./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4057560147 <...> Warning: Permanently added '10.128.1.41' (ED25519) to the list of known hosts. execve("./syz-executor4057560147", ["./syz-executor4057560147"], 0x7ffdc238f250 /* 10 vars */) = 0 brk(NULL) = 0x55556b40e000 brk(0x55556b40ed00) = 0x55556b40ed00 arch_prctl(ARCH_SET_FS, 0x55556b40e380) = 0 set_tid_address(0x55556b40e650) = 5076 set_robust_list(0x55556b40e660, 24) = 0 rseq(0x55556b40eca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor4057560147", 4096) = 28 getrandom("\x54\x0c\x28\xdd\x0f\x25\x6b\xfb", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55556b40ed00 brk(0x55556b42fd00) = 0x55556b42fd00 brk(0x55556b430000) = 0x55556b430000 mprotect(0x7fea18d2a000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5077 attached , child_tidptr=0x55556b40e650) = 5077 [pid 5077] set_robust_list(0x55556b40e660, 24 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] <... set_robust_list resumed>) = 0 [pid 5077] getrandom("\xf9\x02\xf3\xcd\xb8\xa9\x6b\x6f", 8, GRND_NONBLOCK) = 8 ./strace-static-x86_64: Process 5078 attached [pid 5078] set_robust_list(0x55556b40e660, 24 [pid 5077] mkdir("./syzkaller.FvB79J", 0700 [pid 5076] <... clone resumed>, child_tidptr=0x55556b40e650) = 5078 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] <... set_robust_list resumed>) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 5077] chmod("./syzkaller.FvB79J", 0777) = 0 ./strace-static-x86_64: Process 5079 attached [pid 5078] mkdir("./syzkaller.vHxy79", 0700 [pid 5079] set_robust_list(0x55556b40e660, 24 [pid 5077] chdir("./syzkaller.FvB79J" [pid 5079] <... set_robust_list resumed>) = 0 [pid 5077] <... chdir resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x55556b40e650) = 5079 [pid 5079] getrandom( [pid 5078] <... mkdir resumed>) = 0 [pid 5077] mkdir("./0", 0777 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5080 attached [pid 5079] <... getrandom resumed>"\xe2\x3c\xea\xe1\xcb\xad\xa4\x20", 8, GRND_NONBLOCK) = 8 [pid 5078] chmod("./syzkaller.vHxy79", 0777 [pid 5080] set_robust_list(0x55556b40e660, 24 [pid 5079] mkdir("./syzkaller.KrqOEK", 0700 [pid 5077] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] <... clone resumed>, child_tidptr=0x55556b40e650) = 5080 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] <... set_robust_list resumed>) = 0 [pid 5079] <... mkdir resumed>) = 0 [pid 5078] <... chmod resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5077] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5077] close(3./strace-static-x86_64: Process 5081 attached [pid 5080] mkdir("./syzkaller.KR1OW6", 0700 [pid 5079] chmod("./syzkaller.KrqOEK", 0777 [pid 5078] chdir("./syzkaller.vHxy79" [pid 5076] <... clone resumed>, child_tidptr=0x55556b40e650) = 5081 [pid 5081] set_robust_list(0x55556b40e660, 24 [pid 5079] <... chmod resumed>) = 0 [pid 5078] <... chdir resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] <... set_robust_list resumed>) = 0 [pid 5081] mkdir("./syzkaller.27MuMk", 0700./strace-static-x86_64: Process 5082 attached [pid 5080] <... mkdir resumed>) = 0 [pid 5079] chdir("./syzkaller.KrqOEK" [pid 5078] mkdir("./0", 0777 [pid 5077] <... close resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x55556b40e650) = 5082 [pid 5082] set_robust_list(0x55556b40e660, 24 [pid 5081] <... mkdir resumed>) = 0 [pid 5080] chmod("./syzkaller.KR1OW6", 0777 [pid 5079] <... chdir resumed>) = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5082] <... set_robust_list resumed>) = 0 [pid 5080] <... chmod resumed>) = 0 [pid 5079] mkdir("./0", 0777 [pid 5081] chmod("./syzkaller.27MuMk", 0777./strace-static-x86_64: Process 5083 attached [pid 5082] mkdir("./syzkaller.TaWDky", 0700 [pid 5080] chdir("./syzkaller.KR1OW6" [pid 5079] <... mkdir resumed>) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5083] set_robust_list(0x55556b40e660, 24 [pid 5081] <... chmod resumed>) = 0 [pid 5080] <... chdir resumed>) = 0 [pid 5080] mkdir("./0", 0777 [pid 5083] <... set_robust_list resumed>) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x55556b40e650) = 5083 [pid 5083] chdir("./0" [pid 5082] <... mkdir resumed>) = 0 [pid 5080] <... mkdir resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5081] chdir("./syzkaller.27MuMk" [pid 5083] <... chdir resumed>) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5083] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5081] <... chdir resumed>) = 0 [pid 5079] <... openat resumed>) = 3 [pid 5083] <... prctl resumed>) = 0 [pid 5083] setpgid(0, 0 [pid 5082] chmod("./syzkaller.TaWDky", 0777 [pid 5081] mkdir("./0", 0777 [pid 5083] <... setpgid resumed>) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5083] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5081] <... mkdir resumed>) = 0 [pid 5080] <... openat resumed>) = 3 [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5083] <... openat resumed>) = 3 [pid 5082] <... chmod resumed>) = 0 [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5082] chdir("./syzkaller.TaWDky" [pid 5081] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5078] close(3 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5078] <... close resumed>) = 0 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5079] close(3 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5083] write(3, "1000", 4 [pid 5082] <... chdir resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5079] <... close resumed>) = 0 [pid 5083] <... write resumed>) = 4 [pid 5080] close(3 [pid 5083] close(3 [pid 5080] <... close resumed>) = 0 [pid 5083] <... close resumed>) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5083] symlink("/dev/binderfs", "./binderfs" [pid 5082] mkdir("./0", 0777 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5083] <... symlink resumed>) = 0 [pid 5082] <... mkdir resumed>) = 0 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5081] close(3 [pid 5083] memfd_create("syzkaller", 0 [pid 5081] <... close resumed>) = 0 ./strace-static-x86_64: Process 5084 attached [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] <... clone resumed>, child_tidptr=0x55556b40e650) = 5084 [pid 5084] set_robust_list(0x55556b40e660, 24./strace-static-x86_64: Process 5085 attached ) = 0 [pid 5082] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5080] <... clone resumed>, child_tidptr=0x55556b40e650) = 5085 [pid 5079] <... clone resumed>, child_tidptr=0x55556b40e650) = 5086 [pid 5085] set_robust_list(0x55556b40e660, 24 [pid 5084] chdir("./0" [pid 5083] <... memfd_create resumed>) = 3 [pid 5082] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5086 attached [pid 5085] <... set_robust_list resumed>) = 0 [pid 5083] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5085] chdir("./0" [pid 5086] set_robust_list(0x55556b40e660, 24 [pid 5084] <... chdir resumed>) = 0 [pid 5083] <... mmap resumed>) = 0x7fea10800000 [pid 5086] <... set_robust_list resumed>) = 0 [pid 5084] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 5087 attached [pid 5087] set_robust_list(0x55556b40e660, 24 [pid 5085] <... chdir resumed>) = 0 [pid 5086] chdir("./0" [pid 5084] <... prctl resumed>) = 0 [pid 5082] ioctl(3, LOOP_CLR_FD [pid 5081] <... clone resumed>, child_tidptr=0x55556b40e650) = 5087 [pid 5087] <... set_robust_list resumed>) = 0 [pid 5085] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5086] <... chdir resumed>) = 0 [pid 5084] setpgid(0, 0 [pid 5082] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5084] <... setpgid resumed>) = 0 [pid 5086] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5084] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5086] <... prctl resumed>) = 0 [pid 5086] setpgid(0, 0 [pid 5085] <... prctl resumed>) = 0 [pid 5087] chdir("./0" [pid 5086] <... setpgid resumed>) = 0 [pid 5084] <... openat resumed>) = 3 [pid 5087] <... chdir resumed>) = 0 [pid 5085] setpgid(0, 0 [pid 5086] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5084] write(3, "1000", 4 [pid 5082] close(3 [pid 5085] <... setpgid resumed>) = 0 [pid 5084] <... write resumed>) = 4 [pid 5087] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5082] <... close resumed>) = 0 [pid 5087] <... prctl resumed>) = 0 [pid 5085] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5084] close(3 [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5087] setpgid(0, 0 [pid 5085] <... openat resumed>) = 3 [pid 5086] <... openat resumed>) = 3 [pid 5084] <... close resumed>) = 0 [pid 5087] <... setpgid resumed>) = 0 [pid 5086] write(3, "1000", 4 [pid 5084] symlink("/dev/binderfs", "./binderfs" [pid 5087] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5085] write(3, "1000", 4) = 4 [pid 5086] <... write resumed>) = 4 [pid 5084] <... symlink resumed>) = 0 [pid 5085] close(3 [pid 5086] close(3 [pid 5085] <... close resumed>) = 0 [pid 5087] <... openat resumed>) = 3 [pid 5085] symlink("/dev/binderfs", "./binderfs" [pid 5082] <... clone resumed>, child_tidptr=0x55556b40e650) = 5088 ./strace-static-x86_64: Process 5088 attached [pid 5087] write(3, "1000", 4 [pid 5085] <... symlink resumed>) = 0 [pid 5086] <... close resumed>) = 0 [pid 5088] set_robust_list(0x55556b40e660, 24 [pid 5087] <... write resumed>) = 4 [pid 5086] symlink("/dev/binderfs", "./binderfs" [pid 5088] <... set_robust_list resumed>) = 0 [pid 5087] close(3 [pid 5085] memfd_create("syzkaller", 0 [pid 5086] <... symlink resumed>) = 0 [pid 5084] memfd_create("syzkaller", 0 [pid 5088] chdir("./0" [pid 5087] <... close resumed>) = 0 [pid 5085] <... memfd_create resumed>) = 3 [pid 5084] <... memfd_create resumed>) = 3 [pid 5088] <... chdir resumed>) = 0 [pid 5087] symlink("/dev/binderfs", "./binderfs" [pid 5084] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5085] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fea10800000 [pid 5084] <... mmap resumed>) = 0x7fea10800000 [pid 5087] <... symlink resumed>) = 0 [pid 5086] memfd_create("syzkaller", 0 [pid 5087] memfd_create("syzkaller", 0 [pid 5088] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5088] setpgid(0, 0 [pid 5086] <... memfd_create resumed>) = 3 [pid 5088] <... setpgid resumed>) = 0 [pid 5087] <... memfd_create resumed>) = 3 [pid 5086] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5088] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5086] <... mmap resumed>) = 0x7fea10800000 [pid 5088] <... openat resumed>) = 3 [pid 5087] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fea10800000 [pid 5088] write(3, "1000", 4) = 4 [pid 5088] close(3) = 0 [pid 5088] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5088] memfd_create("syzkaller", 0) = 3 [pid 5088] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fea10800000 [pid 5083] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5084] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5086] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5085] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5087] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5088] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5086] <... write resumed>) = 16777216 [pid 5084] <... write resumed>) = 16777216 [pid 5084] munmap(0x7fea10800000, 138412032 [pid 5086] munmap(0x7fea10800000, 138412032 [pid 5087] <... write resumed>) = 16777216 [pid 5087] munmap(0x7fea10800000, 138412032 [pid 5086] <... munmap resumed>) = 0 [pid 5084] <... munmap resumed>) = 0 [pid 5086] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5086] ioctl(4, LOOP_SET_FD, 3 [pid 5084] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5084] ioctl(4, LOOP_SET_FD, 3 [pid 5086] <... ioctl resumed>) = 0 [pid 5084] <... ioctl resumed>) = 0 [pid 5084] close(3 [pid 5086] close(3) = 0 [pid 5084] <... close resumed>) = 0 [pid 5086] close(4 [pid 5084] close(4 [pid 5086] <... close resumed>) = 0 [pid 5086] mkdir("./file1", 