap ... Log Wrap ... [pid 5067] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... umount2 resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5065] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... ioctl resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(4, 0x555556845730 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555556845730 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./4/file0" [pid 5064] newfstatat(AT_FDCWD, "./4/file0", [pid 5065] <... rmdir resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] getdents64(3, 0x55555683d6f0 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./4") = 0 [ 88.015741][ T5065] [ 88.019832][ T5067] [ 88.019832][ T5067] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 88.019832][ T5067] [ 88.063850][ T109] [ 88.063850][ T109] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 88.063850][ T109] [ 88.090544][ T109] ================================================================== [ 88.098667][ T109] BUG: KASAN: slab-use-after-free in txEnd+0x354/0x560 [ 88.105585][ T109] Write of size 8 at addr ffff888074a0f040 by task jfsCommit/109 [ 88.113331][ T109] [ 88.115740][ T109] CPU: 0 PID: 109 Comm: jfsCommit Not tainted 6.8.0-rc4-syzkaller-00034-g8d3dea210042 #0 [ 88.125624][ T109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 88.135715][ T109] Call Trace: [ 88.139008][ T109] [ 88.141947][ T109] dump_stack_lvl+0x1e7/0x2e0 [ 88.146703][ T109] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.151923][ T109] ? __pfx__printk+0x10/0x10 [ 88.156533][ T109] ? _printk+0xd5/0x120 [ 88.160710][ T109] ? __virt_addr_valid+0x183/0x520 [ 88.165844][ T109] ? __virt_addr_valid+0x183/0x520 [ 88.170980][ T109] print_report+0x167/0x540 [ 88.175509][ T109] ? __virt_addr_valid+0x183/0x520 [ 88.180647][ T109] ? __virt_addr_valid+0x183/0x520 [ 88.185786][ T109] ? __virt_addr_valid+0x44e/0x520 [ 88.190922][ T109] ? __phys_addr+0xba/0x170 [ 88.195439][ T109] ? txEnd+0x354/0x560 [ 88.199517][ T109] kasan_report+0x142/0x180 [ 88.204046][ T109] ? txEnd+0x354/0x560 [ 88.208128][ T109] kasan_check_range+0x282/0x290 [ 88.213082][ T109] txEnd+0x354/0x560 [ 88.216992][ T109] jfs_lazycommit+0x619/0xb70 [ 88.221686][ T109] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 88.227595][ T109] ? lockdep_hardirqs_on+0x98/0x140 [ 88.232814][ T109] ? __pfx_jfs_lazycommit+0x10/0x10 [ 88.238027][ T109] ? __pfx_default_wake_function+0x10/0x10 [ 88.243851][ T109] ? __kthread_parkme+0x168/0x1d0 [ 88.248894][ T109] ? __pfx_jfs_lazycommit+0x10/0x10 [ 88.254106][ T109] kthread+0x2ef/0x390 [ 88.258186][ T109] ? __pfx_jfs_lazycommit+0x10/0x10 [ 88.263402][ T109] ? __pfx_kthread+0x10/0x10 [ 88.268001][ T109] ret_from_fork+0x4b/0x80 [ 88.272436][ T109] ? __pfx_kthread+0x10/0x10 [ 88.277038][ T109] ret_from_fork_asm+0x1b/0x30 [ 88.281830][ T109] [ 88.284854][ T109] [ 88.287271][ T109] Allocated by task 5096: [ 88.291602][ T109] kasan_save_track+0x3f/0x80 [ 88.296308][ T109] __kasan_kmalloc+0x98/0xb0 [ 88.300906][ T109] kmalloc_trace+0x1d6/0x360 [ 88.305509][ T109] lmLogOpen+0x335/0x1050 [ 88.309847][ T109] jfs_mount_rw+0xf1/0x6a0 [ 88.314278][ T109] jfs_fill_super+0x681/0xc50 [ 88.319058][ T109] mount_bdev+0x20a/0x2d0 [ 88.323395][ T109] legacy_get_tree+0xee/0x190 [ 88.328083][ T109] vfs_get_tree+0x90/0x2a0 [ 88.332509][ T109] do_new_mount+0x2be/0xb40 [ 88.337019][ T109] __se_sys_mount+0x2d9/0x3c0 [ 88.341706][ T109] do_syscall_64+0xf9/0x240 [ 88.346236][ T109] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 88.352147][ T109] [ 88.354475][ T109] Freed by task 5067: [ 88.358458][ T109] kasan_save_track+0x3f/0x80 [ 88.363147][ T109] kasan_save_free_info+0x4e/0x60 [ 88.368191][ T109] poison_slab_object+0xa6/0xe0 [ 88.373060][ T109] __kasan_slab_free+0x34/0x70 [ 88.377836][ T109] kfree+0x14a/0x380 [ 88.381765][ T109] lmLogClose+0x2a1/0x530 [ 88.386105][ T109] jfs_umount+0x2ce/0x3a0 [ 88.390449][ T109] jfs_put_super+0x8a/0x190 [ 88.394969][ T109] generic_shutdown_super+0x136/0x2d0 [ 88.400349][ T109] kill_block_super+0x44/0x90 [ 88.405036][ T109] deactivate_locked_super+0xc4/0x130 [ 88.410416][ T109] cleanup_mnt+0x426/0x4c0 [ 88.414843][ T109] task_work_run+0x24e/0x310 [ 88.419446][ T109] ptrace_notify+0x2d1/0x380 [ 88.424091][ T109] syscall_exit_work+0xbb/0x170 [ 88.428962][ T109] syscall_exit_to_user_mode+0x27f/0x370 [ 88.434620][ T109] do_syscall_64+0x108/0x240 [ 88.439314][ T109] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 88.445231][ T109] [ 88.447559][ T109] The buggy address belongs to the object at ffff888074a0f000 [ 88.447559][ T109] which belongs to the cache kmalloc-1k of size 1024 [ 88.461713][ T109] The buggy address is located 64 bytes inside of [ 88.461713][ T109] freed 1024-byte region [ffff888074a0f000, ffff888074a0f400) [ 88.475529][ T109] [ 88.477862][ T109] The buggy address belongs to the physical page: [ 88.484280][ T109] page:ffffea0001d28200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x74a08 [ 88.494438][ T109] head:ffffea0001d28200 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 88.503381][ T109] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 88.511368][ T109] page_type: 0xffffffff() [ 88.515713][ T109] raw: 00fff00000000840 ffff888014c41dc0 ffffea0001fb0600 0000000000000002 [ 88.524308][ T109] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 88.532895][ T109] page dumped because: kasan: bad access detected [ 88.539348][ T109] page_owner tracks the page as allocated [ 88.545077][ T109] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4816, tgid 4816 (init), ts 50228572582, free_ts 50209450937 [ 88.565762][ T109] post_alloc_hook+0x1ea/0x210 [ 88.570548][ T109] get_page_from_freelist+0x33ea/0x3580 [ 88.576111][ T109] __alloc_pages+0x255/0x680 [ 88.580721][ T109] alloc_slab_page+0x5f/0x160 [ 88.585412][ T109] new_slab+0x84/0x2f0 [ 88.589495][ T109] ___slab_alloc+0xd17/0x13e0 [ 88.594188][ T109] __kmalloc+0x2e0/0x490 [ 88.598448][ T109] load_elf_binary+0x2f1/0x2590 [ 88.603314][ T109] bprm_execve+0xaf7/0x1790 [ 88.610520][ T109] do_execveat_common+0x552/0x6f0 [ 88.615648][ T109] __x64_sys_execve+0x92/0xb0 [ 88.620348][ T109] do_syscall_64+0xf9/0x240 [ 88.624870][ T109] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 88.630782][ T109] page last free pid 4815 tgid 4815 stack trace: [ 88.637122][ T109] free_unref_page_prepare+0x95d/0xa80 [ 88.642599][ T109] free_unref_page+0x37/0x3f0 [ 88.647297][ T109] __put_partials+0xeb/0x130 [ 88.651901][ T109] put_cpu_partial+0x17b/0x250 [ 88.656679][ T109] __slab_free+0x302/0x410 [ 88.661118][ T109] qlist_free_all+0x6d/0xd0 [ 88.665638][ T109] kasan_quarantine_reduce+0x14f/0x170 [ 88.671121][ T109] __kasan_slab_alloc+0x23/0x80 [ 88.675985][ T109] kmem_cache_alloc+0x16f/0x340 [ 88.680870][ T109] alloc_empty_file+0x9e/0x1d0 [ 88.685681][ T109] path_openat+0xfa/0x3240 [ 88.690137][ T109] do_filp_open+0x234/0x490 [ 88.694651][ T109] do_sys_openat2+0x13e/0x1d0 [ 88.699435][ T109] __x64_sys_openat+0x247/0x2a0 [ 88.704303][ T109] do_syscall_64+0xf9/0x240 [ 88.708821][ T109] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 88.714752][ T109] [ 88.717085][ T109] Memory state around the buggy address: [ 88.722813][ T109] ffff888074a0ef00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 88.730881][ T109] ffff888074a0ef80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 88.738947][ T109] >ffff888074a0f000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.747026][ T109] ^ [ 88.753187][ T109] ffff888074a0f080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.761282][ T109] ffff888074a0f100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.769384][ T109] ================================================================== [ 88.777740][ T109] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 88.784976][ T109] CPU: 1 PID: 109 Comm: jfsCommit Not tainted 6.8.0-rc4-syzkaller-00034-g8d3dea210042 #0 [ 88.794811][ T109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 88.804887][ T109] Call Trace: [ 88.808182][ T109] [ 88.811124][ T109] dump_stack_lvl+0x1e7/0x2e0 [ 88.815824][ T109] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.821241][ T109] ? __pfx__printk+0x10/0x10 [ 88.825863][ T109] ? vscnprintf+0x5d/0x90 [ 88.830218][ T109] panic+0x349/0x860 [ 88.834159][ T109] ? check_panic_on_warn+0x21/0xb0 [ 88.839287][ T109] ? __pfx_panic+0x10/0x10 [ 88.843728][ T109] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 88.849815][ T109] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 88.856162][ T109] ? print_report+0x4ff/0x540 [ 88.860862][ T109] check_panic_on_warn+0x86/0xb0 [ 88.865824][ T109] ? txEnd+0x354/0x560 [ 88.869909][ T109] end_report+0x6e/0x140 [ 88.874166][ T109] kasan_report+0x153/0x180 [ 88.878686][ T109] ? txEnd+0x354/0x560 [ 88.882781][ T109] kasan_check_range+0x282/0x290 [ 88.887758][ T109] txEnd+0x354/0x560 [ 88.891672][ T109] jfs_lazycommit+0x619/0xb70 [ 88.896363][ T109] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 88.902286][ T109] ? lockdep_hardirqs_on+0x98/0x140 [ 88.907508][ T109] ? __pfx_jfs_lazycommit+0x10/0x10 [ 88.912719][ T109] ? __pfx_default_wake_function+0x10/0x10 [ 88.918552][ T109] ? __kthread_parkme+0x168/0x1d0 [ 88.923624][ T109] ? __pfx_jfs_lazycommit+0x10/0x10 [ 88.928908][ T109] kthread+0x2ef/0x390 [ 88.933008][ T109] ? __pfx_jfs_lazycommit+0x10/0x10 [ 88.938243][ T109] ? __pfx_kthread+0x10/0x10 [ 88.942969][ T109] ret_from_fork+0x4b/0x80 [ 88.947532][ T109] ? __pfx_kthread+0x10/0x10 [ 88.952170][ T109] ret_from_fork_asm+0x1b/0x30 [ 88.956985][ T109] [ 88.960214][ T109] Kernel Offset: disabled [ 88.964540][ T109] Rebooting in 86400 seconds..