./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor766421203 <...> Warning: Permanently added '10.128.0.3' (ED25519) to the list of known hosts. execve("./syz-executor766421203", ["./syz-executor766421203"], 0x7ffcd441ee10 /* 10 vars */) = 0 brk(NULL) = 0x555594deb000 brk(0x555594debd40) = 0x555594debd40 arch_prctl(ARCH_SET_FS, 0x555594deb3c0) = 0 set_tid_address(0x555594deb690) = 5842 set_robust_list(0x555594deb6a0, 24) = 0 rseq(0x555594debce0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor766421203", 4096) = 27 getrandom("\x62\xc0\xef\xa5\x93\x3e\xad\x99", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555594debd40 brk(0x555594e0cd40) = 0x555594e0cd40 brk(0x555594e0d000) = 0x555594e0d000 mprotect(0x7f62876bd000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 mkdir("./syzkaller.W7YR1J", 0700) = 0 chmod("./syzkaller.W7YR1J", 0777) = 0 chdir("./syzkaller.W7YR1J") = 0 mkdir("./0", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5843 attached [pid 5843] set_robust_list(0x555594deb6a0, 24) = 0 [pid 5843] chdir("./0" [pid 5842] <... clone resumed>, child_tidptr=0x555594deb690) = 5843 [pid 5843] <... chdir resumed>) = 0 [pid 5843] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5843] setpgid(0, 0) = 0 [pid 5843] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5843] write(3, "1000", 4) = 4 [pid 5843] close(3) = 0 [pid 5843] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5843] write(1, "executing program\n", 18) = 18 [pid 5843] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5843] rt_sigaction(SIGRT_1, {sa_handler=0x7f6287661eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6287653060}, NULL, 8) = 0 [pid 5843] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5843] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875d0000 [pid 5843] mprotect(0x7f62875d1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5843] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5843] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875f0990, parent_tid=0x7f62875f0990, exit_signal=0, stack=0x7f62875d0000, stack_size=0x20300, tls=0x7f62875f06c0}./strace-static-x86_64: Process 5844 attached [pid 5844] rseq(0x7f62875f0fe0, 0x20, 0, 0x53053053) = 0 [pid 5844] set_robust_list(0x7f62875f09a0, 24 [pid 5843] <... clone3 resumed> => {parent_tid=[5844]}, 88) = 5844 [pid 5844] <... set_robust_list resumed>) = 0 [pid 5843] rt_sigprocmask(SIG_SETMASK, [], [pid 5844] rt_sigprocmask(SIG_SETMASK, [], [pid 5843] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5844] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5843] futex(0x7f62876c36a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5844] memfd_create("syzkaller", 0 [pid 5843] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5844] <... memfd_create resumed>) = 3 [pid 5843] <... futex resumed>) = 0 [pid 5844] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f627f000000 [pid 5843] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875af000 [pid 5843] mprotect(0x7f62875b0000, 131072, PROT_READ|PROT_WRITE [pid 5844] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768) = 32768 [pid 5843] <... mprotect resumed>) = 0 [pid 5844] munmap(0x7f627f000000, 138412032 [pid 5843] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5844] <... munmap resumed>) = 0 [pid 5843] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5843] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875cf990, parent_tid=0x7f62875cf990, exit_signal=0, stack=0x7f62875af000, stack_size=0x20300, tls=0x7f62875cf6c0}./strace-static-x86_64: Process 5845 attached [pid 5844] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5845] rseq(0x7f62875cffe0, 0x20, 0, 0x53053053 [pid 5844] <... openat resumed>) = 4 [pid 5845] <... rseq resumed>) = 0 [pid 5845] set_robust_list(0x7f62875cf9a0, 24 [pid 5844] ioctl(4, LOOP_SET_FD, 3 [pid 5845] <... set_robust_list resumed>) = 0 [pid 5845] rt_sigprocmask(SIG_SETMASK, [], [pid 5843] <... clone3 resumed> => {parent_tid=[5845]}, 88) = 5845 [pid 5845] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5843] rt_sigprocmask(SIG_SETMASK, [], [pid 5845] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5843] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5844] <... ioctl resumed>) = 0 [pid 5844] close(3) = 0 [pid 5843] futex(0x7f62876c36b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5844] close(4 [pid 5843] futex(0x7f62876c36bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5845] <... futex resumed>) = 0 [pid 5844] <... close resumed>) = 0 [pid 5844] mkdir("./file0", 0777 [pid 5845] openat(AT_FDCWD, "./file0", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5844] <... mkdir resumed>) = 0 [pid 5844] mount("/dev/loop0", "./file0", "hfs", MS_NOSUID|MS_SYNCHRONOUS, "codepage=iso8859-5,umask=0000000000000777,iocharset=cp869," [pid 5845] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5843] <... futex resumed>) = 0 [pid 5845] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5844] <... mount resumed>) = 0 [pid 5844] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 116.981313][ T5844] loop0: detected capacity change from 0 to 64 [pid 5844] chdir("./file0") = 0 [pid 5844] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5844] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5843] exit_group(0 [pid 5844] futex(0x7f62876c36a8, FUTEX_WAIT_PRIVATE, 0, NULL) = ? [pid 5845] <... futex resumed>) = ? [pid 5843] <... exit_group resumed>) = ? [pid 5845] +++ exited with 0 +++ [pid 5844] +++ exited with 0 +++ [pid 5843] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5843, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555594dec730 /* 4 entries */, 32768) = 112 umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555594df4770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555594df4770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./0/file0") = 0 umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./0/binderfs") = 0 getdents64(3, 0x555594dec730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./0") = 0 mkdir("./1", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555594deb690) = 5846 ./strace-static-x86_64: Process 5846 attached [pid 5846] set_robust_list(0x555594deb6a0, 24) = 0 [pid 5846] chdir("./1") = 0 [pid 5846] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5846] setpgid(0, 0) = 0 [pid 5846] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5846] write(3, "1000", 4) = 4 [pid 5846] close(3) = 0 [pid 5846] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5846] write(1, "executing program\n", 18) = 18 [pid 5846] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5846] rt_sigaction(SIGRT_1, {sa_handler=0x7f6287661eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6287653060}, NULL, 8) = 0 [pid 5846] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5846] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875d0000 [pid 5846] mprotect(0x7f62875d1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5846] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5846] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875f0990, parent_tid=0x7f62875f0990, exit_signal=0, stack=0x7f62875d0000, stack_size=0x20300, tls=0x7f62875f06c0}./strace-static-x86_64: Process 5847 attached => {parent_tid=[5847]}, 88) = 5847 [pid 5846] rt_sigprocmask(SIG_SETMASK, [], [pid 5847] rseq(0x7f62875f0fe0, 0x20, 0, 0x53053053 [pid 5846] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5847] <... rseq resumed>) = 0 [pid 5846] futex(0x7f62876c36a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5847] set_robust_list(0x7f62875f09a0, 24 [pid 5846] <... futex resumed>) = 0 [pid 5847] <... set_robust_list resumed>) = 0 [pid 5847] rt_sigprocmask(SIG_SETMASK, [], [pid 5846] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5847] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5846] <... futex resumed>) = 0 [pid 5847] memfd_create("syzkaller", 0 [pid 5846] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5847] <... memfd_create resumed>) = 3 [pid 5846] <... mmap resumed>) = 0x7f62875af000 [pid 5847] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5846] mprotect(0x7f62875b0000, 131072, PROT_READ|PROT_WRITE [pid 5847] <... mmap resumed>) = 0x7f627f000000 [pid 5846] <... mprotect resumed>) = 0 [pid 5846] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5847] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768 [pid 5846] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875cf990, parent_tid=0x7f62875cf990, exit_signal=0, stack=0x7f62875af000, stack_size=0x20300, tls=0x7f62875cf6c0}./strace-static-x86_64: Process 5848 attached [pid 5848] rseq(0x7f62875cffe0, 0x20, 0, 0x53053053 [pid 5847] <... write resumed>) = 32768 [pid 5848] <... rseq resumed>) = 0 [pid 5848] set_robust_list(0x7f62875cf9a0, 24 [pid 5847] munmap(0x7f627f000000, 138412032 [pid 5846] <... clone3 resumed> => {parent_tid=[5848]}, 88) = 5848 [pid 5848] <... set_robust_list resumed>) = 0 [pid 5846] rt_sigprocmask(SIG_SETMASK, [], [pid 5848] rt_sigprocmask(SIG_SETMASK, [], [pid 5847] <... munmap resumed>) = 0 [pid 5846] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5846] futex(0x7f62876c36b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5848] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5846] <... futex resumed>) = 0 [pid 5848] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5846] futex(0x7f62876c36bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5847] <... openat resumed>) = 4 [pid 5848] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5847] ioctl(4, LOOP_SET_FD, 3 [pid 5848] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5846] <... futex resumed>) = 0 [pid 5848] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5847] <... ioctl resumed>) = 0 [pid 5847] close(3) = 0 [pid 5847] close(4) = 0 [pid 5847] mkdir("./file0", 0777) = 0 [pid 5847] mount("/dev/loop0", "./file0", "hfs", MS_NOSUID|MS_SYNCHRONOUS, "codepage=iso8859-5,umask=0000000000000777,iocharset=cp869,") = 0 [ 117.465068][ T5847] loop0: detected capacity change from 0 to 64 [pid 5847] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5847] chdir("./file0") = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5847] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5846] exit_group(0 [pid 5847] futex(0x7f62876c36a8, FUTEX_WAIT_PRIVATE, 0, NULL) = ? [pid 5846] <... exit_group resumed>) = ? [pid 5847] +++ exited with 0 +++ [pid 5848] <... futex resumed>) = ? [pid 5848] +++ exited with 0 +++ [pid 5846] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5846, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555594dec730 /* 4 entries */, 32768) = 112 umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555594df4770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555594df4770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./1/file0") = 0 umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./1/binderfs") = 0 getdents64(3, 0x555594dec730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./1") = 0 mkdir("./2", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5849 attached , child_tidptr=0x555594deb690) = 5849 [pid 5849] set_robust_list(0x555594deb6a0, 24) = 0 [pid 5849] chdir("./2") = 0 [pid 5849] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5849] setpgid(0, 0) = 0 [pid 5849] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5849] write(3, "1000", 4) = 4 [pid 5849] close(3) = 0 [pid 5849] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5849] write(1, "executing program\n", 18) = 18 [pid 5849] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5849] rt_sigaction(SIGRT_1, {sa_handler=0x7f6287661eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6287653060}, NULL, 8) = 0 [pid 5849] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5849] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875d0000 [pid 5849] mprotect(0x7f62875d1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5849] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5849] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875f0990, parent_tid=0x7f62875f0990, exit_signal=0, stack=0x7f62875d0000, stack_size=0x20300, tls=0x7f62875f06c0}./strace-static-x86_64: Process 5850 attached [pid 5850] rseq(0x7f62875f0fe0, 0x20, 0, 0x53053053) = 0 [pid 5849] <... clone3 resumed> => {parent_tid=[5850]}, 88) = 5850 [pid 5850] set_robust_list(0x7f62875f09a0, 24 [pid 5849] rt_sigprocmask(SIG_SETMASK, [], [pid 5850] <... set_robust_list resumed>) = 0 [pid 5849] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5850] rt_sigprocmask(SIG_SETMASK, [], [pid 5849] futex(0x7f62876c36a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5850] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5849] <... futex resumed>) = 0 [pid 5850] memfd_create("syzkaller", 0 [pid 5849] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5849] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875af000 [pid 5850] <... memfd_create resumed>) = 3 [pid 5849] mprotect(0x7f62875b0000, 131072, PROT_READ|PROT_WRITE [pid 5850] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5849] <... mprotect resumed>) = 0 [pid 5850] <... mmap resumed>) = 0x7f627f000000 [pid 5849] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5850] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768 [pid 5849] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5850] <... write resumed>) = 32768 [pid 5849] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875cf990, parent_tid=0x7f62875cf990, exit_signal=0, stack=0x7f62875af000, stack_size=0x20300, tls=0x7f62875cf6c0}./strace-static-x86_64: Process 5851 attached [pid 5850] munmap(0x7f627f000000, 138412032 [pid 5851] rseq(0x7f62875cffe0, 0x20, 0, 0x53053053 [pid 5850] <... munmap resumed>) = 0 [pid 5851] <... rseq resumed>) = 0 [pid 5851] set_robust_list(0x7f62875cf9a0, 24) = 0 [pid 5849] <... clone3 resumed> => {parent_tid=[5851]}, 88) = 5851 [pid 5851] rt_sigprocmask(SIG_SETMASK, [], [pid 5850] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5849] rt_sigprocmask(SIG_SETMASK, [], [pid 5851] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5850] <... openat resumed>) = 4 [pid 5849] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5851] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5849] futex(0x7f62876c36b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5851] <... futex resumed>) = 0 [pid 5849] <... futex resumed>) = 1 [pid 5851] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5850] ioctl(4, LOOP_SET_FD, 3 [pid 5849] futex(0x7f62876c36bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5851] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5851] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5849] <... futex resumed>) = 0 [pid 5851] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5850] <... ioctl resumed>) = 0 [pid 5850] close(3) = 0 [pid 5850] close(4) = 0 [pid 5850] mkdir("./file0", 0777) = 0 [pid 5850] mount("/dev/loop0", "./file0", "hfs", MS_NOSUID|MS_SYNCHRONOUS, "codepage=iso8859-5,umask=0000000000000777,iocharset=cp869,") = 0 [pid 5850] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5850] chdir("./file0") = 0 [ 117.941524][ T5850] loop0: detected capacity change from 0 to 64 [pid 5850] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5850] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5850] futex(0x7f62876c36a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5849] exit_group(0 [pid 5851] <... futex resumed>) = ? [pid 5850] <... futex resumed>) = ? [pid 5849] <... exit_group resumed>) = ? [pid 5851] +++ exited with 0 +++ [pid 5850] +++ exited with 0 +++ [pid 5849] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5849, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555594dec730 /* 4 entries */, 32768) = 112 umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555594df4770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555594df4770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./2/file0") = 0 umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./2/binderfs") = 0 getdents64(3, 0x555594dec730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./2") = 0 mkdir("./3", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5852 attached , child_tidptr=0x555594deb690) = 5852 [pid 5852] set_robust_list(0x555594deb6a0, 24) = 0 [pid 5852] chdir("./3") = 0 [pid 5852] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5852] setpgid(0, 0) = 0 [pid 5852] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5852] write(3, "1000", 4) = 4 [pid 5852] close(3) = 0 [pid 5852] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5852] write(1, "executing program\n", 18) = 18 [pid 5852] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5852] rt_sigaction(SIGRT_1, {sa_handler=0x7f6287661eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6287653060}, NULL, 8) = 0 [pid 5852] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5852] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875d0000 [pid 5852] mprotect(0x7f62875d1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5852] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5852] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875f0990, parent_tid=0x7f62875f0990, exit_signal=0, stack=0x7f62875d0000, stack_size=0x20300, tls=0x7f62875f06c0}./strace-static-x86_64: Process 5853 attached [pid 5853] rseq(0x7f62875f0fe0, 0x20, 0, 0x53053053) = 0 [pid 5852] <... clone3 resumed> => {parent_tid=[5853]}, 88) = 5853 [pid 5853] set_robust_list(0x7f62875f09a0, 24 [pid 5852] rt_sigprocmask(SIG_SETMASK, [], [pid 5853] <... set_robust_list resumed>) = 0 [pid 5852] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5853] rt_sigprocmask(SIG_SETMASK, [], [pid 5852] futex(0x7f62876c36a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5853] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5852] <... futex resumed>) = 0 [pid 5853] memfd_create("syzkaller", 0 [pid 5852] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5852] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875af000 [pid 5853] <... memfd_create resumed>) = 3 [pid 5852] mprotect(0x7f62875b0000, 131072, PROT_READ|PROT_WRITE [pid 5853] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5852] <... mprotect resumed>) = 0 [pid 5853] <... mmap resumed>) = 0x7f627f000000 [pid 5852] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5853] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768 [pid 5852] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5852] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875cf990, parent_tid=0x7f62875cf990, exit_signal=0, stack=0x7f62875af000, stack_size=0x20300, tls=0x7f62875cf6c0}./strace-static-x86_64: Process 5854 attached [pid 5853] <... write resumed>) = 32768 [pid 5854] rseq(0x7f62875cffe0, 0x20, 0, 0x53053053 [pid 5853] munmap(0x7f627f000000, 138412032 [pid 5854] <... rseq resumed>) = 0 [pid 5853] <... munmap resumed>) = 0 [pid 5854] set_robust_list(0x7f62875cf9a0, 24) = 0 [pid 5852] <... clone3 resumed> => {parent_tid=[5854]}, 88) = 5854 [pid 5854] rt_sigprocmask(SIG_SETMASK, [], [pid 5853] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5852] rt_sigprocmask(SIG_SETMASK, [], [pid 5854] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5853] <... openat resumed>) = 4 [pid 5852] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5854] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5852] futex(0x7f62876c36b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5854] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5853] ioctl(4, LOOP_SET_FD, 3 [pid 5852] <... futex resumed>) = 0 [pid 5854] openat(AT_FDCWD, "./file0", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5852] futex(0x7f62876c36bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5854] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5852] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5854] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5853] <... ioctl resumed>) = 0 [pid 5853] close(3) = 0 [pid 5853] close(4) = 0 [pid 5853] mkdir("./file0", 0777) = 0 [pid 5853] mount("/dev/loop0", "./file0", "hfs", MS_NOSUID|MS_SYNCHRONOUS, "codepage=iso8859-5,umask=0000000000000777,iocharset=cp869,") = 0 [pid 5853] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5853] chdir("./file0") = 0 [ 118.441629][ T5853] loop0: detected capacity change from 0 to 64 [pid 5853] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5853] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5852] exit_group(0 [pid 5853] <... futex resumed>) = 0 [pid 5853] futex(0x7f62876c36a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5854] <... futex resumed>) = ? [pid 5852] <... exit_group resumed>) = ? [pid 5854] +++ exited with 0 +++ [pid 5853] <... futex resumed>) = ? [pid 5853] +++ exited with 0 +++ [pid 5852] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5852, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555594dec730 /* 4 entries */, 32768) = 112 umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555594df4770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555594df4770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./3/file0") = 0 umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./3/binderfs") = 0 getdents64(3, 0x555594dec730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./3") = 0 mkdir("./4", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5855 attached [pid 5855] set_robust_list(0x555594deb6a0, 24) = 0 [pid 5855] chdir("./4") = 0 [pid 5855] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5855] setpgid(0, 0 [pid 5842] <... clone resumed>, child_tidptr=0x555594deb690) = 5855 [pid 5855] <... setpgid resumed>) = 0 [pid 5855] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5855] write(3, "1000", 4) = 4 [pid 5855] close(3) = 0 [pid 5855] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5855] write(1, "executing program\n", 18) = 18 [pid 5855] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5855] rt_sigaction(SIGRT_1, {sa_handler=0x7f6287661eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6287653060}, NULL, 8) = 0 [pid 5855] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5855] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875d0000 [pid 5855] mprotect(0x7f62875d1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5855] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5855] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875f0990, parent_tid=0x7f62875f0990, exit_signal=0, stack=0x7f62875d0000, stack_size=0x20300, tls=0x7f62875f06c0}./strace-static-x86_64: Process 5857 attached [pid 5857] rseq(0x7f62875f0fe0, 0x20, 0, 0x53053053 [pid 5855] <... clone3 resumed> => {parent_tid=[5857]}, 88) = 5857 [pid 5857] <... rseq resumed>) = 0 [pid 5857] set_robust_list(0x7f62875f09a0, 24 [pid 5855] rt_sigprocmask(SIG_SETMASK, [], [pid 5857] <... set_robust_list resumed>) = 0 [pid 5855] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5857] rt_sigprocmask(SIG_SETMASK, [], [pid 5855] futex(0x7f62876c36a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5857] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5855] <... futex resumed>) = 0 [pid 5857] memfd_create("syzkaller", 0 [pid 5855] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5855] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5857] <... memfd_create resumed>) = 3 [pid 5855] <... mmap resumed>) = 0x7f62875af000 [pid 5857] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5855] mprotect(0x7f62875b0000, 131072, PROT_READ|PROT_WRITE [pid 5857] <... mmap resumed>) = 0x7f627f000000 [pid 5855] <... mprotect resumed>) = 0 [pid 5857] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768) = 32768 [pid 5855] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5857] munmap(0x7f627f000000, 138412032 [pid 5855] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5857] <... munmap resumed>) = 0 [pid 5855] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875cf990, parent_tid=0x7f62875cf990, exit_signal=0, stack=0x7f62875af000, stack_size=0x20300, tls=0x7f62875cf6c0}./strace-static-x86_64: Process 5858 attached [pid 5857] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5858] rseq(0x7f62875cffe0, 0x20, 0, 0x53053053 [pid 5857] <... openat resumed>) = 4 [pid 5858] <... rseq resumed>) = 0 [pid 5858] set_robust_list(0x7f62875cf9a0, 24) = 0 [pid 5857] ioctl(4, LOOP_SET_FD, 3 [pid 5855] <... clone3 resumed> => {parent_tid=[5858]}, 88) = 5858 [pid 5858] rt_sigprocmask(SIG_SETMASK, [], [pid 5855] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5855] futex(0x7f62876c36b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5855] futex(0x7f62876c36bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5858] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5858] openat(AT_FDCWD, "./file0", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5857] <... ioctl resumed>) = 0 [pid 5858] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5857] close(3 [pid 5858] <... futex resumed>) = 1 [pid 5857] <... close resumed>) = 0 [pid 5855] <... futex resumed>) = 0 [pid 5857] close(4) = 0 [pid 5858] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5857] mkdir("./file0", 0777) = 0 [pid 5857] mount("/dev/loop0", "./file0", "hfs", MS_NOSUID|MS_SYNCHRONOUS, "codepage=iso8859-5,umask=0000000000000777,iocharset=cp869,") = 0 [pid 5857] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5857] chdir("./file0") = 0 [pid 5857] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5857] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5855] exit_group(0 [pid 5858] <... futex resumed>) = ? [pid 5857] <... futex resumed>) = ? [pid 5858] +++ exited with 0 +++ [pid 5857] +++ exited with 0 +++ [pid 5855] <... exit_group resumed>) = ? [pid 5855] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5855, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [ 118.903463][ T5857] loop0: detected capacity change from 0 to 64 restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555594dec730 /* 4 entries */, 32768) = 112 umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555594df4770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555594df4770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./4/file0") = 0 umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./4/binderfs") = 0 getdents64(3, 0x555594dec730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./4") = 0 mkdir("./5", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5859 attached [pid 5859] set_robust_list(0x555594deb6a0, 24) = 0 [pid 5859] chdir("./5" [pid 5842] <... clone resumed>, child_tidptr=0x555594deb690) = 5859 [pid 5859] <... chdir resumed>) = 0 [pid 5859] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5859] setpgid(0, 0) = 0 [pid 5859] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5859] write(3, "1000", 4) = 4 [pid 5859] close(3) = 0 [pid 5859] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5859] write(1, "executing program\n", 18) = 18 [pid 5859] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5859] rt_sigaction(SIGRT_1, {sa_handler=0x7f6287661eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6287653060}, NULL, 8) = 0 [pid 5859] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5859] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875d0000 [pid 5859] mprotect(0x7f62875d1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5859] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5859] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875f0990, parent_tid=0x7f62875f0990, exit_signal=0, stack=0x7f62875d0000, stack_size=0x20300, tls=0x7f62875f06c0}./strace-static-x86_64: Process 5860 attached [pid 5860] rseq(0x7f62875f0fe0, 0x20, 0, 0x53053053) = 0 [pid 5860] set_robust_list(0x7f62875f09a0, 24 [pid 5859] <... clone3 resumed> => {parent_tid=[5860]}, 88) = 5860 [pid 5860] <... set_robust_list resumed>) = 0 [pid 5859] rt_sigprocmask(SIG_SETMASK, [], [pid 5860] rt_sigprocmask(SIG_SETMASK, [], [pid 5859] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5860] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5860] memfd_create("syzkaller", 0 [pid 5859] futex(0x7f62876c36a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5860] <... memfd_create resumed>) = 3 [pid 5859] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5860] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5859] <... futex resumed>) = 0 [pid 5860] <... mmap resumed>) = 0x7f627f000000 [pid 5859] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875af000 [pid 5860] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768 [pid 5859] mprotect(0x7f62875b0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5860] <... write resumed>) = 32768 [pid 5859] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5859] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875cf990, parent_tid=0x7f62875cf990, exit_signal=0, stack=0x7f62875af000, stack_size=0x20300, tls=0x7f62875cf6c0}./strace-static-x86_64: Process 5861 attached [pid 5860] munmap(0x7f627f000000, 138412032) = 0 [pid 5861] rseq(0x7f62875cffe0, 0x20, 0, 0x53053053) = 0 [pid 5859] <... clone3 resumed> => {parent_tid=[5861]}, 88) = 5861 [pid 5861] set_robust_list(0x7f62875cf9a0, 24 [pid 5860] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5859] rt_sigprocmask(SIG_SETMASK, [], [pid 5861] <... set_robust_list resumed>) = 0 [pid 5860] <... openat resumed>) = 4 [pid 5859] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5861] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5859] futex(0x7f62876c36b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5861] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5860] ioctl(4, LOOP_SET_FD, 3 [pid 5859] <... futex resumed>) = 0 [pid 5861] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5859] futex(0x7f62876c36bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5861] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5861] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5859] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5860] <... ioctl resumed>) = 0 [pid 5860] close(3) = 0 [pid 5860] close(4) = 0 [pid 5860] mkdir("./file0", 0777) = 0 [pid 5860] mount("/dev/loop0", "./file0", "hfs", MS_NOSUID|MS_SYNCHRONOUS, "codepage=iso8859-5,umask=0000000000000777,iocharset=cp869,") = 0 [pid 5860] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5860] chdir("./file0") = 0 [pid 5860] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 119.403948][ T5860] loop0: detected capacity change from 0 to 64 [pid 5860] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5860] futex(0x7f62876c36a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5859] exit_group(0 [pid 5861] <... futex resumed>) = ? [pid 5860] <... futex resumed>) = ? [pid 5859] <... exit_group resumed>) = ? [pid 5861] +++ exited with 0 +++ [pid 5860] +++ exited with 0 +++ [pid 5859] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5859, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555594dec730 /* 4 entries */, 32768) = 112 umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555594df4770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555594df4770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./5/file0") = 0 umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./5/binderfs") = 0 getdents64(3, 0x555594dec730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./5") = 0 mkdir("./6", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5862 attached , child_tidptr=0x555594deb690) = 5862 [pid 5862] set_robust_list(0x555594deb6a0, 24) = 0 [pid 5862] chdir("./6") = 0 [pid 5862] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5862] setpgid(0, 0) = 0 [pid 5862] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5862] write(3, "1000", 4) = 4 [pid 5862] close(3) = 0 [pid 5862] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5862] write(1, "executing program\n", 18executing program ) = 18 [pid 5862] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5862] rt_sigaction(SIGRT_1, {sa_handler=0x7f6287661eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6287653060}, NULL, 8) = 0 [pid 5862] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5862] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875d0000 [pid 5862] mprotect(0x7f62875d1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5862] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5862] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875f0990, parent_tid=0x7f62875f0990, exit_signal=0, stack=0x7f62875d0000, stack_size=0x20300, tls=0x7f62875f06c0}./strace-static-x86_64: Process 5863 attached [pid 5863] rseq(0x7f62875f0fe0, 0x20, 0, 0x53053053) = 0 [pid 5863] set_robust_list(0x7f62875f09a0, 24) = 0 [pid 5863] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5863] futex(0x7f62876c36a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5862] <... clone3 resumed> => {parent_tid=[5863]}, 88) = 5863 [pid 5862] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5862] futex(0x7f62876c36a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5863] <... futex resumed>) = 0 [pid 5862] <... futex resumed>) = 1 [pid 5863] memfd_create("syzkaller", 0 [pid 5862] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5863] <... memfd_create resumed>) = 3 [pid 5863] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f627f000000 [pid 5862] <... futex resumed>) = 0 [pid 