0777) = 0 [ 112.865323][ T5086] loop2: detected capacity change from 0 to 32768 [ 112.885653][ T5084] loop1: detected capacity change from 0 to 32768 [pid 5086] mount("/dev/loop2", "./file1", "jfs", MS_NOSUID|MS_NOEXEC|MS_SYNCHRONOUS, "quota,grpquota,discard,integrity,errors=remount-ro,nointegrity,errors=continue," [pid 5084] <... close resumed>) = 0 [pid 5084] mkdir("./file1", 0777 [pid 5087] <... munmap resumed>) = 0 [pid 5084] <... mkdir resumed>) = 0 [pid 5083] <... write resumed>) = 16777216 [pid 5087] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5084] mount("/dev/loop1", "./file1", "jfs", MS_NOSUID|MS_NOEXEC|MS_SYNCHRONOUS, "quota,grpquota,discard,integrity,errors=remount-ro,nointegrity,errors=continue," [pid 5087] <... openat resumed>) = 4 [pid 5087] ioctl(4, LOOP_SET_FD, 3 [pid 5083] munmap(0x7fea10800000, 138412032 [pid 5084] <... mount resumed>) = 0 [pid 5086] <... mount resumed>) = 0 [ 112.957016][ T5087] loop4: detected capacity change from 0 to 32768 [pid 5086] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5084] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5086] <... openat resumed>) = 3 [pid 5084] chdir("./file1") = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5086] chdir("./file1" [pid 5087] <... ioctl resumed>) = 0 [pid 5084] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5087] close(3 [pid 5086] <... chdir resumed>) = 0 [pid 5084] exit_group(0 [pid 5085] <... write resumed>) = 16777216 [pid 5087] <... close resumed>) = 0 [pid 5086] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5084] <... exit_group resumed>) = ? [pid 5087] close(4) = 0 [pid 5086] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5087] mkdir("./file1", 0777) = 0 [pid 5086] exit_group(0 [pid 5084] +++ exited with 0 +++ [pid 5083] <... munmap resumed>) = 0 [pid 5087] mount("/dev/loop4", "./file1", "jfs", MS_NOSUID|MS_NOEXEC|MS_SYNCHRONOUS, "quota,grpquota,discard,integrity,errors=remount-ro,nointegrity,errors=continue," [pid 5086] <... exit_group resumed>) = ? [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5084, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=42 /* 0.42 s */} --- [pid 5078] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5086] +++ exited with 0 +++ [pid 5078] <... openat resumed>) = 3 [pid 5078] newfstatat(3, "", [pid 5085] munmap(0x7fea10800000, 138412032 [pid 5083] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5086, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=40 /* 0.40 s */} --- [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5079] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] getdents64(3, [pid 5083] <... openat resumed>) = 4 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... getdents64 resumed>0x55556b40f6f0 /* 4 entries */, 32768) = 112 [pid 5079] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] ioctl(4, LOOP_SET_FD, 3 [pid 5079] <... openat resumed>) = 3 [pid 5079] newfstatat(3, "", [pid 5078] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] getdents64(3, [pid 5078] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5079] <... getdents64 resumed>0x55556b40f6f0 /* 4 entries */, 32768) = 112 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5079] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] unlink("./0/binderfs" [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5079] unlink("./0/binderfs") = 0 [pid 5079] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... unlink resumed>) = 0 [pid 5078] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] <... ioctl resumed>) = 0 [pid 5083] close(3) = 0 [pid 5083] close(4) = 0 [pid 5083] mkdir("./file1", 0777) = 0 [pid 5087] <... mount resumed>) = 0 [pid 5087] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5083] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NOEXEC|MS_SYNCHRONOUS, "quota,grpquota,discard,integrity,errors=remount-ro,nointegrity,errors=continue," [pid 5087] <... openat resumed>) = 3 [pid 5087] chdir("./file1") = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [ 113.077572][ T5083] loop0: detected capacity change from 0 to 32768 [pid 5087] exit_group(0 [pid 5078] <... umount2 resumed>) = 0 [pid 5087] <... exit_group resumed>) = ? [pid 5078] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] newfstatat(AT_FDCWD, "./0/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5087] +++ exited with 0 +++ [pid 5078] <... openat resumed>) = 4 [pid 5078] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5087, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=41 /* 0.41 s */} --- [pid 5078] getdents64(4, [pid 5081] restart_syscall(<... resuming interrupted clone ...> [pid 5078] <... getdents64 resumed>0x55556b417730 /* 2 entries */, 32768) = 48 [pid 5081] <... restart_syscall resumed>) = 0 [pid 5078] getdents64(4, 0x55556b417730 /* 0 entries */, 32768) = 0 [pid 5078] close(4) = 0 [pid 5078] rmdir("./0/file1" [pid 5081] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5081] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] <... mount resumed>) = 0 [pid 5081] getdents64(3, [pid 5083] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5081] <... getdents64 resumed>0x55556b40f6f0 /* 4 entries */, 32768) = 112 [pid 5079] <... umount2 resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5083] <... openat resumed>) = 3 [pid 5081] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] getdents64(3, [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... getdents64 resumed>0x55556b40f6f0 /* 0 entries */, 32768) = 0 [pid 5083] chdir("./file1" [pid 5081] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5078] close(3 [pid 5081] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] <... close resumed>) = 0 [pid 5083] <... chdir resumed>) = 0 [pid 5081] unlink("./0/binderfs" [pid 5078] rmdir("./0" [pid 5079] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5081] <... unlink resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5083] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] newfstatat(AT_FDCWD, "./0/file1", [pid 5085] <... munmap resumed>) = 0 [pid 5081] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] exit_group(0) = ? [pid 5078] mkdir("./1", 0777 [pid 5085] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5083] +++ exited with 0 +++ [pid 5079] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5083, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=52 /* 0.52 s */} --- [pid 5085] <... openat resumed>) = 4 [pid 5079] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... openat resumed>) = 3 [pid 5085] ioctl(4, LOOP_SET_FD, 3 [pid 5078] ioctl(3, LOOP_CLR_FD) = 0 [pid 5078] close(3) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] <... umount2 resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... openat resumed>) = 4 [pid 5077] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] newfstatat(AT_FDCWD, "./0/file1", [pid 5079] newfstatat(4, "", [pid 5078] <... clone resumed>, child_tidptr=0x55556b40e650) = 5092 [pid 5077] <... openat resumed>) = 3 [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5079] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] newfstatat(3, "", ./strace-static-x86_64: Process 5092 attached [pid 5081] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] getdents64(4, [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5092] set_robust_list(0x55556b40e660, 24 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... getdents64 resumed>0x55556b417730 /* 2 entries */, 32768) = 48 [pid 5077] getdents64(3, [pid 5081] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5079] getdents64(4, [pid 5077] <... getdents64 resumed>0x55556b40f6f0 /* 4 entries */, 32768) = 112 [pid 5092] <... set_robust_list resumed>) = 0 [pid 5081] newfstatat(4, "", [pid 5077] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5092] chdir("./1" [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5079] <... getdents64 resumed>0x55556b417730 /* 0 entries */, 32768) = 0 [pid 5092] <... chdir resumed>) = 0 [pid 5088] <... write resumed>) = 16777216 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5092] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5079] close(4 [pid 5077] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5092] <... prctl resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 5092] setpgid(0, 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5079] rmdir("./0/file1" [pid 5077] unlink("./0/binderfs" [pid 5092] <... setpgid resumed>) = 0 [pid 5081] getdents64(4, [pid 5092] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5081] <... getdents64 resumed>0x55556b417730 /* 2 entries */, 32768) = 48 [pid 5092] <... openat resumed>) = 3 [pid 5081] getdents64(4, 0x55556b417730 /* 0 entries */, 32768) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 5092] write(3, "1000", 4 [pid 5081] close(4 [pid 5077] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5092] <... write resumed>) = 4 [pid 5081] <... close resumed>) = 0 [pid 5092] close(3 [pid 5088] munmap(0x7fea10800000, 138412032 [pid 5081] rmdir("./0/file1" [pid 5079] <... rmdir resumed>) = 0 [pid 5092] <... close resumed>) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 5092] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5081] getdents64(3, 0x55556b40f6f0 /* 0 entries */, 32768) = 0 [pid 5081] close(3) = 0 [pid 5081] rmdir("./0" [pid 5092] memfd_create("syzkaller", 0 [pid 5081] <... rmdir resumed>) = 0 [pid 5081] mkdir("./1", 0777 [pid 5079] getdents64(3, 0x55556b40f6f0 /* 0 entries */, 32768) = 0 [pid 5079] close(3 [pid 5085] <... ioctl resumed>) = 0 [ 113.215236][ T5085] loop3: detected capacity change from 0 to 32768 [pid 5092] <... memfd_create resumed>) = 3 [pid 5085] close(3 [pid 5081] <... mkdir resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5085] <... close resumed>) = 0 [pid 5079] rmdir("./0" [pid 5092] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5085] close(4 [pid 5081] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5077] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5092] <... mmap resumed>) = 0x7fea10800000 [pid 5085] <... close resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5079] <... rmdir resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] mkdir("./file1", 0777 [pid 5079] mkdir("./1", 0777 [pid 5077] newfstatat(AT_FDCWD, "./0/file1", [pid 5079] <... mkdir resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5077] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5085] <... mkdir resumed>) = 0 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5079] <... openat resumed>) = 3 [pid 5077] newfstatat(4, "", [pid 5081] <... ioctl resumed>) = 0 [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5081] close(3 [pid 5077] getdents64(4, [pid 5081] <... close resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556b417730 /* 2 entries */, 32768) = 48 [pid 5085] mount("/dev/loop3", "./file1", "jfs", MS_NOSUID|MS_NOEXEC|MS_SYNCHRONOUS, "quota,grpquota,discard,integrity,errors=remount-ro,nointegrity,errors=continue," [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] getdents64(4, [pid 5081] <... clone resumed>, child_tidptr=0x55556b40e650) = 5093 [pid 5077] <... getdents64 resumed>0x55556b417730 /* 0 entries */, 32768) = 0 [pid 5077] close(4./strace-static-x86_64: Process 5093 attached ) = 0 [pid 5093] set_robust_list(0x55556b40e660, 24 [pid 5088] <... munmap resumed>) = 0 [pid 5085] <... mount resumed>) = 0 [pid 5077] rmdir("./0/file1" [pid 5093] <... set_robust_list resumed>) = 0 [pid 5085] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5093] chdir("./1" [pid 5085] <... openat resumed>) = 3 [pid 5077] <... rmdir resumed>) = 0 [pid 5093] <... chdir resumed>) = 0 [pid 5085] chdir("./file1" [pid 5077] getdents64(3, [pid 5093] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5085] <... chdir resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55556b40f6f0 /* 0 entries */, 32768) = 0 [pid 5077] close(3 [pid 5093] <... prctl resumed>) = 0 [pid 5085] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5077] <... close resumed>) = 0 [pid 5093] setpgid(0, 0 [pid 5085] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] rmdir("./0" [pid 5088] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5093] <... setpgid resumed>) = 0 [pid 5088] <... openat resumed>) = 4 [pid 5085] exit_group(0 [pid 5077] <... rmdir resumed>) = 0 [pid 5085] <... exit_group resumed>) = ? [pid 5085] +++ exited with 0 +++ [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5085, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=52 /* 0.52 s */} --- [pid 5093] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5080] restart_syscall(<... resuming interrupted clone ...> [pid 5077] mkdir("./1", 0777 [pid 5088] ioctl(4, LOOP_SET_FD, 3 [pid 5093] <... openat resumed>) = 3 [pid 5080] <... restart_syscall resumed>) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5093] write(3, "1000", 4 [pid 5080] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... openat resumed>) = 3 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] ioctl(3, LOOP_CLR_FD) = 0 [pid 5080] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] close(3 [pid 5088] <... ioctl resumed>) = 0 [pid 5080] <... openat resumed>) = 3 [pid 5077] <... close resumed>) = 0 [pid 5088] close(3 [pid 5080] newfstatat(3, "", [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5088] <... close resumed>) = 0 [pid 5080] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5088] close(4) = 0 [pid 5088] mkdir("./file1", 0777./strace-static-x86_64: Process 5094 attached [pid 5093] <... write resumed>) = 4 [pid 5088] <... mkdir resumed>) = 0 [pid 5080] getdents64(3, [pid 5094] set_robust_list(0x55556b40e660, 24 [pid 5093] close(3 [pid 5080] <... getdents64 resumed>0x55556b40f6f0 /* 4 entries */, 32768) = 112 [pid 5080] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5094] <... set_robust_list resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5094] chdir("./1" [pid 5093] <... close resumed>) = 0 [pid 5088] mount("/dev/loop5", "./file1", "jfs", MS_NOSUID|MS_NOEXEC|MS_SYNCHRONOUS, "quota,grpquota,discard,integrity,errors=remount-ro,nointegrity,errors=continue," [pid 5080] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5077] <... clone resumed>, child_tidptr=0x55556b40e650) = 5094 [pid 5093] symlink("/dev/binderfs", "./binderfs" [pid 5080] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5094] <... chdir resumed>) = 0 [ 113.376343][ T5088] loop5: detected capacity change from 0 to 32768 [pid 5094] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5094] setpgid(0, 0 [pid 5080] unlink("./0/binderfs" [pid 5094] <... setpgid resumed>) = 0 [pid 5094] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5093] <... symlink resumed>) = 0 [pid 5094] <... openat resumed>) = 3 [pid 5088] <... mount resumed>) = 0 [pid 5080] <... unlink resumed>) = 0 [pid 5088] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5080] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5094] write(3, "1000", 4 [pid 5088] <... openat resumed>) = 3 [pid 5088] chdir("./file1") = 0 [pid 5088] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5093] memfd_create("syzkaller", 0 [pid 5088] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5094] <... write resumed>) = 4 [pid 5093] <... memfd_create resumed>) = 3 [pid 5088] exit_group(0 [pid 5094] close(3 [pid 5088] <... exit_group resumed>) = ? [pid 5094] <... close resumed>) = 0 [pid 5088] +++ exited with 0 +++ [pid 5094] symlink("/dev/binderfs", "./binderfs" [pid 5082] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5088, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=45 /* 0.45 s */} --- [pid 5093] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5094] <... symlink resumed>) = 0 [pid 5094] memfd_create("syzkaller", 0 [pid 5093] <... mmap resumed>) = 0x7fea10800000 [pid 5094] <... memfd_create resumed>) = 3 [pid 5094] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fea10800000 [pid 5082] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5082] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] getdents64(3, 0x55556b40f6f0 /* 4 entries */, 32768) = 112 [pid 5082] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... umount2 resumed>) = 0 [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5082] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] newfstatat(AT_FDCWD, "./0/file1", [pid 5082] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5080] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5080] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5082] unlink("./0/binderfs" [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5080] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] <... unlink resumed>) = 0 [pid 5080] getdents64(4, 0x55556b417730 /* 2 entries */, 32768) = 48 [pid 5082] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] getdents64(4, 0x55556b417730 /* 0 entries */, 32768) = 0 [pid 5080] close(4) = 0 [pid 5080] rmdir("./0/file1") = 0 [pid 5080] getdents64(3, 0x55556b40f6f0 /* 0 entries */, 32768) = 0 [pid 5080] close(3) = 0 [pid 5080] rmdir("./0") = 0 [pid 5082] <... umount2 resumed>) = 0 [pid 5080] mkdir("./1", 0777 [pid 5082] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(AT_FDCWD, "./0/file1", [pid 5080] <... mkdir resumed>) = 0 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5082] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] <... openat resumed>) = 3 [pid 5082] <... openat resumed>) = 4 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5082] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] getdents64(4, 0x55556b417730 /* 2 entries */, 32768) = 48 [pid 5082] getdents64(4, 0x55556b417730 /* 0 entries */, 32768) = 0 [pid 5082] close(4) = 