5862] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5863] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768 [pid 5862] <... mmap resumed>) = 0x7f62875af000 [pid 5862] mprotect(0x7f62875b0000, 131072, PROT_READ|PROT_WRITE [pid 5863] <... write resumed>) = 32768 [pid 5863] munmap(0x7f627f000000, 138412032) = 0 [pid 5862] <... mprotect resumed>) = 0 [pid 5862] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5863] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5862] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5862] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875cf990, parent_tid=0x7f62875cf990, exit_signal=0, stack=0x7f62875af000, stack_size=0x20300, tls=0x7f62875cf6c0}./strace-static-x86_64: Process 5864 attached [pid 5864] rseq(0x7f62875cffe0, 0x20, 0, 0x53053053 [pid 5862] <... clone3 resumed> => {parent_tid=[5864]}, 88) = 5864 [pid 5864] <... rseq resumed>) = 0 [pid 5862] rt_sigprocmask(SIG_SETMASK, [], [pid 5864] set_robust_list(0x7f62875cf9a0, 24 [pid 5862] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5864] <... set_robust_list resumed>) = 0 [pid 5862] futex(0x7f62876c36b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5864] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5862] <... futex resumed>) = 0 [pid 5864] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5863] <... openat resumed>) = 4 [pid 5862] futex(0x7f62876c36bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5863] ioctl(4, LOOP_SET_FD, 3 [pid 5864] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5864] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5863] <... ioctl resumed>) = 0 [pid 5862] <... futex resumed>) = 0 [pid 5863] close(3 [pid 5864] <... futex resumed>) = 1 [pid 5863] <... close resumed>) = 0 [pid 5864] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5863] close(4) = 0 [pid 5863] mkdir("./file0", 0777) = 0 [pid 5863] mount("/dev/loop0", "./file0", "hfs", MS_NOSUID|MS_SYNCHRONOUS, "codepage=iso8859-5,umask=0000000000000777,iocharset=cp869,") = 0 [pid 5863] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5863] chdir("./file0") = 0 [pid 5863] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5863] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5863] futex(0x7f62876c36a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5862] exit_group(0 [pid 5864] <... futex resumed>) = ? [pid 5863] <... futex resumed>) = ? [pid 5862] <... exit_group resumed>) = ? [pid 5864] +++ exited with 0 +++ [pid 5863] +++ exited with 0 +++ [pid 5862] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5862, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 [ 120.005735][ T5863] loop0: detected capacity change from 0 to 64 umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555594dec730 /* 4 entries */, 32768) = 112 umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555594df4770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555594df4770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./6/file0") = 0 umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./6/binderfs") = 0 getdents64(3, 0x555594dec730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./6") = 0 mkdir("./7", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5865 attached , child_tidptr=0x555594deb690) = 5865 [pid 5865] set_robust_list(0x555594deb6a0, 24) = 0 [pid 5865] chdir("./7") = 0 [pid 5865] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5865] setpgid(0, 0) = 0 [pid 5865] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5865] write(3, "1000", 4) = 4 [pid 5865] close(3) = 0 [pid 5865] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5865] write(1, "executing program\n", 18) = 18 [pid 5865] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5865] rt_sigaction(SIGRT_1, {sa_handler=0x7f6287661eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6287653060}, NULL, 8) = 0 [pid 5865] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5865] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875d0000 [pid 5865] mprotect(0x7f62875d1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5865] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5865] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875f0990, parent_tid=0x7f62875f0990, exit_signal=0, stack=0x7f62875d0000, stack_size=0x20300, tls=0x7f62875f06c0}./strace-static-x86_64: Process 5866 attached [pid 5866] rseq(0x7f62875f0fe0, 0x20, 0, 0x53053053) = 0 [pid 5866] set_robust_list(0x7f62875f09a0, 24 [pid 5865] <... clone3 resumed> => {parent_tid=[5866]}, 88) = 5866 [pid 5866] <... set_robust_list resumed>) = 0 [pid 5865] rt_sigprocmask(SIG_SETMASK, [], [pid 5866] rt_sigprocmask(SIG_SETMASK, [], [pid 5865] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5866] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5865] futex(0x7f62876c36a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5865] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5865] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875af000 [pid 5866] memfd_create("syzkaller", 0 [pid 5865] mprotect(0x7f62875b0000, 131072, PROT_READ|PROT_WRITE [pid 5866] <... memfd_create resumed>) = 3 [pid 5866] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5865] <... mprotect resumed>) = 0 [pid 5865] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5866] <... mmap resumed>) = 0x7f627f000000 [pid 5865] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5865] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875cf990, parent_tid=0x7f62875cf990, exit_signal=0, stack=0x7f62875af000, stack_size=0x20300, tls=0x7f62875cf6c0} [pid 5866] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768./strace-static-x86_64: Process 5867 attached ) = 32768 [pid 5867] rseq(0x7f62875cffe0, 0x20, 0, 0x53053053 [pid 5865] <... clone3 resumed> => {parent_tid=[5867]}, 88) = 5867 [pid 5867] <... rseq resumed>) = 0 [pid 5866] munmap(0x7f627f000000, 138412032 [pid 5867] set_robust_list(0x7f62875cf9a0, 24 [pid 5866] <... munmap resumed>) = 0 [pid 5865] rt_sigprocmask(SIG_SETMASK, [], [pid 5867] <... set_robust_list resumed>) = 0 [pid 5867] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5867] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5865] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5866] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5865] futex(0x7f62876c36b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5867] <... futex resumed>) = 0 [pid 5866] <... openat resumed>) = 4 [pid 5865] <... futex resumed>) = 1 [pid 5867] openat(AT_FDCWD, "./file0", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5865] futex(0x7f62876c36bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5866] ioctl(4, LOOP_SET_FD, 3 [pid 5867] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5867] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5865] <... futex resumed>) = 0 [pid 5866] <... ioctl resumed>) = 0 [pid 5866] close(3) = 0 [pid 5866] close(4) = 0 [pid 5866] mkdir("./file0", 0777) = 0 [pid 5866] mount("/dev/loop0", "./file0", "hfs", MS_NOSUID|MS_SYNCHRONOUS, "codepage=iso8859-5,umask=0000000000000777,iocharset=cp869,") = 0 [ 120.554613][ T5866] loop0: detected capacity change from 0 to 64 [pid 5866] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5866] chdir("./file0") = 0 [pid 5866] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5866] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5865] exit_group(0 [pid 5866] <... futex resumed>) = 0 [pid 5867] <... futex resumed>) = ? [pid 5865] <... exit_group resumed>) = ? [pid 5867] +++ exited with 0 +++ [pid 5866] +++ exited with 0 +++ [pid 5865] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5865, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555594dec730 /* 4 entries */, 32768) = 112 umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555594df4770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555594df4770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./7/file0") = 0 umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./7/binderfs") = 0 getdents64(3, 0x555594dec730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./7") = 0 mkdir("./8", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5868 attached [pid 5868] set_robust_list(0x555594deb6a0, 24 [pid 5842] <... clone resumed>, child_tidptr=0x555594deb690) = 5868 [pid 5868] <... set_robust_list resumed>) = 0 [pid 5868] chdir("./8") = 0 [pid 5868] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5868] setpgid(0, 0) = 0 [pid 5868] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5868] write(3, "1000", 4) = 4 [pid 5868] close(3) = 0 [pid 5868] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5868] write(1, "executing program\n", 18executing program ) = 18 [pid 5868] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5868] rt_sigaction(SIGRT_1, {sa_handler=0x7f6287661eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6287653060}, NULL, 8) = 0 [pid 5868] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5868] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875d0000 [pid 5868] mprotect(0x7f62875d1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5868] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5868] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875f0990, parent_tid=0x7f62875f0990, exit_signal=0, stack=0x7f62875d0000, stack_size=0x20300, tls=0x7f62875f06c0}./strace-static-x86_64: Process 5869 attached [pid 5869] rseq(0x7f62875f0fe0, 0x20, 0, 0x53053053) = 0 [pid 5869] set_robust_list(0x7f62875f09a0, 24 [pid 5868] <... clone3 resumed> => {parent_tid=[5869]}, 88) = 5869 [pid 5869] <... set_robust_list resumed>) = 0 [pid 5868] rt_sigprocmask(SIG_SETMASK, [], [pid 5869] rt_sigprocmask(SIG_SETMASK, [], [pid 5868] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5869] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5868] futex(0x7f62876c36a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5869] memfd_create("syzkaller", 0 [pid 5868] <... futex resumed>) = 0 [pid 5869] <... memfd_create resumed>) = 3 [pid 5868] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5869] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5868] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5869] <... mmap resumed>) = 0x7f627f000000 [pid 5868] <... mmap resumed>) = 0x7f62875af000 [pid 5868] mprotect(0x7f62875b0000, 131072, PROT_READ|PROT_WRITE [pid 5869] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768 [pid 5868] <... mprotect resumed>) = 0 [pid 5868] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5869] <... write resumed>) = 32768 [pid 5868] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875cf990, parent_tid=0x7f62875cf990, exit_signal=0, stack=0x7f62875af000, stack_size=0x20300, tls=0x7f62875cf6c0}./strace-static-x86_64: Process 5870 attached [pid 5870] rseq(0x7f62875cffe0, 0x20, 0, 0x53053053) = 0 [pid 5869] munmap(0x7f627f000000, 138412032 [pid 5870] set_robust_list(0x7f62875cf9a0, 24) = 0 [pid 5868] <... clone3 resumed> => {parent_tid=[5870]}, 88) = 5870 [pid 5870] rt_sigprocmask(SIG_SETMASK, [], [pid 5869] <... munmap resumed>) = 0 [pid 5868] rt_sigprocmask(SIG_SETMASK, [], [pid 5869] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5870] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5868] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5870] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5868] futex(0x7f62876c36b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5870] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5868] <... futex resumed>) = 0 [pid 5870] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5869] <... openat resumed>) = 4 [pid 5868] futex(0x7f62876c36bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5870] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5870] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5869] ioctl(4, LOOP_SET_FD, 3 [pid 5870] <... futex resumed>) = 1 [pid 5868] <... futex resumed>) = 0 [pid 5870] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5869] <... ioctl resumed>) = 0 [pid 5869] close(3) = 0 [pid 5869] close(4) = 0 [pid 5869] mkdir("./file0", 0777) = 0 [pid 5869] mount("/dev/loop0", "./file0", "hfs", MS_NOSUID|MS_SYNCHRONOUS, "codepage=iso8859-5,umask=0000000000000777,iocharset=cp869,") = 0 [pid 5869] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5869] chdir("./file0") = 0 [pid 5869] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5869] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5868] exit_group(0 [pid 5869] futex(0x7f62876c36a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5870] <... futex resumed>) = ? [pid 5870] +++ exited with 0 +++ [pid 5869] <... futex resumed>) = ? [pid 5868] <... exit_group resumed>) = ? [ 121.012725][ T5869] loop0: detected capacity change from 0 to 64 [pid 5869] +++ exited with 0 +++ [pid 5868] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5868, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555594dec730 /* 4 entries */, 32768) = 112 umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555594df4770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555594df4770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./8/file0") = 0 umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./8/binderfs") = 0 getdents64(3, 0x555594dec730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./8") = 0 mkdir("./9", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5871 attached , child_tidptr=0x555594deb690) = 5871 [pid 5871] set_robust_list(0x555594deb6a0, 24) = 0 [pid 5871] chdir("./9") = 0 [pid 5871] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5871] setpgid(0, 0) = 0 [pid 5871] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5871] write(3, "1000", 4) = 4 [pid 5871] close(3) = 0 [pid 5871] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5871] write(1, "executing program\n", 18executing program ) = 18 [pid 5871] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5871] rt_sigaction(SIGRT_1, {sa_handler=0x7f6287661eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6287653060}, NULL, 8) = 0 [pid 5871] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5871] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875d0000 [pid 5871] mprotect(0x7f62875d1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5871] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5871] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875f0990, parent_tid=0x7f62875f0990, exit_signal=0, stack=0x7f62875d0000, stack_size=0x20300, tls=0x7f62875f06c0}./strace-static-x86_64: Process 5872 attached [pid 5872] rseq(0x7f62875f0fe0, 0x20, 0, 0x53053053) = 0 [pid 5872] set_robust_list(0x7f62875f09a0, 24) = 0 [pid 5872] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5872] futex(0x7f62876c36a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5871] <... clone3 resumed> => {parent_tid=[5872]}, 88) = 5872 [pid 5871] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5871] futex(0x7f62876c36a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5872] <... futex resumed>) = 0 [pid 5871] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5872] memfd_create("syzkaller", 0 [pid 5871] <... futex resumed>) = 0 [pid 5871] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5872] <... memfd_create resumed>) = 3 [pid 5871] <... mmap resumed>) = 0x7f62875af000 [pid 5872] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5871] mprotect(0x7f62875b0000, 131072, PROT_READ|PROT_WRITE [pid 5872] <... mmap resumed>) = 0x7f627f000000 [pid 5871] <... mprotect resumed>) = 0 [pid 5871] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5872] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768 [pid 5871] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5871] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875cf990, parent_tid=0x7f62875cf990, exit_signal=0, stack=0x7f62875af000, stack_size=0x20300, tls=0x7f62875cf6c0}./strace-static-x86_64: Process 5873 attached [pid 5872] <... write resumed>) = 32768 [pid 5872] munmap(0x7f627f000000, 138412032 [pid 5873] rseq(0x7f62875cffe0, 0x20, 0, 0x53053053 [pid 5872] <... munmap resumed>) = 0 [pid 5871] <... clone3 resumed> => {parent_tid=[5873]}, 88) = 5873 [pid 5872] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5873] <... rseq resumed>) = 0 [pid 5871] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5873] set_robust_list(0x7f62875cf9a0, 24 [pid 5872] <... openat resumed>) = 4 [pid 5871] futex(0x7f62876c36b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5873] <... set_robust_list resumed>) = 0 [pid 5873] rt_sigprocmask(SIG_SETMASK, [], [pid 5872] ioctl(4, LOOP_SET_FD, 3 [pid 5871] <... futex resumed>) = 0 [pid 5873] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5871] futex(0x7f62876c36bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5873] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5872] <... ioctl resumed>) = 0 [pid 5873] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5873] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5872] close(3 [pid 5873] <... futex resumed>) = 1 [pid 5871] <... futex resumed>) = 0 [pid 5873] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5872] <... close resumed>) = 0 [pid 5872] close(4) = 0 [pid 5872] mkdir("./file0", 0777) = 0 [pid 5872] mount("/dev/loop0", "./file0", "hfs", MS_NOSUID|MS_SYNCHRONOUS, "codepage=iso8859-5,umask=0000000000000777,iocharset=cp869,") = 0 [ 121.473109][ T5872] loop0: detected capacity change from 0 to 64 [pid 5872] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5872] chdir("./file0") = 0 [pid 5872] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5872] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5871] exit_group(0 [pid 5872] <... futex resumed>) = 0 [pid 5871] <... exit_group resumed>) = ? [pid 5873] <... futex resumed>) = ? [pid 5873] +++ exited with 0 +++ [pid 5872] +++ exited with 0 +++ [pid 5871] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5871, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555594dec730 /* 4 entries */, 32768) = 112 umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555594df4770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555594df4770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./9/file0") = 0 umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./9/binderfs") = 0 getdents64(3, 0x555594dec730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./9") = 0 mkdir("./10", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5874 attached , child_tidptr=0x555594deb690) = 5874 [pid 5874] set_robust_list(0x555594deb6a0, 24) = 0 [pid 5874] chdir("./10") = 0 [pid 5874] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5874] setpgid(0, 0) = 0 [pid 5874] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5874] write(3, "1000", 4) = 4 [pid 5874] close(3) = 0 [pid 5874] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5874] write(1, "executing program\n", 18) = 18 [pid 5874] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5874] rt_sigaction(SIGRT_1, {sa_handler=0x7f6287661eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6287653060}, NULL, 8) = 0 [pid 5874] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5874] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875d0000 [pid 5874] mprotect(0x7f62875d1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5874] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5874] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875f0990, parent_tid=0x7f62875f0990, exit_signal=0, stack=0x7f62875d0000, stack_size=0x20300, tls=0x7f62875f06c0}./strace-static-x86_64: Process 5875 attached => {parent_tid=[5875]}, 88) = 5875 [pid 5874] rt_sigprocmask(SIG_SETMASK, [], [pid 5875] rseq(0x7f62875f0fe0, 0x20, 0, 0x53053053) = 0 [pid 5874] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5875] set_robust_list(0x7f62875f09a0, 24 [pid 5874] futex(0x7f62876c36a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5875] <... set_robust_list resumed>) = 0 [pid 5874] <... futex resumed>) = 0 [pid 5875] rt_sigprocmask(SIG_SETMASK, [], [pid 5874] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5875] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5874] <... futex resumed>) = 0 [pid 5875] memfd_create("syzkaller", 0 [pid 5874] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5875] <... memfd_create resumed>) = 3 [pid 5875] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f627f000000 [pid 5874] <... mmap resumed>) = 0x7f62875af000 [pid 5874] mprotect(0x7f62875b0000, 131072, PROT_READ|PROT_WRITE [pid 5875] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768 [pid 5874] <... mprotect resumed>) = 0 [pid 5875] <... write resumed>) = 32768 [pid 5874] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5875] munmap(0x7f627f000000, 138412032) = 0 [pid 5874] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5874] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875cf990, parent_tid=0x7f62875cf990, exit_signal=0, stack=0x7f62875af000, stack_size=0x20300, tls=0x7f62875cf6c0}./strace-static-x86_64: Process 5876 attached [pid 5875] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5876] rseq(0x7f62875cffe0, 0x20, 0, 0x53053053) = 0 [pid 5875] ioctl(4, LOOP_SET_FD, 3 [pid 5874] <... clone3 resumed> => {parent_tid=[5876]}, 88) = 5876 [pid 5876] set_robust_list(0x7f62875cf9a0, 24 [pid 5874] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5874] futex(0x7f62876c36b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5874] futex(0x7f62876c36bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5876] <... set_robust_list resumed>) = 0 [pid 5876] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5876] openat(AT_FDCWD, "./file0", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5876] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5875] <... ioctl resumed>) = 0 [pid 5876] <... futex resumed>) = 1 [pid 5875] close(3 [pid 5874] <... futex resumed>) = 0 [pid 5875] <... close resumed>) = 0 [pid 5876] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5875] close(4) = 0 [pid 5875] mkdir("./file0", 0777) = 0 [pid 5875] mount("/dev/loop0", "./file0", "hfs", MS_NOSUID|MS_SYNCHRONOUS, "codepage=iso8859-5,umask=0000000000000777,iocharset=cp869,") = 0 [pid 5875] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5875] chdir("./file0") = 0 [ 121.973530][ T5875] loop0: detected capacity change from 0 to 64 [pid 5875] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5875] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5875] futex(0x7f62876c36a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5874] exit_group(0 [pid 5876] <... futex resumed>) = ? [pid 5875] <... futex resumed>) = ? [pid 5874] <... exit_group resumed>) = ? [pid 5876] +++ exited with 0 +++ [pid 5875] +++ exited with 0 +++ [pid 5874] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5874, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555594dec730 /* 4 entries */, 32768) = 112 umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555594df4770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555594df4770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./10/file0") = 0 umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./10/binderfs") = 0 getdents64(3, 0x555594dec730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./10") = 0 mkdir("./11", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5877 attached , child_tidptr=0x555594deb690) = 5877 [pid 5877] set_robust_list(0x555594deb6a0, 24) = 0 [pid 5877] chdir("./11") = 0 [pid 5877] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5877] setpgid(0, 0) = 0 [pid 5877] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5877] write(3, "1000", 4) = 4 [pid 5877] close(3) = 0 [pid 5877] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5877] write(1, "executing program\n", 18executing program ) = 18 [pid 5877] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5877] rt_sigaction(SIGRT_1, {sa_handler=0x7f6287661eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6287653060}, NULL, 8) = 0 [pid 5877] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5877] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875d0000 [pid 5877] mprotect(0x7f62875d1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5877] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5877] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875f0990, parent_tid=0x7f62875f0990, exit_signal=0, stack=0x7f62875d0000, stack_size=0x20300, tls=0x7f62875f06c0}./strace-static-x86_64: Process 5878 attached [pid 5878] rseq(0x7f62875f0fe0, 0x20, 0, 0x53053053 [pid 5877] <... clone3 resumed> => {parent_tid=[5878]}, 88) = 5878 [pid 5878] <... rseq resumed>) = 0 [pid 5878] set_robust_list(0x7f62875f09a0, 24 [pid 5877] rt_sigprocmask(SIG_SETMASK, [], [pid 5878] <... set_robust_list resumed>) = 0 [pid 5877] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5878] rt_sigprocmask(SIG_SETMASK, [], [pid 5877] futex(0x7f62876c36a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5878] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5878] memfd_create("syzkaller", 0) = 3 [pid 5877] <... futex resumed>) = 0 [pid 5877] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5878] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5877] <... futex resumed>) = 0 [pid 5877] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5878] <... mmap resumed>) = 0x7f627f000000 [pid 5877] <... mmap resumed>) = 0x7f62875af000 [pid 5877] mprotect(0x7f62875b0000, 131072, PROT_READ|PROT_WRITE [pid 5878] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768 [pid 5877] <... mprotect resumed>) = 0 [pid 5878] <... write resumed>) = 32768 [pid 5878] munmap(0x7f627f000000, 138412032 [pid 5877] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5878] <... munmap resumed>) = 0 [pid 5878] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5877] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5878] ioctl(4, LOOP_SET_FD, 3 [pid 5877] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875cf990, parent_tid=0x7f62875cf990, exit_signal=0, stack=0x7f62875af000, stack_size=0x20300, tls=0x7f62875cf6c0}./strace-static-x86_64: Process 5879 attached [pid 5879] rseq(0x7f62875cffe0, 0x20, 0, 0x53053053 [pid 5877] <... clone3 resumed> => {parent_tid=[5879]}, 88) = 5879 [pid 5879] <... rseq resumed>) = 0 [pid 5877] rt_sigprocmask(SIG_SETMASK, [], [pid 5879] set_robust_list(0x7f62875cf9a0, 24 [pid 5877] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5879] <... set_robust_list resumed>) = 0 [pid 5879] rt_sigprocmask(SIG_SETMASK, [], [pid 5877] futex(0x7f62876c36b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5879] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5879] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5877] <... futex resumed>) = 0 [pid 5879] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5877] futex(0x7f62876c36bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5879] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5877] <... futex resumed>) = 0 [pid 5879] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5878] <... ioctl resumed>) = 0 [pid 5878] close(3) = 0 [pid 5878] close(4) = 0 [pid 5878] mkdir("./file0", 0777) = 0 [pid 5878] mount("/dev/loop0", "./file0", "hfs", MS_NOSUID|MS_SYNCHRONOUS, "codepage=iso8859-5,umask=0000000000000777,iocharset=cp869,") = 0 [pid 5878] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5878] chdir("./file0") = 0 [pid 5878] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5878] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 122.515898][ T5878] loop0: detected capacity change from 0 to 64 [pid 5878] futex(0x7f62876c36a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5877] exit_group(0 [pid 5879] <... futex resumed>) = ? [pid 5878] <... futex resumed>) = ? [pid 5877] <... exit_group resumed>) = ? [pid 5879] +++ exited with 0 +++ [pid 5878] +++ exited with 0 +++ [pid 5877] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5877, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555594dec730 /* 4 entries */, 32768) = 112 umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555594df4770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555594df4770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./11/file0") = 0 umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./11/binderfs") = 0 getdents64(3, 0x555594dec730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./11") = 0 mkdir("./12", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5880 attached , child_tidptr=0x555594deb690) = 5880 [pid 5880] set_robust_list(0x555594deb6a0, 24) = 0 [pid 5880] chdir("./12") = 0 [pid 5880] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5880] setpgid(0, 0) = 0 [pid 5880] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5880] write(3, "1000", 4) = 4 [pid 5880] close(3) = 0 [pid 5880] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5880] write(1, "executing program\n", 18executing program ) = 18 [pid 5880] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5880] rt_sigaction(SIGRT_1, {sa_handler=0x7f6287661eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6287653060}, NULL, 8) = 0 [pid 5880] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5880] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875d0000 [pid 5880] mprotect(0x7f62875d1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5880] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5880] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875f0990, parent_tid=0x7f62875f0990, exit_signal=0, stack=0x7f62875d0000, stack_size=0x20300, tls=0x7f62875f06c0}./strace-static-x86_64: Process 5881 attached [pid 5881] rseq(0x7f62875f0fe0, 0x20, 0, 0x53053053 [pid 5880] <... clone3 resumed> => {parent_tid=[5881]}, 88) = 5881 [pid 5880] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5881] <... rseq resumed>) = 0 [pid 5880] futex(0x7f62876c36a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5881] set_robust_list(0x7f62875f09a0, 24 [pid 5880] <... futex resumed>) = 0 [pid 5881] <... set_robust_list resumed>) = 0 [pid 5880] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5881] rt_sigprocmask(SIG_SETMASK, [], [pid 5880] <... futex resumed>) = 0 [pid 5881] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5880] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5881] memfd_create("syzkaller", 0 [pid 5880] <... mmap resumed>) = 0x7f62875af000 [pid 5880] mprotect(0x7f62875b0000, 131072, PROT_READ|PROT_WRITE [pid 5881] <... memfd_create resumed>) = 3 [pid 5880] <... mprotect resumed>) = 0 [pid 5881] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f627f000000 [pid 5880] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5881] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768 [pid 5880] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5881] <... write resumed>) = 32768 [pid 5880] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875cf990, parent_tid=0x7f62875cf990, exit_signal=0, stack=0x7f62875af000, stack_size=0x20300, tls=0x7f62875cf6c0}./strace-static-x86_64: Process 5882 attached => {parent_tid=[5882]}, 88) = 5882 [pid 5882] rseq(0x7f62875cffe0, 0x20, 0, 0x53053053 [pid 5880] rt_sigprocmask(SIG_SETMASK, [], [pid 5882] <... rseq resumed>) = 0 [pid 5881] munmap(0x7f627f000000, 138412032 [pid 5880] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5882] set_robust_list(0x7f62875cf9a0, 24 [pid 5881] <... munmap resumed>) = 0 [pid 5880] futex(0x7f62876c36b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5882] <... set_robust_list resumed>) = 0 [pid 5882] rt_sigprocmask(SIG_SETMASK, [], [pid 5880] <... futex resumed>) = 0 [pid 5882] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5880] futex(0x7f62876c36bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5882] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5881] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5882] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5881] <... openat resumed>) = 4 [pid 5882] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5881] ioctl(4, LOOP_SET_FD, 3 [pid 5880] <... futex resumed>) = 0 [pid 5882] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5881] <... ioctl resumed>) = 0 [pid 5881] close(3) = 0 [pid 5881] close(4) = 0 [pid 5881] mkdir("./file0", 0777) = 0 [pid 5881] mount("/dev/loop0", "./file0", "hfs", MS_NOSUID|MS_SYNCHRONOUS, "codepage=iso8859-5,umask=0000000000000777,iocharset=cp869,") = 0 [pid 5881] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 123.024993][ T5881] loop0: detected capacity change from 0 to 64 [pid 5881] chdir("./file0") = 0 [pid 5881] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5881] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5881] futex(0x7f62876c36a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5880] exit_group(0 [pid 5882] <... futex resumed>) = ? [pid 5881] <... futex resumed>) = ? [pid 5880] <... exit_group resumed>) = ? [pid 5882] +++ exited with 0 +++ [pid 5881] +++ exited with 0 +++ [pid 5880] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5880, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555594dec730 /* 4 entries */, 32768) = 112 umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./12/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555594df4770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555594df4770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./12/file0") = 0 umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./12/binderfs") = 