0 [pid 5082] rmdir("./0/file1") = 0 [pid 5082] getdents64(3, 0x55556b40f6f0 /* 0 entries */, 32768) = 0 [pid 5082] close(3) = 0 [pid 5082] rmdir("./0") = 0 [pid 5082] mkdir("./1", 0777) = 0 [pid 5082] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5092] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5082] ioctl(3, LOOP_CLR_FD [pid 5093] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5094] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5079] <... ioctl resumed>) = 0 [pid 5079] close(3) = 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556b40e650) = 5097 ./strace-static-x86_64: Process 5097 attached [pid 5097] set_robust_list(0x55556b40e660, 24) = 0 [pid 5097] chdir("./1") = 0 [pid 5097] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5097] setpgid(0, 0) = 0 [pid 5097] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5097] write(3, "1000", 4) = 4 [pid 5097] close(3) = 0 [pid 5097] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5097] memfd_create("syzkaller", 0) = 3 [pid 5097] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fea10800000 [pid 5080] <... ioctl resumed>) = 0 [pid 5080] close(3) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556b40e650) = 5098 ./strace-static-x86_64: Process 5098 attached [pid 5098] set_robust_list(0x55556b40e660, 24) = 0 [pid 5082] <... ioctl resumed>) = 0 [pid 5098] chdir("./1" [pid 5082] close(3) = 0 [pid 5098] <... chdir resumed>) = 0 [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5098] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 ./strace-static-x86_64: Process 5099 attached [pid 5099] set_robust_list(0x55556b40e660, 24 [pid 5098] setpgid(0, 0 [pid 5082] <... clone resumed>, child_tidptr=0x55556b40e650) = 5099 [pid 5098] <... setpgid resumed>) = 0 [pid 5099] <... set_robust_list resumed>) = 0 [pid 5099] chdir("./1" [pid 5098] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5099] <... chdir resumed>) = 0 [pid 5099] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5098] <... openat resumed>) = 3 [pid 5099] <... prctl resumed>) = 0 [pid 5099] setpgid(0, 0) = 0 [pid 5098] write(3, "1000", 4 [pid 5099] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5098] <... write resumed>) = 4 [pid 5099] <... openat resumed>) = 3 [pid 5098] close(3) = 0 [pid 5099] write(3, "1000", 4 [pid 5098] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5099] <... write resumed>) = 4 [pid 5099] close(3) = 0 [pid 5099] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5098] memfd_create("syzkaller", 0 [pid 5099] memfd_create("syzkaller", 0 [pid 5098] <... memfd_create resumed>) = 3 [pid 5098] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5099] <... memfd_create resumed>) = 3 [pid 5098] <... mmap resumed>) = 0x7fea10800000 [pid 5099] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fea10800000 [pid 5092] <... write resumed>) = 16777216 [pid 5092] munmap(0x7fea10800000, 138412032 [pid 5097] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5092] <... munmap resumed>) = 0 [pid 5093] <... write resumed>) = 16777216 [pid 5093] munmap(0x7fea10800000, 138412032 [pid 5092] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5092] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5092] close(3) = 0 [pid 5092] close(4) = 0 [pid 5092] mkdir("./file1", 0777 [pid 5093] <... munmap resumed>) = 0 [pid 5092] <... mkdir resumed>) = 0 [ 115.339334][ T5092] loop1: detected capacity change from 0 to 32768 [pid 5092] mount("/dev/loop1", "./file1", "jfs", MS_NOSUID|MS_NOEXEC|MS_SYNCHRONOUS, "quota,grpquota,discard,integrity,errors=remount-ro,nointegrity,errors=continue," [pid 5093] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5093] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5093] close(3 [pid 5092] <... mount resumed>) = 0 [pid 5093] <... close resumed>) = 0 [pid 5092] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5093] close(4) = 0 [pid 5092] <... openat resumed>) = 3 [pid 5093] mkdir("./file1", 0777 [pid 5092] chdir("./file1" [pid 5093] <... mkdir resumed>) = 0 [pid 5093] mount("/dev/loop4", "./file1", "jfs", MS_NOSUID|MS_NOEXEC|MS_SYNCHRONOUS, "quota,grpquota,discard,integrity,errors=remount-ro,nointegrity,errors=continue," [pid 5092] <... chdir resumed>) = 0 [pid 5092] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5092] exit_group(0 [pid 5094] <... write resumed>) = 16777216 [ 115.428089][ T5093] loop4: detected capacity change from 0 to 32768 [pid 5094] munmap(0x7fea10800000, 138412032 [pid 5092] <... exit_group resumed>) = ? [pid 5092] +++ exited with 0 +++ [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5092, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=41 /* 0.41 s */} --- [pid 5078] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5078] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(3, 0x55556b40f6f0 /* 4 entries */, 32768) = 112 [pid 5078] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] unlink("./1/binderfs" [pid 5099] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5078] <... unlink resumed>) = 0 [pid 5093] <... mount resumed>) = 0 [pid 5093] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5078] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5093] <... openat resumed>) = 3 [pid 5093] chdir("./file1") = 0 [pid 5093] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] <... umount2 resumed>) = 0 [pid 5093] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5098] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5093] exit_group(0 [pid 5078] newfstatat(AT_FDCWD, "./1/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5093] <... exit_group resumed>) = ? [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5078] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(4, 0x55556b417730 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, 0x55556b417730 /* 0 entries */, 32768) = 0 [pid 5078] close(4) = 0 [pid 5078] rmdir("./1/file1") = 0 [pid 5094] <... munmap resumed>) = 0 [pid 5093] +++ exited with 0 +++ [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5093, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=41 /* 0.41 s */} --- [pid 5078] getdents64(3, [pid 5081] restart_syscall(<... resuming interrupted clone ...> [pid 5078] <... getdents64 resumed>0x55556b40f6f0 /* 0 entries */, 32768) = 0 [pid 5081] <... restart_syscall resumed>) = 0 [pid 5078] close(3) = 0 [pid 5078] rmdir("./1" [pid 5081] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... rmdir resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5081] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5081] getdents64(3, [pid 5094] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5081] <... getdents64 resumed>0x55556b40f6f0 /* 4 entries */, 32768) = 112 [pid 5078] mkdir("./2", 0777 [pid 5094] <... openat resumed>) = 4 [pid 5081] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... mkdir resumed>) = 0 [pid 5094] ioctl(4, LOOP_SET_FD, 3 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5078] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5081] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5081] unlink("./1/binderfs" [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5081] <... unlink resumed>) = 0 [pid 5081] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5094] <... ioctl resumed>) = 0 [pid 5081] <... umount2 resumed>) = 0 [pid 5081] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] newfstatat(AT_FDCWD, "./1/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5081] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5094] close(3 [pid 5081] <... openat resumed>) = 4 [ 115.620673][ T5094] loop0: detected capacity change from 0 to 32768 [pid 5094] <... close resumed>) = 0 [pid 5081] newfstatat(4, "", [pid 5094] close(4 [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5094] <... close resumed>) = 0 [pid 5094] mkdir("./file1", 0777 [pid 5081] getdents64(4, [pid 5094] <... mkdir resumed>) = 0 [pid 5081] <... getdents64 resumed>0x55556b417730 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(4, [pid 5094] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NOEXEC|MS_SYNCHRONOUS, "quota,grpquota,discard,integrity,errors=remount-ro,nointegrity,errors=continue," [pid 5081] <... getdents64 resumed>0x55556b417730 /* 0 entries */, 32768) = 0 [pid 5081] close(4) = 0 [pid 5081] rmdir("./1/file1") = 0 [pid 5094] <... mount resumed>) = 0 [pid 5094] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5094] chdir("./file1") = 0 [pid 5094] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5081] getdents64(3, [pid 5094] exit_group(0 [pid 5081] <... getdents64 resumed>0x55556b40f6f0 /* 0 entries */, 32768) = 0 [pid 5094] <... exit_group resumed>) = ? [pid 5081] close(3 [pid 5094] +++ exited with 0 +++ [pid 5081] <... close resumed>) = 0 [pid 5081] rmdir("./1" [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5094, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=49 /* 0.49 s */} --- [pid 5077] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5081] <... rmdir resumed>) = 0 [pid 5077] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5081] mkdir("./2", 0777 [pid 5077] getdents64(3, 0x55556b40f6f0 /* 4 entries */, 32768) = 112 [pid 5081] <... mkdir resumed>) = 0 [pid 5077] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5081] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5077] unlink("./1/binderfs" [pid 5081] <... ioctl resumed>) = 0 [pid 5081] close(3) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 5100 attached [pid 5100] set_robust_list(0x55556b40e660, 24 [pid 5081] <... clone resumed>, child_tidptr=0x55556b40e650) = 5100 [pid 5077] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5100] <... set_robust_list resumed>) = 0 [pid 5100] chdir("./2") = 0 [pid 5100] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5100] setpgid(0, 0) = 0 [pid 5100] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5100] write(3, "1000", 4) = 4 [pid 5100] close(3) = 0 [pid 5100] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5100] memfd_create("syzkaller", 0) = 3 [pid 5100] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fea10800000 [pid 5077] <... umount2 resumed>) = 0 [pid 5077] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./1/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5077] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] getdents64(4, 0x55556b417730 /* 2 entries */, 32768) = 48 [pid 5077] getdents64(4, 0x55556b417730 /* 0 entries */, 32768) = 0 [pid 5077] close(4) = 0 [pid 5077] rmdir("./1/file1") = 0 [pid 5077] getdents64(3, 0x55556b40f6f0 /* 0 entries */, 32768) = 0 [pid 5077] close(3) = 0 [pid 5077] rmdir("./1") = 0 [pid 5077] mkdir("./2", 0777) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5077] ioctl(3, LOOP_CLR_FD) = 0 [pid 5077] close(3) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556b40e650) = 5101 ./strace-static-x86_64: Process 5101 attached [pid 5101] set_robust_list(0x55556b40e660, 24) = 0 [pid 5101] chdir("./2") = 0 [pid 5101] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5101] setpgid(0, 0) = 0 [pid 5101] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5101] write(3, "1000", 4) = 4 [pid 5101] close(3) = 0 [pid 5101] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5101] memfd_create("syzkaller", 0) = 3 [pid 5101] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fea10800000 [pid 5100] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5101] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5097] <... write resumed>) = 16777216 [pid 5097] munmap(0x7fea10800000, 138412032 [pid 5078] <... ioctl resumed>) = 0 [pid 5078] close(3) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556b40e650) = 5102 ./strace-static-x86_64: Process 5102 attached [pid 5102] set_robust_list(0x55556b40e660, 24 [pid 5097] <... munmap resumed>) = 0 [pid 