0 getdents64(3, 0x555594dec730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./12") = 0 mkdir("./13", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5883 attached [pid 5883] set_robust_list(0x555594deb6a0, 24) = 0 [pid 5883] chdir("./13" [pid 5842] <... clone resumed>, child_tidptr=0x555594deb690) = 5883 [pid 5883] <... chdir resumed>) = 0 [pid 5883] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5883] setpgid(0, 0) = 0 [pid 5883] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5883] write(3, "1000", 4) = 4 [pid 5883] close(3) = 0 [pid 5883] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5883] write(1, "executing program\n", 18) = 18 executing program [pid 5883] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5883] rt_sigaction(SIGRT_1, {sa_handler=0x7f6287661eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6287653060}, NULL, 8) = 0 [pid 5883] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5883] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875d0000 [pid 5883] mprotect(0x7f62875d1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5883] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5883] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875f0990, parent_tid=0x7f62875f0990, exit_signal=0, stack=0x7f62875d0000, stack_size=0x20300, tls=0x7f62875f06c0}./strace-static-x86_64: Process 5884 attached [pid 5884] rseq(0x7f62875f0fe0, 0x20, 0, 0x53053053) = 0 [pid 5884] set_robust_list(0x7f62875f09a0, 24) = 0 [pid 5883] <... clone3 resumed> => {parent_tid=[5884]}, 88) = 5884 [pid 5884] rt_sigprocmask(SIG_SETMASK, [], [pid 5883] rt_sigprocmask(SIG_SETMASK, [], [pid 5884] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5883] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5884] futex(0x7f62876c36a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5883] futex(0x7f62876c36a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5884] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5883] <... futex resumed>) = 0 [pid 5884] memfd_create("syzkaller", 0 [pid 5883] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5884] <... memfd_create resumed>) = 3 [pid 5883] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5884] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5883] <... mmap resumed>) = 0x7f62875af000 [pid 5884] <... mmap resumed>) = 0x7f627f000000 [pid 5883] mprotect(0x7f62875b0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5883] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5884] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768 [pid 5883] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5883] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875cf990, parent_tid=0x7f62875cf990, exit_signal=0, stack=0x7f62875af000, stack_size=0x20300, tls=0x7f62875cf6c0}./strace-static-x86_64: Process 5885 attached [pid 5885] rseq(0x7f62875cffe0, 0x20, 0, 0x53053053) = 0 [pid 5883] <... clone3 resumed> => {parent_tid=[5885]}, 88) = 5885 [pid 5885] set_robust_list(0x7f62875cf9a0, 24 [pid 5883] rt_sigprocmask(SIG_SETMASK, [], [pid 5885] <... set_robust_list resumed>) = 0 [pid 5883] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5885] rt_sigprocmask(SIG_SETMASK, [], [pid 5883] futex(0x7f62876c36b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5885] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5883] <... futex resumed>) = 0 [pid 5885] openat(AT_FDCWD, "./file0", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5883] futex(0x7f62876c36bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5885] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5884] <... write resumed>) = 32768 [pid 5885] <... futex resumed>) = 1 [pid 5884] munmap(0x7f627f000000, 138412032 [pid 5883] <... futex resumed>) = 0 [pid 5885] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5884] <... munmap resumed>) = 0 [pid 5884] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5884] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5884] close(3) = 0 [pid 5884] close(4) = 0 [pid 5884] mkdir("./file0", 0777) = 0 [pid 5884] mount("/dev/loop0", "./file0", "hfs", MS_NOSUID|MS_SYNCHRONOUS, "codepage=iso8859-5,umask=0000000000000777,iocharset=cp869,") = 0 [pid 5884] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 123.491182][ T5884] loop0: detected capacity change from 0 to 64 [pid 5884] chdir("./file0") = 0 [pid 5884] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5884] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5883] exit_group(0 [pid 5884] futex(0x7f62876c36a8, FUTEX_WAIT_PRIVATE, 0, NULL) = ? [pid 5883] <... exit_group resumed>) = ? [pid 5884] +++ exited with 0 +++ [pid 5885] <... futex resumed>) = ? [pid 5885] +++ exited with 0 +++ [pid 5883] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5883, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555594dec730 /* 4 entries */, 32768) = 112 umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555594df4770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555594df4770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./13/file0") = 0 umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./13/binderfs") = 0 getdents64(3, 0x555594dec730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./13") = 0 mkdir("./14", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5886 attached [pid 5886] set_robust_list(0x555594deb6a0, 24 [pid 5842] <... clone resumed>, child_tidptr=0x555594deb690) = 5886 [pid 5886] <... set_robust_list resumed>) = 0 [pid 5886] chdir("./14") = 0 [pid 5886] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5886] setpgid(0, 0) = 0 [pid 5886] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5886] write(3, "1000", 4) = 4 [pid 5886] close(3) = 0 [pid 5886] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5886] write(1, "executing program\n", 18) = 18 [pid 5886] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5886] rt_sigaction(SIGRT_1, {sa_handler=0x7f6287661eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6287653060}, NULL, 8) = 0 [pid 5886] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5886] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875d0000 [pid 5886] mprotect(0x7f62875d1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5886] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5886] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875f0990, parent_tid=0x7f62875f0990, exit_signal=0, stack=0x7f62875d0000, stack_size=0x20300, tls=0x7f62875f06c0}./strace-static-x86_64: Process 5887 attached [pid 5887] rseq(0x7f62875f0fe0, 0x20, 0, 0x53053053) = 0 [pid 5886] <... clone3 resumed> => {parent_tid=[5887]}, 88) = 5887 [pid 5887] set_robust_list(0x7f62875f09a0, 24 [pid 5886] rt_sigprocmask(SIG_SETMASK, [], [pid 5887] <... set_robust_list resumed>) = 0 [pid 5886] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5887] rt_sigprocmask(SIG_SETMASK, [], [pid 5886] futex(0x7f62876c36a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5887] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5886] <... futex resumed>) = 0 [pid 5887] memfd_create("syzkaller", 0 [pid 5886] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5887] <... memfd_create resumed>) = 3 [pid 5886] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5887] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5886] <... mmap resumed>) = 0x7f62875af000 [pid 5887] <... mmap resumed>) = 0x7f627f000000 [pid 5887] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768 [pid 5886] mprotect(0x7f62875b0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5887] <... write resumed>) = 32768 [pid 5887] munmap(0x7f627f000000, 138412032 [pid 5886] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5887] <... munmap resumed>) = 0 [pid 5886] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875cf990, parent_tid=0x7f62875cf990, exit_signal=0, stack=0x7f62875af000, stack_size=0x20300, tls=0x7f62875cf6c0} [pid 5887] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5887] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5888 attached [pid 5888] rseq(0x7f62875cffe0, 0x20, 0, 0x53053053 [pid 5886] <... clone3 resumed> => {parent_tid=[5888]}, 88) = 5888 [pid 5888] <... rseq resumed>) = 0 [pid 5888] set_robust_list(0x7f62875cf9a0, 24 [pid 5886] rt_sigprocmask(SIG_SETMASK, [], [pid 5888] <... set_robust_list resumed>) = 0 [pid 5886] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5888] rt_sigprocmask(SIG_SETMASK, [], [pid 5886] futex(0x7f62876c36b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5888] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5886] <... futex resumed>) = 0 [pid 5888] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5886] futex(0x7f62876c36bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5888] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5888] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5887] <... ioctl resumed>) = 0 [pid 5888] <... futex resumed>) = 1 [pid 5887] close(3 [pid 5888] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5886] <... futex resumed>) = 0 [pid 5887] <... close resumed>) = 0 [pid 5887] close(4) = 0 [pid 5887] mkdir("./file0", 0777) = 0 [pid 5887] mount("/dev/loop0", "./file0", "hfs", MS_NOSUID|MS_SYNCHRONOUS, "codepage=iso8859-5,umask=0000000000000777,iocharset=cp869,") = 0 [pid 5887] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 124.007943][ T5887] loop0: detected capacity change from 0 to 64 [pid 5887] chdir("./file0") = 0 [pid 5887] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5887] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5886] exit_group(0 [pid 5887] futex(0x7f62876c36a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5888] <... futex resumed>) = ? [pid 5886] <... exit_group resumed>) = ? [pid 5887] <... futex resumed>) = ? [pid 5888] +++ exited with 0 +++ [pid 5887] +++ exited with 0 +++ [pid 5886] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5886, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555594dec730 /* 4 entries */, 32768) = 112 umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555594df4770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555594df4770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./14/file0") = 0 umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./14/binderfs") = 0 getdents64(3, 0x555594dec730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./14") = 0 mkdir("./15", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5889 attached [pid 5889] set_robust_list(0x555594deb6a0, 24) = 0 [pid 5889] chdir("./15") = 0 [pid 5889] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5889] setpgid(0, 0) = 0 [pid 5889] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5842] <... clone resumed>, child_tidptr=0x555594deb690) = 5889 [pid 5889] write(3, "1000", 4) = 4 [pid 5889] close(3) = 0 [pid 5889] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5889] write(1, "executing program\n", 18) = 18 [pid 5889] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5889] rt_sigaction(SIGRT_1, {sa_handler=0x7f6287661eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6287653060}, NULL, 8) = 0 [pid 5889] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5889] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875d0000 [pid 5889] mprotect(0x7f62875d1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5889] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5889] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875f0990, parent_tid=0x7f62875f0990, exit_signal=0, stack=0x7f62875d0000, stack_size=0x20300, tls=0x7f62875f06c0}./strace-static-x86_64: Process 5890 attached [pid 5890] rseq(0x7f62875f0fe0, 0x20, 0, 0x53053053 [pid 5889] <... clone3 resumed> => {parent_tid=[5890]}, 88) = 5890 [pid 5890] <... rseq resumed>) = 0 [pid 5890] set_robust_list(0x7f62875f09a0, 24 [pid 5889] rt_sigprocmask(SIG_SETMASK, [], [pid 5890] <... set_robust_list resumed>) = 0 [pid 5889] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5890] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5889] futex(0x7f62876c36a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5890] memfd_create("syzkaller", 0 [pid 5889] <... futex resumed>) = 0 [pid 5889] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5890] <... memfd_create resumed>) = 3 [pid 5889] <... futex resumed>) = 0 [pid 5890] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5889] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5890] <... mmap resumed>) = 0x7f627f000000 [pid 5889] <... mmap resumed>) = 0x7f62875af000 [pid 5890] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768 [pid 5889] mprotect(0x7f62875b0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5890] <... write resumed>) = 32768 [pid 5890] munmap(0x7f627f000000, 138412032) = 0 [pid 5890] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5889] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5890] <... openat resumed>) = 4 [pid 5890] ioctl(4, LOOP_SET_FD, 3 [pid 5889] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5889] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875cf990, parent_tid=0x7f62875cf990, exit_signal=0, stack=0x7f62875af000, stack_size=0x20300, tls=0x7f62875cf6c0}./strace-static-x86_64: Process 5891 attached [pid 5891] rseq(0x7f62875cffe0, 0x20, 0, 0x53053053 [pid 5889] <... clone3 resumed> => {parent_tid=[5891]}, 88) = 5891 [pid 5889] rt_sigprocmask(SIG_SETMASK, [], [pid 5891] <... rseq resumed>) = 0 [pid 5889] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5891] set_robust_list(0x7f62875cf9a0, 24) = 0 [pid 5889] futex(0x7f62876c36b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5891] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5889] <... futex resumed>) = 0 [pid 5891] openat(AT_FDCWD, "./file0", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5889] futex(0x7f62876c36bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5891] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5889] <... futex resumed>) = 0 [pid 5891] <... futex resumed>) = 1 [pid 5891] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5890] <... ioctl resumed>) = 0 [pid 5890] close(3) = 0 [pid 5890] close(4) = 0 [pid 5890] mkdir("./file0", 0777) = 0 [pid 5890] mount("/dev/loop0", "./file0", "hfs", MS_NOSUID|MS_SYNCHRONOUS, "codepage=iso8859-5,umask=0000000000000777,iocharset=cp869,") = 0 [pid 5890] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5890] chdir("./file0") = 0 [ 124.610765][ T5890] loop0: detected capacity change from 0 to 64 [pid 5890] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5890] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5890] futex(0x7f62876c36a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5889] exit_group(0 [pid 5891] <... futex resumed>) = ? [pid 5889] <... exit_group resumed>) = ? [pid 5890] <... futex resumed>) = ? [pid 5891] +++ exited with 0 +++ [pid 5890] +++ exited with 0 +++ [pid 5889] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5889, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555594dec730 /* 4 entries */, 32768) = 112 umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./15/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555594df4770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555594df4770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./15/file0") = 0 umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./15/binderfs") = 0 getdents64(3, 0x555594dec730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./15") = 0 mkdir("./16", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5892 attached [pid 5892] set_robust_list(0x555594deb6a0, 24) = 0 [pid 5892] chdir("./16" [pid 5842] <... clone resumed>, child_tidptr=0x555594deb690) = 5892 [pid 5892] <... chdir resumed>) = 0 [pid 5892] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5892] setpgid(0, 0) = 0 [pid 5892] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5892] write(3, "1000", 4) = 4 [pid 5892] close(3) = 0 [pid 5892] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5892] write(1, "executing program\n", 18executing program ) = 18 [pid 5892] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5892] rt_sigaction(SIGRT_1, {sa_handler=0x7f6287661eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6287653060}, NULL, 8) = 0 [pid 5892] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5892] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875d0000 [pid 5892] mprotect(0x7f62875d1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5892] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5892] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875f0990, parent_tid=0x7f62875f0990, exit_signal=0, stack=0x7f62875d0000, stack_size=0x20300, tls=0x7f62875f06c0}./strace-static-x86_64: Process 5893 attached [pid 5893] rseq(0x7f62875f0fe0, 0x20, 0, 0x53053053) = 0 [pid 5892] <... clone3 resumed> => {parent_tid=[5893]}, 88) = 5893 [pid 5893] set_robust_list(0x7f62875f09a0, 24) = 0 [pid 5893] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5893] futex(0x7f62876c36a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5892] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5892] futex(0x7f62876c36a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5893] <... futex resumed>) = 0 [pid 5892] <... futex resumed>) = 1 [pid 5893] memfd_create("syzkaller", 0 [pid 5892] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5893] <... memfd_create resumed>) = 3 [pid 5892] <... futex resumed>) = 0 [pid 5892] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875af000 [pid 5893] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5892] mprotect(0x7f62875b0000, 131072, PROT_READ|PROT_WRITE [pid 5893] <... mmap resumed>) = 0x7f627f000000 [pid 5892] <... mprotect resumed>) = 0 [pid 5893] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768 [pid 5892] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5893] <... write resumed>) = 32768 [pid 5892] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5893] munmap(0x7f627f000000, 138412032 [pid 5892] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875cf990, parent_tid=0x7f62875cf990, exit_signal=0, stack=0x7f62875af000, stack_size=0x20300, tls=0x7f62875cf6c0}./strace-static-x86_64: Process 5894 attached [pid 5893] <... munmap resumed>) = 0 [pid 5894] rseq(0x7f62875cffe0, 0x20, 0, 0x53053053) = 0 [pid 5892] <... clone3 resumed> => {parent_tid=[5894]}, 88) = 5894 [pid 5894] set_robust_list(0x7f62875cf9a0, 24 [pid 5893] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5892] rt_sigprocmask(SIG_SETMASK, [], [pid 5894] <... set_robust_list resumed>) = 0 [pid 5893] <... openat resumed>) = 4 [pid 5892] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5894] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5893] ioctl(4, LOOP_SET_FD, 3 [pid 5892] futex(0x7f62876c36b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5894] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5892] <... futex resumed>) = 0 [pid 5894] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5893] <... ioctl resumed>) = 0 [pid 5892] futex(0x7f62876c36bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5893] close(3 [pid 5894] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5893] <... close resumed>) = 0 [pid 5894] <... futex resumed>) = 0 [pid 5893] close(4) = 0 [pid 5892] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5893] mkdir("./file0", 0777 [pid 5894] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5893] <... mkdir resumed>) = 0 [pid 5893] mount("/dev/loop0", "./file0", "hfs", MS_NOSUID|MS_SYNCHRONOUS, "codepage=iso8859-5,umask=0000000000000777,iocharset=cp869,") = 0 [pid 5893] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5893] chdir("./file0") = 0 [pid 5893] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 125.062068][ T5893] loop0: detected capacity change from 0 to 64 [pid 5893] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5892] exit_group(0 [pid 5893] futex(0x7f62876c36a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5894] <... futex resumed>) = ? [pid 5893] <... futex resumed>) = ? [pid 5892] <... exit_group resumed>) = ? [pid 5894] +++ exited with 0 +++ [pid 5893] +++ exited with 0 +++ [pid 5892] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5892, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555594dec730 /* 4 entries */, 32768) = 112 umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./16/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555594df4770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555594df4770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./16/file0") = 0 umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./16/binderfs") = 0 getdents64(3, 0x555594dec730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./16") = 0 mkdir("./17", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5895 attached , child_tidptr=0x555594deb690) = 5895 [pid 5895] set_robust_list(0x555594deb6a0, 24) = 0 [pid 5895] chdir("./17") = 0 [pid 5895] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5895] setpgid(0, 0) = 0 [pid 5895] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5895] write(3, "1000", 4) = 4 [pid 5895] close(3) = 0 [pid 5895] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5895] write(1, "executing program\n", 18) = 18 [pid 5895] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5895] rt_sigaction(SIGRT_1, {sa_handler=0x7f6287661eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6287653060}, NULL, 8) = 0 [pid 5895] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5895] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875d0000 [pid 5895] mprotect(0x7f62875d1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5895] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5895] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875f0990, parent_tid=0x7f62875f0990, exit_signal=0, stack=0x7f62875d0000, stack_size=0x20300, tls=0x7f62875f06c0}./strace-static-x86_64: Process 5896 attached => {parent_tid=[5896]}, 88) = 5896 [pid 5896] rseq(0x7f62875f0fe0, 0x20, 0, 0x53053053 [pid 5895] rt_sigprocmask(SIG_SETMASK, [], [pid 5896] <... rseq resumed>) = 0 [pid 5895] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5896] set_robust_list(0x7f62875f09a0, 24 [pid 5895] futex(0x7f62876c36a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5896] <... set_robust_list resumed>) = 0 [pid 5895] <... futex resumed>) = 0 [pid 5896] rt_sigprocmask(SIG_SETMASK, [], [pid 5895] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5896] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5895] <... futex resumed>) = 0 [pid 5895] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5896] memfd_create("syzkaller", 0 [pid 5895] <... mmap resumed>) = 0x7f62875af000 [pid 5896] <... memfd_create resumed>) = 3 [pid 5895] mprotect(0x7f62875b0000, 131072, PROT_READ|PROT_WRITE [pid 5896] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5895] <... mprotect resumed>) = 0 [pid 5896] <... mmap resumed>) = 0x7f627f000000 [pid 5895] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5896] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768 [pid 5895] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5895] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875cf990, parent_tid=0x7f62875cf990, exit_signal=0, stack=0x7f62875af000, stack_size=0x20300, tls=0x7f62875cf6c0} [pid 5896] <... write resumed>) = 32768 [pid 5896] munmap(0x7f627f000000, 138412032./strace-static-x86_64: Process 5897 attached ) = 0 [pid 5897] rseq(0x7f62875cffe0, 0x20, 0, 0x53053053 [pid 5895] <... clone3 resumed> => {parent_tid=[5897]}, 88) = 5897 [pid 5897] <... rseq resumed>) = 0 [pid 5896] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5897] set_robust_list(0x7f62875cf9a0, 24 [pid 5896] <... openat resumed>) = 4 [pid 5895] rt_sigprocmask(SIG_SETMASK, [], [pid 5897] <... set_robust_list resumed>) = 0 [pid 5895] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5897] rt_sigprocmask(SIG_SETMASK, [], [pid 5896] ioctl(4, LOOP_SET_FD, 3 [pid 5895] futex(0x7f62876c36b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5897] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5897] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5895] <... futex resumed>) = 0 [pid 5895] futex(0x7f62876c36bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5897] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5896] <... ioctl resumed>) = 0 [pid 5896] close(3 [pid 5897] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5896] <... close resumed>) = 0 [pid 5897] <... futex resumed>) = 1 [pid 5895] <... futex resumed>) = 0 [pid 5896] close(4) = 0 [pid 5896] mkdir("./file0", 0777 [pid 5897] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5896] <... mkdir resumed>) = 0 [pid 5896] mount("/dev/loop0", "./file0", "hfs", MS_NOSUID|MS_SYNCHRONOUS, "codepage=iso8859-5,umask=0000000000000777,iocharset=cp869,") = 0 [pid 5896] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5896] chdir("./file0") = 0 [pid 5896] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5896] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5896] futex(0x7f62876c36a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5895] exit_group(0 [pid 5897] <... futex resumed>) = ? [pid 5896] <... futex resumed>) = ? [pid 5895] <... exit_group resumed>) = ? [pid 5897] +++ exited with 0 +++ [pid 5896] +++ exited with 0 +++ [pid 5895] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5895, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [ 125.437851][ T5896] loop0: detected capacity change from 0 to 64 restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555594dec730 /* 4 entries */, 32768) = 112 umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./17/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555594df4770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555594df4770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./17/file0") = 0 umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./17/binderfs") = 0 getdents64(3, 0x555594dec730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./17") = 0 mkdir("./18", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5898 attached , child_tidptr=0x555594deb690) = 5898 [pid 5898] set_robust_list(0x555594deb6a0, 24) = 0 [pid 5898] chdir("./18") = 0 [pid 5898] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5898] setpgid(0, 0) = 0 [pid 5898] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5898] write(3, "1000", 4) = 4 [pid 5898] close(3) = 0 [pid 5898] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5898] write(1, "executing program\n", 18) = 18 [pid 5898] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5898] rt_sigaction(SIGRT_1, {sa_handler=0x7f6287661eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6287653060}, NULL, 8) = 0 [pid 5898] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5898] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875d0000 [pid 5898] mprotect(0x7f62875d1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5898] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5898] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875f0990, parent_tid=0x7f62875f0990, exit_signal=0, stack=0x7f62875d0000, stack_size=0x20300, tls=0x7f62875f06c0}./strace-static-x86_64: Process 5899 attached [pid 5899] rseq(0x7f62875f0fe0, 0x20, 0, 0x53053053) = 0 [pid 5899] set_robust_list(0x7f62875f09a0, 24 [pid 5898] <... clone3 resumed> => {parent_tid=[5899]}, 88) = 5899 [pid 5899] <... set_robust_list resumed>) = 0 [pid 5898] rt_sigprocmask(SIG_SETMASK, [], [pid 5899] rt_sigprocmask(SIG_SETMASK, [], [pid 5898] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5899] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5898] futex(0x7f62876c36a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5899] memfd_create("syzkaller", 0 [pid 5898] <... futex resumed>) = 0 [pid 5898] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5899] <... memfd_create resumed>) = 3 [pid 5898] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875af000 [pid 5899] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f627f000000 [pid 5898] mprotect(0x7f62875b0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5899] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768 [pid 5898] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5899] <... write resumed>) = 32768 [pid 5898] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5898] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875cf990, parent_tid=0x7f62875cf990, exit_signal=0, stack=0x7f62875af000, stack_size=0x20300, tls=0x7f62875cf6c0}./strace-static-x86_64: Process 5900 attached [pid 5899] munmap(0x7f627f000000, 138412032) = 0 [pid 5900] rseq(0x7f62875cffe0, 0x20, 0, 0x53053053 [pid 5898] <... clone3 resumed> => {parent_tid=[5900]}, 88) = 5900 [pid 5900] <... rseq resumed>) = 0 [pid 5898] rt_sigprocmask(SIG_SETMASK, [], [pid 5900] set_robust_list(0x7f62875cf9a0, 24 [pid 5898] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5899] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5900] <... set_robust_list resumed>) = 0 [pid 5899] <... openat resumed>) = 4 [pid 5898] futex(0x7f62876c36b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5900] rt_sigprocmask(SIG_SETMASK, [], [pid 5899] ioctl(4, LOOP_SET_FD, 3 [pid 5898] <... futex resumed>) = 0 [pid 5900] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5898] futex(0x7f62876c36bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5900] openat(AT_FDCWD, "./file0", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5900] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5899] <... ioctl resumed>) = 0 [pid 5900] <... futex resumed>) = 1 [pid 5898] <... futex resumed>) = 0 [pid 5900] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5899] close(3) = 0 [pid 5899] close(4) = 0 [pid 5899] mkdir("./file0", 0777) = 0 [pid 5899] mount("/dev/loop0", "./file0", "hfs", MS_NOSUID|MS_SYNCHRONOUS, "codepage=iso8859-5,umask=0000000000000777,iocharset=cp869,") = 0 [pid 5899] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5899] chdir("./file0") = 0 [pid 5899] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5899] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5898] exit_group(0 [pid 5900] <... futex resumed>) = ? [pid 5899] <... futex resumed>) = ? [pid 5898] <... exit_group resumed>) = ? [ 125.977805][ T5899] loop0: detected capacity change from 0 to 64 [pid 5900] +++ exited with 0 +++ [pid 5899] +++ exited with 0 +++ [pid 5898] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5898, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555594dec730 /* 4 entries */, 32768) = 112 umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./18/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555594df4770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555594df4770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./18/file0") = 0 umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./18/binderfs") = 0 getdents64(3, 0x555594dec730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./18") = 0 mkdir("./19", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5901 attached [pid 5901] set_robust_list(0x555594deb6a0, 24) = 0 [pid 5901] chdir("./19" [pid 5842] <... clone resumed>, child_tidptr=0x555594deb690) = 5901 [pid 5901] <... chdir resumed>) = 0 [pid 5901] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5901] setpgid(0, 0) = 0 [pid 5901] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5901] write(3, "1000", 4) = 4 [pid 5901] close(3) = 0 [pid 5901] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5901] write(1, "executing program\n", 18executing program ) = 18 [pid 5901] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5901] rt_sigaction(SIGRT_1, {sa_handler=0x7f6287661eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6287653060}, NULL, 8) = 0 [pid 5901] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5901] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875d0000 [pid 5901] mprotect(0x7f62875d1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5901] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5901] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875f0990, parent_tid=0x7f62875f0990, exit_signal=0, stack=0x7f62875d0000, stack_size=0x20300, tls=0x7f62875f06c0}./strace-static-x86_64: Process 5902 attached [pid 5902] rseq(0x7f62875f0fe0, 0x20, 0, 0x53053053) = 0 [pid 5901] <... clone3 resumed> => {parent_tid=[5902]}, 88) = 5902 [pid 5902] set_robust_list(0x7f62875f09a0, 24 [pid 5901] rt_sigprocmask(SIG_SETMASK, [], [pid 5902] <... set_robust_list resumed>) = 0 [pid 5902] rt_sigprocmask(SIG_SETMASK, [], [pid 5901] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5902] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5901] futex(0x7f62876c36a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5902] memfd_create("syzkaller", 0 [pid 5901] <... futex resumed>) = 0 [pid 5902] <... memfd_create resumed>) = 3 [pid 5902] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5901] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5902] <... mmap resumed>) = 0x7f627f000000 [pid 5901] <... futex resumed>) = 0 [pid 5901] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875af000 [pid 5902] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768 [pid 5901] mprotect(0x7f62875b0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5902] <... write resumed>) = 32768 [pid 5901] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5902] munmap(0x7f627f000000, 138412032 [pid 5901] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5901] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875cf990, parent_tid=0x7f62875cf990, exit_signal=0, stack=0x7f62875af000, stack_size=0x20300, tls=0x7f62875cf6c0}./strace-static-x86_64: Process 5903 attached [pid 5902] <... munmap resumed>) = 0 [pid 5903] rseq(0x7f62875cffe0, 0x20, 0, 0x53053053 [pid 5902] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5901] <... clone3 resumed> => {parent_tid=[5903]}, 88) = 5903 [pid 5903] <... rseq resumed>) = 0 [pid 5902] <... openat resumed>) = 4 [pid 5901] rt_sigprocmask(SIG_SETMASK, [], [pid 5903] set_robust_list(0x7f62875cf9a0, 24) = 0 [pid 5902] ioctl(4, LOOP_SET_FD, 3 [pid 5901] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5903] rt_sigprocmask(SIG_SETMASK, [], [pid 5901] futex(0x7f62876c36b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5903] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5901] <... futex resumed>) = 0 [pid 5903] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5901] futex(0x7f62876c36bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5903] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5903] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5902] <... ioctl resumed>) = 0 [pid 5903] <... futex resumed>) = 1 [pid 5903] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5901] <... futex resumed>) = 0 [pid 5902] close(3) = 0 [pid 5902] close(4) = 0 [pid 5902] mkdir("./file0", 0777) = 0 [pid 5902] mount("/dev/loop0", "./file0", "hfs", MS_NOSUID|MS_SYNCHRONOUS, "codepage=iso8859-5,umask=0000000000000777,iocharset=cp869,") = 0 [pid 5902] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5902] chdir("./file0") = 0 [pid 5902] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5902] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5902] futex(0x7f62876c36a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5901] exit_group(0 [pid 5902] <... futex resumed>) = ? [pid 5901] <... exit_group resumed>) = ? [pid 5903] <... futex resumed>) = ? [pid 5903] +++ exited with 0 +++ [pid 5902] +++ exited with 0 +++ [pid 5901] +++ exited with 0 +++ [ 126.502830][ T5902] loop0: detected capacity change from 0 to 64 --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5901, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./19", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555594dec730 /* 4 entries */, 32768) = 112 umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./19/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555594df4770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555594df4770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./19/file0") = 0 umount2("./19/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./19/binderfs") = 0 getdents64(3, 0x555594dec730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./19") = 0 mkdir("./20", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5904 attached , child_tidptr=0x555594deb690) = 5904 [pid 5904] set_robust_list(0x555594deb6a0, 24) = 0 [pid 5904] chdir("./20") = 0 [pid 5904] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5904] setpgid(0, 0) = 0 [pid 5904] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5904] write(3, "1000", 4) = 4 [pid 5904] close(3) = 0 [pid 5904] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5904] write(1, "executing program\n", 18) = 18 [pid 5904] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5904] rt_sigaction(SIGRT_1, {sa_handler=0x7f6287661eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6287653060}, NULL, 8) = 0 [pid 5904] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5904] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875d0000 [pid 5904] mprotect(0x7f62875d1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5904] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5904] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875f0990, parent_tid=0x7f62875f0990, exit_signal=0, stack=0x7f62875d0000, stack_size=0x20300, tls=0x7f62875f06c0}./strace-static-x86_64: Process 5905 attached [pid 5905] rseq(0x7f62875f0fe0, 0x20, 0, 0x53053053) = 0 [pid 5904] <... clone3 resumed> => {parent_tid=[5905]}, 88) = 5905 [pid 5905] set_robust_list(0x7f62875f09a0, 24 [pid 5904] rt_sigprocmask(SIG_SETMASK, [], [pid 5905] <... set_robust_list resumed>) = 0 [pid 5904] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5905] rt_sigprocmask(SIG_SETMASK, [], [pid 5904] futex(0x7f62876c36a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5905] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5904] <... futex resumed>) = 0 [pid 5905] memfd_create("syzkaller", 0 [pid 5904] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5905] <... memfd_create resumed>) = 3 [pid 5904] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5905] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5904] <... mmap resumed>) = 0x7f62875af000 [pid 5905] <... mmap resumed>) = 0x7f627f000000 [pid 5904] mprotect(0x7f62875b0000, 131072, PROT_READ|PROT_WRITE [pid 5905] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768 [pid 5904] <... mprotect resumed>) = 0 [pid 5904] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5905] <... write resumed>) = 32768 [pid 5904] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5904] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875cf990, parent_tid=0x7f62875cf990, exit_signal=0, stack=0x7f62875af000, stack_size=0x20300, tls=0x7f62875cf6c0}./strace-static-x86_64: Process 5906 attached [pid 5906] rseq(0x7f62875cffe0, 0x20, 0, 0x53053053 [pid 5905] munmap(0x7f627f000000, 138412032 [pid 5906] <... rseq resumed>) = 0 [pid 5905] <... munmap resumed>) = 0 [pid 5904] <... clone3 resumed> => {parent_tid=[5906]}, 88) = 5906 [pid 5906] set_robust_list(0x7f62875cf9a0, 24 [pid 5904] rt_sigprocmask(SIG_SETMASK, [], [pid 5906] <... set_robust_list resumed>) = 0 [pid 5904] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5906] rt_sigprocmask(SIG_SETMASK, [], [pid 5905] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5904] futex(0x7f62876c36b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5906] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5905] <... openat resumed>) = 4 [pid 5904] <... futex resumed>) = 0 [pid 5906] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5904] futex(0x7f62876c36bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5906] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5905] ioctl(4, LOOP_SET_FD, 3 [pid 5906] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5906] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5905] <... ioctl resumed>) = 0 [pid 5904] <... futex resumed>) = 0 [pid 5905] close(3) = 0 [pid 5905] close(4) = 0 [pid 5905] mkdir("./file0", 0777) = 0 [pid 5905] mount("/dev/loop0", "./file0", "hfs", MS_NOSUID|MS_SYNCHRONOUS, "codepage=iso8859-5,umask=0000000000000777,iocharset=cp869,") = 0 [pid 5905] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5905] chdir("./file0") = 0 [ 127.017652][ T5905] loop0: detected capacity change from 0 to 64 [pid 5905] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5905] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5905] futex(0x7f62876c36a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5904] exit_group(0 [pid 5906] <... futex resumed>) = ? [pid 5905] <... futex resumed>) = ? [pid 5904] <... exit_group resumed>) = ? [pid 5905] +++ exited with 0 +++ [pid 5906] +++ exited with 0 +++ [pid 5904] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5904, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./20", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555594dec730 /* 4 entries */, 32768) = 112 umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./20/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555594df4770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555594df4770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./20/file0") = 0 umount2("./20/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./20/binderfs") = 0 getdents64(3, 0x555594dec730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./20") = 0 mkdir("./21", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5907 attached , child_tidptr=0x555594deb690) = 5907 [pid 5907] set_robust_list(0x555594deb6a0, 24) = 0 [pid 5907] chdir("./21") = 0 [pid 5907] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5907] setpgid(0, 0) = 0 [pid 5907] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5907] write(3, "1000", 4) = 4 [pid 5907] close(3) = 0 [pid 5907] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5907] write(1, "executing program\n", 18) = 18 executing program [pid 5907] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5907] rt_sigaction(SIGRT_1, {sa_handler=0x7f6287661eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6287653060}, NULL, 8) = 0 [pid 5907] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5907] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875d0000 [pid 5907] mprotect(0x7f62875d1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5907] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5907] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875f0990, parent_tid=0x7f62875f0990, exit_signal=0, stack=0x7f62875d0000, stack_size=0x20300, tls=0x7f62875f06c0}./strace-static-x86_64: Process 5908 attached [pid 5908] rseq(0x7f62875f0fe0, 0x20, 0, 0x53053053 [pid 5907] <... clone3 resumed> => {parent_tid=[5908]}, 88) = 5908 [pid 5908] <... rseq resumed>) = 0 [pid 5907] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5907] futex(0x7f62876c36a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5908] set_robust_list(0x7f62875f09a0, 24 [pid 5907] <... futex resumed>) = 0 [pid 5908] <... set_robust_list resumed>) = 0 [pid 5907] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5908] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5907] <... futex resumed>) = 0 [pid 5908] memfd_create("syzkaller", 0 [pid 5907] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875af000 [pid 5907] mprotect(0x7f62875b0000, 131072, PROT_READ|PROT_WRITE [pid 5908] <... memfd_create resumed>) = 3 [pid 5907] <... mprotect resumed>) = 0 [pid 5908] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f627f000000 [pid 5907] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5908] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768 [pid 5907] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875cf990, parent_tid=0x7f62875cf990, exit_signal=0, stack=0x7f62875af000, stack_size=0x20300, tls=0x7f62875cf6c0}./strace-static-x86_64: Process 5909 attached [pid 5908] <... write resumed>) = 32768 [pid 5907] <... clone3 resumed> => {parent_tid=[5909]}, 88) = 5909 [pid 5909] rseq(0x7f62875cffe0, 0x20, 0, 0x53053053 [pid 5907] rt_sigprocmask(SIG_SETMASK, [], [pid 5909] <... rseq resumed>) = 0 [pid 5907] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5909] set_robust_list(0x7f62875cf9a0, 24 [pid 5907] futex(0x7f62876c36b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5909] <... set_robust_list resumed>) = 0 [pid 5908] munmap(0x7f627f000000, 138412032 [pid 5907] <... futex resumed>) = 0 [pid 5909] rt_sigprocmask(SIG_SETMASK, [], [pid 5908] <... munmap resumed>) = 0 [pid 5907] futex(0x7f62876c36bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5909] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5908] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5909] openat(AT_FDCWD, "./file0", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5908] <... openat resumed>) = 4 [pid 5909] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5908] ioctl(4, LOOP_SET_FD, 3 [pid 5909] <... futex resumed>) = 1 [pid 5907] <... futex resumed>) = 0 [pid 5909] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5908] <... ioctl resumed>) = 0 [pid 5908] close(3) = 0 [pid 5908] close(4) = 0 [pid 5908] mkdir("./file0", 0777) = 0 [pid 5908] mount("/dev/loop0", "./file0", "hfs", MS_NOSUID|MS_SYNCHRONOUS, "codepage=iso8859-5,umask=0000000000000777,iocharset=cp869,") = 0 [pid 5908] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5908] chdir("./file0") = 0 [ 127.603036][ T5908] loop0: detected capacity change from 0 to 64 [pid 5908] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5908] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5907] exit_group(0 [pid 5908] <... futex resumed>) = 0 [pid 5909] <... futex resumed>) = ? [pid 5907] <... exit_group resumed>) = ? [pid 5908] +++ exited with 0 +++ [pid 5909] +++ exited with 0 +++ [pid 5907] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5907, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./21", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555594dec730 /* 4 entries */, 32768) = 112 umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./21/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555594df4770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555594df4770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./21/file0") = 0 umount2("./21/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./21/binderfs") = 0 getdents64(3, 0x555594dec730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./21") = 0 mkdir("./22", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555594deb690) = 5910 ./strace-static-x86_64: Process 5910 attached [pid 5910] set_robust_list(0x555594deb6a0, 24) = 0 [pid 5910] chdir("./22") = 0 [pid 5910] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5910] setpgid(0, 0) = 0 [pid 5910] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5910] write(3, "1000", 4) = 4 [pid 5910] close(3) = 0 [pid 5910] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5910] write(1, "executing program\n", 18) = 18 [pid 5910] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5910] rt_sigaction(SIGRT_1, {sa_handler=0x7f6287661eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6287653060}, NULL, 8) = 0 [pid 5910] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5910] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875d0000 [pid 5910] mprotect(0x7f62875d1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5910] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5910] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875f0990, parent_tid=0x7f62875f0990, exit_signal=0, stack=0x7f62875d0000, stack_size=0x20300, tls=0x7f62875f06c0}./strace-static-x86_64: Process 5911 attached [pid 5911] rseq(0x7f62875f0fe0, 0x20, 0, 0x53053053) = 0 [pid 5911] set_robust_list(0x7f62875f09a0, 24 [pid 5910] <... clone3 resumed> => {parent_tid=[5911]}, 88) = 5911 [pid 5911] <... set_robust_list resumed>) = 0 [pid 5910] rt_sigprocmask(SIG_SETMASK, [], [pid 5911] rt_sigprocmask(SIG_SETMASK, [], [pid 5910] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5911] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5910] futex(0x7f62876c36a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5911] memfd_create("syzkaller", 0 [pid 5910] <... futex resumed>) = 0 [pid 5910] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5911] <... memfd_create resumed>) = 3 [pid 5910] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875af000 [pid 5911] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5910] mprotect(0x7f62875b0000, 131072, PROT_READ|PROT_WRITE [pid 5911] <... mmap resumed>) = 0x7f627f000000 [pid 5910] <... mprotect resumed>) = 0 [pid 5910] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5911] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768) = 32768 [pid 5910] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5911] munmap(0x7f627f000000, 138412032 [pid 5910] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875cf990, parent_tid=0x7f62875cf990, exit_signal=0, stack=0x7f62875af000, stack_size=0x20300, tls=0x7f62875cf6c0} [pid 5911] <... munmap resumed>) = 0 ./strace-static-x86_64: Process 5912 attached [pid 5911] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5912] rseq(0x7f62875cffe0, 0x20, 0, 0x53053053 [pid 5911] <... openat resumed>) = 4 [pid 5910] <... clone3 resumed> => {parent_tid=[5912]}, 88) = 5912 [pid 5912] <... rseq resumed>) = 0 [pid 5910] rt_sigprocmask(SIG_SETMASK, [], [pid 5912] set_robust_list(0x7f62875cf9a0, 24 [pid 5911] ioctl(4, LOOP_SET_FD, 3 [pid 5912] <... set_robust_list resumed>) = 0 [pid 5910] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5912] rt_sigprocmask(SIG_SETMASK, [], [pid 5910] futex(0x7f62876c36b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5912] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5910] <... futex resumed>) = 0 [pid 5912] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5910] futex(0x7f62876c36bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5912] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5912] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5910] <... futex resumed>) = 0 [pid 5912] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5911] <... ioctl resumed>) = 0 [pid 5911] close(3) = 0 [pid 5911] close(4) = 0 [pid 5911] mkdir("./file0", 0777) = 0 [pid 5911] mount("/dev/loop0", "./file0", "hfs", MS_NOSUID|MS_SYNCHRONOUS, "codepage=iso8859-5,umask=0000000000000777,iocharset=cp869,") = 0 [ 128.097402][ T5911] loop0: detected capacity change from 0 to 64 [pid 5911] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5911] chdir("./file0") = 0 [pid 5911] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5911] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5910] exit_group(0 [pid 5912] <... futex resumed>) = ? [pid 5911] <... futex resumed>) = ? [pid 5912] +++ exited with 0 +++ [pid 5911] +++ exited with 0 +++ [pid 5910] <... exit_group resumed>) = ? [pid 5910] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5910, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./22", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555594dec730 /* 4 entries */, 32768) = 112 umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./22/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555594df4770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555594df4770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./22/file0") = 0 umount2("./22/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./22/binderfs") = 0 getdents64(3, 0x555594dec730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./22") = 0 mkdir("./23", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5913 attached [pid 5913] set_robust_list(0x555594deb6a0, 24) = 0 [pid 5913] chdir("./23") = 0 [pid 5842] <... clone resumed>, child_tidptr=0x555594deb690) = 5913 [pid 5913] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5913] setpgid(0, 0) = 0 [pid 5913] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5913] write(3, "1000", 4) = 4 [pid 5913] close(3) = 0 [pid 5913] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5913] write(1, "executing program\n", 18) = 18 [pid 5913] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5913] rt_sigaction(SIGRT_1, {sa_handler=0x7f6287661eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6287653060}, NULL, 8) = 0 [pid 5913] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5913] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875d0000 [pid 5913] mprotect(0x7f62875d1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5913] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5913] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875f0990, parent_tid=0x7f62875f0990, exit_signal=0, stack=0x7f62875d0000, stack_size=0x20300, tls=0x7f62875f06c0}./strace-static-x86_64: Process 5914 attached => {parent_tid=[5914]}, 88) = 5914 [pid 5914] rseq(0x7f62875f0fe0, 0x20, 0, 0x53053053 [pid 5913] rt_sigprocmask(SIG_SETMASK, [], [pid 5914] <... rseq resumed>) = 0 [pid 5913] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5914] set_robust_list(0x7f62875f09a0, 24 [pid 5913] futex(0x7f62876c36a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5914] <... set_robust_list resumed>) = 0 [pid 5914] rt_sigprocmask(SIG_SETMASK, [], [pid 5913] <... futex resumed>) = 0 [pid 5914] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5913] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5913] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5914] memfd_create("syzkaller", 0 [pid 5913] <... mmap resumed>) = 0x7f62875af000 [pid 5914] <... memfd_create resumed>) = 3 [pid 5913] mprotect(0x7f62875b0000, 131072, PROT_READ|PROT_WRITE [pid 5914] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f627f000000 [pid 5913] <... mprotect resumed>) = 0 [pid 5914] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768 [pid 5913] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5914] <... write resumed>) = 32768 [pid 5913] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5914] munmap(0x7f627f000000, 138412032 [pid 5913] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875cf990, parent_tid=0x7f62875cf990, exit_signal=0, stack=0x7f62875af000, stack_size=0x20300, tls=0x7f62875cf6c0}./strace-static-x86_64: Process 5915 attached [pid 5915] rseq(0x7f62875cffe0, 0x20, 0, 0x53053053) = 0 [pid 5915] set_robust_list(0x7f62875cf9a0, 24 [pid 5913] <... clone3 resumed> => {parent_tid=[5915]}, 88) = 5915 [pid 5915] <... set_robust_list resumed>) = 0 [pid 5913] rt_sigprocmask(SIG_SETMASK, [], [pid 5915] rt_sigprocmask(SIG_SETMASK, [], [pid 5914] <... munmap resumed>) = 0 [pid 5913] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5915] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5914] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5913] futex(0x7f62876c36b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5915] openat(AT_FDCWD, "./file0", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5913] <... futex resumed>) = 0 [pid 5913] futex(0x7f62876c36bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5915] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5914] <... openat resumed>) = 4 [pid 5913] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5915] <... futex resumed>) = 0 [pid 5914] ioctl(4, LOOP_SET_FD, 3 [pid 5915] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5914] <... ioctl resumed>) = 0 [pid 5914] close(3) = 0 [pid 5914] close(4) = 0 [pid 5914] mkdir("./file0", 0777) = 0 [pid 5914] mount("/dev/loop0", "./file0", "hfs", MS_NOSUID|MS_SYNCHRONOUS, "codepage=iso8859-5,umask=0000000000000777,iocharset=cp869,") = 0 [ 128.581701][ T5914] loop0: detected capacity change from 0 to 64 [pid 5914] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5914] chdir("./file0") = 0 [pid 5914] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5914] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5914] futex(0x7f62876c36a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5913] exit_group(0 [pid 5915] <... futex resumed>) = ? [pid 5914] <... futex resumed>) = ? [pid 5913] <... exit_group resumed>) = ? [pid 5915] +++ exited with 0 +++ [pid 5914] +++ exited with 0 +++ [pid 5913] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5913, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./23", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555594dec730 /* 4 entries */, 32768) = 112 umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./23/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555594df4770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555594df4770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./23/file0") = 0 umount2("./23/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./23/binderfs") = 0 getdents64(3, 0x555594dec730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./23") = 0 mkdir("./24", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5916 attached , child_tidptr=0x555594deb690) = 5916 [pid 5916] set_robust_list(0x555594deb6a0, 24) = 0 [pid 5916] chdir("./24") = 0 [pid 5916] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5916] setpgid(0, 0) = 0 [pid 5916] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5916] write(3, "1000", 4) = 4 [pid 5916] close(3) = 0 [pid 5916] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5916] write(1, "executing program\n", 18) = 18 [pid 5916] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5916] rt_sigaction(SIGRT_1, {sa_handler=0x7f6287661eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6287653060}, NULL, 8) = 0 [pid 5916] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5916] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875d0000 [pid 5916] mprotect(0x7f62875d1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5916] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5916] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875f0990, parent_tid=0x7f62875f0990, exit_signal=0, stack=0x7f62875d0000, stack_size=0x20300, tls=0x7f62875f06c0}./strace-static-x86_64: Process 5917 attached => {parent_tid=[5917]}, 88) = 5917 [pid 5917] rseq(0x7f62875f0fe0, 0x20, 0, 0x53053053 [pid 5916] rt_sigprocmask(SIG_SETMASK, [], [pid 5917] <... rseq resumed>) = 0 [pid 5916] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5917] set_robust_list(0x7f62875f09a0, 24 [pid 5916] futex(0x7f62876c36a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5917] <... set_robust_list resumed>) = 0 [pid 5917] rt_sigprocmask(SIG_SETMASK, [], [pid 5916] <... futex resumed>) = 0 [pid 5917] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5916] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5917] memfd_create("syzkaller", 0 [pid 5916] <... futex resumed>) = 0 [pid 5916] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875af000 [pid 5916] mprotect(0x7f62875b0000, 131072, PROT_READ|PROT_WRITE [pid 5917] <... memfd_create resumed>) = 3 [pid 5916] <... mprotect resumed>) = 0 [pid 5917] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f627f000000 [pid 5916] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5916] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875cf990, parent_tid=0x7f62875cf990, exit_signal=0, stack=0x7f62875af000, stack_size=0x20300, tls=0x7f62875cf6c0} [pid 5917] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768./strace-static-x86_64: Process 5918 attached [pid 5918] rseq(0x7f62875cffe0, 0x20, 0, 0x53053053 [pid 5916] <... clone3 resumed> => {parent_tid=[5918]}, 88) = 5918 [pid 5918] <... rseq resumed>) = 0 [pid 5916] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5917] <... write resumed>) = 32768 [pid 5918] set_robust_list(0x7f62875cf9a0, 24 [pid 5916] futex(0x7f62876c36b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5918] <... set_robust_list resumed>) = 0 [pid 5916] <... futex resumed>) = 0 [pid 5918] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5917] munmap(0x7f627f000000, 138412032 [pid 5918] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5916] futex(0x7f62876c36bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5918] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5917] <... munmap resumed>) = 0 [pid 5918] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5916] <... futex resumed>) = 0 [pid 5918] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5917] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5917] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5917] close(3) = 0 [pid 5917] close(4) = 0 [pid 5917] mkdir("./file0", 0777) = 0 [pid 5917] mount("/dev/loop0", "./file0", "hfs", MS_NOSUID|MS_SYNCHRONOUS, "codepage=iso8859-5,umask=0000000000000777,iocharset=cp869,") = 0 [pid 5917] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5917] chdir("./file0") = 0 [pid 5917] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5917] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5916] exit_group(0 [pid 5917] <... futex resumed>) = 0 [pid 5916] <... exit_group resumed>) = ? [pid 5918] <... futex resumed>) = ? [pid 5918] +++ exited with 0 +++ [pid 5917] +++ exited with 0 +++ [pid 5916] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5916, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 [ 129.171315][ T5917] loop0: detected capacity change from 0 to 64 umount2("./24", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555594dec730 /* 4 entries */, 32768) = 112 umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./24/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555594df4770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555594df4770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./24/file0") = 0 umount2("./24/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./24/binderfs") = 0 getdents64(3, 0x555594dec730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./24") = 0 mkdir("./25", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555594deb690) = 5919 ./strace-static-x86_64: Process 5919 attached [pid 5919] set_robust_list(0x555594deb6a0, 24) = 0 [pid 5919] chdir("./25") = 0 [pid 5919] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5919] setpgid(0, 0) = 0 [pid 5919] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5919] write(3, "1000", 4) = 4 [pid 5919] close(3) = 0 [pid 5919] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5919] write(1, "executing program\n", 18executing program ) = 18 [pid 5919] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5919] rt_sigaction(SIGRT_1, {sa_handler=0x7f6287661eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6287653060}, NULL, 8) = 0 [pid 5919] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5919] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875d0000 [pid 5919] mprotect(0x7f62875d1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5919] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5919] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875f0990, parent_tid=0x7f62875f0990, exit_signal=0, stack=0x7f62875d0000, stack_size=0x20300, tls=0x7f62875f06c0}./strace-static-x86_64: Process 5920 attached [pid 5920] rseq(0x7f62875f0fe0, 0x20, 0, 0x53053053) = 0 [pid 5920] set_robust_list(0x7f62875f09a0, 24 [pid 5919] <... clone3 resumed> => {parent_tid=[5920]}, 88) = 5920 [pid 5920] <... set_robust_list resumed>) = 0 [pid 5919] rt_sigprocmask(SIG_SETMASK, [], [pid 5920] rt_sigprocmask(SIG_SETMASK, [], [pid 5919] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5920] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5919] futex(0x7f62876c36a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5920] memfd_create("syzkaller", 0 [pid 5919] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5920] <... memfd_create resumed>) = 3 [pid 5919] <... futex resumed>) = 0 [pid 5920] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5919] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5920] <... mmap resumed>) = 0x7f627f000000 [pid 5919] <... mmap resumed>) = 0x7f62875af000 [pid 5919] mprotect(0x7f62875b0000, 131072, PROT_READ|PROT_WRITE [pid 5920] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768 [pid 5919] <... mprotect resumed>) = 0 [pid 5920] <... write resumed>) = 32768 [pid 5920] munmap(0x7f627f000000, 138412032) = 0 [pid 5919] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5919] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875cf990, parent_tid=0x7f62875cf990, exit_signal=0, stack=0x7f62875af000, stack_size=0x20300, tls=0x7f62875cf6c0}./strace-static-x86_64: Process 5921 attached [pid 5920] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5921] rseq(0x7f62875cffe0, 0x20, 0, 0x53053053 [pid 5919] <... clone3 resumed> => {parent_tid=[5921]}, 88) = 5921 [pid 5921] <... rseq resumed>) = 0 [pid 5920] <... openat resumed>) = 4 [pid 5919] rt_sigprocmask(SIG_SETMASK, [], [pid 5921] set_robust_list(0x7f62875cf9a0, 24 [pid 5919] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5921] <... set_robust_list resumed>) = 0 [pid 5919] futex(0x7f62876c36b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5921] rt_sigprocmask(SIG_SETMASK, [], [pid 5919] <... futex resumed>) = 0 [pid 5921] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5920] ioctl(4, LOOP_SET_FD, 3 [pid 5919] futex(0x7f62876c36bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5921] openat(AT_FDCWD, "./file0", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5921] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5920] <... ioctl resumed>) = 0 [pid 5921] <... futex resumed>) = 1 [pid 5920] close(3 [pid 5921] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5919] <... futex resumed>) = 0 [pid 5920] <... close resumed>) = 0 [pid 5920] close(4) = 0 [pid 5920] mkdir("./file0", 0777) = 0 [pid 5920] mount("/dev/loop0", "./file0", "hfs", MS_NOSUID|MS_SYNCHRONOUS, "codepage=iso8859-5,umask=0000000000000777,iocharset=cp869,") = 0 [pid 5920] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5920] chdir("./file0") = 0 [ 129.669245][ T5920] loop0: detected capacity change from 0 to 64 [pid 5920] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5920] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5920] futex(0x7f62876c36a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5919] exit_group(0 [pid 5921] <... futex resumed>) = ? [pid 5921] +++ exited with 0 +++ [pid 5920] <... futex resumed>) = ? [pid 5919] <... exit_group resumed>) = ? [pid 5920] +++ exited with 0 +++ [pid 5919] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5919, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./25", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555594dec730 /* 4 entries */, 32768) = 112 umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./25/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555594df4770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555594df4770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./25/file0") = 0 umount2("./25/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./25/binderfs") = 0 getdents64(3, 0x555594dec730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./25") = 0 mkdir("./26", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5922 attached [pid 5922] set_robust_list(0x555594deb6a0, 24 [pid 5842] <... clone resumed>, child_tidptr=0x555594deb690) = 5922 [pid 5922] <... set_robust_list resumed>) = 0 [pid 5922] chdir("./26") = 0 [pid 5922] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5922] setpgid(0, 0) = 0 [pid 5922] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5922] write(3, "1000", 4) = 4 [pid 5922] close(3) = 0 [pid 5922] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5922] write(1, "executing program\n", 18executing program ) = 18 [pid 5922] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5922] rt_sigaction(SIGRT_1, {sa_handler=0x7f6287661eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6287653060}, NULL, 8) = 0 [pid 5922] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5922] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875d0000 [pid 5922] mprotect(0x7f62875d1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5922] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5922] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875f0990, parent_tid=0x7f62875f0990, exit_signal=0, stack=0x7f62875d0000, stack_size=0x20300, tls=0x7f62875f06c0}./strace-static-x86_64: Process 5923 attached [pid 5923] rseq(0x7f62875f0fe0, 0x20, 0, 0x53053053 [pid 5922] <... clone3 resumed> => {parent_tid=[5923]}, 88) = 5923 [pid 5923] <... rseq resumed>) = 0 [pid 5923] set_robust_list(0x7f62875f09a0, 24) = 0 [pid 5923] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5923] futex(0x7f62876c36a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5922] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5922] futex(0x7f62876c36a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5923] <... futex resumed>) = 0 [pid 5922] <... futex resumed>) = 1 [pid 5922] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5923] memfd_create("syzkaller", 0 [pid 5922] <... futex resumed>) = 0 [pid 5922] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5923] <... memfd_create resumed>) = 3 [pid 5922] <... mmap resumed>) = 0x7f62875af000 [pid 5923] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f627f000000 [pid 5922] mprotect(0x7f62875b0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5922] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5923] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768 [pid 5922] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5922] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875cf990, parent_tid=0x7f62875cf990, exit_signal=0, stack=0x7f62875af000, stack_size=0x20300, tls=0x7f62875cf6c0}./strace-static-x86_64: Process 5924 attached [pid 5924] rseq(0x7f62875cffe0, 0x20, 0, 0x53053053 [pid 5922] <... clone3 resumed> => {parent_tid=[5924]}, 88) = 5924 [pid 5924] <... rseq resumed>) = 0 [pid 5923] <... write resumed>) = 32768 [pid 5924] set_robust_list(0x7f62875cf9a0, 24 [pid 5923] munmap(0x7f627f000000, 138412032 [pid 5922] rt_sigprocmask(SIG_SETMASK, [], [pid 5924] <... set_robust_list resumed>) = 0 [pid 5923] <... munmap resumed>) = 0 [pid 5922] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5924] rt_sigprocmask(SIG_SETMASK, [], [pid 5922] futex(0x7f62876c36b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5924] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5922] <... futex resumed>) = 0 [pid 5924] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5923] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5922] futex(0x7f62876c36bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5924] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5923] <... openat resumed>) = 4 [pid 5924] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5922] <... futex resumed>) = 0 [pid 5924] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5923] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5923] close(3) = 0 [pid 5923] close(4) = 0 [pid 5923] mkdir("./file0", 0777) = 0 [pid 5923] mount("/dev/loop0", "./file0", "hfs", MS_NOSUID|MS_SYNCHRONOUS, "codepage=iso8859-5,umask=0000000000000777,iocharset=cp869,") = 0 [ 130.199402][ T5923] loop0: detected capacity change from 0 to 64 [pid 5923] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5923] chdir("./file0") = 0 [pid 5923] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5923] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5922] exit_group(0 [pid 5924] <... futex resumed>) = ? [pid 5923] <... futex resumed>) = ? [pid 5922] <... exit_group resumed>) = ? [pid 5924] +++ exited with 0 +++ [pid 5923] +++ exited with 0 +++ [pid 5922] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5922, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./26", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555594dec730 /* 4 entries */, 32768) = 112 umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./26/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555594df4770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555594df4770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./26/file0") = 0 umount2("./26/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./26/binderfs") = 0 getdents64(3, 0x555594dec730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./26") = 0 mkdir("./27", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5925 attached [pid 5925] set_robust_list(0x555594deb6a0, 24) = 0 [pid 5925] chdir("./27" [pid 5842] <... clone resumed>, child_tidptr=0x555594deb690) = 5925 [pid 5925] <... chdir resumed>) = 0 [pid 5925] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5925] setpgid(0, 0) = 0 [pid 5925] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5925] write(3, "1000", 4) = 4 [pid 5925] close(3) = 0 [pid 5925] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5925] write(1, "executing program\n", 18) = 18 [pid 5925] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5925] rt_sigaction(SIGRT_1, {sa_handler=0x7f6287661eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6287653060}, NULL, 8) = 0 [pid 5925] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5925] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875d0000 [pid 5925] mprotect(0x7f62875d1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5925] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5925] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875f0990, parent_tid=0x7f62875f0990, exit_signal=0, stack=0x7f62875d0000, stack_size=0x20300, tls=0x7f62875f06c0}./strace-static-x86_64: Process 5926 attached => {parent_tid=[5926]}, 88) = 5926 [pid 5926] rseq(0x7f62875f0fe0, 0x20, 0, 0x53053053) = 0 [pid 5925] rt_sigprocmask(SIG_SETMASK, [], [pid 5926] set_robust_list(0x7f62875f09a0, 24 [pid 5925] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5926] <... set_robust_list resumed>) = 0 [pid 5925] futex(0x7f62876c36a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5926] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5925] <... futex resumed>) = 0 [pid 5925] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5926] memfd_create("syzkaller", 0 [pid 5925] <... futex resumed>) = 0 [pid 5926] <... memfd_create resumed>) = 3 [pid 5925] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5926] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f627f000000 [pid 5925] <... mmap resumed>) = 0x7f62875af000 [pid 5925] mprotect(0x7f62875b0000, 131072, PROT_READ|PROT_WRITE [pid 5926] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768) = 32768 [pid 5925] <... mprotect resumed>) = 0 [pid 5926] munmap(0x7f627f000000, 138412032 [pid 5925] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5926] <... munmap resumed>) = 0 [pid 5925] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5925] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875cf990, parent_tid=0x7f62875cf990, exit_signal=0, stack=0x7f62875af000, stack_size=0x20300, tls=0x7f62875cf6c0} [pid 5926] openat(AT_FDCWD, "/dev/loop0", O_RDWR./strace-static-x86_64: Process 5927 attached ) = 4 [pid 5927] rseq(0x7f62875cffe0, 0x20, 0, 0x53053053 [pid 5926] ioctl(4, LOOP_SET_FD, 3 [pid 5925] <... clone3 resumed> => {parent_tid=[5927]}, 88) = 5927 [pid 5927] <... rseq resumed>) = 0 [pid 5925] rt_sigprocmask(SIG_SETMASK, [], [pid 5927] set_robust_list(0x7f62875cf9a0, 24 [pid 5925] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5927] <... set_robust_list resumed>) = 0 [pid 5927] rt_sigprocmask(SIG_SETMASK, [], [pid 5925] futex(0x7f62876c36b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5927] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5925] <... futex resumed>) = 0 [pid 5927] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5925] futex(0x7f62876c36bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5927] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5926] <... ioctl resumed>) = 0 [pid 5927] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5926] close(3 [pid 5925] <... futex resumed>) = 0 [pid 5927] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5926] <... close resumed>) = 0 [pid 5926] close(4) = 0 [pid 5926] mkdir("./file0", 0777) = 0 [pid 5926] mount("/dev/loop0", "./file0", "hfs", MS_NOSUID|MS_SYNCHRONOUS, "codepage=iso8859-5,umask=0000000000000777,iocharset=cp869,") = 0 [pid 5926] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5926] chdir("./file0") = 0 [pid 5926] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5926] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5926] futex(0x7f62876c36a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5925] exit_group(0 [pid 5927] <... futex resumed>) = ? [pid 5926] <... futex resumed>) = ? [pid 5925] <... exit_group resumed>) = ? [pid 5927] +++ exited with 0 +++ [ 130.754810][ T5926] loop0: detected capacity change from 0 to 64 [pid 5926] +++ exited with 0 +++ [pid 5925] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5925, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./27", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555594dec730 /* 4 entries */, 32768) = 112 umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./27/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555594df4770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555594df4770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./27/file0") = 0 umount2("./27/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./27/binderfs") = 0 getdents64(3, 0x555594dec730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./27") = 0 mkdir("./28", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5928 attached , child_tidptr=0x555594deb690) = 5928 [pid 5928] set_robust_list(0x555594deb6a0, 24) = 0 [pid 5928] chdir("./28") = 0 [pid 5928] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5928] setpgid(0, 0) = 0 [pid 5928] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5928] write(3, "1000", 4) = 4 [pid 5928] close(3) = 0 [pid 5928] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5928] write(1, "executing program\n", 18executing program ) = 18 [pid 5928] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5928] rt_sigaction(SIGRT_1, {sa_handler=0x7f6287661eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6287653060}, NULL, 8) = 0 [pid 5928] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5928] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875d0000 [pid 5928] mprotect(0x7f62875d1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5928] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5928] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875f0990, parent_tid=0x7f62875f0990, exit_signal=0, stack=0x7f62875d0000, stack_size=0x20300, tls=0x7f62875f06c0}./strace-static-x86_64: Process 5929 attached => {parent_tid=[5929]}, 88) = 5929 [pid 5929] rseq(0x7f62875f0fe0, 0x20, 0, 0x53053053) = 0 [pid 5929] set_robust_list(0x7f62875f09a0, 24 [pid 5928] rt_sigprocmask(SIG_SETMASK, [], [pid 5929] <... set_robust_list resumed>) = 0 [pid 5928] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5929] rt_sigprocmask(SIG_SETMASK, [], [pid 5928] futex(0x7f62876c36a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5929] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5928] <... futex resumed>) = 0 [pid 5929] memfd_create("syzkaller", 0 [pid 5928] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5929] <... memfd_create resumed>) = 3 [pid 5928] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875af000 [pid 5928] mprotect(0x7f62875b0000, 131072, PROT_READ|PROT_WRITE [pid 5929] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f627f000000 [pid 5928] <... mprotect resumed>) = 0 [pid 5928] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5929] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768 [pid 5928] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875cf990, parent_tid=0x7f62875cf990, exit_signal=0, stack=0x7f62875af000, stack_size=0x20300, tls=0x7f62875cf6c0}./strace-static-x86_64: Process 5930 attached [pid 5930] rseq(0x7f62875cffe0, 0x20, 0, 0x53053053) = 0 [pid 5928] <... clone3 resumed> => {parent_tid=[5930]}, 88) = 5930 [pid 5930] set_robust_list(0x7f62875cf9a0, 24 [pid 5928] rt_sigprocmask(SIG_SETMASK, [], [pid 5930] <... set_robust_list resumed>) = 0 [pid 5928] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5930] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5928] futex(0x7f62876c36b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5930] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5928] <... futex resumed>) = 0 [pid 5930] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5929] <... write resumed>) = 32768 [pid 5928] futex(0x7f62876c36bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5930] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5929] munmap(0x7f627f000000, 138412032 [pid 5930] <... futex resumed>) = 1 [pid 5929] <... munmap resumed>) = 0 [pid 5928] <... futex resumed>) = 0 [pid 5930] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5929] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5929] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5929] close(3) = 0 [pid 5929] close(4) = 0 [pid 5929] mkdir("./file0", 0777) = 0 [pid 5929] mount("/dev/loop0", "./file0", "hfs", MS_NOSUID|MS_SYNCHRONOUS, "codepage=iso8859-5,umask=0000000000000777,iocharset=cp869,") = 0 [pid 5929] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5929] chdir("./file0") = 0 [pid 5929] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 131.313520][ T5929] loop0: detected capacity change from 0 to 64 [pid 5929] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5928] exit_group(0 [pid 5929] futex(0x7f62876c36a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5930] <... futex resumed>) = ? [pid 5930] +++ exited with 0 +++ [pid 5929] <... futex resumed>) = ? [pid 5929] +++ exited with 0 +++ [pid 5928] <... exit_group resumed>) = ? [pid 5928] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5928, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./28", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555594dec730 /* 4 entries */, 32768) = 112 umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./28/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555594df4770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555594df4770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./28/file0") = 0 umount2("./28/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./28/binderfs") = 0 getdents64(3, 0x555594dec730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./28") = 0 mkdir("./29", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5931 attached , child_tidptr=0x555594deb690) = 5931 [pid 5931] set_robust_list(0x555594deb6a0, 24) = 0 [pid 5931] chdir("./29") = 0 [pid 5931] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5931] setpgid(0, 0) = 0 [pid 5931] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5931] write(3, "1000", 4) = 4 [pid 5931] close(3) = 0 [pid 5931] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5931] write(1, "executing program\n", 18executing program ) = 18 [pid 5931] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5931] rt_sigaction(SIGRT_1, {sa_handler=0x7f6287661eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6287653060}, NULL, 8) = 0 [pid 5931] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5931] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875d0000 [pid 5931] mprotect(0x7f62875d1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5931] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5931] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875f0990, parent_tid=0x7f62875f0990, exit_signal=0, stack=0x7f62875d0000, stack_size=0x20300, tls=0x7f62875f06c0}./strace-static-x86_64: Process 5932 attached [pid 5932] rseq(0x7f62875f0fe0, 0x20, 0, 0x53053053 [pid 5931] <... clone3 resumed> => {parent_tid=[5932]}, 88) = 5932 [pid 5932] <... rseq resumed>) = 0 [pid 5932] set_robust_list(0x7f62875f09a0, 24 [pid 5931] rt_sigprocmask(SIG_SETMASK, [], [pid 5932] <... set_robust_list resumed>) = 0 [pid 5931] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5932] rt_sigprocmask(SIG_SETMASK, [], [pid 5931] futex(0x7f62876c36a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5932] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5931] <... futex resumed>) = 0 [pid 5932] memfd_create("syzkaller", 0 [pid 5931] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5931] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875af000 [pid 5932] <... memfd_create resumed>) = 3 [pid 5931] mprotect(0x7f62875b0000, 131072, PROT_READ|PROT_WRITE [pid 5932] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5931] <... mprotect resumed>) = 0 [pid 5932] <... mmap resumed>) = 0x7f627f000000 [pid 5931] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5932] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768 [pid 5931] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5931] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875cf990, parent_tid=0x7f62875cf990, exit_signal=0, stack=0x7f62875af000, stack_size=0x20300, tls=0x7f62875cf6c0}./strace-static-x86_64: Process 5933 attached [pid 5932] <... write resumed>) = 32768 [pid 5933] rseq(0x7f62875cffe0, 0x20, 0, 0x53053053 [pid 5932] munmap(0x7f627f000000, 138412032 [pid 5933] <... rseq resumed>) = 0 [pid 5931] <... clone3 resumed> => {parent_tid=[5933]}, 88) = 5933 [pid 5932] <... munmap resumed>) = 0 [pid 5933] set_robust_list(0x7f62875cf9a0, 24 [pid 5931] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5933] <... set_robust_list resumed>) = 0 [pid 5931] futex(0x7f62876c36b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5933] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5932] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5933] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5931] <... futex resumed>) = 0 [pid 5932] <... openat resumed>) = 4 [pid 5931] futex(0x7f62876c36bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5933] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5932] ioctl(4, LOOP_SET_FD, 3 [pid 5933] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5932] <... ioctl resumed>) = 0 [pid 5931] <... futex resumed>) = 0 [pid 5933] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5932] close(3) = 0 [pid 5932] close(4) = 0 [pid 5932] mkdir("./file0", 0777) = 0 [pid 5932] mount("/dev/loop0", "./file0", "hfs", MS_NOSUID|MS_SYNCHRONOUS, "codepage=iso8859-5,umask=0000000000000777,iocharset=cp869,") = 0 [pid 5932] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5932] chdir("./file0") = 0 [pid 5932] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5932] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5931] exit_group(0) = ? [pid 5933] <... futex resumed>) = ? [pid 5933] +++ exited with 0 +++ [pid 5932] <... futex resumed>) = ? [pid 5932] +++ exited with 0 +++ [pid 5931] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5931, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 [ 131.608692][ T5932] loop0: detected capacity change from 0 to 64 umount2("./29", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555594dec730 /* 4 entries */, 32768) = 112 umount2("./29/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./29/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./29/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./29/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555594df4770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555594df4770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./29/file0") = 0 umount2("./29/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./29/binderfs") = 0 getdents64(3, 0x555594dec730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./29") = 0 mkdir("./30", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5934 attached , child_tidptr=0x555594deb690) = 5934 [pid 5934] set_robust_list(0x555594deb6a0, 24) = 0 [pid 5934] chdir("./30") = 0 [pid 5934] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5934] setpgid(0, 0) = 0 [pid 5934] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5934] write(3, "1000", 4) = 4 [pid 5934] close(3) = 0 [pid 5934] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5934] write(1, "executing program\n", 18) = 18 [pid 5934] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5934] rt_sigaction(SIGRT_1, {sa_handler=0x7f6287661eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6287653060}, NULL, 8) = 0 [pid 5934] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5934] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875d0000 [pid 5934] mprotect(0x7f62875d1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5934] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5934] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875f0990, parent_tid=0x7f62875f0990, exit_signal=0, stack=0x7f62875d0000, stack_size=0x20300, tls=0x7f62875f06c0}./strace-static-x86_64: Process 5935 attached [pid 5935] rseq(0x7f62875f0fe0, 0x20, 0, 0x53053053) = 0 [pid 5934] <... clone3 resumed> => {parent_tid=[5935]}, 88) = 5935 [pid 5935] set_robust_list(0x7f62875f09a0, 24 [pid 5934] rt_sigprocmask(SIG_SETMASK, [], [pid 5935] <... set_robust_list resumed>) = 0 [pid 5934] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5935] rt_sigprocmask(SIG_SETMASK, [], [pid 5934] futex(0x7f62876c36a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5935] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5934] <... futex resumed>) = 0 [pid 5935] memfd_create("syzkaller", 0 [pid 5934] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5934] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5935] <... memfd_create resumed>) = 3 [pid 5934] <... mmap resumed>) = 0x7f62875af000 [pid 5934] mprotect(0x7f62875b0000, 131072, PROT_READ|PROT_WRITE [pid 5935] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5934] <... mprotect resumed>) = 0 [pid 5935] <... mmap resumed>) = 0x7f627f000000 [pid 5934] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5935] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768 [pid 5934] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5935] <... write resumed>) = 32768 [pid 5934] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875cf990, parent_tid=0x7f62875cf990, exit_signal=0, stack=0x7f62875af000, stack_size=0x20300, tls=0x7f62875cf6c0}./strace-static-x86_64: Process 5936 attached [pid 5935] munmap(0x7f627f000000, 138412032 [pid 5936] rseq(0x7f62875cffe0, 0x20, 0, 0x53053053 [pid 5935] <... munmap resumed>) = 0 [pid 5936] <... rseq resumed>) = 0 [pid 5936] set_robust_list(0x7f62875cf9a0, 24 [pid 5934] <... clone3 resumed> => {parent_tid=[5936]}, 88) = 5936 [pid 5936] <... set_robust_list resumed>) = 0 [pid 5935] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5934] rt_sigprocmask(SIG_SETMASK, [], [pid 5936] rt_sigprocmask(SIG_SETMASK, [], [pid 5935] <... openat resumed>) = 4 [pid 5934] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5936] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5936] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5934] futex(0x7f62876c36b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5936] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5934] <... futex resumed>) = 0 [pid 5936] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5935] ioctl(4, LOOP_SET_FD, 3 [pid 5934] futex(0x7f62876c36bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5936] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5936] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5935] <... ioctl resumed>) = 0 [pid 5936] <... futex resumed>) = 1 [pid 5934] <... futex resumed>) = 0 [pid 5936] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5935] close(3) = 0 [pid 5935] close(4) = 0 [pid 5935] mkdir("./file0", 0777) = 0 [pid 5935] mount("/dev/loop0", "./file0", "hfs", MS_NOSUID|MS_SYNCHRONOUS, "codepage=iso8859-5,umask=0000000000000777,iocharset=cp869,") = 0 [pid 5935] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5935] chdir("./file0") = 0 [pid 5935] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5935] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5934] exit_group(0 [pid 5936] <... futex resumed>) = ? [pid 5935] <... futex resumed>) = ? [pid 5935] +++ exited with 0 +++ [pid 5934] <... exit_group resumed>) = ? [pid 5936] +++ exited with 0 +++ [ 132.114568][ T5935] loop0: detected capacity change from 0 to 64 [pid 5934] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5934, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./30", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555594dec730 /* 4 entries */, 32768) = 112 umount2("./30/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./30/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./30/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./30/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555594df4770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555594df4770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./30/file0") = 0 umount2("./30/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./30/binderfs") = 0 getdents64(3, 0x555594dec730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./30") = 0 mkdir("./31", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5937 attached , child_tidptr=0x555594deb690) = 5937 [pid 5937] set_robust_list(0x555594deb6a0, 24) = 0 [pid 5937] chdir("./31") = 0 [pid 5937] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5937] setpgid(0, 0) = 0 [pid 5937] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5937] write(3, "1000", 4) = 4 [pid 5937] close(3) = 0 [pid 5937] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5937] write(1, "executing program\n", 18executing program ) = 18 [pid 5937] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5937] rt_sigaction(SIGRT_1, {sa_handler=0x7f6287661eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6287653060}, NULL, 8) = 0 [pid 5937] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5937] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875d0000 [pid 5937] mprotect(0x7f62875d1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5937] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5937] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875f0990, parent_tid=0x7f62875f0990, exit_signal=0, stack=0x7f62875d0000, stack_size=0x20300, tls=0x7f62875f06c0}./strace-static-x86_64: Process 5938 attached [pid 5938] rseq(0x7f62875f0fe0, 0x20, 0, 0x53053053) = 0 [pid 5937] <... clone3 resumed> => {parent_tid=[5938]}, 88) = 5938 [pid 5938] set_robust_list(0x7f62875f09a0, 24 [pid 5937] rt_sigprocmask(SIG_SETMASK, [], [pid 5938] <... set_robust_list resumed>) = 0 [pid 5937] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5938] rt_sigprocmask(SIG_SETMASK, [], [pid 5937] futex(0x7f62876c36a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5938] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5937] <... futex resumed>) = 0 [pid 5938] memfd_create("syzkaller", 0 [pid 5937] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5937] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875af000 [pid 5937] mprotect(0x7f62875b0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5938] <... memfd_create resumed>) = 3 [pid 5938] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5937] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5938] <... mmap resumed>) = 0x7f627f000000 [pid 5937] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5937] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875cf990, parent_tid=0x7f62875cf990, exit_signal=0, stack=0x7f62875af000, stack_size=0x20300, tls=0x7f62875cf6c0}./strace-static-x86_64: Process 5939 attached [pid 5938] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768 [pid 5939] rseq(0x7f62875cffe0, 0x20, 0, 0x53053053) = 0 [pid 5939] set_robust_list(0x7f62875cf9a0, 24 [pid 5938] <... write resumed>) = 32768 [pid 5937] <... clone3 resumed> => {parent_tid=[5939]}, 88) = 5939 [pid 5939] <... set_robust_list resumed>) = 0 [pid 5938] munmap(0x7f627f000000, 138412032 [pid 5937] rt_sigprocmask(SIG_SETMASK, [], [pid 5939] rt_sigprocmask(SIG_SETMASK, [], [pid 5938] <... munmap resumed>) = 0 [pid 5937] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5939] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5937] futex(0x7f62876c36b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5939] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5937] <... futex resumed>) = 0 [pid 5939] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5938] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5937] futex(0x7f62876c36bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5939] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5938] <... openat resumed>) = 4 [pid 5939] <... futex resumed>) = 1 [pid 5939] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5937] <... futex resumed>) = 0 [pid 5938] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5938] close(3) = 0 [pid 5938] close(4) = 0 [pid 5938] mkdir("./file0", 0777) = 0 [pid 5938] mount("/dev/loop0", "./file0", "hfs", MS_NOSUID|MS_SYNCHRONOUS, "codepage=iso8859-5,umask=0000000000000777,iocharset=cp869,") = 0 [pid 5938] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5938] chdir("./file0") = 0 [pid 5938] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5938] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 132.494062][ T5938] loop0: detected capacity change from 0 to 64 [pid 5938] futex(0x7f62876c36a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5937] exit_group(0 [pid 5939] <... futex resumed>) = ? [pid 5938] <... futex resumed>) = ? [pid 5937] <... exit_group resumed>) = ? [pid 5938] +++ exited with 0 +++ [pid 5939] +++ exited with 0 +++ [pid 5937] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5937, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./31", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555594dec730 /* 4 entries */, 32768) = 112 umount2("./31/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./31/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./31/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./31/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555594df4770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555594df4770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./31/file0") = 0 umount2("./31/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./31/binderfs") = 0 getdents64(3, 0x555594dec730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./31") = 0 mkdir("./32", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5940 attached [pid 5940] set_robust_list(0x555594deb6a0, 24) = 0 [pid 5842] <... clone resumed>, child_tidptr=0x555594deb690) = 5940 [pid 5940] chdir("./32") = 0 [pid 5940] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5940] setpgid(0, 0) = 0 [pid 5940] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5940] write(3, "1000", 4) = 4 [pid 5940] close(3) = 0 [pid 5940] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5940] write(1, "executing program\n", 18) = 18 [pid 5940] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5940] rt_sigaction(SIGRT_1, {sa_handler=0x7f6287661eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6287653060}, NULL, 8) = 0 [pid 5940] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5940] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875d0000 [pid 5940] mprotect(0x7f62875d1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5940] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5940] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875f0990, parent_tid=0x7f62875f0990, exit_signal=0, stack=0x7f62875d0000, stack_size=0x20300, tls=0x7f62875f06c0}./strace-static-x86_64: Process 5941 attached [pid 5941] rseq(0x7f62875f0fe0, 0x20, 0, 0x53053053 [pid 5940] <... clone3 resumed> => {parent_tid=[5941]}, 88) = 5941 [pid 5941] <... rseq resumed>) = 0 [pid 5940] rt_sigprocmask(SIG_SETMASK, [], [pid 5941] set_robust_list(0x7f62875f09a0, 24 [pid 5940] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5941] <... set_robust_list resumed>) = 0 [pid 5940] futex(0x7f62876c36a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5941] rt_sigprocmask(SIG_SETMASK, [], [pid 5940] <... futex resumed>) = 0 [pid 5941] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5940] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5941] memfd_create("syzkaller", 0 [pid 5940] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875af000 [pid 5941] <... memfd_create resumed>) = 3 [pid 5940] mprotect(0x7f62875b0000, 131072, PROT_READ|PROT_WRITE [pid 5941] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f627f000000 [pid 5940] <... mprotect resumed>) = 0 [pid 5940] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5941] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768 [pid 5940] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875cf990, parent_tid=0x7f62875cf990, exit_signal=0, stack=0x7f62875af000, stack_size=0x20300, tls=0x7f62875cf6c0}./strace-static-x86_64: Process 5942 attached [pid 5941] <... write resumed>) = 32768 [pid 5942] rseq(0x7f62875cffe0, 0x20, 0, 0x53053053 [pid 5940] <... clone3 resumed> => {parent_tid=[5942]}, 88) = 5942 [pid 5942] <... rseq resumed>) = 0 [pid 5942] set_robust_list(0x7f62875cf9a0, 24 [pid 5940] rt_sigprocmask(SIG_SETMASK, [], [pid 5941] munmap(0x7f627f000000, 138412032 [pid 5942] <... set_robust_list resumed>) = 0 [pid 5940] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5942] rt_sigprocmask(SIG_SETMASK, [], [pid 5940] futex(0x7f62876c36b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5942] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5941] <... munmap resumed>) = 0 [pid 5940] <... futex resumed>) = 0 [pid 5942] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5940] futex(0x7f62876c36bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5941] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5942] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5942] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5941] <... openat resumed>) = 5 [pid 5942] <... futex resumed>) = 1 [pid 5942] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5941] ioctl(5, LOOP_SET_FD, 3 [pid 5940] <... futex resumed>) = 0 [pid 5941] <... ioctl resumed>) = 0 [pid 5941] close(3) = 0 [pid 5941] close(5) = 0 [pid 5941] mkdir("./file0", 0777) = 0 [pid 5941] mount("/dev/loop0", "./file0", "hfs", MS_NOSUID|MS_SYNCHRONOUS, "codepage=iso8859-5,umask=0000000000000777,iocharset=cp869,") = 0 [pid 5941] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 132.979498][ T5941] loop0: detected capacity change from 0 to 64 [pid 5941] chdir("./file0") = 0 [pid 5941] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5941] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5940] exit_group(0 [pid 5941] <... futex resumed>) = 0 [pid 5941] futex(0x7f62876c36a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5942] <... futex resumed>) = ? [pid 5940] <... exit_group resumed>) = ? [pid 5941] +++ exited with 0 +++ [pid 5942] +++ exited with 0 +++ [pid 5940] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5940, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./32", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555594dec730 /* 4 entries */, 32768) = 112 umount2("./32/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./32/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./32/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./32/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555594df4770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555594df4770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./32/file0") = 0 umount2("./32/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./32/binderfs") = 0 getdents64(3, 0x555594dec730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./32") = 0 mkdir("./33", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5943 attached [pid 5943] set_robust_list(0x555594deb6a0, 24) = 0 [pid 5943] chdir("./33" [pid 5842] <... clone resumed>, child_tidptr=0x555594deb690) = 5943 [pid 5943] <... chdir resumed>) = 0 [pid 5943] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5943] setpgid(0, 0) = 0 [pid 5943] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5943] write(3, "1000", 4) = 4 [pid 5943] close(3) = 0 [pid 5943] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5943] write(1, "executing program\n", 18) = 18 [pid 5943] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5943] rt_sigaction(SIGRT_1, {sa_handler=0x7f6287661eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6287653060}, NULL, 8) = 0 [pid 5943] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5943] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875d0000 [pid 5943] mprotect(0x7f62875d1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5943] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5943] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875f0990, parent_tid=0x7f62875f0990, exit_signal=0, stack=0x7f62875d0000, stack_size=0x20300, tls=0x7f62875f06c0}./strace-static-x86_64: Process 5944 attached [pid 5944] rseq(0x7f62875f0fe0, 0x20, 0, 0x53053053) = 0 [pid 5943] <... clone3 resumed> => {parent_tid=[5944]}, 88) = 5944 [pid 5944] set_robust_list(0x7f62875f09a0, 24 [pid 5943] rt_sigprocmask(SIG_SETMASK, [], [pid 5944] <... set_robust_list resumed>) = 0 [pid 5943] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5944] rt_sigprocmask(SIG_SETMASK, [], [pid 5943] futex(0x7f62876c36a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5944] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5943] <... futex resumed>) = 0 [pid 5944] memfd_create("syzkaller", 0 [pid 5943] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5944] <... memfd_create resumed>) = 3 [pid 5943] <... futex resumed>) = 0 [pid 5943] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5944] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5943] <... mmap resumed>) = 0x7f62875af000 [pid 5944] <... mmap resumed>) = 0x7f627f000000 [pid 5943] mprotect(0x7f62875b0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5944] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768 [pid 5943] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5944] <... write resumed>) = 32768 [pid 5943] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875cf990, parent_tid=0x7f62875cf990, exit_signal=0, stack=0x7f62875af000, stack_size=0x20300, tls=0x7f62875cf6c0}./strace-static-x86_64: Process 5945 attached [pid 5944] munmap(0x7f627f000000, 138412032 [pid 5943] <... clone3 resumed> => {parent_tid=[5945]}, 88) = 5945 [pid 5943] rt_sigprocmask(SIG_SETMASK, [], [pid 5944] <... munmap resumed>) = 0 [pid 5945] rseq(0x7f62875cffe0, 0x20, 0, 0x53053053 [pid 5943] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5944] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5945] <... rseq resumed>) = 0 [pid 5943] futex(0x7f62876c36b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5945] set_robust_list(0x7f62875cf9a0, 24 [pid 5944] <... openat resumed>) = 4 [pid 5943] <... futex resumed>) = 0 [pid 5944] ioctl(4, LOOP_SET_FD, 3 [pid 5945] <... set_robust_list resumed>) = 0 [pid 5943] futex(0x7f62876c36bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5945] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5945] openat(AT_FDCWD, "./file0", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5945] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5944] <... ioctl resumed>) = 0 [pid 5943] <... futex resumed>) = 0 [pid 5945] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5944] close(3) = 0 [pid 5944] close(4) = 0 [pid 5944] mkdir("./file0", 0777) = 0 [pid 5944] mount("/dev/loop0", "./file0", "hfs", MS_NOSUID|MS_SYNCHRONOUS, "codepage=iso8859-5,umask=0000000000000777,iocharset=cp869,") = 0 [pid 5944] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5944] chdir("./file0") = 0 [pid 5944] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5944] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5944] futex(0x7f62876c36a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5943] exit_group(0) = ? [pid 5944] <... futex resumed>) = ? [pid 5944] +++ exited with 0 +++ [pid 5945] <... futex resumed>) = ? [pid 5945] +++ exited with 0 +++ [pid 5943] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5943, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [ 133.582491][ T5944] loop0: detected capacity change from 0 to 64 restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./33", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555594dec730 /* 4 entries */, 32768) = 112 umount2("./33/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./33/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./33/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./33/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555594df4770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555594df4770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./33/file0") = 0 umount2("./33/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./33/binderfs") = 0 getdents64(3, 0x555594dec730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./33") = 0 mkdir("./34", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5946 attached , child_tidptr=0x555594deb690) = 5946 [pid 5946] set_robust_list(0x555594deb6a0, 24) = 0 [pid 5946] chdir("./34") = 0 [pid 5946] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5946] setpgid(0, 0) = 0 [pid 5946] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5946] write(3, "1000", 4) = 4 [pid 5946] close(3) = 0 [pid 5946] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5946] write(1, "executing program\n", 18executing program ) = 18 [pid 5946] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5946] rt_sigaction(SIGRT_1, {sa_handler=0x7f6287661eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6287653060}, NULL, 8) = 0 [pid 5946] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5946] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875d0000 [pid 5946] mprotect(0x7f62875d1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5946] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5946] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875f0990, parent_tid=0x7f62875f0990, exit_signal=0, stack=0x7f62875d0000, stack_size=0x20300, tls=0x7f62875f06c0}./strace-static-x86_64: Process 5947 attached [pid 5947] rseq(0x7f62875f0fe0, 0x20, 0, 0x53053053) = 0 [pid 5947] set_robust_list(0x7f62875f09a0, 24) = 0 [pid 5946] <... clone3 resumed> => {parent_tid=[5947]}, 88) = 5947 [pid 5947] rt_sigprocmask(SIG_SETMASK, [], [pid 5946] rt_sigprocmask(SIG_SETMASK, [], [pid 5947] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5947] futex(0x7f62876c36a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5946] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5946] futex(0x7f62876c36a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5947] <... futex resumed>) = 0 [pid 5947] memfd_create("syzkaller", 0 [pid 5946] <... futex resumed>) = 1 [pid 5946] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5947] <... memfd_create resumed>) = 3 [pid 5946] <... futex resumed>) = 0 [pid 5947] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5946] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5947] <... mmap resumed>) = 0x7f627f000000 [pid 5946] <... mmap resumed>) = 0x7f62875af000 [pid 5947] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768 [pid 5946] mprotect(0x7f62875b0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5947] <... write resumed>) = 32768 [pid 5946] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5947] munmap(0x7f627f000000, 138412032 [pid 5946] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5947] <... munmap resumed>) = 0 [pid 5946] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875cf990, parent_tid=0x7f62875cf990, exit_signal=0, stack=0x7f62875af000, stack_size=0x20300, tls=0x7f62875cf6c0} [pid 5947] openat(AT_FDCWD, "/dev/loop0", O_RDWR./strace-static-x86_64: Process 5948 attached ) = 4 [pid 5947] ioctl(4, LOOP_SET_FD, 3 [pid 5948] rseq(0x7f62875cffe0, 0x20, 0, 0x53053053) = 0 [pid 5947] <... ioctl resumed>) = 0 [pid 5946] <... clone3 resumed> => {parent_tid=[5948]}, 88) = 5948 [pid 5948] set_robust_list(0x7f62875cf9a0, 24 [pid 5947] close(3 [pid 5946] rt_sigprocmask(SIG_SETMASK, [], [pid 5948] <... set_robust_list resumed>) = 0 [pid 5947] <... close resumed>) = 0 [pid 5946] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5947] close(4 [pid 5948] rt_sigprocmask(SIG_SETMASK, [], [pid 5947] <... close resumed>) = 0 [pid 5946] futex(0x7f62876c36b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5948] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5946] <... futex resumed>) = 0 [pid 5948] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5946] futex(0x7f62876c36bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5948] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5948] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5947] mkdir("./file0", 0777 [pid 5946] <... futex resumed>) = 0 [pid 5948] <... futex resumed>) = 1 [pid 5948] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5947] <... mkdir resumed>) = 0 [pid 5947] mount("/dev/loop0", "./file0", "hfs", MS_NOSUID|MS_SYNCHRONOUS, "codepage=iso8859-5,umask=0000000000000777,iocharset=cp869,") = 0 [pid 5947] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5947] chdir("./file0") = 0 [ 134.065679][ T5947] loop0: detected capacity change from 0 to 64 [pid 5947] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5947] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5947] futex(0x7f62876c36a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5946] exit_group(0 [pid 5947] <... futex resumed>) = ? [pid 5948] <... futex resumed>) = ? [pid 5946] <... exit_group resumed>) = ? [pid 5947] +++ exited with 0 +++ [pid 5948] +++ exited with 0 +++ [pid 5946] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5946, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./34", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555594dec730 /* 4 entries */, 32768) = 112 umount2("./34/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./34/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./34/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./34/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555594df4770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555594df4770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./34/file0") = 0 umount2("./34/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./34/binderfs") = 0 getdents64(3, 0x555594dec730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./34") = 0 mkdir("./35", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5949 attached , child_tidptr=0x555594deb690) = 5949 [pid 5949] set_robust_list(0x555594deb6a0, 24) = 0 [pid 5949] chdir("./35") = 0 [pid 5949] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5949] setpgid(0, 0) = 0 [pid 5949] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5949] write(3, "1000", 4) = 4 [pid 5949] close(3) = 0 [pid 5949] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5949] write(1, "executing program\n", 18) = 18 [pid 5949] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5949] rt_sigaction(SIGRT_1, {sa_handler=0x7f6287661eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6287653060}, NULL, 8) = 0 [pid 5949] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5949] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875d0000 [pid 5949] mprotect(0x7f62875d1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5949] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5949] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875f0990, parent_tid=0x7f62875f0990, exit_signal=0, stack=0x7f62875d0000, stack_size=0x20300, tls=0x7f62875f06c0}./strace-static-x86_64: Process 5950 attached [pid 5950] rseq(0x7f62875f0fe0, 0x20, 0, 0x53053053) = 0 [pid 5949] <... clone3 resumed> => {parent_tid=[5950]}, 88) = 5950 [pid 5950] set_robust_list(0x7f62875f09a0, 24 [pid 5949] rt_sigprocmask(SIG_SETMASK, [], [pid 5950] <... set_robust_list resumed>) = 0 [pid 5949] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5950] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5949] futex(0x7f62876c36a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5950] memfd_create("syzkaller", 0 [pid 5949] <... futex resumed>) = 0 [pid 5949] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5950] <... memfd_create resumed>) = 3 [pid 5949] <... futex resumed>) = 0 [pid 5950] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5949] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5950] <... mmap resumed>) = 0x7f627f000000 [pid 5949] <... mmap resumed>) = 0x7f62875af000 [pid 5949] mprotect(0x7f62875b0000, 131072, PROT_READ|PROT_WRITE [pid 5950] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768) = 32768 [pid 5949] <... mprotect resumed>) = 0 [pid 5950] munmap(0x7f627f000000, 138412032 [pid 5949] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5950] <... munmap resumed>) = 0 [pid 5949] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5950] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5949] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875cf990, parent_tid=0x7f62875cf990, exit_signal=0, stack=0x7f62875af000, stack_size=0x20300, tls=0x7f62875cf6c0} [pid 5950] <... openat resumed>) = 4 ./strace-static-x86_64: Process 5951 attached [pid 5950] ioctl(4, LOOP_SET_FD, 3 [pid 5949] <... clone3 resumed> => {parent_tid=[5951]}, 88) = 5951 [pid 5949] rt_sigprocmask(SIG_SETMASK, [], [pid 5951] rseq(0x7f62875cffe0, 0x20, 0, 0x53053053 [pid 5950] <... ioctl resumed>) = 0 [pid 5949] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5951] <... rseq resumed>) = 0 [pid 5950] close(3 [pid 5951] set_robust_list(0x7f62875cf9a0, 24 [pid 5950] <... close resumed>) = 0 [pid 5949] futex(0x7f62876c36b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5951] <... set_robust_list resumed>) = 0 [pid 5950] close(4 [pid 5949] <... futex resumed>) = 0 [pid 5951] rt_sigprocmask(SIG_SETMASK, [], [pid 5950] <... close resumed>) = 0 [pid 5949] futex(0x7f62876c36bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5951] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5950] mkdir("./file0", 0777 [pid 5951] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5950] <... mkdir resumed>) = 0 [pid 5951] <... openat resumed>) = 3 [pid 5951] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5949] <... futex resumed>) = 0 [pid 5951] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5950] mount("/dev/loop0", "./file0", "hfs", MS_NOSUID|MS_SYNCHRONOUS, "codepage=iso8859-5,umask=0000000000000777,iocharset=cp869,") = 0 [pid 5950] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 4 [pid 5950] chdir("./file0") = 0 [pid 5950] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5950] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5950] futex(0x7f62876c36a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5949] exit_group(0 [pid 5950] <... futex resumed>) = ? [pid 5949] <... exit_group resumed>) = ? [pid 5951] <... futex resumed>) = ? [pid 5950] +++ exited with 0 +++ [pid 5951] +++ exited with 0 +++ [pid 5949] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5949, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 [ 134.602268][ T5950] loop0: detected capacity change from 0 to 64 umount2("./35", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555594dec730 /* 4 entries */, 32768) = 112 umount2("./35/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./35/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./35/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./35/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555594df4770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555594df4770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./35/file0") = 0 umount2("./35/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./35/binderfs") = 0 getdents64(3, 0x555594dec730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./35") = 0 mkdir("./36", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5952 attached [pid 5952] set_robust_list(0x555594deb6a0, 24 [pid 5842] <... clone resumed>, child_tidptr=0x555594deb690) = 5952 [pid 5952] <... set_robust_list resumed>) = 0 [pid 5952] chdir("./36") = 0 [pid 5952] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5952] setpgid(0, 0) = 0 [pid 5952] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5952] write(3, "1000", 4) = 4 [pid 5952] close(3) = 0 [pid 5952] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5952] write(1, "executing program\n", 18) = 18 [pid 5952] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5952] rt_sigaction(SIGRT_1, {sa_handler=0x7f6287661eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6287653060}, NULL, 8) = 0 [pid 5952] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5952] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875d0000 [pid 5952] mprotect(0x7f62875d1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5952] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5952] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875f0990, parent_tid=0x7f62875f0990, exit_signal=0, stack=0x7f62875d0000, stack_size=0x20300, tls=0x7f62875f06c0}./strace-static-x86_64: Process 5953 attached [pid 5953] rseq(0x7f62875f0fe0, 0x20, 0, 0x53053053 [pid 5952] <... clone3 resumed> => {parent_tid=[5953]}, 88) = 5953 [pid 5953] <... rseq resumed>) = 0 [pid 5953] set_robust_list(0x7f62875f09a0, 24) = 0 [pid 5953] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5953] futex(0x7f62876c36a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5952] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5952] futex(0x7f62876c36a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5953] <... futex resumed>) = 0 [pid 5953] memfd_create("syzkaller", 0 [pid 5952] <... futex resumed>) = 1 [pid 5953] <... memfd_create resumed>) = 3 [pid 5952] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5953] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5952] <... futex resumed>) = 0 [pid 5953] <... mmap resumed>) = 0x7f627f000000 [pid 5952] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875af000 [pid 5953] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768 [pid 5952] mprotect(0x7f62875b0000, 131072, PROT_READ|PROT_WRITE [pid 5953] <... write resumed>) = 32768 [pid 5953] munmap(0x7f627f000000, 138412032 [pid 5952] <... mprotect resumed>) = 0 [pid 5953] <... munmap resumed>) = 0 [pid 5952] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5953] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5952] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5952] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875cf990, parent_tid=0x7f62875cf990, exit_signal=0, stack=0x7f62875af000, stack_size=0x20300, tls=0x7f62875cf6c0} [pid 5953] <... openat resumed>) = 4 ./strace-static-x86_64: Process 5954 attached [pid 5953] ioctl(4, LOOP_SET_FD, 3 [pid 5954] rseq(0x7f62875cffe0, 0x20, 0, 0x53053053) = 0 [pid 5952] <... clone3 resumed> => {parent_tid=[5954]}, 88) = 5954 [pid 5954] set_robust_list(0x7f62875cf9a0, 24) = 0 [pid 5952] rt_sigprocmask(SIG_SETMASK, [], [pid 5954] rt_sigprocmask(SIG_SETMASK, [], [pid 5952] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5954] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5952] futex(0x7f62876c36b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5954] openat(AT_FDCWD, "./file0", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5952] <... futex resumed>) = 0 [pid 5954] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5952] futex(0x7f62876c36bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5954] <... futex resumed>) = 0 [pid 5954] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5952] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5953] <... ioctl resumed>) = 0 [pid 5953] close(3) = 0 [pid 5953] close(4) = 0 [pid 5953] mkdir("./file0", 0777) = 0 [pid 5953] mount("/dev/loop0", "./file0", "hfs", MS_NOSUID|MS_SYNCHRONOUS, "codepage=iso8859-5,umask=0000000000000777,iocharset=cp869,") = 0 [pid 5953] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 135.148062][ T5953] loop0: detected capacity change from 0 to 64 [pid 5953] chdir("./file0") = 0 [pid 5953] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5953] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5953] futex(0x7f62876c36a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5952] exit_group(0 [pid 5954] <... futex resumed>) = ? [pid 5953] <... futex resumed>) = ? [pid 5952] <... exit_group resumed>) = ? [pid 5954] +++ exited with 0 +++ [pid 5953] +++ exited with 0 +++ [pid 5952] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5952, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./36", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555594dec730 /* 4 entries */, 32768) = 112 umount2("./36/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./36/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./36/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./36/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./36/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555594df4770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555594df4770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./36/file0") = 0 umount2("./36/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./36/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./36/binderfs") = 0 getdents64(3, 0x555594dec730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./36") = 0 mkdir("./37", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5955 attached , child_tidptr=0x555594deb690) = 5955 [pid 5955] set_robust_list(0x555594deb6a0, 24) = 0 [pid 5955] chdir("./37") = 0 [pid 5955] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5955] setpgid(0, 0) = 0 [pid 5955] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5955] write(3, "1000", 4) = 4 [pid 5955] close(3) = 0 [pid 5955] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5955] write(1, "executing program\n", 18) = 18 [pid 5955] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5955] rt_sigaction(SIGRT_1, {sa_handler=0x7f6287661eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6287653060}, NULL, 8) = 0 [pid 5955] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5955] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875d0000 [pid 5955] mprotect(0x7f62875d1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5955] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5955] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875f0990, parent_tid=0x7f62875f0990, exit_signal=0, stack=0x7f62875d0000, stack_size=0x20300, tls=0x7f62875f06c0}./strace-static-x86_64: Process 5956 attached => {parent_tid=[5956]}, 88) = 5956 [pid 5956] rseq(0x7f62875f0fe0, 0x20, 0, 0x53053053 [pid 5955] rt_sigprocmask(SIG_SETMASK, [], [pid 5956] <... rseq resumed>) = 0 [pid 5955] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5956] set_robust_list(0x7f62875f09a0, 24) = 0 [pid 5955] futex(0x7f62876c36a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5956] rt_sigprocmask(SIG_SETMASK, [], [pid 5955] <... futex resumed>) = 0 [pid 5956] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5955] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5956] memfd_create("syzkaller", 0 [pid 5955] <... futex resumed>) = 0 [pid 5956] <... memfd_create resumed>) = 3 [pid 5955] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5956] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5955] <... mmap resumed>) = 0x7f62875af000 [pid 5956] <... mmap resumed>) = 0x7f627f000000 [pid 5955] mprotect(0x7f62875b0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5956] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768 [pid 5955] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5956] <... write resumed>) = 32768 [pid 5955] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875cf990, parent_tid=0x7f62875cf990, exit_signal=0, stack=0x7f62875af000, stack_size=0x20300, tls=0x7f62875cf6c0} [pid 5956] munmap(0x7f627f000000, 138412032./strace-static-x86_64: Process 5957 attached ) = 0 [pid 5957] rseq(0x7f62875cffe0, 0x20, 0, 0x53053053 [pid 5956] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5955] <... clone3 resumed> => {parent_tid=[5957]}, 88) = 5957 [pid 5957] <... rseq resumed>) = 0 [pid 5955] rt_sigprocmask(SIG_SETMASK, [], [pid 5957] set_robust_list(0x7f62875cf9a0, 24 [pid 5956] <... openat resumed>) = 4 [pid 5955] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5957] <... set_robust_list resumed>) = 0 [pid 5955] futex(0x7f62876c36b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5957] rt_sigprocmask(SIG_SETMASK, [], [pid 5955] <... futex resumed>) = 0 [pid 5957] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5955] futex(0x7f62876c36bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5957] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5956] ioctl(4, LOOP_SET_FD, 3 [pid 5957] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5956] <... ioctl resumed>) = 0 [pid 5956] close(3 [pid 5957] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5956] <... close resumed>) = 0 [pid 5957] <... futex resumed>) = 1 [pid 5955] <... futex resumed>) = 0 [pid 5957] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5956] close(4) = 0 [pid 5956] mkdir("./file0", 0777) = 0 [pid 5956] mount("/dev/loop0", "./file0", "hfs", MS_NOSUID|MS_SYNCHRONOUS, "codepage=iso8859-5,umask=0000000000000777,iocharset=cp869,") = 0 [pid 5956] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5956] chdir("./file0") = 0 [ 135.640588][ T5956] loop0: detected capacity change from 0 to 64 [pid 5956] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5956] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5955] exit_group(0 [pid 5956] <... futex resumed>) = 0 [pid 5957] <... futex resumed>) = ? [pid 5955] <... exit_group resumed>) = ? [pid 5957] +++ exited with 0 +++ [pid 5956] +++ exited with 0 +++ [pid 5955] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5955, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./37", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555594dec730 /* 4 entries */, 32768) = 112 umount2("./37/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./37/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./37/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./37/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./37/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555594df4770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555594df4770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./37/file0") = 0 umount2("./37/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./37/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./37/binderfs") = 0 getdents64(3, 0x555594dec730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./37") = 0 mkdir("./38", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5958 attached [pid 5958] set_robust_list(0x555594deb6a0, 24) = 0 [pid 5958] chdir("./38" [pid 5842] <... clone resumed>, child_tidptr=0x555594deb690) = 5958 [pid 5958] <... chdir resumed>) = 0 [pid 5958] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5958] setpgid(0, 0) = 0 [pid 5958] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5958] write(3, "1000", 4) = 4 [pid 5958] close(3) = 0 [pid 5958] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5958] write(1, "executing program\n", 18) = 18 [pid 5958] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5958] rt_sigaction(SIGRT_1, {sa_handler=0x7f6287661eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6287653060}, NULL, 8) = 0 [pid 5958] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5958] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875d0000 [pid 5958] mprotect(0x7f62875d1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5958] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5958] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875f0990, parent_tid=0x7f62875f0990, exit_signal=0, stack=0x7f62875d0000, stack_size=0x20300, tls=0x7f62875f06c0}./strace-static-x86_64: Process 5959 attached [pid 5959] rseq(0x7f62875f0fe0, 0x20, 0, 0x53053053) = 0 [pid 5959] set_robust_list(0x7f62875f09a0, 24 [pid 5958] <... clone3 resumed> => {parent_tid=[5959]}, 88) = 5959 [pid 5959] <... set_robust_list resumed>) = 0 [pid 5958] rt_sigprocmask(SIG_SETMASK, [], [pid 5959] rt_sigprocmask(SIG_SETMASK, [], [pid 5958] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5959] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5958] futex(0x7f62876c36a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5959] memfd_create("syzkaller", 0 [pid 5958] <... futex resumed>) = 0 [pid 5959] <... memfd_create resumed>) = 3 [pid 5958] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5959] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5958] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5959] <... mmap resumed>) = 0x7f627f000000 [pid 5958] <... mmap resumed>) = 0x7f62875af000 [pid 5958] mprotect(0x7f62875b0000, 131072, PROT_READ|PROT_WRITE [pid 5959] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768 [pid 5958] <... mprotect resumed>) = 0 [pid 5959] <... write resumed>) = 32768 [pid 5959] munmap(0x7f627f000000, 138412032) = 0 [pid 5958] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5959] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5958] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5959] <... openat resumed>) = 4 [pid 5958] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875cf990, parent_tid=0x7f62875cf990, exit_signal=0, stack=0x7f62875af000, stack_size=0x20300, tls=0x7f62875cf6c0}./strace-static-x86_64: Process 5960 attached [pid 5960] rseq(0x7f62875cffe0, 0x20, 0, 0x53053053) = 0 [pid 5959] ioctl(4, LOOP_SET_FD, 3 [pid 5960] set_robust_list(0x7f62875cf9a0, 24 [pid 5958] <... clone3 resumed> => {parent_tid=[5960]}, 88) = 5960 [pid 5958] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5958] futex(0x7f62876c36b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5958] futex(0x7f62876c36bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5960] <... set_robust_list resumed>) = 0 [pid 5959] <... ioctl resumed>) = 0 [pid 5959] close(3) = 0 [pid 5960] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5959] close(4 [pid 5960] openat(AT_FDCWD, "./file0", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5959] <... close resumed>) = 0 [pid 5959] mkdir("./file0", 0777) = 0 [pid 5959] mount("/dev/loop0", "./file0", "hfs", MS_NOSUID|MS_SYNCHRONOUS, "codepage=iso8859-5,umask=0000000000000777,iocharset=cp869," [pid 5960] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5958] <... futex resumed>) = 0 [pid 5960] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5959] <... mount resumed>) = 0 [pid 5959] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 136.137242][ T5959] loop0: detected capacity change from 0 to 64 [pid 5959] chdir("./file0") = 0 [pid 5959] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5959] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5959] futex(0x7f62876c36a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5958] exit_group(0 [pid 5960] <... futex resumed>) = ? [pid 5959] <... futex resumed>) = ? [pid 5958] <... exit_group resumed>) = ? [pid 5960] +++ exited with 0 +++ [pid 5959] +++ exited with 0 +++ [pid 5958] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5958, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555594dec730 /* 4 entries */, 32768) = 112 umount2("./38/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./38/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./38/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./38/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./38/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555594df4770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555594df4770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./38/file0") = 0 umount2("./38/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./38/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./38/binderfs") = 0 getdents64(3, 0x555594dec730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./38") = 0 mkdir("./39", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5961 attached , child_tidptr=0x555594deb690) = 5961 [pid 5961] set_robust_list(0x555594deb6a0, 24) = 0 [pid 5961] chdir("./39") = 0 [pid 5961] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5961] setpgid(0, 0) = 0 [pid 5961] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5961] write(3, "1000", 4) = 4 [pid 5961] close(3) = 0 [pid 5961] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5961] write(1, "executing program\n", 18executing program ) = 18 [pid 5961] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5961] rt_sigaction(SIGRT_1, {sa_handler=0x7f6287661eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6287653060}, NULL, 8) = 0 [pid 5961] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5961] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875d0000 [pid 5961] mprotect(0x7f62875d1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5961] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5961] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875f0990, parent_tid=0x7f62875f0990, exit_signal=0, stack=0x7f62875d0000, stack_size=0x20300, tls=0x7f62875f06c0}./strace-static-x86_64: Process 5962 attached [pid 5962] rseq(0x7f62875f0fe0, 0x20, 0, 0x53053053 [pid 5961] <... clone3 resumed> => {parent_tid=[5962]}, 88) = 5962 [pid 5962] <... rseq resumed>) = 0 [pid 5962] set_robust_list(0x7f62875f09a0, 24) = 0 [pid 5961] rt_sigprocmask(SIG_SETMASK, [], [pid 5962] rt_sigprocmask(SIG_SETMASK, [], [pid 5961] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5962] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5961] futex(0x7f62876c36a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5961] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5962] memfd_create("syzkaller", 0 [pid 5961] <... futex resumed>) = 0 [pid 5961] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5962] <... memfd_create resumed>) = 3 [pid 5962] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5961] <... mmap resumed>) = 0x7f62875af000 [pid 5962] <... mmap resumed>) = 0x7f627f000000 [pid 5961] mprotect(0x7f62875b0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5961] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5962] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768 [pid 5961] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5961] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875cf990, parent_tid=0x7f62875cf990, exit_signal=0, stack=0x7f62875af000, stack_size=0x20300, tls=0x7f62875cf6c0}./strace-static-x86_64: Process 5963 attached [pid 5962] <... write resumed>) = 32768 [pid 5963] rseq(0x7f62875cffe0, 0x20, 0, 0x53053053 [pid 5962] munmap(0x7f627f000000, 138412032 [pid 5961] <... clone3 resumed> => {parent_tid=[5963]}, 88) = 5963 [pid 5963] <... rseq resumed>) = 0 [pid 5961] rt_sigprocmask(SIG_SETMASK, [], [pid 5963] set_robust_list(0x7f62875cf9a0, 24 [pid 5961] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5963] <... set_robust_list resumed>) = 0 [pid 5961] futex(0x7f62876c36b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5963] rt_sigprocmask(SIG_SETMASK, [], [pid 5962] <... munmap resumed>) = 0 [pid 5961] <... futex resumed>) = 0 [pid 5963] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5961] futex(0x7f62876c36bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5963] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5962] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5963] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5962] <... openat resumed>) = 5 [pid 5962] ioctl(5, LOOP_SET_FD, 3 [pid 5963] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5963] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5961] <... futex resumed>) = 0 [pid 5962] <... ioctl resumed>) = 0 [pid 5962] close(3) = 0 [pid 5962] close(5) = 0 [pid 5962] mkdir("./file0", 0777) = 0 [pid 5962] mount("/dev/loop0", "./file0", "hfs", MS_NOSUID|MS_SYNCHRONOUS, "codepage=iso8859-5,umask=0000000000000777,iocharset=cp869,") = 0 [pid 5962] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5962] chdir("./file0") = 0 [pid 5962] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 136.707013][ T5962] loop0: detected capacity change from 0 to 64 [pid 5962] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5961] exit_group(0 [pid 5962] futex(0x7f62876c36a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5963] <... futex resumed>) = ? [pid 5963] +++ exited with 0 +++ [pid 5961] <... exit_group resumed>) = ? [pid 5962] <... futex resumed>) = ? [pid 5962] +++ exited with 0 +++ [pid 5961] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5961, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./39", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555594dec730 /* 4 entries */, 32768) = 112 umount2("./39/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./39/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./39/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./39/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./39/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555594df4770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555594df4770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./39/file0") = 0 umount2("./39/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./39/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./39/binderfs") = 0 getdents64(3, 0x555594dec730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./39") = 0 mkdir("./40", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5964 attached [pid 5964] set_robust_list(0x555594deb6a0, 24) = 0 [pid 5964] chdir("./40" [pid 5842] <... clone resumed>, child_tidptr=0x555594deb690) = 5964 [pid 5964] <... chdir resumed>) = 0 [pid 5964] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5964] setpgid(0, 0) = 0 [pid 5964] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5964] write(3, "1000", 4) = 4 [pid 5964] close(3) = 0 [pid 5964] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5964] write(1, "executing program\n", 18) = 18 [pid 5964] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5964] rt_sigaction(SIGRT_1, {sa_handler=0x7f6287661eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6287653060}, NULL, 8) = 0 [pid 5964] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5964] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875d0000 [pid 5964] mprotect(0x7f62875d1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5964] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5964] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875f0990, parent_tid=0x7f62875f0990, exit_signal=0, stack=0x7f62875d0000, stack_size=0x20300, tls=0x7f62875f06c0}./strace-static-x86_64: Process 5965 attached [pid 5965] rseq(0x7f62875f0fe0, 0x20, 0, 0x53053053) = 0 [pid 5964] <... clone3 resumed> => {parent_tid=[5965]}, 88) = 5965 [pid 5965] set_robust_list(0x7f62875f09a0, 24 [pid 5964] rt_sigprocmask(SIG_SETMASK, [], [pid 5965] <... set_robust_list resumed>) = 0 [pid 5964] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5965] rt_sigprocmask(SIG_SETMASK, [], [pid 5964] futex(0x7f62876c36a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5965] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5964] <... futex resumed>) = 0 [pid 5965] memfd_create("syzkaller", 0 [pid 5964] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5964] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875af000 [pid 5965] <... memfd_create resumed>) = 3 [pid 5964] mprotect(0x7f62875b0000, 131072, PROT_READ|PROT_WRITE [pid 5965] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5964] <... mprotect resumed>) = 0 [pid 5965] <... mmap resumed>) = 0x7f627f000000 [pid 5964] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5965] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768 [pid 5964] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5965] <... write resumed>) = 32768 [pid 5964] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875cf990, parent_tid=0x7f62875cf990, exit_signal=0, stack=0x7f62875af000, stack_size=0x20300, tls=0x7f62875cf6c0}./strace-static-x86_64: Process 5966 attached [pid 5965] munmap(0x7f627f000000, 138412032) = 0 [pid 5966] rseq(0x7f62875cffe0, 0x20, 0, 0x53053053) = 0 [pid 5966] set_robust_list(0x7f62875cf9a0, 24) = 0 [pid 5965] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5964] <... clone3 resumed> => {parent_tid=[5966]}, 88) = 5966 [pid 5966] rt_sigprocmask(SIG_SETMASK, [], [pid 5965] <... openat resumed>) = 4 [pid 5964] rt_sigprocmask(SIG_SETMASK, [], [pid 5966] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5966] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5964] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5965] ioctl(4, LOOP_SET_FD, 3 [pid 5964] futex(0x7f62876c36b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5966] <... futex resumed>) = 0 [pid 5964] <... futex resumed>) = 1 [pid 5966] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5964] futex(0x7f62876c36bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5966] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5966] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5965] <... ioctl resumed>) = 0 [pid 5966] <... futex resumed>) = 1 [pid 5965] close(3) = 0 [pid 5965] close(4 [pid 5966] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5965] <... close resumed>) = 0 [pid 5964] <... futex resumed>) = 0 [pid 5965] mkdir("./file0", 0777) = 0 [pid 5965] mount("/dev/loop0", "./file0", "hfs", MS_NOSUID|MS_SYNCHRONOUS, "codepage=iso8859-5,umask=0000000000000777,iocharset=cp869,") = 0 [pid 5965] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5965] chdir("./file0") = 0 [ 137.085523][ T5965] loop0: detected capacity change from 0 to 64 [pid 5965] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5965] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5964] exit_group(0 [pid 5965] <... futex resumed>) = ? [pid 5964] <... exit_group resumed>) = ? [pid 5966] <... futex resumed>) = ? [pid 5965] +++ exited with 0 +++ [pid 5966] +++ exited with 0 +++ [pid 5964] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5964, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./40", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555594dec730 /* 4 entries */, 32768) = 112 umount2("./40/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./40/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./40/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./40/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./40/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555594df4770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555594df4770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./40/file0") = 0 umount2("./40/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./40/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./40/binderfs") = 0 getdents64(3, 0x555594dec730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./40") = 0 mkdir("./41", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5967 attached [pid 5967] set_robust_list(0x555594deb6a0, 24) = 0 [pid 5967] chdir("./41" [pid 5842] <... clone resumed>, child_tidptr=0x555594deb690) = 5967 [pid 5967] <... chdir resumed>) = 0 [pid 5967] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5967] setpgid(0, 0) = 0 [pid 5967] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5967] write(3, "1000", 4) = 4 [pid 5967] close(3) = 0 [pid 5967] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5967] write(1, "executing program\n", 18) = 18 [pid 5967] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5967] rt_sigaction(SIGRT_1, {sa_handler=0x7f6287661eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6287653060}, NULL, 8) = 0 [pid 5967] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5967] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875d0000 [pid 5967] mprotect(0x7f62875d1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5967] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5967] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875f0990, parent_tid=0x7f62875f0990, exit_signal=0, stack=0x7f62875d0000, stack_size=0x20300, tls=0x7f62875f06c0}./strace-static-x86_64: Process 5968 attached [pid 5968] rseq(0x7f62875f0fe0, 0x20, 0, 0x53053053) = 0 [pid 5968] set_robust_list(0x7f62875f09a0, 24 [pid 5967] <... clone3 resumed> => {parent_tid=[5968]}, 88) = 5968 [pid 5968] <... set_robust_list resumed>) = 0 [pid 5967] rt_sigprocmask(SIG_SETMASK, [], [pid 5968] rt_sigprocmask(SIG_SETMASK, [], [pid 5967] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5968] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5967] futex(0x7f62876c36a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5968] memfd_create("syzkaller", 0 [pid 5967] <... futex resumed>) = 0 [pid 5968] <... memfd_create resumed>) = 3 [pid 5967] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5967] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875af000 [pid 5967] mprotect(0x7f62875b0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5967] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5968] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5967] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5968] <... mmap resumed>) = 0x7f627f000000 [pid 5967] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875cf990, parent_tid=0x7f62875cf990, exit_signal=0, stack=0x7f62875af000, stack_size=0x20300, tls=0x7f62875cf6c0}./strace-static-x86_64: Process 5969 attached [pid 5969] rseq(0x7f62875cffe0, 0x20, 0, 0x53053053 [pid 5968] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768 [pid 5969] <... rseq resumed>) = 0 [pid 5967] <... clone3 resumed> => {parent_tid=[5969]}, 88) = 5969 [pid 5969] set_robust_list(0x7f62875cf9a0, 24) = 0 [pid 5968] <... write resumed>) = 32768 [pid 5967] rt_sigprocmask(SIG_SETMASK, [], [pid 5969] rt_sigprocmask(SIG_SETMASK, [], [pid 5967] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5969] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5967] futex(0x7f62876c36b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5969] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5967] <... futex resumed>) = 0 [pid 5969] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5968] munmap(0x7f627f000000, 138412032 [pid 5967] futex(0x7f62876c36bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5969] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5968] <... munmap resumed>) = 0 [pid 5967] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5969] <... futex resumed>) = 0 [pid 5968] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5969] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5968] <... openat resumed>) = 4 [pid 5968] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5968] close(3) = 0 [pid 5968] close(4) = 0 [pid 5968] mkdir("./file0", 0777) = 0 [pid 5968] mount("/dev/loop0", "./file0", "hfs", MS_NOSUID|MS_SYNCHRONOUS, "codepage=iso8859-5,umask=0000000000000777,iocharset=cp869,") = 0 [pid 5968] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5968] chdir("./file0") = 0 [pid 5968] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5968] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5968] futex(0x7f62876c36a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5967] exit_group(0 [pid 5969] <... futex resumed>) = ? [pid 5968] <... futex resumed>) = ? [ 137.590335][ T5968] loop0: detected capacity change from 0 to 64 [pid 5969] +++ exited with 0 +++ [pid 5968] +++ exited with 0 +++ [pid 5967] <... exit_group resumed>) = ? [pid 5967] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5967, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./41", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555594dec730 /* 4 entries */, 32768) = 112 umount2("./41/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./41/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./41/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./41/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./41/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555594df4770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555594df4770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./41/file0") = 0 umount2("./41/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./41/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./41/binderfs") = 0 getdents64(3, 0x555594dec730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./41") = 0 mkdir("./42", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5970 attached [pid 5970] set_robust_list(0x555594deb6a0, 24) = 0 [pid 5970] chdir("./42" [pid 5842] <... clone resumed>, child_tidptr=0x555594deb690) = 5970 [pid 5970] <... chdir resumed>) = 0 [pid 5970] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5970] setpgid(0, 0) = 0 [pid 5970] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5970] write(3, "1000", 4) = 4 [pid 5970] close(3) = 0 [pid 5970] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5970] write(1, "executing program\n", 18) = 18 [pid 5970] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5970] rt_sigaction(SIGRT_1, {sa_handler=0x7f6287661eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6287653060}, NULL, 8) = 0 [pid 5970] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5970] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875d0000 [pid 5970] mprotect(0x7f62875d1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5970] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5970] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875f0990, parent_tid=0x7f62875f0990, exit_signal=0, stack=0x7f62875d0000, stack_size=0x20300, tls=0x7f62875f06c0}./strace-static-x86_64: Process 5971 attached [pid 5971] rseq(0x7f62875f0fe0, 0x20, 0, 0x53053053) = 0 [pid 5971] set_robust_list(0x7f62875f09a0, 24 [pid 5970] <... clone3 resumed> => {parent_tid=[5971]}, 88) = 5971 [pid 5971] <... set_robust_list resumed>) = 0 [pid 5970] rt_sigprocmask(SIG_SETMASK, [], [pid 5971] rt_sigprocmask(SIG_SETMASK, [], [pid 5970] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5971] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5970] futex(0x7f62876c36a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5971] memfd_create("syzkaller", 0 [pid 5970] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5970] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875af000 [pid 5970] mprotect(0x7f62875b0000, 131072, PROT_READ|PROT_WRITE [pid 5971] <... memfd_create resumed>) = 3 [pid 5970] <... mprotect resumed>) = 0 [pid 5971] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f627f000000 [pid 5970] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5971] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768 [pid 5970] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5971] <... write resumed>) = 32768 [pid 5970] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875cf990, parent_tid=0x7f62875cf990, exit_signal=0, stack=0x7f62875af000, stack_size=0x20300, tls=0x7f62875cf6c0} [pid 5971] munmap(0x7f627f000000, 138412032) = 0 [pid 5971] openat(AT_FDCWD, "/dev/loop0", O_RDWR./strace-static-x86_64: Process 5972 attached ) = 4 [pid 5970] <... clone3 resumed> => {parent_tid=[5972]}, 88) = 5972 [pid 5972] rseq(0x7f62875cffe0, 0x20, 0, 0x53053053) = 0 [pid 5970] rt_sigprocmask(SIG_SETMASK, [], [pid 5972] set_robust_list(0x7f62875cf9a0, 24 [pid 5971] ioctl(4, LOOP_SET_FD, 3 [pid 5970] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5972] <... set_robust_list resumed>) = 0 [pid 5972] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5972] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5970] futex(0x7f62876c36b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5971] <... ioctl resumed>) = 0 [pid 5970] <... futex resumed>) = 1 [pid 5972] <... futex resumed>) = 0 [pid 5971] close(3) = 0 [pid 5971] close(4 [pid 5972] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5971] <... close resumed>) = 0 [pid 5970] futex(0x7f62876c36bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5971] mkdir("./file0", 0777 [pid 5972] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5971] <... mkdir resumed>) = 0 [pid 5972] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5970] <... futex resumed>) = 0 [pid 5972] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5971] mount("/dev/loop0", "./file0", "hfs", MS_NOSUID|MS_SYNCHRONOUS, "codepage=iso8859-5,umask=0000000000000777,iocharset=cp869,") = 0 [pid 5971] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5971] chdir("./file0") = 0 [pid 5971] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 138.169107][ T5971] loop0: detected capacity change from 0 to 64 [pid 5971] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5971] futex(0x7f62876c36a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5970] exit_group(0 [pid 5972] <... futex resumed>) = ? [pid 5971] <... futex resumed>) = ? [pid 5970] <... exit_group resumed>) = ? [pid 5972] +++ exited with 0 +++ [pid 5971] +++ exited with 0 +++ [pid 5970] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5970, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./42", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555594dec730 /* 4 entries */, 32768) = 112 umount2("./42/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./42/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./42/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./42/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./42/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555594df4770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555594df4770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./42/file0") = 0 umount2("./42/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./42/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./42/binderfs") = 0 getdents64(3, 0x555594dec730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./42") = 0 mkdir("./43", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5973 attached , child_tidptr=0x555594deb690) = 5973 [pid 5973] set_robust_list(0x555594deb6a0, 24) = 0 [pid 5973] chdir("./43") = 0 [pid 5973] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5973] setpgid(0, 0) = 0 [pid 5973] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5973] write(3, "1000", 4) = 4 [pid 5973] close(3) = 0 [pid 5973] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5973] write(1, "executing program\n", 18) = 18 [pid 5973] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5973] rt_sigaction(SIGRT_1, {sa_handler=0x7f6287661eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6287653060}, NULL, 8) = 0 [pid 5973] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5973] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875d0000 [pid 5973] mprotect(0x7f62875d1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5973] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5973] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875f0990, parent_tid=0x7f62875f0990, exit_signal=0, stack=0x7f62875d0000, stack_size=0x20300, tls=0x7f62875f06c0} => {parent_tid=[5974]}, 88) = 5974 [pid 5973] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5973] futex(0x7f62876c36a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5973] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 5974 attached [pid 5973] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5974] rseq(0x7f62875f0fe0, 0x20, 0, 0x53053053 [pid 5973] <... mmap resumed>) = 0x7f62875af000 [pid 5974] <... rseq resumed>) = 0 [pid 5973] mprotect(0x7f62875b0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5974] set_robust_list(0x7f62875f09a0, 24 [pid 5973] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5974] <... set_robust_list resumed>) = 0 [pid 5973] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5974] rt_sigprocmask(SIG_SETMASK, [], [pid 5973] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875cf990, parent_tid=0x7f62875cf990, exit_signal=0, stack=0x7f62875af000, stack_size=0x20300, tls=0x7f62875cf6c0} [pid 5974] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 5975 attached [pid 5974] memfd_create("syzkaller", 0 [pid 5973] <... clone3 resumed> => {parent_tid=[5975]}, 88) = 5975 [pid 5974] <... memfd_create resumed>) = 3 [pid 5973] rt_sigprocmask(SIG_SETMASK, [], [pid 5975] rseq(0x7f62875cffe0, 0x20, 0, 0x53053053 [pid 5974] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5973] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5974] <... mmap resumed>) = 0x7f627f000000 [pid 5973] futex(0x7f62876c36b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5973] futex(0x7f62876c36bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5975] <... rseq resumed>) = 0 [pid 5974] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768 [pid 5975] set_robust_list(0x7f62875cf9a0, 24) = 0 [pid 5974] <... write resumed>) = 32768 [pid 5975] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5975] openat(AT_FDCWD, "./file0", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5974] munmap(0x7f627f000000, 138412032 [pid 5975] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5974] <... munmap resumed>) = 0 [pid 5975] <... futex resumed>) = 1 [pid 5973] <... futex resumed>) = 0 [pid 5975] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5974] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5974] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5974] close(3) = 0 [pid 5974] close(4) = 0 [pid 5974] mkdir("./file0", 0777) = 0 [pid 5974] mount("/dev/loop0", "./file0", "hfs", MS_NOSUID|MS_SYNCHRONOUS, "codepage=iso8859-5,umask=0000000000000777,iocharset=cp869,") = 0 [pid 5974] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5974] chdir("./file0") = 0 [pid 5974] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5974] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5973] exit_group(0 [pid 5974] <... futex resumed>) = 0 [pid 5975] <... futex resumed>) = ? [pid 5973] <... exit_group resumed>) = ? [pid 5975] +++ exited with 0 +++ [pid 5974] +++ exited with 0 +++ [pid 5973] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5973, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./43", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 138.648278][ T5974] loop0: detected capacity change from 0 to 64 openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555594dec730 /* 4 entries */, 32768) = 112 umount2("./43/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./43/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./43/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./43/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./43/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555594df4770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555594df4770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./43/file0") = 0 umount2("./43/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./43/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./43/binderfs") = 0 getdents64(3, 0x555594dec730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./43") = 0 mkdir("./44", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555594deb690) = 5976 ./strace-static-x86_64: Process 5976 attached [pid 5976] set_robust_list(0x555594deb6a0, 24) = 0 [pid 5976] chdir("./44") = 0 [pid 5976] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5976] setpgid(0, 0) = 0 [pid 5976] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5976] write(3, "1000", 4) = 4 [pid 5976] close(3) = 0 [pid 5976] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5976] write(1, "executing program\n", 18) = 18 [pid 5976] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5976] rt_sigaction(SIGRT_1, {sa_handler=0x7f6287661eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6287653060}, NULL, 8) = 0 [pid 5976] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5976] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875d0000 [pid 5976] mprotect(0x7f62875d1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5976] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5976] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875f0990, parent_tid=0x7f62875f0990, exit_signal=0, stack=0x7f62875d0000, stack_size=0x20300, tls=0x7f62875f06c0}./strace-static-x86_64: Process 5977 attached [pid 5977] rseq(0x7f62875f0fe0, 0x20, 0, 0x53053053 [pid 5976] <... clone3 resumed> => {parent_tid=[5977]}, 88) = 5977 [pid 5977] <... rseq resumed>) = 0 [pid 5976] rt_sigprocmask(SIG_SETMASK, [], [pid 5977] set_robust_list(0x7f62875f09a0, 24) = 0 [pid 5976] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5976] futex(0x7f62876c36a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5977] rt_sigprocmask(SIG_SETMASK, [], [pid 5976] <... futex resumed>) = 0 [pid 5977] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5977] memfd_create("syzkaller", 0 [pid 5976] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5976] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875af000 [pid 5976] mprotect(0x7f62875b0000, 131072, PROT_READ|PROT_WRITE [pid 5977] <... memfd_create resumed>) = 3 [pid 5976] <... mprotect resumed>) = 0 [pid 5976] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5977] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5976] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5977] <... mmap resumed>) = 0x7f627f000000 [pid 5976] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875cf990, parent_tid=0x7f62875cf990, exit_signal=0, stack=0x7f62875af000, stack_size=0x20300, tls=0x7f62875cf6c0} [pid 5977] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768./strace-static-x86_64: Process 5978 attached [pid 5976] <... clone3 resumed> => {parent_tid=[5978]}, 88) = 5978 [pid 5978] rseq(0x7f62875cffe0, 0x20, 0, 0x53053053 [pid 5977] <... write resumed>) = 32768 [pid 5976] rt_sigprocmask(SIG_SETMASK, [], [pid 5978] <... rseq resumed>) = 0 [pid 5978] set_robust_list(0x7f62875cf9a0, 24 [pid 5977] munmap(0x7f627f000000, 138412032 [pid 5976] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5978] <... set_robust_list resumed>) = 0 [pid 5976] futex(0x7f62876c36b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5978] rt_sigprocmask(SIG_SETMASK, [], [pid 5976] <... futex resumed>) = 0 [pid 5978] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5978] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5977] <... munmap resumed>) = 0 [pid 5976] futex(0x7f62876c36bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5978] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5977] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5978] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5977] <... openat resumed>) = 4 [pid 5976] <... futex resumed>) = 0 [pid 5978] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5977] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5977] close(3) = 0 [pid 5977] close(4) = 0 [pid 5977] mkdir("./file0", 0777) = 0 [pid 5977] mount("/dev/loop0", "./file0", "hfs", MS_NOSUID|MS_SYNCHRONOUS, "codepage=iso8859-5,umask=0000000000000777,iocharset=cp869,") = 0 [pid 5977] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5977] chdir("./file0") = 0 [pid 5977] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 139.159631][ T5977] loop0: detected capacity change from 0 to 64 [pid 5977] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5977] futex(0x7f62876c36a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5976] exit_group(0) = ? [pid 5978] <... futex resumed>) = ? [pid 5977] <... futex resumed>) = ? [pid 5977] +++ exited with 0 +++ [pid 5978] +++ exited with 0 +++ [pid 5976] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5976, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./44", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555594dec730 /* 4 entries */, 32768) = 112 umount2("./44/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./44/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./44/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./44/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./44/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555594df4770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555594df4770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./44/file0") = 0 umount2("./44/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./44/binderfs") = 0 getdents64(3, 0x555594dec730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./44") = 0 mkdir("./45", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5979 attached , child_tidptr=0x555594deb690) = 5979 [pid 5979] set_robust_list(0x555594deb6a0, 24) = 0 [pid 5979] chdir("./45") = 0 [pid 5979] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5979] setpgid(0, 0) = 0 [pid 5979] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5979] write(3, "1000", 4) = 4 [pid 5979] close(3) = 0 [pid 5979] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5979] write(1, "executing program\n", 18executing program ) = 18 [pid 5979] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5979] rt_sigaction(SIGRT_1, {sa_handler=0x7f6287661eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6287653060}, NULL, 8) = 0 [pid 5979] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5979] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875d0000 [pid 5979] mprotect(0x7f62875d1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5979] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5979] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875f0990, parent_tid=0x7f62875f0990, exit_signal=0, stack=0x7f62875d0000, stack_size=0x20300, tls=0x7f62875f06c0}./strace-static-x86_64: Process 5980 attached [pid 5980] rseq(0x7f62875f0fe0, 0x20, 0, 0x53053053 [pid 5979] <... clone3 resumed> => {parent_tid=[5980]}, 88) = 5980 [pid 5980] <... rseq resumed>) = 0 [pid 5979] rt_sigprocmask(SIG_SETMASK, [], [pid 5980] set_robust_list(0x7f62875f09a0, 24 [pid 5979] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5980] <... set_robust_list resumed>) = 0 [pid 5979] futex(0x7f62876c36a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5980] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5979] <... futex resumed>) = 0 [pid 5979] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5980] memfd_create("syzkaller", 0 [pid 5979] <... futex resumed>) = 0 [pid 5980] <... memfd_create resumed>) = 3 [pid 5979] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5980] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5979] <... mmap resumed>) = 0x7f62875af000 [pid 5980] <... mmap resumed>) = 0x7f627f000000 [pid 5979] mprotect(0x7f62875b0000, 131072, PROT_READ|PROT_WRITE [pid 5980] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768 [pid 5979] <... mprotect resumed>) = 0 [pid 5980] <... write resumed>) = 32768 [pid 5980] munmap(0x7f627f000000, 138412032) = 0 [pid 5979] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5980] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5979] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875cf990, parent_tid=0x7f62875cf990, exit_signal=0, stack=0x7f62875af000, stack_size=0x20300, tls=0x7f62875cf6c0}./strace-static-x86_64: Process 5981 attached [pid 5980] <... openat resumed>) = 4 [pid 5981] rseq(0x7f62875cffe0, 0x20, 0, 0x53053053) = 0 [pid 5980] ioctl(4, LOOP_SET_FD, 3 [pid 5979] <... clone3 resumed> => {parent_tid=[5981]}, 88) = 5981 [pid 5981] set_robust_list(0x7f62875cf9a0, 24 [pid 5979] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5979] futex(0x7f62876c36b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5979] futex(0x7f62876c36bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5981] <... set_robust_list resumed>) = 0 [pid 5980] <... ioctl resumed>) = 0 [pid 5981] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5981] openat(AT_FDCWD, "./file0", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5981] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5980] close(3 [pid 5979] <... futex resumed>) = 0 [pid 5981] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5980] <... close resumed>) = 0 [pid 5980] close(4) = 0 [pid 5980] mkdir("./file0", 0777) = 0 [pid 5980] mount("/dev/loop0", "./file0", "hfs", MS_NOSUID|MS_SYNCHRONOUS, "codepage=iso8859-5,umask=0000000000000777,iocharset=cp869,") = 0 [pid 5980] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 139.714983][ T5980] loop0: detected capacity change from 0 to 64 [pid 5980] chdir("./file0") = 0 [pid 5980] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5980] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5980] futex(0x7f62876c36a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5979] exit_group(0 [pid 5981] <... futex resumed>) = ? [pid 5980] <... futex resumed>) = ? [pid 5979] <... exit_group resumed>) = ? [pid 5981] +++ exited with 0 +++ [pid 5980] +++ exited with 0 +++ [pid 5979] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5979, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./45", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555594dec730 /* 4 entries */, 32768) = 112 umount2("./45/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./45/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./45/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./45/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./45/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555594df4770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555594df4770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./45/file0") = 0 umount2("./45/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./45/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./45/binderfs") = 0 getdents64(3, 0x555594dec730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./45") = 0 mkdir("./46", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5982 attached [pid 5982] set_robust_list(0x555594deb6a0, 24) = 0 [pid 5842] <... clone resumed>, child_tidptr=0x555594deb690) = 5982 [pid 5982] chdir("./46") = 0 [pid 5982] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5982] setpgid(0, 0) = 0 [pid 5982] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5982] write(3, "1000", 4) = 4 [pid 5982] close(3) = 0 [pid 5982] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5982] write(1, "executing program\n", 18) = 18 [pid 5982] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5982] rt_sigaction(SIGRT_1, {sa_handler=0x7f6287661eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6287653060}, NULL, 8) = 0 [pid 5982] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5982] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875d0000 [pid 5982] mprotect(0x7f62875d1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5982] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5982] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875f0990, parent_tid=0x7f62875f0990, exit_signal=0, stack=0x7f62875d0000, stack_size=0x20300, tls=0x7f62875f06c0}./strace-static-x86_64: Process 5983 attached => {parent_tid=[5983]}, 88) = 5983 [pid 5982] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5982] futex(0x7f62876c36a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5982] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5982] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875af000 [pid 5982] mprotect(0x7f62875b0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5983] rseq(0x7f62875f0fe0, 0x20, 0, 0x53053053) = 0 [pid 5982] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5983] set_robust_list(0x7f62875f09a0, 24) = 0 [pid 5983] rt_sigprocmask(SIG_SETMASK, [], [pid 5982] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5983] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5983] memfd_create("syzkaller", 0 [pid 5982] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875cf990, parent_tid=0x7f62875cf990, exit_signal=0, stack=0x7f62875af000, stack_size=0x20300, tls=0x7f62875cf6c0}./strace-static-x86_64: Process 5984 attached [pid 5983] <... memfd_create resumed>) = 3 [pid 5984] rseq(0x7f62875cffe0, 0x20, 0, 0x53053053 [pid 5983] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5984] <... rseq resumed>) = 0 [pid 5982] <... clone3 resumed> => {parent_tid=[5984]}, 88) = 5984 [pid 5984] set_robust_list(0x7f62875cf9a0, 24 [pid 5983] <... mmap resumed>) = 0x7f627f000000 [pid 5982] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5984] <... set_robust_list resumed>) = 0 [pid 5982] futex(0x7f62876c36b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5984] rt_sigprocmask(SIG_SETMASK, [], [pid 5982] <... futex resumed>) = 0 [pid 5982] futex(0x7f62876c36bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5984] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5983] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768 [pid 5984] openat(AT_FDCWD, "./file0", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5983] <... write resumed>) = 32768 [pid 5984] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5983] munmap(0x7f627f000000, 138412032 [pid 5984] <... futex resumed>) = 1 [pid 5982] <... futex resumed>) = 0 [pid 5984] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5983] <... munmap resumed>) = 0 [pid 5983] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5983] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5983] close(3) = 0 [pid 5983] close(4) = 0 [pid 5983] mkdir("./file0", 0777) = 0 [pid 5983] mount("/dev/loop0", "./file0", "hfs", MS_NOSUID|MS_SYNCHRONOUS, "codepage=iso8859-5,umask=0000000000000777,iocharset=cp869,") = 0 [pid 5983] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 140.071849][ T5983] loop0: detected capacity change from 0 to 64 [pid 5983] chdir("./file0") = 0 [pid 5983] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5983] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5983] futex(0x7f62876c36a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5982] exit_group(0 [pid 5984] <... futex resumed>) = ? [pid 5983] <... futex resumed>) = ? [pid 5982] <... exit_group resumed>) = ? [pid 5983] +++ exited with 0 +++ [pid 5984] +++ exited with 0 +++ [pid 5982] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5982, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./46", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555594dec730 /* 4 entries */, 32768) = 112 umount2("./46/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./46/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./46/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./46/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./46/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555594df4770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555594df4770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./46/file0") = 0 umount2("./46/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./46/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./46/binderfs") = 0 getdents64(3, 0x555594dec730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./46") = 0 mkdir("./47", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5985 attached [pid 5985] set_robust_list(0x555594deb6a0, 24) = 0 [pid 5985] chdir("./47" [pid 5842] <... clone resumed>, child_tidptr=0x555594deb690) = 5985 [pid 5985] <... chdir resumed>) = 0 [pid 5985] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5985] setpgid(0, 0) = 0 [pid 5985] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5985] write(3, "1000", 4) = 4 [pid 5985] close(3) = 0 [pid 5985] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5985] write(1, "executing program\n", 18executing program ) = 18 [pid 5985] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5985] rt_sigaction(SIGRT_1, {sa_handler=0x7f6287661eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6287653060}, NULL, 8) = 0 [pid 5985] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5985] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875d0000 [pid 5985] mprotect(0x7f62875d1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5985] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5985] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875f0990, parent_tid=0x7f62875f0990, exit_signal=0, stack=0x7f62875d0000, stack_size=0x20300, tls=0x7f62875f06c0}./strace-static-x86_64: Process 5986 attached [pid 5986] rseq(0x7f62875f0fe0, 0x20, 0, 0x53053053) = 0 [pid 5985] <... clone3 resumed> => {parent_tid=[5986]}, 88) = 5986 [pid 5986] set_robust_list(0x7f62875f09a0, 24 [pid 5985] rt_sigprocmask(SIG_SETMASK, [], [pid 5986] <... set_robust_list resumed>) = 0 [pid 5985] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5986] rt_sigprocmask(SIG_SETMASK, [], [pid 5985] futex(0x7f62876c36a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5986] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5985] <... futex resumed>) = 0 [pid 5985] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5985] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5986] memfd_create("syzkaller", 0 [pid 5985] <... mmap resumed>) = 0x7f62875af000 [pid 5985] mprotect(0x7f62875b0000, 131072, PROT_READ|PROT_WRITE [pid 5986] <... memfd_create resumed>) = 3 [pid 5985] <... mprotect resumed>) = 0 [pid 5986] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f627f000000 [pid 5985] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5985] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875cf990, parent_tid=0x7f62875cf990, exit_signal=0, stack=0x7f62875af000, stack_size=0x20300, tls=0x7f62875cf6c0} [pid 5986] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768./strace-static-x86_64: Process 5987 attached [pid 5987] rseq(0x7f62875cffe0, 0x20, 0, 0x53053053 [pid 5986] <... write resumed>) = 32768 [pid 5986] munmap(0x7f627f000000, 138412032 [pid 5987] <... rseq resumed>) = 0 [pid 5987] set_robust_list(0x7f62875cf9a0, 24) = 0 [pid 5987] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5987] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5986] <... munmap resumed>) = 0 [pid 5985] <... clone3 resumed> => {parent_tid=[5987]}, 88) = 5987 [pid 5986] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5985] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5986] <... openat resumed>) = 4 [pid 5985] futex(0x7f62876c36b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5986] ioctl(4, LOOP_SET_FD, 3 [pid 5987] <... futex resumed>) = 0 [pid 5985] <... futex resumed>) = 1 [pid 5987] openat(AT_FDCWD, "./file0", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5985] futex(0x7f62876c36bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5987] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5986] <... ioctl resumed>) = 0 [pid 5985] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5987] <... futex resumed>) = 0 [pid 5986] close(3 [pid 5987] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5986] <... close resumed>) = 0 [pid 5986] close(4) = 0 [pid 5986] mkdir("./file0", 0777) = 0 [pid 5986] mount("/dev/loop0", "./file0", "hfs", MS_NOSUID|MS_SYNCHRONOUS, "codepage=iso8859-5,umask=0000000000000777,iocharset=cp869,") = 0 [pid 5986] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5986] chdir("./file0") = 0 [pid 5986] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5986] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5986] futex(0x7f62876c36a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5985] exit_group(0 [pid 5987] <... futex resumed>) = ? [pid 5986] <... futex resumed>) = ? [pid 5985] <... exit_group resumed>) = ? [pid 5987] +++ exited with 0 +++ [pid 5986] +++ exited with 0 +++ [pid 5985] +++ exited with 0 +++ [ 140.353299][ T5986] loop0: detected capacity change from 0 to 64 --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5985, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./47", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555594dec730 /* 4 entries */, 32768) = 112 umount2("./47/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./47/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./47/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./47/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./47/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555594df4770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555594df4770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./47/file0") = 0 umount2("./47/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./47/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./47/binderfs") = 0 getdents64(3, 0x555594dec730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./47") = 0 mkdir("./48", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5988 attached [pid 5988] set_robust_list(0x555594deb6a0, 24 [pid 5842] <... clone resumed>, child_tidptr=0x555594deb690) = 5988 [pid 5988] <... set_robust_list resumed>) = 0 [pid 5988] chdir("./48") = 0 [pid 5988] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5988] setpgid(0, 0) = 0 [pid 5988] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5988] write(3, "1000", 4) = 4 [pid 5988] close(3) = 0 [pid 5988] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5988] write(1, "executing program\n", 18executing program ) = 18 [pid 5988] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5988] rt_sigaction(SIGRT_1, {sa_handler=0x7f6287661eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6287653060}, NULL, 8) = 0 [pid 5988] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5988] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875d0000 [pid 5988] mprotect(0x7f62875d1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5988] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5988] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875f0990, parent_tid=0x7f62875f0990, exit_signal=0, stack=0x7f62875d0000, stack_size=0x20300, tls=0x7f62875f06c0}./strace-static-x86_64: Process 5989 attached [pid 5989] rseq(0x7f62875f0fe0, 0x20, 0, 0x53053053) = 0 [pid 5989] set_robust_list(0x7f62875f09a0, 24) = 0 [pid 5988] <... clone3 resumed> => {parent_tid=[5989]}, 88) = 5989 [pid 5989] rt_sigprocmask(SIG_SETMASK, [], [pid 5988] rt_sigprocmask(SIG_SETMASK, [], [pid 5989] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5988] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5989] futex(0x7f62876c36a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5988] futex(0x7f62876c36a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5989] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5988] <... futex resumed>) = 0 [pid 5988] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5989] memfd_create("syzkaller", 0) = 3 [pid 5988] <... futex resumed>) = 0 [pid 5989] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5988] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5989] <... mmap resumed>) = 0x7f627f000000 [pid 5988] <... mmap resumed>) = 0x7f62875af000 [pid 5988] mprotect(0x7f62875b0000, 131072, PROT_READ|PROT_WRITE [pid 5989] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768 [pid 5988] <... mprotect resumed>) = 0 [pid 5989] <... write resumed>) = 32768 [pid 5989] munmap(0x7f627f000000, 138412032) = 0 [pid 5988] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5989] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5988] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875cf990, parent_tid=0x7f62875cf990, exit_signal=0, stack=0x7f62875af000, stack_size=0x20300, tls=0x7f62875cf6c0} [pid 5989] <... openat resumed>) = 4 ./strace-static-x86_64: Process 5990 attached [pid 5990] rseq(0x7f62875cffe0, 0x20, 0, 0x53053053) = 0 [pid 5989] ioctl(4, LOOP_SET_FD, 3 [pid 5990] set_robust_list(0x7f62875cf9a0, 24 [pid 5988] <... clone3 resumed> => {parent_tid=[5990]}, 88) = 5990 [pid 5988] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5988] futex(0x7f62876c36b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5988] futex(0x7f62876c36bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5990] <... set_robust_list resumed>) = 0 [pid 5989] <... ioctl resumed>) = 0 [pid 5990] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5989] close(3 [pid 5990] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5989] <... close resumed>) = 0 [pid 5990] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5989] close(4 [pid 5990] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5988] <... futex resumed>) = 0 [pid 5989] <... close resumed>) = 0 [pid 5990] <... futex resumed>) = 1 [pid 5990] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5989] mkdir("./file0", 0777) = 0 [pid 5989] mount("/dev/loop0", "./file0", "hfs", MS_NOSUID|MS_SYNCHRONOUS, "codepage=iso8859-5,umask=0000000000000777,iocharset=cp869,") = 0 [pid 5989] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5989] chdir("./file0") = 0 [pid 5989] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5989] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 140.706617][ T5989] loop0: detected capacity change from 0 to 64 [pid 5989] futex(0x7f62876c36a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5988] exit_group(0 [pid 5990] <... futex resumed>) = ? [pid 5989] <... futex resumed>) = ? [pid 5988] <... exit_group resumed>) = ? [pid 5990] +++ exited with 0 +++ [pid 5989] +++ exited with 0 +++ [pid 5988] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5988, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./48", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555594dec730 /* 4 entries */, 32768) = 112 umount2("./48/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./48/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./48/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./48/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./48/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555594df4770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555594df4770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./48/file0") = 0 umount2("./48/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./48/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./48/binderfs") = 0 getdents64(3, 0x555594dec730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./48") = 0 mkdir("./49", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5991 attached [pid 5991] set_robust_list(0x555594deb6a0, 24 [pid 5842] <... clone resumed>, child_tidptr=0x555594deb690) = 5991 [pid 5991] <... set_robust_list resumed>) = 0 [pid 5991] chdir("./49") = 0 [pid 5991] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5991] setpgid(0, 0) = 0 [pid 5991] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5991] write(3, "1000", 4) = 4 [pid 5991] close(3) = 0 [pid 5991] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5991] write(1, "executing program\n", 18executing program ) = 18 [pid 5991] futex(0x7f62876c36ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5991] rt_sigaction(SIGRT_1, {sa_handler=0x7f6287661eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6287653060}, NULL, 8) = 0 [pid 5991] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5991] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f62875d0000 [pid 5991] mprotect(0x7f62875d1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5991] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5991] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875f0990, parent_tid=0x7f62875f0990, exit_signal=0, stack=0x7f62875d0000, stack_size=0x20300, tls=0x7f62875f06c0}./strace-static-x86_64: Process 5992 attached [pid 5992] rseq(0x7f62875f0fe0, 0x20, 0, 0x53053053) = 0 [pid 5992] set_robust_list(0x7f62875f09a0, 24 [pid 5991] <... clone3 resumed> => {parent_tid=[5992]}, 88) = 5992 [pid 5992] <... set_robust_list resumed>) = 0 [pid 5992] rt_sigprocmask(SIG_SETMASK, [], [pid 5991] rt_sigprocmask(SIG_SETMASK, [], [pid 5992] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5991] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5992] futex(0x7f62876c36a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5991] futex(0x7f62876c36a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5992] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5991] <... futex resumed>) = 0 [pid 5992] memfd_create("syzkaller", 0 [pid 5991] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5991] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5992] <... memfd_create resumed>) = 3 [pid 5991] <... mmap resumed>) = 0x7f62875af000 [pid 5991] mprotect(0x7f62875b0000, 131072, PROT_READ|PROT_WRITE [pid 5992] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5991] <... mprotect resumed>) = 0 [pid 5992] <... mmap resumed>) = 0x7f627f000000 [pid 5991] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5991] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f62875cf990, parent_tid=0x7f62875cf990, exit_signal=0, stack=0x7f62875af000, stack_size=0x20300, tls=0x7f62875cf6c0}./strace-static-x86_64: Process 5993 attached [pid 5993] rseq(0x7f62875cffe0, 0x20, 0, 0x53053053) = 0 [pid 5993] set_robust_list(0x7f62875cf9a0, 24) = 0 [pid 5991] <... clone3 resumed> => {parent_tid=[5993]}, 88) = 5993 [pid 5993] rt_sigprocmask(SIG_SETMASK, [], [pid 5991] rt_sigprocmask(SIG_SETMASK, [], [pid 5993] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5993] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5991] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5991] futex(0x7f62876c36b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5993] <... futex resumed>) = 0 [pid 5991] futex(0x7f62876c36bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5993] openat(AT_FDCWD, "./file0", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5992] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32769 [pid 5993] futex(0x7f62876c36bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5991] <... futex resumed>) = 0 [pid 5993] futex(0x7f62876c36b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5992] <... write resumed>) = 32769 [pid 5992] munmap(0x7f627f000000, 138412032) = 0 [pid 5992] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5992] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5992] close(3) = 0 [pid 5992] close(4) = 0 [pid 5992] mkdir("./file0", 0777) = 0 [ 141.194440][ T5992] loop0: detected capacity change from 0 to 64 [ 141.219706][ T5992] hfs: unable to locate alternate MDB [ 141.225230][ T5992] hfs: continuing without an alternate MDB [ 141.231829][ T5992] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] SMP KASAN PTI [ 141.243751][ T5992] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 141.252176][ T5992] CPU: 0 UID: 0 PID: 5992 Comm: syz-executor766 Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) [ 141.264595][ T5992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 141.274665][ T5992] RIP: 0010:hfs_find_init+0x6a/0x1e0 [ 141.279991][ T5992] Code: 7e 18 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 b8 b4 8a ff 49 c7 07 00 00 00 00 48 8d 6b 40 49 89 ef 49 c1 ef 03 <43> 0f b6 04 2f 84 c0 0f 85 0c 01 00 00 8b 45 00 8d 3c 45 04 00 00 [ 141.299608][ T5992] RSP: 0018:ffffc9000448f588 EFLAGS: 00010202 [ 141.305672][ T5992] RAX: 1ffff92000891ecf RBX: 0000000000000000 RCX: ffff8880790bda00 [ 141.313638][ T5992] RDX: 0000000000000000 RSI: ffffc9000448f660 RDI: ffffc9000448f670 [ 141.321602][ T5992] RBP: 0000000000000040 R08: ffffc9000448f697 R09: 0000000000000000 [ 141.329562][ T5992] R10: ffffc9000448f660 R11: fffff52000891ed3 R12: ffff88807c10c640 [ 141.337523][ T5992] R13: dffffc0000000000 R14: ffffc9000448f660 R15: 0000000000000008 [ 141.345482][ T5992] FS: 00007f62875f06c0(0000) GS:ffff888125c85000(0000) knlGS:0000000000000000 [ 141.354400][ T5992] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 141.360974][ T5992] CR2: 00007ff690947000 CR3: 0000000033252000 CR4: 00000000003526f0 [ 141.368938][ T5992] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 141.376894][ T5992] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 141.384855][ T5992] Call Trace: [ 141.388127][ T5992] [ 141.391050][ T5992] hfs_get_block+0x51b/0xbd0 [ 141.395658][ T5992] ? __pfx_hfs_get_block+0x10/0x10 [ 141.400778][ T5992] ? _raw_spin_unlock+0x28/0x50 [ 141.405669][ T5992] block_read_full_folio+0x29c/0x830 [ 141.410972][ T5992] ? __pfx_hfs_get_block+0x10/0x10 [ 141.416088][ T5992] filemap_read_folio+0x117/0x380 [ 141.421112][ T5992] ? __pfx_hfs_read_folio+0x10/0x10 [ 141.426307][ T5992] ? __pfx_filemap_read_folio+0x10/0x10 [ 141.431844][ T5992] ? filemap_add_folio+0x1af/0x270 [ 141.436945][ T5992] do_read_cache_folio+0x350/0x590 [ 141.442048][ T5992] ? __pfx_hfs_read_folio+0x10/0x10 [ 141.447235][ T5992] read_cache_page+0x5d/0x170 [ 141.451908][ T5992] hfs_btree_open+0x55f/0x14f0 [ 141.456668][ T5992] ? hfs_mdb_get+0x1293/0x2080 [ 141.461423][ T5992] hfs_mdb_get+0x1327/0x2080 [ 141.466007][ T5992] ? __pfx_hfs_mdb_get+0x10/0x10 [ 141.470933][ T5992] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 141.476817][ T5992] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 141.483138][ T5992] hfs_fill_super+0x37b/0x640 [ 141.487817][ T5992] ? __pfx_hfs_fill_super+0x10/0x10 [ 141.493010][ T5992] ? sb_set_blocksize+0x104/0x180 [ 141.498027][ T5992] ? setup_bdev_super+0x4c1/0x5b0 [ 141.503042][ T5992] get_tree_bdev_flags+0x40e/0x4d0 [ 141.508146][ T5992] ? __pfx_hfs_fill_super+0x10/0x10 [ 141.513335][ T5992] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 141.518957][ T5992] ? cap_capable+0x11f/0x460 [ 141.523541][ T5992] ? safesetid_security_capable+0xa9/0x1a0 [ 141.529398][ T5992] vfs_get_tree+0x8f/0x2b0 [ 141.533811][ T5992] do_new_mount+0x24a/0xa40 [ 141.538325][ T5992] __se_sys_mount+0x317/0x410 [ 141.543024][ T5992] ? __pfx___se_sys_mount+0x10/0x10 [ 141.548230][ T5992] ? rcu_is_watching+0x15/0xb0 [ 141.552991][ T5992] ? __x64_sys_mount+0x20/0xc0 [ 141.557751][ T5992] do_syscall_64+0xfa/0x3b0 [ 141.562247][ T5992] ? lockdep_hardirqs_on+0x9c/0x150 [ 141.567437][ T5992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.573491][ T5992] ? clear_bhb_loop+0x60/0xb0 [ 141.578158][ T5992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.584037][ T5992] RIP: 0033:0x7f628763ceea [ 141.588453][ T5992] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 141.608047][ T5992] RSP: 002b:00007f62875f0088 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 141.616458][ T5992] RAX: ffffffffffffffda RBX: 00007f62875f00a0 RCX: 00007f628763ceea [ 141.624419][ T5992] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f62875f00a0 [ 141.632377][ T5992] RBP: 0000200000000100 R08: 00007f62875f00e0 R09: 0000000000000333 [ 141.640335][ T5992] R10: 0000000000000012 R11: 0000000000000286 R12: 0000200000000000 [ 141.648303][ T5992] R13: 00007f62875f00e0 R14: 0000000000000003 R15: 0000000000000012 [ 141.656276][ T5992] [ 141.659290][ T5992] Modules linked in: [ 141.663641][ T5992] ---[ end trace 0000000000000000 ]--- [ 141.669587][ T5992] RIP: 0010:hfs_find_init+0x6a/0x1e0 [ 141.674939][ T5992] Code: 7e 18 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 b8 b4 8a ff 49 c7 07 00 00 00 00 48 8d 6b 40 49 89 ef 49 c1 ef 03 <43> 0f b6 04 2f 84 c0 0f 85 0c 01 00 00 8b 45 00 8d 3c 45 04 00 00 [ 141.694617][ T5992] RSP: 0018:ffffc9000448f588 EFLAGS: 00010202 [ 141.701294][ T5992] RAX: 1ffff92000891ecf RBX: 0000000000000000 RCX: ffff8880790bda00 [ 141.709297][ T5992] RDX: 0000000000000000 RSI: ffffc9000448f660 RDI: ffffc9000448f670 [ 141.717313][ T5992] RBP: 0000000000000040 R08: ffffc9000448f697 R09: 0000000000000000 [ 141.725288][ T5992] R10: ffffc9000448f660 R11: fffff52000891ed3 R12: ffff88807c10c640 [ 141.733304][ T5992] R13: dffffc0000000000 R14: ffffc9000448f660 R15: 0000000000000008 [ 141.741321][ T5992] FS: 00007f62875f06c0(0000) GS:ffff888125c85000(0000) knlGS:0000000000000000 [ 141.750280][ T5992] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 141.756866][ T5992] CR2: 00007ff690947000 CR3: 0000000033252000 CR4: 00000000003526f0 [ 141.764866][ T5992] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 141.772877][ T5992] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 141.780904][ T5992] Kernel panic - not syncing: Fatal exception [ 141.787207][ T5992] Kernel Offset: disabled [ 141.791516][ T5992] Rebooting in 86400 seconds..