5102] <... set_robust_list resumed>) = 0 [pid 5102] chdir("./2") = 0 [pid 5102] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5102] setpgid(0, 0) = 0 [pid 5102] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5097] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5097] ioctl(4, LOOP_SET_FD, 3 [pid 5102] write(3, "1000", 4) = 4 [pid 5102] close(3) = 0 [pid 5102] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5102] memfd_create("syzkaller", 0 [pid 5097] <... ioctl resumed>) = 0 [pid 5097] close(3) = 0 [pid 5097] close(4) = 0 [pid 5097] mkdir("./file1", 0777) = 0 [pid 5102] <... memfd_create resumed>) = 3 [pid 5102] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fea10800000 [ 116.910509][ T5097] loop2: detected capacity change from 0 to 32768 [pid 5097] mount("/dev/loop2", "./file1", "jfs", MS_NOSUID|MS_NOEXEC|MS_SYNCHRONOUS, "quota,grpquota,discard,integrity,errors=remount-ro,nointegrity,errors=continue," [pid 5098] <... write resumed>) = 16777216 [pid 5097] <... mount resumed>) = 0 [pid 5097] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5097] chdir("./file1") = 0 [pid 5097] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5098] munmap(0x7fea10800000, 138412032 [pid 5097] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5097] exit_group(0 [pid 5099] <... write resumed>) = 16777216 [pid 5097] <... exit_group resumed>) = ? [pid 5097] +++ exited with 0 +++ [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5097, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=35 /* 0.35 s */} --- [pid 5079] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5099] munmap(0x7fea10800000, 138412032 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5079] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5079] getdents64(3, 0x55556b40f6f0 /* 4 entries */, 32768) = 112 [pid 5079] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5079] unlink("./1/binderfs") = 0 [pid 5079] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5098] <... munmap resumed>) = 0 [pid 5079] <... umount2 resumed>) = 0 [pid 5079] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] newfstatat(AT_FDCWD, "./1/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5079] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5079] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5079] getdents64(4, 0x55556b417730 /* 2 entries */, 32768) = 48 [pid 5079] getdents64(4, 0x55556b417730 /* 0 entries */, 32768) = 0 [pid 5079] close(4) = 0 [pid 5098] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5079] rmdir("./1/file1") = 0 [pid 5099] <... munmap resumed>) = 0 [pid 5098] <... openat resumed>) = 4 [pid 5098] ioctl(4, LOOP_SET_FD, 3 [pid 5099] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5079] getdents64(3, 0x55556b40f6f0 /* 0 entries */, 32768) = 0 [pid 5079] close(3 [pid 5099] <... openat resumed>) = 4 [pid 5079] <... close resumed>) = 0 [pid 5099] ioctl(4, LOOP_SET_FD, 3 [pid 5079] rmdir("./1") = 0 [pid 5079] mkdir("./2", 0777) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5079] ioctl(3, LOOP_CLR_FD) = 0 [pid 5079] close(3) = 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556b40e650) = 5103 ./strace-static-x86_64: Process 5103 attached [pid 5103] set_robust_list(0x55556b40e660, 24 [pid 5099] <... ioctl resumed>) = 0 [pid 5103] <... set_robust_list resumed>) = 0 [pid 5099] close(3 [pid 5103] chdir("./2" [pid 5099] <... close resumed>) = 0 [pid 5103] <... chdir resumed>) = 0 [pid 5099] close(4 [pid 5103] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5099] <... close resumed>) = 0 [pid 5103] <... prctl resumed>) = 0 [pid 5099] mkdir("./file1", 0777 [pid 5103] setpgid(0, 0 [pid 5099] <... mkdir resumed>) = 0 [pid 5103] <... setpgid resumed>) = 0 [pid 5099] mount("/dev/loop5", "./file1", "jfs", MS_NOSUID|MS_NOEXEC|MS_SYNCHRONOUS, "quota,grpquota,discard,integrity,errors=remount-ro,nointegrity,errors=continue," [pid 5103] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5099] <... mount resumed>) = 0 [ 117.153997][ T5099] loop5: detected capacity change from 0 to 32768 [ 117.154107][ T5098] loop3: detected capacity change from 0 to 32768 [pid 5098] <... ioctl resumed>) = 0 [pid 5103] <... openat resumed>) = 3 [pid 5099] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5103] write(3, "1000", 4 [pid 5099] <... openat resumed>) = 3 [pid 5103] <... write resumed>) = 4 [pid 5099] chdir("./file1" [pid 5103] close(3 [pid 5099] <... chdir resumed>) = 0 [pid 5103] <... close resumed>) = 0 [pid 5103] symlink("/dev/binderfs", "./binderfs" [pid 5099] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5103] <... symlink resumed>) = 0 [pid 5099] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5103] memfd_create("syzkaller", 0 [pid 5099] exit_group(0 [pid 5098] close(3 [pid 5099] <... exit_group resumed>) = ? [pid 5099] +++ exited with 0 +++ [pid 5103] <... memfd_create resumed>) = 3 [pid 5098] <... close resumed>) = 0 [pid 5103] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5082] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5099, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=35 /* 0.35 s */} --- [pid 5103] <... mmap resumed>) = 0x7fea10800000 [pid 5082] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5098] close(4 [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5098] <... close resumed>) = 0 [pid 5082] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5098] mkdir("./file1", 0777) = 0 [pid 5082] <... openat resumed>) = 3 [pid 5098] mount("/dev/loop3", "./file1", "jfs", MS_NOSUID|MS_NOEXEC|MS_SYNCHRONOUS, "quota,grpquota,discard,integrity,errors=remount-ro,nointegrity,errors=continue," [pid 5082] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] getdents64(3, 0x55556b40f6f0 /* 4 entries */, 32768) = 112 [pid 5082] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] unlink("./1/binderfs") = 0 [pid 5082] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW