./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1465072338 <...> Warning: Permanently added '10.128.10.19' (ED25519) to the list of known hosts. execve("./syz-executor1465072338", ["./syz-executor1465072338"], 0x7ffd0bf18940 /* 10 vars */) = 0 brk(NULL) = 0x55557f4da000 brk(0x55557f4dad00) = 0x55557f4dad00 arch_prctl(ARCH_SET_FS, 0x55557f4da380) = 0 set_tid_address(0x55557f4da650) = 5819 set_robust_list(0x55557f4da660, 24) = 0 rseq(0x55557f4daca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1465072338", 4096) = 28 getrandom("\x15\x3d\x8f\x6b\x64\x35\x61\xd4", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55557f4dad00 brk(0x55557f4fbd00) = 0x55557f4fbd00 brk(0x55557f4fc000) = 0x55557f4fc000 mprotect(0x7fe8f3e48000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5820 attached [pid 5820] set_robust_list(0x55557f4da660, 24 [pid 5819] <... clone resumed>, child_tidptr=0x55557f4da650) = 5820 [pid 5820] <... set_robust_list resumed>) = 0 [pid 5819] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5820] mkdir("./syzkaller.fTVPmq", 0700./strace-static-x86_64: Process 5821 attached [pid 5821] set_robust_list(0x55557f4da660, 24 [pid 5819] <... clone resumed>, child_tidptr=0x55557f4da650) = 5821 [pid 5821] <... set_robust_list resumed>) = 0 [pid 5819] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5821] mkdir("./syzkaller.zMIk3M", 0700 [pid 5820] <... mkdir resumed>) = 0 [pid 5820] chmod("./syzkaller.fTVPmq", 0777./strace-static-x86_64: Process 5822 attached [pid 5821] <... mkdir resumed>) = 0 [pid 5820] <... chmod resumed>) = 0 [pid 5822] set_robust_list(0x55557f4da660, 24 [pid 5819] <... clone resumed>, child_tidptr=0x55557f4da650) = 5822 [pid 5821] chmod("./syzkaller.zMIk3M", 0777 [pid 5819] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5822] <... set_robust_list resumed>) = 0 [pid 5821] <... chmod resumed>) = 0 [pid 5820] chdir("./syzkaller.fTVPmq" [pid 5822] mkdir("./syzkaller.fvoQw1", 0700./strace-static-x86_64: Process 5823 attached [pid 5821] chdir("./syzkaller.zMIk3M" [pid 5820] <... chdir resumed>) = 0 [pid 5819] <... clone resumed>, child_tidptr=0x55557f4da650) = 5823 [pid 5819] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5820] mkdir("./0", 0777 [pid 5822] <... mkdir resumed>) = 0 [pid 5823] set_robust_list(0x55557f4da660, 24 [pid 5821] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 5824 attached [pid 5823] <... set_robust_list resumed>) = 0 [pid 5822] chmod("./syzkaller.fvoQw1", 0777 [pid 5821] mkdir("./0", 0777 [pid 5820] <... mkdir resumed>) = 0 [pid 5819] <... clone resumed>, child_tidptr=0x55557f4da650) = 5824 [pid 5824] set_robust_list(0x55557f4da660, 24 [pid 5820] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5824] <... set_robust_list resumed>) = 0 [pid 5823] getrandom( [pid 5820] <... openat resumed>) = 3 [pid 5824] mkdir("./syzkaller.dH9aaP", 0700 [pid 5820] ioctl(3, LOOP_CLR_FD [pid 5824] <... mkdir resumed>) = 0 [pid 5823] <... getrandom resumed>"\x18\xe0\xc6\x32\x5b\x95\x2b\x34", 8, GRND_NONBLOCK) = 8 [pid 5822] <... chmod resumed>) = 0 [pid 5821] <... mkdir resumed>) = 0 [pid 5820] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5824] chmod("./syzkaller.dH9aaP", 0777 [pid 5823] mkdir("./syzkaller.KcAqhb", 0700 [pid 5822] chdir("./syzkaller.fvoQw1" [pid 5821] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5824] <... chmod resumed>) = 0 [pid 5821] <... openat resumed>) = 3 [pid 5824] chdir("./syzkaller.dH9aaP" [pid 5823] <... mkdir resumed>) = 0 [pid 5822] <... chdir resumed>) = 0 [pid 5820] close(3 [pid 5824] <... chdir resumed>) = 0 [pid 5821] ioctl(3, LOOP_CLR_FD [pid 5824] mkdir("./0", 0777 [pid 5820] <... close resumed>) = 0 [pid 5824] <... mkdir resumed>) = 0 [pid 5823] chmod("./syzkaller.KcAqhb", 0777 [pid 5822] mkdir("./0", 0777 [pid 5821] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5820] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5821] close(3./strace-static-x86_64: Process 5825 attached [pid 5824] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5823] <... chmod resumed>) = 0 [pid 5822] <... mkdir resumed>) = 0 [pid 5821] <... close resumed>) = 0 [pid 5825] set_robust_list(0x55557f4da660, 24 [pid 5824] <... openat resumed>) = 3 [pid 5823] chdir("./syzkaller.KcAqhb" [pid 5822] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5821] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5820] <... clone resumed>, child_tidptr=0x55557f4da650) = 5825 [pid 5825] <... set_robust_list resumed>) = 0 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5823] <... chdir resumed>) = 0 [pid 5824] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 5827 attached [pid 5825] chdir("./0" [pid 5824] close(3 [pid 5823] mkdir("./0", 0777 [pid 5822] <... openat resumed>) = 3 [pid 5825] <... chdir resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 5823] <... mkdir resumed>) = 0 [pid 5822] ioctl(3, LOOP_CLR_FD [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5825] setpgid(0, 0) = 0 [pid 5825] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5825] write(3, "1000", 4) = 4 [pid 5822] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5825] close(3) = 0 [pid 5825] symlink("/dev/binderfs", "./binderfs") = 0 ./strace-static-x86_64: Process 5828 attached [pid 5827] set_robust_list(0x55557f4da660, 24 [pid 5823] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5822] close(3executing program [pid 5821] <... clone resumed>, child_tidptr=0x55557f4da650) = 5827 [pid 5827] <... set_robust_list resumed>) = 0 [pid 5828] set_robust_list(0x55557f4da660, 24 [pid 5825] write(1, "executing program\n", 18 [pid 5828] <... set_robust_list resumed>) = 0 [pid 5827] chdir("./0" [pid 5825] <... write resumed>) = 18 [pid 5822] <... close resumed>) = 0 [pid 5822] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5828] chdir("./0" [pid 5827] <... chdir resumed>) = 0 [pid 5825] memfd_create("syzkaller", 0./strace-static-x86_64: Process 5829 attached [pid 5828] <... chdir resumed>) = 0 [pid 5827] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5825] <... memfd_create resumed>) = 3 [pid 5828] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5825] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5828] <... prctl resumed>) = 0 [pid 5827] <... prctl resumed>) = 0 [pid 5825] <... mmap resumed>) = 0x7fe8eb800000 [pid 5828] setpgid(0, 0 [pid 5827] setpgid(0, 0 [pid 5824] <... clone resumed>, child_tidptr=0x55557f4da650) = 5828 [pid 5823] <... openat resumed>) = 3 [pid 5822] <... clone resumed>, child_tidptr=0x55557f4da650) = 5829 [pid 5827] <... setpgid resumed>) = 0 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 5829] set_robust_list(0x55557f4da660, 24 [pid 5828] <... setpgid resumed>) = 0 [pid 5829] <... set_robust_list resumed>) = 0 [pid 5828] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5827] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5823] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5829] chdir("./0" [pid 5828] <... openat resumed>) = 3 [pid 5827] <... openat resumed>) = 3 [pid 5828] write(3, "1000", 4 [pid 5829] <... chdir resumed>) = 0 [pid 5828] <... write resumed>) = 4 [pid 5829] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5828] close(3 [pid 5829] <... prctl resumed>) = 0 [pid 5828] <... close resumed>) = 0 [pid 5823] close(3 [pid 5828] symlink("/dev/binderfs", "./binderfs" [pid 5823] <... close resumed>) = 0 [pid 5827] write(3, "1000", 4 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5827] <... write resumed>) = 4 [pid 5827] close(3 [pid 5829] setpgid(0, 0 [pid 5828] <... symlink resumed>) = 0 [pid 5827] <... close resumed>) = 0 [pid 5829] <... setpgid resumed>) = 0 [pid 5829] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECexecuting program ) = 3 [pid 5828] write(1, "executing program\n", 18) = 18 [pid 5828] memfd_create("syzkaller", 0./strace-static-x86_64: Process 5830 attached [pid 5829] write(3, "1000", 4 [pid 5828] <... memfd_create resumed>) = 3 [pid 5827] symlink("/dev/binderfs", "./binderfs" [pid 5830] set_robust_list(0x55557f4da660, 24 [pid 5829] <... write resumed>) = 4 [pid 5828] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5830] <... set_robust_list resumed>) = 0 [pid 5827] <... symlink resumed>) = 0 [pid 5823] <... clone resumed>, child_tidptr=0x55557f4da650) = 5830 [pid 5830] chdir("./0" [pid 5828] <... mmap resumed>) = 0x7fe8eb800000 executing program [pid 5830] <... chdir resumed>) = 0 [pid 5827] write(1, "executing program\n", 18 [pid 5830] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5829] close(3 [pid 5827] <... write resumed>) = 18 [pid 5830] <... prctl resumed>) = 0 [pid 5829] <... close resumed>) = 0 [pid 5830] setpgid(0, 0 [pid 5829] symlink("/dev/binderfs", "./binderfs" [pid 5830] <... setpgid resumed>) = 0 [pid 5829] <... symlink resumed>) = 0 [pid 5827] memfd_create("syzkaller", 0 [pid 5830] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5829] write(1, "executing program\n", 18 [pid 5827] <... memfd_create resumed>) = 3 executing program [pid 5829] <... write resumed>) = 18 [pid 5829] memfd_create("syzkaller", 0 [pid 5827] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5829] <... memfd_create resumed>) = 3 [pid 5827] <... mmap resumed>) = 0x7fe8eb800000 [pid 5829] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8eb800000 [pid 5830] <... openat resumed>) = 3 [pid 5830] write(3, "1000", 4) = 4 [pid 5830] close(3) = 0 [pid 5830] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5830] write(1, "executing program\n", 18) = 18 [pid 5830] memfd_create("syzkaller", 0) = 3 [pid 5830] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8eb800000 [pid 5827] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5825] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5828] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5829] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5830] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5827] <... write resumed>) = 16777216 [pid 5827] munmap(0x7fe8eb800000, 138412032) = 0 [pid 5827] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5827] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5827] close(3) = 0 [pid 5827] close(4) = 0 [pid 5827] mkdir("./file0", 0777) = 0 syzkaller login: [ 87.929139][ T5827] loop1: detected capacity change from 0 to 32768 [pid 5827] mount("/dev/loop1", "./file0", "jfs", 0, "quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota") = 0 [pid 5827] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5827] chdir("./file0") = 0 [pid 5827] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5827] exit_group(0) = ? [pid 5827] +++ exited with 0 +++ [pid 5821] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5827, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=23 /* 0.23 s */} --- [pid 5821] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5821] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5821] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5821] getdents64(3, 0x55557f4db6f0 /* 4 entries */, 32768) = 112 [pid 5821] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./0/binderfs") = 0 [pid 5821] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5825] <... write resumed>) = 16777216 [pid 5828] <... write resumed>) = 16777216 [pid 5828] munmap(0x7fe8eb800000, 138412032 [pid 5825] munmap(0x7fe8eb800000, 138412032 [pid 5821] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5821] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5821] getdents64(4, 0x55557f4e3730 /* 2 entries */, 32768) = 48 [pid 5821] getdents64(4, 0x55557f4e3730 /* 0 entries */, 32768) = 0 [pid 5821] close(4) = 0 [pid 5821] rmdir("./0/file0") = 0 [pid 5830] <... write resumed>) = 16777216 [pid 5828] <... munmap resumed>) = 0 [pid 5830] munmap(0x7fe8eb800000, 138412032 [pid 5821] getdents64(3, [pid 5828] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5821] <... getdents64 resumed>0x55557f4db6f0 /* 0 entries */, 32768) = 0 [pid 5828] <... openat resumed>) = 4 [pid 5821] close(3 [pid 5828] ioctl(4, LOOP_SET_FD, 3 [pid 5821] <... close resumed>) = 0 [pid 5821] rmdir("./0" [pid 5825] <... munmap resumed>) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5830] <... munmap resumed>) = 0 [pid 5821] <... rmdir resumed>) = 0 [pid 5830] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5828] <... ioctl resumed>) = 0 [pid 5825] <... openat resumed>) = 4 [pid 5828] close(3 [pid 5825] ioctl(4, LOOP_SET_FD, 3 [pid 5830] <... openat resumed>) = 4 [pid 5828] <... close resumed>) = 0 [pid 5821] mkdir("./1", 0777) = 0 [pid 5830] ioctl(4, LOOP_SET_FD, 3 [pid 5828] close(4 [pid 5821] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5821] ioctl(3, LOOP_CLR_FD) = 0 [pid 5821] close(3 [pid 5828] <... close resumed>) = 0 [pid 5825] <... ioctl resumed>) = 0 [pid 5828] mkdir("./file0", 0777 [pid 5825] close(3) = 0 [pid 5825] close(4) = 0 [pid 5825] mkdir("./file0", 0777 [pid 5828] <... mkdir resumed>) = 0 [pid 5825] <... mkdir resumed>) = 0 [pid 5828] mount("/dev/loop4", "./file0", "jfs", 0, "quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota" [pid 5825] mount("/dev/loop0", "./file0", "jfs", 0, "quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota" [pid 5830] <... ioctl resumed>) = 0 [pid 5830] close(3) = 0 [pid 5830] close(4) = 0 [pid 5830] mkdir("./file0", 0777) = 0 [pid 5825] <... mount resumed>) = 0 [pid 5828] <... mount resumed>) = 0 [pid 5828] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5825] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5828] <... openat resumed>) = 3 [pid 5825] <... openat resumed>) = 3 [pid 5828] chdir("./file0" [pid 5825] chdir("./file0" [pid 5828] <... chdir resumed>) = 0 [pid 5828] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5825] <... chdir resumed>) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5828] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5825] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5828] exit_group(0 [pid 5825] exit_group(0 [pid 5828] <... exit_group resumed>) = ? [pid 5825] <... exit_group resumed>) = ? [pid 5828] +++ exited with 0 +++ [pid 5825] +++ exited with 0 +++ [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5828, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=22 /* 0.22 s */} --- [pid 5820] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5825, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=27 /* 0.27 s */} --- [pid 5820] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5820] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5820] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 88.110866][ T5828] loop4: detected capacity change from 0 to 32768 [ 88.135470][ T5825] loop0: detected capacity change from 0 to 32768 [ 88.147748][ T5830] loop3: detected capacity change from 0 to 32768 [pid 5820] getdents64(3, 0x55557f4db6f0 /* 4 entries */, 32768) = 112 [pid 5830] mount("/dev/loop3", "./file0", "jfs", 0, "quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota" [pid 5820] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5820] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5820] unlink("./0/binderfs") = 0 [pid 5820] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5820] <... umount2 resumed>) = 0 [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5820] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... mount resumed>) = 0 [pid 5820] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] getdents64(3, [pid 5820] newfstatat(AT_FDCWD, "./0/file0", [pid 5824] <... getdents64 resumed>0x55557f4db6f0 /* 4 entries */, 32768) = 112 [pid 5820] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5820] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5820] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5820] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5820] getdents64(4, 0x55557f4e3730 /* 2 entries */, 32768) = 48 [pid 5820] getdents64(4, 0x55557f4e3730 /* 0 entries */, 32768) = 0 [pid 5820] close(4) = 0 [pid 5820] rmdir("./0/file0") = 0 [pid 5820] getdents64(3, 0x55557f4db6f0 /* 0 entries */, 32768) = 0 [pid 5820] close(3) = 0 [pid 5820] rmdir("./0") = 0 [pid 5820] mkdir("./1", 0777 [pid 5830] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5824] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5820] <... mkdir resumed>) = 0 [pid 5820] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5830] <... openat resumed>) = 3 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] chdir("./file0" [pid 5824] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5830] <... chdir resumed>) = 0 [pid 5830] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5820] <... openat resumed>) = 3 [pid 5820] ioctl(3, LOOP_CLR_FD [pid 5830] exit_group(0) = ? [pid 5824] unlink("./0/binderfs" [pid 5820] <... ioctl resumed>) = 0 [pid 5820] close(3 [pid 5830] +++ exited with 0 +++ [pid 5829] <... write resumed>) = 16777216 [pid 5824] <... unlink resumed>) = 0 [pid 5824] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] munmap(0x7fe8eb800000, 138412032 [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5830, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=21 /* 0.21 s */} --- [pid 5823] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5823] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] <... munmap resumed>) = 0 [pid 5823] <... openat resumed>) = 3 [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, 0x55557f4db6f0 /* 4 entries */, 32768) = 112 [pid 5823] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5829] <... openat resumed>) = 4 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./0/binderfs") = 0 [pid 5824] <... umount2 resumed>) = 0 [pid 5829] ioctl(4, LOOP_SET_FD, 3 [pid 5823] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... ioctl resumed>) = 0 [pid 5824] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] close(3 [pid 5824] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] <... close resumed>) = 0 [pid 5824] <... openat resumed>) = 4 [pid 5829] close(4 [pid 5824] newfstatat(4, "", [pid 5829] <... close resumed>) = 0 [pid 5829] mkdir("./file0", 0777 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(4, [pid 5829] <... mkdir resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557f4e3730 /* 2 entries */, 32768) = 48 [pid 5829] mount("/dev/loop2", "./file0", "jfs", 0, "quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota" [pid 5824] getdents64(4, 0x55557f4e3730 /* 0 entries */, 32768) = 0 [pid 5824] close(4) = 0 [pid 5824] rmdir("./0/file0") = 0 [pid 5824] getdents64(3, 0x55557f4db6f0 /* 0 entries */, 32768) = 0 [pid 5823] <... umount2 resumed>) = 0 [pid 5824] close(3 [pid 5823] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... close resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] rmdir("./0") = 0 [pid 5823] newfstatat(AT_FDCWD, "./0/file0", [pid 5824] mkdir("./1", 0777 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... mkdir resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5823] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(4, 0x55557f4e3730 /* 2 entries */, 32768) = 48 [pid 5823] getdents64(4, 0x55557f4e3730 /* 0 entries */, 32768) = 0 [pid 5823] close(4) = 0 [pid 5823] rmdir("./0/file0") = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5823] getdents64(3, [pid 5824] <... openat resumed>) = 3 [ 88.292226][ T5829] loop2: detected capacity change from 0 to 32768 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5823] <... getdents64 resumed>0x55557f4db6f0 /* 0 entries */, 32768) = 0 [pid 5823] close(3 [pid 5824] <... ioctl resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 5824] close(3 [pid 5823] rmdir("./0") = 0 [pid 5829] <... mount resumed>) = 0 [pid 5829] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5829] chdir("./file0" [pid 5823] mkdir("./1", 0777 [pid 5829] <... chdir resumed>) = 0 [pid 5823] <... mkdir resumed>) = 0 [pid 5829] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5823] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5829] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5823] <... openat resumed>) = 3 [pid 5829] exit_group(0 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 5829] <... exit_group resumed>) = ? [pid 5823] <... ioctl resumed>) = 0 [pid 5823] close(3) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5834 attached [pid 5829] +++ exited with 0 +++ [pid 5823] <... clone resumed>, child_tidptr=0x55557f4da650) = 5834 [pid 5834] set_robust_list(0x55557f4da660, 24) = 0 [pid 5822] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5829, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=25 /* 0.25 s */} --- [pid 5822] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5822] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5822] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5822] getdents64(3, 0x55557f4db6f0 /* 4 entries */, 32768) = 112 [pid 5822] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5822] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5834] chdir("./1" [pid 5822] unlink("./0/binderfs" [pid 5834] <... chdir resumed>) = 0 [pid 5834] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5834] setpgid(0, 0 [pid 5822] <... unlink resumed>) = 0 [pid 5834] <... setpgid resumed>) = 0 [pid 5822] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 5834] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5834] write(3, "1000", 4) = 4 [pid 5834] close(3) = 0 [pid 5834] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5834] write(1, "executing program\n", 18) = 18 [pid 5834] memfd_create("syzkaller", 0) = 3 [pid 5834] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8eb800000 [pid 5822] <... umount2 resumed>) = 0 [pid 5822] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5822] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5822] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5822] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5822] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5822] getdents64(4, 0x55557f4e3730 /* 2 entries */, 32768) = 48 [pid 5822] getdents64(4, 0x55557f4e3730 /* 0 entries */, 32768) = 0 [pid 5821] <... close resumed>) = 0 [pid 5822] close(4 [pid 5821] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5822] <... close resumed>) = 0 [pid 5822] rmdir("./0/file0") = 0 ./strace-static-x86_64: Process 5835 attached [pid 5822] getdents64(3, [pid 5821] <... clone resumed>, child_tidptr=0x55557f4da650) = 5835 [pid 5822] <... getdents64 resumed>0x55557f4db6f0 /* 0 entries */, 32768) = 0 [pid 5822] close(3) = 0 [pid 5822] rmdir("./0" [pid 5835] set_robust_list(0x55557f4da660, 24 [pid 5822] <... rmdir resumed>) = 0 [pid 5835] <... set_robust_list resumed>) = 0 [pid 5822] mkdir("./1", 0777 [pid 5835] chdir("./1" [pid 5822] <... mkdir resumed>) = 0 [pid 5835] <... chdir resumed>) = 0 [pid 5822] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5835] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5822] ioctl(3, LOOP_CLR_FD) = 0 [pid 5835] <... prctl resumed>) = 0 [pid 5822] close(3 [pid 5835] setpgid(0, 0) = 0 [pid 5835] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5835] write(3, "1000", 4) = 4 [pid 5835] close(3) = 0 [pid 5835] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5835] write(1, "executing program\n", 18) = 18 [pid 5835] memfd_create("syzkaller", 0) = 3 [pid 5835] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8eb800000 [pid 5820] <... close resumed>) = 0 [pid 5820] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557f4da650) = 5836 ./strace-static-x86_64: Process 5836 attached [pid 5836] set_robust_list(0x55557f4da660, 24) = 0 [pid 5836] chdir("./1") = 0 [pid 5836] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5836] setpgid(0, 0) = 0 [pid 5836] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 executing program [pid 5836] write(3, "1000", 4) = 4 [pid 5836] close(3) = 0 [pid 5836] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5836] write(1, "executing program\n", 18) = 18 [pid 5836] memfd_create("syzkaller", 0) = 3 [pid 5836] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8eb800000 [pid 5834] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5824] <... close resumed>) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5837 attached [pid 5837] set_robust_list(0x55557f4da660, 24 [pid 5824] <... clone resumed>, child_tidptr=0x55557f4da650) = 5837 [pid 5837] <... set_robust_list resumed>) = 0 [pid 5837] chdir("./1") = 0 [pid 5837] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5837] setpgid(0, 0) = 0 [pid 5837] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5837] write(3, "1000", 4) = 4 [pid 5837] close(3) = 0 [pid 5837] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5837] write(1, "executing program\n", 18) = 18 [pid 5837] memfd_create("syzkaller", 0) = 3 [pid 5837] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8eb800000 [pid 5835] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5822] <... close resumed>) = 0 [pid 5822] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5838 attached [pid 5838] set_robust_list(0x55557f4da660, 24 [pid 5822] <... clone resumed>, child_tidptr=0x55557f4da650) = 5838 [pid 5838] <... set_robust_list resumed>) = 0 [pid 5838] chdir("./1") = 0 [pid 5838] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5838] setpgid(0, 0) = 0 [pid 5838] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5836] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5838] <... openat resumed>) = 3 [pid 5838] write(3, "1000", 4) = 4 [pid 5838] close(3) = 0 [pid 5838] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5838] write(1, "executing program\n", 18executing program ) = 18 [pid 5838] memfd_create("syzkaller", 0) = 3 [pid 5838] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8eb800000 [pid 5837] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5838] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5834] <... write resumed>) = 16777216 [pid 5834] munmap(0x7fe8eb800000, 138412032) = 0 [pid 5834] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5834] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5834] close(3) = 0 [pid 5834] close(4) = 0 [pid 5834] mkdir("./file0", 0777) = 0 [pid 5834] mount("/dev/loop3", "./file0", "jfs", 0, "quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota") = 0 [pid 5834] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5834] chdir("./file0") = 0 [pid 5834] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5834] exit_group(0) = ? [pid 5834] +++ exited with 0 +++ [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5834, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=20 /* 0.20 s */} --- [ 89.236229][ T5834] loop3: detected capacity change from 0 to 32768 [pid 5823] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5823] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, 0x55557f4db6f0 /* 4 entries */, 32768) = 112 [pid 5823] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./1/binderfs") = 0 [pid 5823] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5823] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5823] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(4, 0x55557f4e3730 /* 2 entries */, 32768) = 48 [pid 5823] getdents64(4, 0x55557f4e3730 /* 0 entries */, 32768) = 0 [pid 5823] close(4) = 0 [pid 5823] rmdir("./1/file0" [pid 5835] <... write resumed>) = 16777216 [pid 5823] <... rmdir resumed>) = 0 [pid 5823] getdents64(3, 0x55557f4db6f0 /* 0 entries */, 32768) = 0 [pid 5823] close(3) = 0 [pid 5823] rmdir("./1") = 0 [pid 5835] munmap(0x7fe8eb800000, 138412032 [pid 5823] mkdir("./2", 0777) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD) = 0 [pid 5823] close(3 [pid 5835] <... munmap resumed>) = 0 [pid 5836] <... write resumed>) = 16777216 [pid 5835] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5836] munmap(0x7fe8eb800000, 138412032 [pid 5835] <... openat resumed>) = 4 [pid 5835] ioctl(4, LOOP_SET_FD, 3 [pid 5836] <... munmap resumed>) = 0 [pid 5835] <... ioctl resumed>) = 0 [pid 5835] close(3) = 0 [pid 5835] close(4) = 0 [pid 5835] mkdir("./file0", 0777) = 0 [pid 5835] mount("/dev/loop1", "./file0", "jfs", 0, "quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota" [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5835] <... mount resumed>) = 0 [pid 5835] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5835] chdir("./file0") = 0 [pid 5835] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5835] exit_group(0) = ? [pid 5835] +++ exited with 0 +++ [pid 5821] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5835, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=21 /* 0.21 s */} --- [ 89.383582][ T5835] loop1: detected capacity change from 0 to 32768 [pid 5821] restart_syscall(<... resuming interrupted clone ...> [pid 5836] ioctl(4, LOOP_SET_FD, 3 [pid 5821] <... restart_syscall resumed>) = 0 [pid 5821] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5821] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5821] getdents64(3, 0x55557f4db6f0 /* 4 entries */, 32768) = 112 [pid 5821] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./1/binderfs") = 0 [pid 5821] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5821] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5821] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5821] getdents64(4, 0x55557f4e3730 /* 2 entries */, 32768) = 48 [pid 5821] getdents64(4, 0x55557f4e3730 /* 0 entries */, 32768) = 0 [pid 5821] close(4) = 0 [pid 5821] rmdir("./1/file0") = 0 [pid 5821] getdents64(3, 0x55557f4db6f0 /* 0 entries */, 32768) = 0 [pid 5836] <... ioctl resumed>) = 0 [pid 5821] close(3 [pid 5836] close(3 [pid 5821] <... close resumed>) = 0 [pid 5836] <... close resumed>) = 0 [pid 5821] rmdir("./1" [pid 5836] close(4 [pid 5821] <... rmdir resumed>) = 0 [pid 5836] <... close resumed>) = 0 [pid 5821] mkdir("./2", 0777 [pid 5836] mkdir("./file0", 0777 [pid 5821] <... mkdir resumed>) = 0 [ 89.433718][ T5836] loop0: detected capacity change from 0 to 32768 [pid 5821] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5836] <... mkdir resumed>) = 0 [pid 5821] <... openat resumed>) = 3 [pid 5836] mount("/dev/loop0", "./file0", "jfs", 0, "quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota" [pid 5821] ioctl(3, LOOP_CLR_FD) = 0 [pid 5821] close(3) = 0 [pid 5821] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5839 attached [pid 5836] <... mount resumed>) = 0 [pid 5836] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5836] chdir("./file0") = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5836] exit_group(0) = ? [pid 5839] set_robust_list(0x55557f4da660, 24 [pid 5836] +++ exited with 0 +++ [pid 5820] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5836, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=29 /* 0.29 s */} --- [pid 5839] <... set_robust_list resumed>) = 0 [pid 5821] <... clone resumed>, child_tidptr=0x55557f4da650) = 5839 [pid 5820] restart_syscall(<... resuming interrupted clone ...> [pid 5839] chdir("./2") = 0 [pid 5839] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5839] setpgid(0, 0) = 0 [pid 5839] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5820] <... restart_syscall resumed>) = 0 [pid 5820] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5820] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5820] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5820] getdents64(3, 0x55557f4db6f0 /* 4 entries */, 32768) = 112 [pid 5839] <... openat resumed>) = 3 [pid 5820] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5820] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5837] <... write resumed>) = 16777216 [pid 5820] unlink("./1/binderfs") = 0 [pid 5820] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5839] write(3, "1000", 4) = 4 [pid 5837] munmap(0x7fe8eb800000, 138412032 [pid 5820] <... umount2 resumed>) = 0 [pid 5839] close(3 [pid 5820] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5839] <... close resumed>) = 0 [pid 5820] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5839] symlink("/dev/binderfs", "./binderfs" [pid 5820] newfstatat(AT_FDCWD, "./1/file0", [pid 5839] <... symlink resumed>) = 0 [pid 5820] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5820] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5820] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5820] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5820] getdents64(4, 0x55557f4e3730 /* 2 entries */, 32768) = 48 executing program [pid 5839] write(1, "executing program\n", 18 [pid 5820] getdents64(4, [pid 5839] <... write resumed>) = 18 [pid 5820] <... getdents64 resumed>0x55557f4e3730 /* 0 entries */, 32768) = 0 [pid 5839] memfd_create("syzkaller", 0 [pid 5820] close(4) = 0 [pid 5820] rmdir("./1/file0") = 0 [pid 5820] getdents64(3, 0x55557f4db6f0 /* 0 entries */, 32768) = 0 [pid 5820] close(3 [pid 5839] <... memfd_create resumed>) = 3 [pid 5820] <... close resumed>) = 0 [pid 5839] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5820] rmdir("./1" [pid 5839] <... mmap resumed>) = 0x7fe8eb800000 [pid 5820] <... rmdir resumed>) = 0 [pid 5820] mkdir("./2", 0777) = 0 [pid 5820] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5820] ioctl(3, LOOP_CLR_FD) = 0 [pid 5820] close(3 [pid 5837] <... munmap resumed>) = 0 [pid 5837] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5837] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5837] close(3) = 0 [ 89.642035][ T5837] loop4: detected capacity change from 0 to 32768 [pid 5837] close(4) = 0 [pid 5837] mkdir("./file0", 0777) = 0 [pid 5837] mount("/dev/loop4", "./file0", "jfs", 0, "quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota" [pid 5823] <... close resumed>) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5841 attached [pid 5837] <... mount resumed>) = 0 [pid 5841] set_robust_list(0x55557f4da660, 24 [pid 5837] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5823] <... clone resumed>, child_tidptr=0x55557f4da650) = 5841 [pid 5841] <... set_robust_list resumed>) = 0 [pid 5837] <... openat resumed>) = 3 [pid 5841] chdir("./2" [pid 5837] chdir("./file0" [pid 5841] <... chdir resumed>) = 0 [pid 5837] <... chdir resumed>) = 0 [pid 5841] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5838] <... write resumed>) = 16777216 [pid 5837] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5841] <... prctl resumed>) = 0 [pid 5838] munmap(0x7fe8eb800000, 138412032 [pid 5841] setpgid(0, 0 [pid 5837] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5841] <... setpgid resumed>) = 0 [pid 5837] exit_group(0 [pid 5841] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5837] <... exit_group resumed>) = ? [pid 5841] <... openat resumed>) = 3 [pid 5837] +++ exited with 0 +++ [pid 5841] write(3, "1000", 4 [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5837, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=23 /* 0.23 s */} --- [pid 5841] <... write resumed>) = 4 [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 5841] close(3executing program ) = 0 [pid 5824] <... restart_syscall resumed>) = 0 [pid 5824] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5838] <... munmap resumed>) = 0 [pid 5841] symlink("/dev/binderfs", "./binderfs" [pid 5838] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5841] <... symlink resumed>) = 0 [pid 5838] <... openat resumed>) = 4 [pid 5824] <... openat resumed>) = 3 [pid 5841] write(1, "executing program\n", 18 [pid 5838] ioctl(4, LOOP_SET_FD, 3 [pid 5841] <... write resumed>) = 18 [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, 0x55557f4db6f0 /* 4 entries */, 32768) = 112 [pid 5824] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./1/binderfs") = 0 [pid 5824] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5841] memfd_create("syzkaller", 0) = 3 [pid 5841] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8eb800000 [pid 5824] <... umount2 resumed>) = 0 [pid 5824] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5838] <... ioctl resumed>) = 0 [pid 5824] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5824] newfstatat(4, "", [pid 5838] close(3 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5838] <... close resumed>) = 0 [pid 5824] getdents64(4, [pid 5838] close(4 [pid 5824] <... getdents64 resumed>0x55557f4e3730 /* 2 entries */, 32768) = 48 [pid 5838] <... close resumed>) = 0 [pid 5838] mkdir("./file0", 0777) = 0 [pid 5824] getdents64(4, [pid 5838] mount("/dev/loop2", "./file0", "jfs", 0, "quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota" [pid 5824] <... getdents64 resumed>0x55557f4e3730 /* 0 entries */, 32768) = 0 [pid 5824] close(4) = 0 [pid 5824] rmdir("./1/file0") = 0 [pid 5824] getdents64(3, 0x55557f4db6f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3) = 0 [pid 5824] rmdir("./1") = 0 [pid 5824] mkdir("./2", 0777) = 0 [ 89.812776][ T5838] loop2: detected capacity change from 0 to 32768 [pid 5824] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5824] ioctl(3, LOOP_CLR_FD) = 0 [pid 5824] close(3 [pid 5838] <... mount resumed>) = 0 [pid 5838] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5838] chdir("./file0") = 0 [pid 5838] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5839] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5838] exit_group(0 [pid 5820] <... close resumed>) = 0 [pid 5838] <... exit_group resumed>) = ? [pid 5820] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5842 attached [pid 5838] +++ exited with 0 +++ [pid 5820] <... clone resumed>, child_tidptr=0x55557f4da650) = 5842 [pid 5822] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5838, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=24 /* 0.24 s */} --- [pid 5822] restart_syscall(<... resuming interrupted clone ...> [pid 5842] set_robust_list(0x55557f4da660, 24) = 0 [pid 5842] chdir("./2") = 0 [pid 5842] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5842] setpgid(0, 0) = 0 [pid 5842] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5842] write(3, "1000", 4) = 4 [pid 5842] close(3) = 0 [pid 5822] <... restart_syscall resumed>) = 0 [pid 5842] symlink("/dev/binderfs", "./binderfs" [pid 5822] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5822] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5822] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5822] getdents64(3, 0x55557f4db6f0 /* 4 entries */, 32768) = 112 [pid 5842] <... symlink resumed>) = 0 executing program [pid 5842] write(1, "executing program\n", 18 [pid 5822] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5842] <... write resumed>) = 18 [pid 5822] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5842] memfd_create("syzkaller", 0 [pid 5822] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5842] <... memfd_create resumed>) = 3 [pid 5822] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5842] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5822] unlink("./1/binderfs" [pid 5842] <... mmap resumed>) = 0x7fe8eb800000 [pid 5822] <... unlink resumed>) = 0 [pid 5822] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5822] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5822] newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5822] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5822] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5822] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5822] getdents64(4, 0x55557f4e3730 /* 2 entries */, 32768) = 48 [pid 5822] getdents64(4, 0x55557f4e3730 /* 0 entries */, 32768) = 0 [pid 5822] close(4) = 0 [pid 5822] rmdir("./1/file0") = 0 [pid 5822] getdents64(3, 0x55557f4db6f0 /* 0 entries */, 32768) = 0 [pid 5822] close(3) = 0 [pid 5822] rmdir("./1") = 0 [pid 5822] mkdir("./2", 0777) = 0 [pid 5822] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5822] ioctl(3, LOOP_CLR_FD) = 0 [pid 5822] close(3 [pid 5841] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5824] <... close resumed>) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5843 attached , child_tidptr=0x55557f4da650) = 5843 [pid 5843] set_robust_list(0x55557f4da660, 24) = 0 [pid 5843] chdir("./2") = 0 [pid 5843] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5843] setpgid(0, 0) = 0 [pid 5843] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 executing program [pid 5843] write(3, "1000", 4) = 4 [pid 5843] close(3) = 0 [pid 5843] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5843] write(1, "executing program\n", 18) = 18 [pid 5843] memfd_create("syzkaller", 0) = 3 [pid 5843] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8eb800000 [pid 5842] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5839] <... write resumed>) = 16777216 [pid 5822] <... close resumed>) = 0 [pid 5839] munmap(0x7fe8eb800000, 138412032 [pid 5822] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5844 attached , child_tidptr=0x55557f4da650) = 5844 [pid 5844] set_robust_list(0x55557f4da660, 24) = 0 [pid 5844] chdir("./2") = 0 [pid 5844] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5844] setpgid(0, 0) = 0 [pid 5844] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5844] write(3, "1000", 4) = 4 [pid 5844] close(3) = 0 [pid 5844] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5844] write(1, "executing program\n", 18) = 18 [pid 5844] memfd_create("syzkaller", 0) = 3 [pid 5844] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8eb800000 [pid 5839] <... munmap resumed>) = 0 [pid 5839] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5839] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5839] close(3) = 0 [pid 5839] close(4) = 0 [pid 5839] mkdir("./file0", 0777) = 0 [pid 5839] mount("/dev/loop1", "./file0", "jfs", 0, "quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota" [pid 5841] <... write resumed>) = 16777216 [ 90.422545][ T5839] loop1: detected capacity change from 0 to 32768 [pid 5841] munmap(0x7fe8eb800000, 138412032 [pid 5839] <... mount resumed>) = 0 [pid 5839] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5839] chdir("./file0") = 0 [pid 5839] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5839] exit_group(0) = ? [pid 5839] +++ exited with 0 +++ [pid 5841] <... munmap resumed>) = 0 [pid 5821] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5839, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=25 /* 0.25 s */} --- [pid 5821] restart_syscall(<... resuming interrupted clone ...> [pid 5841] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5841] ioctl(4, LOOP_SET_FD, 3 [pid 5821] <... restart_syscall resumed>) = 0 [pid 5843] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5821] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5841] <... ioctl resumed>) = 0 [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5841] close(3 [pid 5821] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5841] <... close resumed>) = 0 [pid 5841] close(4) = 0 [pid 5821] <... openat resumed>) = 3 [pid 5841] mkdir("./file0", 0777) = 0 [pid 5821] newfstatat(3, "", [pid 5841] mount("/dev/loop3", "./file0", "jfs", 0, "quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota" [pid 5821] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5821] getdents64(3, 0x55557f4db6f0 /* 4 entries */, 32768) = 112 [ 90.499415][ T5841] loop3: detected capacity change from 0 to 32768 [pid 5821] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./2/binderfs") = 0 [pid 5821] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5821] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5841] <... mount resumed>) = 0 [pid 5841] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5821] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5841] <... openat resumed>) = 3 [pid 5841] chdir("./file0" [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5841] <... chdir resumed>) = 0 [pid 5841] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5821] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5841] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5841] exit_group(0 [pid 5821] <... openat resumed>) = 4 [pid 5841] <... exit_group resumed>) = ? [pid 5821] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5821] getdents64(4, 0x55557f4e3730 /* 2 entries */, 32768) = 48 [pid 5821] getdents64(4, 0x55557f4e3730 /* 0 entries */, 32768) = 0 [pid 5821] close(4 [pid 5841] +++ exited with 0 +++ [pid 5821] <... close resumed>) = 0 [pid 5821] rmdir("./2/file0" [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5841, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=28 /* 0.28 s */} --- [pid 5821] <... rmdir resumed>) = 0 [pid 5823] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5821] getdents64(3, [pid 5823] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, [pid 5821] <... getdents64 resumed>0x55557f4db6f0 /* 0 entries */, 32768) = 0 [pid 5823] <... getdents64 resumed>0x55557f4db6f0 /* 4 entries */, 32768) = 112 [pid 5821] close(3 [pid 5823] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] <... close resumed>) = 0 [pid 5821] rmdir("./2" [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./2/binderfs") = 0 [pid 5821] <... rmdir resumed>) = 0 [pid 5823] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] mkdir("./3", 0777) = 0 [pid 5821] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5821] ioctl(3, LOOP_CLR_FD) = 0 [pid 5821] close(3 [pid 5844] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5823] <... umount2 resumed>) = 0 [pid 5823] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5823] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(4, 0x55557f4e3730 /* 2 entries */, 32768) = 48 [pid 5823] getdents64(4, 0x55557f4e3730 /* 0 entries */, 32768) = 0 [pid 5823] close(4) = 0 [pid 5823] rmdir("./2/file0") = 0 [pid 5823] getdents64(3, 0x55557f4db6f0 /* 0 entries */, 32768) = 0 [pid 5823] close(3) = 0 [pid 5823] rmdir("./2") = 0 [pid 5823] mkdir("./3", 0777) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD) = 0 [pid 5823] close(3 [pid 5842] <... write resumed>) = 16777216 [pid 5842] munmap(0x7fe8eb800000, 138412032) = 0 [pid 5842] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5842] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5842] close(3) = 0 [pid 5842] close(4) = 0 [pid 5842] mkdir("./file0", 0777) = 0 [ 90.782613][ T5842] loop0: detected capacity change from 0 to 32768 [pid 5842] mount("/dev/loop0", "./file0", "jfs", 0, "quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota") = 0 [pid 5842] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5842] chdir("./file0") = 0 [pid 5842] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5842] exit_group(0) = ? [pid 5842] +++ exited with 0 +++ [pid 5820] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5842, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=22 /* 0.22 s */} --- [pid 5820] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5820] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5820] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5820] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5820] getdents64(3, 0x55557f4db6f0 /* 4 entries */, 32768) = 112 [pid 5820] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5820] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5820] unlink("./2/binderfs") = 0 [pid 5820] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] <... close resumed>) = 0 [pid 5821] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5845 attached [pid 5820] <... umount2 resumed>) = 0 [pid 5821] <... clone resumed>, child_tidptr=0x55557f4da650) = 5845 [pid 5845] set_robust_list(0x55557f4da660, 24 [pid 5820] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5845] <... set_robust_list resumed>) = 0 [pid 5820] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5845] chdir("./3" [pid 5820] newfstatat(AT_FDCWD, "./2/file0", [pid 5845] <... chdir resumed>) = 0 [pid 5820] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5845] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5820] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5845] <... prctl resumed>) = 0 [pid 5820] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5845] setpgid(0, 0 [pid 5820] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5845] <... setpgid resumed>) = 0 [pid 5820] <... openat resumed>) = 4 [pid 5845] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5820] newfstatat(4, "", [pid 5845] <... openat resumed>) = 3 [pid 5820] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5820] getdents64(4, [pid 5845] write(3, "1000", 4 [pid 5820] <... getdents64 resumed>0x55557f4e3730 /* 2 entries */, 32768) = 48 [pid 5845] <... write resumed>) = 4 [pid 5845] close(3 [pid 5820] getdents64(4, 0x55557f4e3730 /* 0 entries */, 32768) = 0 [pid 5845] <... close resumed>) = 0 [pid 5845] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5845] write(1, "executing program\n", 18executing program ) = 18 [pid 5845] memfd_create("syzkaller", 0) = 3 [pid 5845] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8eb800000 [pid 5820] close(4) = 0 [pid 5820] rmdir("./2/file0") = 0 [pid 5820] getdents64(3, 0x55557f4db6f0 /* 0 entries */, 32768) = 0 [pid 5820] close(3) = 0 [pid 5820] rmdir("./2") = 0 [pid 5820] mkdir("./3", 0777) = 0 [pid 5820] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5820] ioctl(3, LOOP_CLR_FD) = 0 [pid 5820] close(3 [pid 5823] <... close resumed>) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5843] <... write resumed>) = 16777216 [pid 5843] munmap(0x7fe8eb800000, 138412032./strace-static-x86_64: Process 5846 attached [pid 5823] <... clone resumed>, child_tidptr=0x55557f4da650) = 5846 [pid 5846] set_robust_list(0x55557f4da660, 24) = 0 [pid 5846] chdir("./3") = 0 [pid 5846] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5846] setpgid(0, 0) = 0 [pid 5846] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5846] write(3, "1000", 4) = 4 [pid 5846] close(3) = 0 [pid 5846] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5846] write(1, "executing program\n", 18 [pid 5843] <... munmap resumed>) = 0 executing program [pid 5846] <... write resumed>) = 18 [pid 5843] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5846] memfd_create("syzkaller", 0 [pid 5843] <... openat resumed>) = 4 [pid 5843] ioctl(4, LOOP_SET_FD, 3 [pid 5846] <... memfd_create resumed>) = 3 [pid 5843] <... ioctl resumed>) = 0 [pid 5846] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8eb800000 [pid 5843] close(3) = 0 [pid 5843] close(4) = 0 [pid 5843] mkdir("./file0", 0777) = 0 [pid 5843] mount("/dev/loop4", "./file0", "jfs", 0, "quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota") = 0 [pid 5843] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5843] chdir("./file0") = 0 [pid 5843] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5843] exit_group(0) = ? [pid 5843] +++ exited with 0 +++ [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5843, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=18 /* 0.18 s */} --- [pid 5824] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5824] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 91.071692][ T5843] loop4: detected capacity change from 0 to 32768 [pid 5824] getdents64(3, 0x55557f4db6f0 /* 4 entries */, 32768) = 112 [pid 5824] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./2/binderfs") = 0 [pid 5824] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5824] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5824] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(4, 0x55557f4e3730 /* 2 entries */, 32768) = 48 [pid 5824] getdents64(4, 0x55557f4e3730 /* 0 entries */, 32768) = 0 [pid 5824] close(4) = 0 [pid 5824] rmdir("./2/file0") = 0 [pid 5824] getdents64(3, 0x55557f4db6f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3) = 0 [pid 5824] rmdir("./2") = 0 [pid 5824] mkdir("./3", 0777) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5824] ioctl(3, LOOP_CLR_FDexecuting program ) = 0 [pid 5824] close(3) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5847 attached , child_tidptr=0x55557f4da650) = 5847 [pid 5847] set_robust_list(0x55557f4da660, 24) = 0 [pid 5847] chdir("./3") = 0 [pid 5847] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5847] setpgid(0, 0) = 0 [pid 5847] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5847] write(3, "1000", 4) = 4 [pid 5847] close(3) = 0 [pid 5847] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5847] write(1, "executing program\n", 18) = 18 [pid 5847] memfd_create("syzkaller", 0) = 3 [pid 5847] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8eb800000 [pid 5844] <... write resumed>) = 16777216 [pid 5845] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5844] munmap(0x7fe8eb800000, 138412032) = 0 [pid 5820] <... close resumed>) = 0 [pid 5844] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5844] ioctl(4, LOOP_SET_FD, 3 [pid 5820] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5844] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 5848 attached [pid 5844] close(3) = 0 [pid 5844] close(4) = 0 [pid 5844] mkdir("./file0", 0777) = 0 [pid 5848] set_robust_list(0x55557f4da660, 24 [pid 5820] <... clone resumed>, child_tidptr=0x55557f4da650) = 5848 [pid 5848] <... set_robust_list resumed>) = 0 [pid 5844] mount("/dev/loop2", "./file0", "jfs", 0, "quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota" [pid 5848] chdir("./3") = 0 [pid 5848] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5848] setpgid(0, 0) = 0 [pid 5848] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5844] <... mount resumed>) = 0 [pid 5848] <... openat resumed>) = 3 [pid 5848] write(3, "1000", 4) = 4 [pid 5848] close(3 [pid 5844] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5848] <... close resumed>) = 0 [pid 5848] symlink("/dev/binderfs", "./binderfs" [pid 5844] <... openat resumed>) = 3 [pid 5844] chdir("./file0" [pid 5848] <... symlink resumed>) = 0 [pid 5844] <... chdir resumed>) = 0 [pid 5844] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5844] exit_group(0) = ? [pid 5844] +++ exited with 0 +++ [pid 5822] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5844, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=24 /* 0.24 s */} --- [pid 5822] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5822] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5822] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5822] getdents64(3, 0x55557f4db6f0 /* 4 entries */, 32768) = 112 [pid 5822] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5822] newfstatat(AT_FDCWD, "./2/binderfs", [pid 5848] write(1, "executing program\n", 18 [pid 5822] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 executing program [pid 5848] <... write resumed>) = 18 [ 91.283783][ T5844] loop2: detected capacity change from 0 to 32768 [pid 5822] unlink("./2/binderfs" [pid 5848] memfd_create("syzkaller", 0 [pid 5822] <... unlink resumed>) = 0 [pid 5822] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] <... memfd_create resumed>) = 3 [pid 5848] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8eb800000 [pid 5846] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5822] <... umount2 resumed>) = 0 [pid 5822] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5822] newfstatat(AT_FDCWD, "./2/file0", [pid 5847] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5822] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5822] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5822] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5822] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5822] getdents64(4, 0x55557f4e3730 /* 2 entries */, 32768) = 48 [pid 5822] getdents64(4, 0x55557f4e3730 /* 0 entries */, 32768) = 0 [pid 5822] close(4) = 0 [pid 5822] rmdir("./2/file0") = 0 [pid 5822] getdents64(3, 0x55557f4db6f0 /* 0 entries */, 32768) = 0 [pid 5822] close(3) = 0 [pid 5822] rmdir("./2") = 0 [pid 5822] mkdir("./3", 0777) = 0 [pid 5822] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5822] ioctl(3, LOOP_CLR_FD) = 0 [pid 5822] close(3 [pid 5848] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5845] <... write resumed>) = 16777216 [pid 5845] munmap(0x7fe8eb800000, 138412032) = 0 [pid 5845] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5845] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5845] close(3) = 0 [pid 5845] close(4) = 0 [pid 5845] mkdir("./file0", 0777) = 0 [pid 5845] mount("/dev/loop1", "./file0", "jfs", 0, "quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota") = 0 [pid 5845] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5845] chdir("./file0") = 0 [pid 5845] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5845] exit_group(0) = ? [pid 5845] +++ exited with 0 +++ [pid 5821] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5845, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=22 /* 0.22 s */} --- [ 91.715056][ T5845] loop1: detected capacity change from 0 to 32768 [pid 5821] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5846] <... write resumed>) = 16777216 [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5846] munmap(0x7fe8eb800000, 138412032 [pid 5821] newfstatat(3, "", [pid 5822] <... close resumed>) = 0 [pid 5821] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5846] <... munmap resumed>) = 0 [pid 5821] getdents64(3, [pid 5846] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5821] <... getdents64 resumed>0x55557f4db6f0 /* 4 entries */, 32768) = 112 [pid 5846] <... openat resumed>) = 4 [pid 5822] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5821] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5846] ioctl(4, LOOP_SET_FD, 3 [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5846] <... ioctl resumed>) = 0 [pid 5846] close(3) = 0 [pid 5846] close(4) = 0 [pid 5846] mkdir("./file0", 0777) = 0 [pid 5846] mount("/dev/loop3", "./file0", "jfs", 0, "quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota"./strace-static-x86_64: Process 5849 attached [pid 5849] set_robust_list(0x55557f4da660, 24 [pid 5821] newfstatat(AT_FDCWD, "./3/binderfs", [pid 5849] <... set_robust_list resumed>) = 0 [pid 5849] chdir("./3" [pid 5821] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] <... chdir resumed>) = 0 [pid 5849] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5849] setpgid(0, 0) = 0 [pid 5849] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5847] <... write resumed>) = 16777216 [pid 5822] <... clone resumed>, child_tidptr=0x55557f4da650) = 5849 [pid 5821] unlink("./3/binderfs" [pid 5849] write(3, "1000", 4) = 4 [pid 5821] <... unlink resumed>) = 0 [pid 5849] close(3) = 0 [pid 5821] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5847] munmap(0x7fe8eb800000, 138412032executing program [pid 5849] write(1, "executing program\n", 18) = 18 [pid 5849] memfd_create("syzkaller", 0) = 3 [pid 5849] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8eb800000 [pid 5821] <... umount2 resumed>) = 0 [pid 5821] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5846] <... mount resumed>) = 0 [pid 5821] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 91.848342][ T5846] loop3: detected capacity change from 0 to 32768 [ 91.848728][ T978] cfg80211: failed to load regulatory.db [pid 5821] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5846] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5821] <... openat resumed>) = 4 [pid 5846] <... openat resumed>) = 3 [pid 5821] newfstatat(4, "", [pid 5846] chdir("./file0" [pid 5821] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5846] <... chdir resumed>) = 0 [pid 5846] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5821] getdents64(4, [pid 5846] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5846] exit_group(0) = ? [pid 5846] +++ exited with 0 +++ [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5846, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=21 /* 0.21 s */} --- [pid 5823] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5821] <... getdents64 resumed>0x55557f4e3730 /* 2 entries */, 32768) = 48 [pid 5821] getdents64(4, 0x55557f4e3730 /* 0 entries */, 32768) = 0 [pid 5823] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] close(4 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5821] <... close resumed>) = 0 [pid 5823] <... openat resumed>) = 3 [pid 5847] <... munmap resumed>) = 0 [pid 5823] newfstatat(3, "", [pid 5821] rmdir("./3/file0" [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, 0x55557f4db6f0 /* 4 entries */, 32768) = 112 [pid 5821] <... rmdir resumed>) = 0 [pid 5823] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] getdents64(3, [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./3/binderfs") = 0 [pid 5821] <... getdents64 resumed>0x55557f4db6f0 /* 0 entries */, 32768) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5823] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] close(3 [pid 5847] <... openat resumed>) = 4 [pid 5821] <... close resumed>) = 0 [pid 5847] ioctl(4, LOOP_SET_FD, 3 [pid 5823] <... umount2 resumed>) = 0 [pid 5821] rmdir("./3") = 0 [pid 5823] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] mkdir("./4", 0777 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] <... mkdir resumed>) = 0 [pid 5847] <... ioctl resumed>) = 0 [pid 5823] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5847] close(3 [pid 5823] <... openat resumed>) = 4 [pid 5821] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5847] <... close resumed>) = 0 [pid 5821] <... openat resumed>) = 3 [pid 5847] close(4 [pid 5821] ioctl(3, LOOP_CLR_FD [pid 5823] newfstatat(4, "", [pid 5847] <... close resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] mkdir("./file0", 0777 [pid 5823] getdents64(4, [pid 5847] <... mkdir resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557f4e3730 /* 2 entries */, 32768) = 48 [pid 5847] mount("/dev/loop4", "./file0", "jfs", 0, "quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota" [pid 5823] getdents64(4, 0x55557f4e3730 /* 0 entries */, 32768) = 0 [pid 5821] <... ioctl resumed>) = 0 [pid 5823] close(4 [pid 5821] close(3 [pid 5823] <... close resumed>) = 0 [pid 5823] rmdir("./3/file0") = 0 [ 91.946415][ T5847] loop4: detected capacity change from 0 to 32768 [pid 5823] getdents64(3, 0x55557f4db6f0 /* 0 entries */, 32768) = 0 [pid 5823] close(3) = 0 [pid 5823] rmdir("./3") = 0 [pid 5823] mkdir("./4", 0777) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD) = 0 [pid 5823] close(3 [pid 5847] <... mount resumed>) = 0 [pid 5847] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5847] chdir("./file0") = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5847] exit_group(0) = ? [pid 5847] +++ exited with 0 +++ [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5847, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=23 /* 0.23 s */} --- [pid 5824] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5824] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, 0x55557f4db6f0 /* 4 entries */, 32768) = 112 [pid 5824] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./3/binderfs") = 0 [pid 5824] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] <... write resumed>) = 16777216 [pid 5848] munmap(0x7fe8eb800000, 138412032 [pid 5824] <... umount2 resumed>) = 0 [pid 5824] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5824] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(4, 0x55557f4e3730 /* 2 entries */, 32768) = 48 [pid 5824] getdents64(4, 0x55557f4e3730 /* 0 entries */, 32768) = 0 [pid 5824] close(4) = 0 [pid 5824] rmdir("./3/file0") = 0 [pid 5824] getdents64(3, 0x55557f4db6f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3) = 0 [pid 5824] rmdir("./3") = 0 [pid 5824] mkdir("./4", 0777) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5824] ioctl(3, LOOP_CLR_FD) = 0 [pid 5824] close(3 [pid 5848] <... munmap resumed>) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5848] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5848] close(3) = 0 [pid 5848] close(4) = 0 [pid 5848] mkdir("./file0", 0777) = 0 [ 92.184539][ T5848] loop0: detected capacity change from 0 to 32768 [pid 5849] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5848] mount("/dev/loop0", "./file0", "jfs", 0, "quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota") = 0 [pid 5848] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5848] chdir("./file0") = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5848] exit_group(0) = ? [pid 5821] <... close resumed>) = 0 [pid 5848] +++ exited with 0 +++ [pid 5821] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5820] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5848, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=21 /* 0.21 s */} --- [pid 5820] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5820] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5820] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5820] getdents64(3, ./strace-static-x86_64: Process 5850 attached 0x55557f4db6f0 /* 4 entries */, 32768) = 112 [pid 5850] set_robust_list(0x55557f4da660, 24 [pid 5821] <... clone resumed>, child_tidptr=0x55557f4da650) = 5850 [pid 5820] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] <... set_robust_list resumed>) = 0 [pid 5820] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] chdir("./4" [pid 5820] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5820] unlink("./3/binderfs" [pid 5850] <... chdir resumed>) = 0 [pid 5820] <... unlink resumed>) = 0 [pid 5850] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5820] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] <... prctl resumed>) = 0 [pid 5850] setpgid(0, 0) = 0 [pid 5850] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5850] write(3, "1000", 4 [pid 5820] <... umount2 resumed>) = 0 [pid 5850] <... write resumed>) = 4 [pid 5850] close(3 [pid 5820] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] <... close resumed>) = 0 [pid 5850] symlink("/dev/binderfs", "./binderfs" [pid 5820] <... umount2 resumed>) = -1 EINVAL (Invalid argument) executing program [pid 5820] newfstatat(AT_FDCWD, "./3/file0", [pid 5850] <... symlink resumed>) = 0 [pid 5820] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] write(1, "executing program\n", 18) = 18 [pid 5820] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5820] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5850] memfd_create("syzkaller", 0 [pid 5820] <... openat resumed>) = 4 [pid 5850] <... memfd_create resumed>) = 3 [pid 5820] newfstatat(4, "", [pid 5850] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5820] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5820] getdents64(4, 0x55557f4e3730 /* 2 entries */, 32768) = 48 [pid 5820] getdents64(4, 0x55557f4e3730 /* 0 entries */, 32768) = 0 [pid 5850] <... mmap resumed>) = 0x7fe8eb800000 [pid 5820] close(4) = 0 [pid 5820] rmdir("./3/file0") = 0 [pid 5820] getdents64(3, 0x55557f4db6f0 /* 0 entries */, 32768) = 0 [pid 5820] close(3) = 0 [pid 5820] rmdir("./3") = 0 [pid 5820] mkdir("./4", 0777) = 0 [pid 5820] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5820] ioctl(3, LOOP_CLR_FD) = 0 [pid 5820] close(3 [pid 5823] <... close resumed>) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557f4da650) = 5851 ./strace-static-x86_64: Process 5851 attached [pid 5851] set_robust_list(0x55557f4da660, 24) = 0 [pid 5851] chdir("./4") = 0 [pid 5851] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5851] setpgid(0, 0) = 0 [pid 5851] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5851] write(3, "1000", 4) = 4 [pid 5851] close(3) = 0 [pid 5851] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5851] write(1, "executing program\n", 18) = 18 [pid 5851] memfd_create("syzkaller", 0) = 3 [pid 5851] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8eb800000 [pid 5824] <... close resumed>) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5852 attached , child_tidptr=0x55557f4da650) = 5852 [pid 5852] set_robust_list(0x55557f4da660, 24) = 0 [pid 5852] chdir("./4") = 0 [pid 5852] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5852] setpgid(0, 0) = 0 [pid 5852] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5852] write(3, "1000", 4) = 4 [pid 5852] close(3) = 0 [pid 5852] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5849] <... write resumed>) = 16777216 [pid 5852] write(1, "executing program\n", 18executing program ) = 18 [pid 5852] memfd_create("syzkaller", 0) = 3 [pid 5852] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8eb800000 [pid 5849] munmap(0x7fe8eb800000, 138412032) = 0 [pid 5820] <... close resumed>) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5820] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5849] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5853 attached [pid 5853] set_robust_list(0x55557f4da660, 24 [pid 5820] <... clone resumed>, child_tidptr=0x55557f4da650) = 5853 [pid 5853] <... set_robust_list resumed>) = 0 [pid 5851] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5849] <... ioctl resumed>) = 0 [pid 5853] chdir("./4") = 0 [pid 5853] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5853] setpgid(0, 0 [pid 5849] close(3 [pid 5853] <... setpgid resumed>) = 0 [pid 5849] <... close resumed>) = 0 [pid 5849] close(4 [pid 5853] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5849] <... close resumed>) = 0 [pid 5849] mkdir("./file0", 0777) = 0 [pid 5853] <... openat resumed>) = 3 [pid 5849] mount("/dev/loop2", "./file0", "jfs", 0, "quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota" [pid 5853] write(3, "1000", 4) = 4 [pid 5853] close(3) = 0 [pid 5853] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5853] write(1, "executing program\n", 18) = 18 [pid 5853] memfd_create("syzkaller", 0 [pid 5850] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5853] <... memfd_create resumed>) = 3 [pid 5853] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8eb800000 [pid 5849] <... mount resumed>) = 0 [pid 5849] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 92.623866][ T5849] loop2: detected capacity change from 0 to 32768 [pid 5849] chdir("./file0") = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5849] exit_group(0) = ? [pid 5849] +++ exited with 0 +++ [pid 5822] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5849, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=23 /* 0.23 s */} --- [pid 5822] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5822] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5822] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5822] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5822] getdents64(3, 0x55557f4db6f0 /* 4 entries */, 32768) = 112 [pid 5822] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5822] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5822] unlink("./3/binderfs") = 0 [pid 5822] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5822] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5822] newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5822] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5822] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5822] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5822] getdents64(4, 0x55557f4e3730 /* 2 entries */, 32768) = 48 [pid 5822] getdents64(4, 0x55557f4e3730 /* 0 entries */, 32768) = 0 [pid 5822] close(4) = 0 [pid 5822] rmdir("./3/file0") = 0 [pid 5822] getdents64(3, 0x55557f4db6f0 /* 0 entries */, 32768) = 0 [pid 5822] close(3) = 0 [pid 5822] rmdir("./3") = 0 [pid 5822] mkdir("./4", 0777) = 0 [pid 5822] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5822] ioctl(3, LOOP_CLR_FD) = 0 [pid 5822] close(3 [pid 5852] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5853] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5851] <... write resumed>) = 16777216 [pid 5851] munmap(0x7fe8eb800000, 138412032 [pid 5822] <... close resumed>) = 0 [pid 5851] <... munmap resumed>) = 0 [pid 5850] <... write resumed>) = 16777216 [pid 5822] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5854 attached [pid 5851] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5850] munmap(0x7fe8eb800000, 138412032 [pid 5854] set_robust_list(0x55557f4da660, 24 [pid 5851] <... openat resumed>) = 4 [pid 5851] ioctl(4, LOOP_SET_FD, 3 [pid 5822] <... clone resumed>, child_tidptr=0x55557f4da650) = 5854 [pid 5854] <... set_robust_list resumed>) = 0 [pid 5854] chdir("./4") = 0 [pid 5854] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5851] <... ioctl resumed>) = 0 [pid 5850] <... munmap resumed>) = 0 [pid 5854] <... prctl resumed>) = 0 [pid 5854] setpgid(0, 0) = 0 [pid 5854] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5850] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5854] write(3, "1000", 4 [pid 5851] close(3 [pid 5850] <... openat resumed>) = 4 [pid 5854] <... write resumed>) = 4 [pid 5854] close(3 [pid 5851] <... close resumed>) = 0 [pid 5850] ioctl(4, LOOP_SET_FD, 3 [pid 5854] <... close resumed>) = 0 [pid 5851] close(4) = 0 [pid 5851] mkdir("./file0", 0777) = 0 [pid 5851] mount("/dev/loop3", "./file0", "jfs", 0, "quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota" [pid 5854] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5854] write(1, "executing program\n", 18executing program ) = 18 [pid 5851] <... mount resumed>) = 0 [pid 5851] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5854] memfd_create("syzkaller", 0 [pid 5851] chdir("./file0") = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5854] <... memfd_create resumed>) = 3 [pid 5851] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5854] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8eb800000 [pid 5851] exit_group(0) = ? [pid 5851] +++ exited with 0 +++ [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5851, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=21 /* 0.21 s */} --- [pid 5823] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5823] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] <... ioctl resumed>) = 0 [pid 5823] getdents64(3, [pid 5850] close(3) = 0 [pid 5823] <... getdents64 resumed>0x55557f4db6f0 /* 4 entries */, 32768) = 112 [pid 5823] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] close(4) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] mkdir("./file0", 0777 [pid 5823] newfstatat(AT_FDCWD, "./4/binderfs", [pid 5850] <... mkdir resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 93.103306][ T5851] loop3: detected capacity change from 0 to 32768 [ 93.130563][ T5850] loop1: detected capacity change from 0 to 32768 [pid 5823] unlink("./4/binderfs") = 0 [pid 5850] mount("/dev/loop1", "./file0", "jfs", 0, "quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota" [pid 5823] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] <... mount resumed>) = 0 [pid 5850] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5850] chdir("./file0") = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5850] exit_group(0) = ? [pid 5823] <... umount2 resumed>) = 0 [pid 5823] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5823] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(4, 0x55557f4e3730 /* 2 entries */, 32768) = 48 [pid 5850] +++ exited with 0 +++ [pid 5823] getdents64(4, [pid 5821] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5850, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=22 /* 0.22 s */} --- [pid 5823] <... getdents64 resumed>0x55557f4e3730 /* 0 entries */, 32768) = 0 [pid 5821] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5821] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5821] newfstatat(3, "", [pid 5823] close(4 [pid 5821] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5821] getdents64(3, [pid 5823] <... close resumed>) = 0 [pid 5821] <... getdents64 resumed>0x55557f4db6f0 /* 4 entries */, 32768) = 112 [pid 5821] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] rmdir("./4/file0" [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./4/binderfs") = 0 [pid 5821] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... rmdir resumed>) = 0 [pid 5823] getdents64(3, 0x55557f4db6f0 /* 0 entries */, 32768) = 0 [pid 5823] close(3) = 0 [pid 5823] rmdir("./4") = 0 [pid 5823] mkdir("./5", 0777) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5852] <... write resumed>) = 16777216 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 5821] <... umount2 resumed>) = 0 [pid 5821] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] munmap(0x7fe8eb800000, 138412032 [pid 5823] <... ioctl resumed>) = 0 [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] close(3 [pid 5821] newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5821] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5821] getdents64(4, 0x55557f4e3730 /* 2 entries */, 32768) = 48 [pid 5821] getdents64(4, 0x55557f4e3730 /* 0 entries */, 32768) = 0 [pid 5821] close(4) = 0 [pid 5821] rmdir("./4/file0") = 0 [pid 5821] getdents64(3, 0x55557f4db6f0 /* 0 entries */, 32768) = 0 [pid 5821] close(3) = 0 [pid 5821] rmdir("./4") = 0 [pid 5821] mkdir("./5", 0777) = 0 [pid 5821] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5852] <... munmap resumed>) = 0 [pid 5821] <... openat resumed>) = 3 [pid 5852] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5852] ioctl(4, LOOP_SET_FD, 3 [pid 5821] ioctl(3, LOOP_CLR_FD) = 0 [pid 5821] close(3 [pid 5852] <... ioctl resumed>) = 0 [pid 5852] close(3) = 0 [pid 5852] close(4) = 0 [pid 5852] mkdir("./file0", 0777) = 0 [ 93.328739][ T5852] loop4: detected capacity change from 0 to 32768 [pid 5852] mount("/dev/loop4", "./file0", "jfs", 0, "quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota" [pid 5853] <... write resumed>) = 16777216 [pid 5853] munmap(0x7fe8eb800000, 138412032 [pid 5854] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5852] <... mount resumed>) = 0 [pid 5852] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5852] chdir("./file0") = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5852] exit_group(0) = ? [pid 5852] +++ exited with 0 +++ [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5852, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=22 /* 0.22 s */} --- [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 5853] <... munmap resumed>) = 0 [pid 5824] <... restart_syscall resumed>) = 0 [pid 5824] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, 0x55557f4db6f0 /* 4 entries */, 32768) = 112 [pid 5824] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./4/binderfs", [pid 5853] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5853] ioctl(4, LOOP_SET_FD, 3 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./4/binderfs") = 0 [pid 5824] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5853] <... ioctl resumed>) = 0 [pid 5824] <... umount2 resumed>) = 0 [pid 5824] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5824] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(4, 0x55557f4e3730 /* 2 entries */, 32768) = 48 [pid 5824] getdents64(4, 0x55557f4e3730 /* 0 entries */, 32768) = 0 [pid 5853] close(3 [pid 5824] close(4) = 0 [pid 5853] <... close resumed>) = 0 [pid 5824] rmdir("./4/file0" [pid 5853] close(4 [pid 5824] <... rmdir resumed>) = 0 [pid 5853] <... close resumed>) = 0 [pid 5824] getdents64(3, [pid 5853] mkdir("./file0", 0777 [pid 5824] <... getdents64 resumed>0x55557f4db6f0 /* 0 entries */, 32768) = 0 [pid 5853] <... mkdir resumed>) = 0 [pid 5824] close(3) = 0 [pid 5824] rmdir("./4") = 0 [pid 5824] mkdir("./5", 0777) = 0 [pid 5853] mount("/dev/loop0", "./file0", "jfs", 0, "quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota" [pid 5824] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5853] <... mount resumed>) = 0 [pid 5853] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5853] chdir("./file0") = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 93.453197][ T5853] loop0: detected capacity change from 0 to 32768 [pid 5853] exit_group(0 [pid 5824] <... openat resumed>) = 3 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5853] <... exit_group resumed>) = ? [pid 5824] <... ioctl resumed>) = 0 [pid 5853] +++ exited with 0 +++ [pid 5824] close(3) = 0 [pid 5820] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5853, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=23 /* 0.23 s */} --- [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5820] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 5855 attached [pid 5855] set_robust_list(0x55557f4da660, 24 [pid 5824] <... clone resumed>, child_tidptr=0x55557f4da650) = 5855 [pid 5820] <... restart_syscall resumed>) = 0 [pid 5855] <... set_robust_list resumed>) = 0 [pid 5855] chdir("./5" [pid 5820] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5855] <... chdir resumed>) = 0 [pid 5820] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5855] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5820] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5855] <... prctl resumed>) = 0 [pid 5820] <... openat resumed>) = 3 [pid 5855] setpgid(0, 0 [pid 5820] newfstatat(3, "", [pid 5855] <... setpgid resumed>) = 0 [pid 5855] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5820] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5820] getdents64(3, [pid 5855] <... openat resumed>) = 3 [pid 5820] <... getdents64 resumed>0x55557f4db6f0 /* 4 entries */, 32768) = 112 [pid 5855] write(3, "1000", 4 [pid 5820] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5855] <... write resumed>) = 4 [pid 5820] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5855] close(3 [pid 5820] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5855] <... close resumed>) = 0 [pid 5820] unlink("./4/binderfs" [pid 5855] symlink("/dev/binderfs", "./binderfs" [pid 5820] <... unlink resumed>) = 0 [pid 5855] <... symlink resumed>) = 0 [pid 5820] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5855] write(1, "executing program\n", 18executing program ) = 18 [pid 5855] memfd_create("syzkaller", 0 [pid 5820] <... umount2 resumed>) = 0 [pid 5855] <... memfd_create resumed>) = 3 [pid 5855] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8eb800000 [pid 5820] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5820] newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5820] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5820] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5820] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5820] getdents64(4, 0x55557f4e3730 /* 2 entries */, 32768) = 48 [pid 5820] getdents64(4, 0x55557f4e3730 /* 0 entries */, 32768) = 0 [pid 5820] close(4) = 0 [pid 5820] rmdir("./4/file0") = 0 [pid 5820] getdents64(3, 0x55557f4db6f0 /* 0 entries */, 32768) = 0 [pid 5820] close(3) = 0 [pid 5820] rmdir("./4") = 0 [pid 5820] mkdir("./5", 0777) = 0 [pid 5823] <... close resumed>) = 0 [pid 5820] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5820] ioctl(3, LOOP_CLR_FD) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5820] close(3./strace-static-x86_64: Process 5856 attached [pid 5856] set_robust_list(0x55557f4da660, 24 [pid 5823] <... clone resumed>, child_tidptr=0x55557f4da650) = 5856 [pid 5856] <... set_robust_list resumed>) = 0 [pid 5856] chdir("./5") = 0 [pid 5856] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5856] setpgid(0, 0) = 0 [pid 5856] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5856] write(3, "1000", 4) = 4 [pid 5856] close(3executing program ) = 0 [pid 5856] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5856] write(1, "executing program\n", 18) = 18 [pid 5856] memfd_create("syzkaller", 0) = 3 [pid 5856] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8eb800000 [pid 5821] <... close resumed>) = 0 [pid 5821] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557f4da650) = 5857 ./strace-static-x86_64: Process 5857 attached executing program [pid 5857] set_robust_list(0x55557f4da660, 24) = 0 [pid 5857] chdir("./5") = 0 [pid 5857] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5857] setpgid(0, 0) = 0 [pid 5857] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5857] write(3, "1000", 4) = 4 [pid 5857] close(3) = 0 [pid 5857] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5857] write(1, "executing program\n", 18) = 18 [pid 5857] memfd_create("syzkaller", 0) = 3 [pid 5857] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8eb800000 [pid 5855] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5854] <... write resumed>) = 16777216 [pid 5854] munmap(0x7fe8eb800000, 138412032 [pid 5820] <... close resumed>) = 0 [pid 5854] <... munmap resumed>) = 0 [pid 5856] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5820] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5854] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5820] <... clone resumed>, child_tidptr=0x55557f4da650) = 5858 ./strace-static-x86_64: Process 5858 attached [pid 5854] ioctl(4, LOOP_SET_FD, 3 [pid 5858] set_robust_list(0x55557f4da660, 24) = 0 [pid 5858] chdir("./5") = 0 [pid 5858] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 executing program [pid 5858] setpgid(0, 0) = 0 [pid 5858] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5858] write(3, "1000", 4) = 4 [pid 5858] close(3) = 0 [pid 5858] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5858] write(1, "executing program\n", 18) = 18 [pid 5858] memfd_create("syzkaller", 0) = 3 [pid 5858] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8eb800000 [pid 5854] <... ioctl resumed>) = 0 [pid 5854] close(3) = 0 [pid 5854] close(4) = 0 [pid 5854] mkdir("./file0", 0777) = 0 [pid 5854] mount("/dev/loop2", "./file0", "jfs", 0, "quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota") = 0 [ 93.975584][ T5854] loop2: detected capacity change from 0 to 32768 [pid 5854] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5854] chdir("./file0") = 0 [pid 5854] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5854] exit_group(0) = ? [pid 5854] +++ exited with 0 +++ [pid 5822] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5854, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=19 /* 0.19 s */} --- [pid 5822] restart_syscall(<... resuming interrupted clone ...> [pid 5857] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5822] <... restart_syscall resumed>) = 0 [pid 5822] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5822] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5822] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5822] getdents64(3, 0x55557f4db6f0 /* 4 entries */, 32768) = 112 [pid 5822] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5822] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5822] unlink("./4/binderfs") = 0 [pid 5822] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5822] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5822] newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5822] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5822] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5822] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5822] getdents64(4, 0x55557f4e3730 /* 2 entries */, 32768) = 48 [pid 5822] getdents64(4, 0x55557f4e3730 /* 0 entries */, 32768) = 0 [pid 5822] close(4) = 0 [pid 5822] rmdir("./4/file0") = 0 [pid 5822] getdents64(3, 0x55557f4db6f0 /* 0 entries */, 32768) = 0 [pid 5822] close(3) = 0 [pid 5822] rmdir("./4") = 0 [pid 5822] mkdir("./5", 0777) = 0 [pid 5822] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5858] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5822] <... openat resumed>) = 3 [pid 5822] ioctl(3, LOOP_CLR_FD) = 0 [pid 5822] close(3 [pid 5855] <... write resumed>) = 16777216 [pid 5855] munmap(0x7fe8eb800000, 138412032) = 0 [pid 5855] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5855] ioctl(4, LOOP_SET_FD, 3 [pid 5856] <... write resumed>) = 16777216 [pid 5856] munmap(0x7fe8eb800000, 138412032 [pid 5855] <... ioctl resumed>) = 0 [pid 5855] close(3) = 0 [pid 5855] close(4) = 0 [pid 5855] mkdir("./file0", 0777) = 0 [ 94.310679][ T5855] loop4: detected capacity change from 0 to 32768 [pid 5855] mount("/dev/loop4", "./file0", "jfs", 0, "quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota" [pid 5856] <... munmap resumed>) = 0 [pid 5856] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5856] ioctl(4, LOOP_SET_FD, 3 [pid 5855] <... mount resumed>) = 0 [pid 5855] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5855] chdir("./file0") = 0 [pid 5855] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5855] exit_group(0) = ? [pid 5855] +++ exited with 0 +++ [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5855, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=27 /* 0.27 s */} --- [pid 5824] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5824] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, 0x55557f4db6f0 /* 4 entries */, 32768) = 112 [pid 5824] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5856] <... ioctl resumed>) = 0 [pid 5824] newfstatat(AT_FDCWD, "./5/binderfs", [pid 5856] close(3 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./5/binderfs" [pid 5856] <... close resumed>) = 0 [pid 5824] <... unlink resumed>) = 0 [pid 5856] close(4 [pid 5824] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5856] <... close resumed>) = 0 [pid 5856] mkdir("./file0", 0777) = 0 [ 94.388312][ T5856] loop3: detected capacity change from 0 to 32768 [pid 5856] mount("/dev/loop3", "./file0", "jfs", 0, "quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota") = 0 [pid 5856] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5824] <... umount2 resumed>) = 0 [pid 5856] chdir("./file0") = 0 [pid 5856] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5856] exit_group(0) = ? [pid 5824] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5856] +++ exited with 0 +++ [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5856, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=22 /* 0.22 s */} --- [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... restart_syscall resumed>) = 0 [pid 5823] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, 0x55557f4db6f0 /* 4 entries */, 32768) = 112 [pid 5823] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./5/binderfs", [pid 5824] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... openat resumed>) = 4 [pid 5823] unlink("./5/binderfs") = 0 [pid 5823] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(4, 0x55557f4e3730 /* 2 entries */, 32768) = 48 [pid 5824] getdents64(4, 0x55557f4e3730 /* 0 entries */, 32768) = 0 [pid 5824] close(4) = 0 [pid 5824] rmdir("./5/file0") = 0 [pid 5824] getdents64(3, 0x55557f4db6f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3) = 0 [pid 5824] rmdir("./5") = 0 [pid 5824] mkdir("./6", 0777 [pid 5823] <... umount2 resumed>) = 0 [pid 5823] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./5/file0", [pid 5857] <... write resumed>) = 16777216 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5857] munmap(0x7fe8eb800000, 138412032 [pid 5824] <... mkdir resumed>) = 0 [pid 5823] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(4, 0x55557f4e3730 /* 2 entries */, 32768) = 48 [pid 5823] getdents64(4, 0x55557f4e3730 /* 0 entries */, 32768) = 0 [pid 5823] close(4) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5823] rmdir("./5/file0" [pid 5824] <... openat resumed>) = 3 [pid 5823] <... rmdir resumed>) = 0 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5823] getdents64(3, [pid 5824] <... ioctl resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55557f4db6f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3 [pid 5823] close(3) = 0 [pid 5823] rmdir("./5") = 0 [pid 5823] mkdir("./6", 0777) = 0 [pid 5857] <... munmap resumed>) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5857] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5823] <... openat resumed>) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 5857] <... openat resumed>) = 4 [pid 5823] <... ioctl resumed>) = 0 [pid 5823] close(3 [pid 5857] ioctl(4, LOOP_SET_FD, 3 [pid 5822] <... close resumed>) = 0 [pid 5857] <... ioctl resumed>) = 0 [pid 5857] close(3 [pid 5822] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5859 attached [pid 5857] <... close resumed>) = 0 [pid 5859] set_robust_list(0x55557f4da660, 24 [pid 5857] close(4 [pid 5822] <... clone resumed>, child_tidptr=0x55557f4da650) = 5859 [pid 5859] <... set_robust_list resumed>) = 0 [pid 5857] <... close resumed>) = 0 [pid 5859] chdir("./5" [pid 5857] mkdir("./file0", 0777) = 0 [pid 5857] mount("/dev/loop1", "./file0", "jfs", 0, "quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota") = 0 [pid 5857] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5859] <... chdir resumed>) = 0 [pid 5859] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5857] <... openat resumed>) = 3 [pid 5859] <... prctl resumed>) = 0 [pid 5857] chdir("./file0" [pid 5859] setpgid(0, 0) = 0 [pid 5857] <... chdir resumed>) = 0 [pid 5857] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5857] exit_group(0) = ? [pid 5857] +++ exited with 0 +++ [pid 5821] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5857, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=22 /* 0.22 s */} --- [pid 5821] restart_syscall(<... resuming interrupted clone ...> [pid 5859] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5859] write(3, "1000", 4) = 4 [pid 5859] close(3) = 0 [pid 5859] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5859] write(1, "executing program\n", 18 [pid 5821] <... restart_syscall resumed>) = 0 [pid 5859] <... write resumed>) = 18 [pid 5821] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5821] newfstatat(3, "", executing program [pid 5859] memfd_create("syzkaller", 0 [pid 5821] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5821] getdents64(3, [pid 5859] <... memfd_create resumed>) = 3 [pid 5821] <... getdents64 resumed>0x55557f4db6f0 /* 4 entries */, 32768) = 112 [pid 5859] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5821] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5859] <... mmap resumed>) = 0x7fe8eb800000 [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 94.562509][ T5857] loop1: detected capacity change from 0 to 32768 [pid 5821] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./5/binderfs") = 0 [pid 5821] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5821] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5821] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5821] getdents64(4, 0x55557f4e3730 /* 2 entries */, 32768) = 48 [pid 5821] getdents64(4, 0x55557f4e3730 /* 0 entries */, 32768) = 0 [pid 5821] close(4) = 0 [pid 5821] rmdir("./5/file0") = 0 [pid 5821] getdents64(3, 0x55557f4db6f0 /* 0 entries */, 32768) = 0 [pid 5821] close(3) = 0 [pid 5821] rmdir("./5") = 0 [pid 5821] mkdir("./6", 0777) = 0 [pid 5821] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5821] ioctl(3, LOOP_CLR_FD) = 0 [pid 5821] close(3) = 0 [pid 5821] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557f4da650) = 5860 ./strace-static-x86_64: Process 5860 attached [pid 5860] set_robust_list(0x55557f4da660, 24) = 0 [pid 5860] chdir("./6") = 0 [pid 5860] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5860] setpgid(0, 0) = 0 [pid 5860] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5860] write(3, "1000", 4) = 4 [pid 5860] close(3) = 0 [pid 5860] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5860] write(1, "executing program\n", 18) = 18 [pid 5860] memfd_create("syzkaller", 0) = 3 [pid 5860] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8eb800000 [pid 5858] <... write resumed>) = 16777216 [pid 5858] munmap(0x7fe8eb800000, 138412032) = 0 [pid 5858] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5858] ioctl(4, LOOP_SET_FD, 3 [pid 5823] <... close resumed>) = 0 [pid 5858] <... ioctl resumed>) = 0 [pid 5858] close(3) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5858] close(4) = 0 [pid 5823] <... clone resumed>, child_tidptr=0x55557f4da650) = 5861 [pid 5858] mkdir("./file0", 0777./strace-static-x86_64: Process 5861 attached ) = 0 [pid 5861] set_robust_list(0x55557f4da660, 24 [pid 5858] mount("/dev/loop0", "./file0", "jfs", 0, "quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota" [pid 5861] <... set_robust_list resumed>) = 0 [pid 5861] chdir("./6") = 0 [pid 5861] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5861] setpgid(0, 0) = 0 [pid 5861] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5858] <... mount resumed>) = 0 [pid 5858] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5858] chdir("./file0" [pid 5861] <... openat resumed>) = 3 [pid 5858] <... chdir resumed>) = 0 [pid 5858] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5861] write(3, "1000", 4) = 4 [pid 5858] exit_group(0) = ? [pid 5861] close(3) = 0 [ 94.848491][ T5858] loop0: detected capacity change from 0 to 32768 [pid 5861] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5861] write(1, "executing program\n", 18executing program [pid 5858] +++ exited with 0 +++ [pid 5861] <... write resumed>) = 18 [pid 5820] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5858, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=25 /* 0.25 s */} --- [pid 5861] memfd_create("syzkaller", 0 [pid 5820] restart_syscall(<... resuming interrupted clone ...> [pid 5861] <... memfd_create resumed>) = 3 [pid 5861] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8eb800000 [pid 5820] <... restart_syscall resumed>) = 0 [pid 5820] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5820] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5820] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5820] getdents64(3, 0x55557f4db6f0 /* 4 entries */, 32768) = 112 [pid 5820] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5820] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5820] unlink("./5/binderfs") = 0 [pid 5820] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... close resumed>) = 0 [pid 5859] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5820] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5862 attached [pid 5824] <... clone resumed>, child_tidptr=0x55557f4da650) = 5862 [pid 5820] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5820] newfstatat(AT_FDCWD, "./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5820] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5820] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORYexecuting program ) = 4 [pid 5820] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5820] getdents64(4, [pid 5862] set_robust_list(0x55557f4da660, 24 [pid 5820] <... getdents64 resumed>0x55557f4e3730 /* 2 entries */, 32768) = 48 [pid 5862] <... set_robust_list resumed>) = 0 [pid 5820] getdents64(4, 0x55557f4e3730 /* 0 entries */, 32768) = 0 [pid 5862] chdir("./6") = 0 [pid 5820] close(4 [pid 5862] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5820] <... close resumed>) = 0 [pid 5862] setpgid(0, 0 [pid 5820] rmdir("./5/file0" [pid 5862] <... setpgid resumed>) = 0 [pid 5862] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5820] <... rmdir resumed>) = 0 [pid 5820] getdents64(3, 0x55557f4db6f0 /* 0 entries */, 32768) = 0 [pid 5820] close(3 [pid 5862] <... openat resumed>) = 3 [pid 5862] write(3, "1000", 4 [pid 5820] <... close resumed>) = 0 [pid 5862] <... write resumed>) = 4 [pid 5862] close(3 [pid 5820] rmdir("./5" [pid 5862] <... close resumed>) = 0 [pid 5862] symlink("/dev/binderfs", "./binderfs" [pid 5820] <... rmdir resumed>) = 0 [pid 5820] mkdir("./6", 0777 [pid 5862] <... symlink resumed>) = 0 [pid 5820] <... mkdir resumed>) = 0 [pid 5862] write(1, "executing program\n", 18) = 18 [pid 5820] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5820] ioctl(3, LOOP_CLR_FD) = 0 [pid 5862] memfd_create("syzkaller", 0 [pid 5820] close(3 [pid 5862] <... memfd_create resumed>) = 3 [pid 5862] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5820] <... close resumed>) = 0 [pid 5820] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5862] <... mmap resumed>) = 0x7fe8eb800000 [pid 5820] <... clone resumed>, child_tidptr=0x55557f4da650) = 5863 ./strace-static-x86_64: Process 5863 attached [pid 5863] set_robust_list(0x55557f4da660, 24) = 0 [pid 5863] chdir("./6") = 0 [pid 5863] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5863] setpgid(0, 0) = 0 [pid 5863] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5863] write(3, "1000", 4) = 4 [pid 5863] close(3) = 0 [pid 5863] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5863] write(1, "executing program\n", 18) = 18 [pid 5863] memfd_create("syzkaller", 0) = 3 [pid 5863] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8eb800000 [pid 5860] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5861] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5862] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5863] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5859] <... write resumed>) = 16777216 [pid 5859] munmap(0x7fe8eb800000, 138412032) = 0 [pid 5859] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5859] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5859] close(3) = 0 [pid 5859] close(4) = 0 [pid 5859] mkdir("./file0", 0777) = 0 [ 95.530858][ T5859] loop2: detected capacity change from 0 to 32768 [pid 5859] mount("/dev/loop2", "./file0", "jfs", 0, "quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota") = 0 [pid 5859] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5860] <... write resumed>) = 16777216 [pid 5859] <... openat resumed>) = 3 [pid 5859] chdir("./file0") = 0 [pid 5860] munmap(0x7fe8eb800000, 138412032 [pid 5859] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5859] exit_group(0) = ? [pid 5859] +++ exited with 0 +++ [pid 5822] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5859, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=18 /* 0.18 s */} --- [pid 5822] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5822] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5822] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5822] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5822] getdents64(3, 0x55557f4db6f0 /* 4 entries */, 32768) = 112 [pid 5822] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5822] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5822] unlink("./5/binderfs") = 0 [pid 5822] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5860] <... munmap resumed>) = 0 [pid 5860] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5822] <... umount2 resumed>) = 0 [pid 5860] ioctl(4, LOOP_SET_FD, 3 [pid 5822] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5822] newfstatat(AT_FDCWD, "./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5822] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5822] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5822] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5822] getdents64(4, 0x55557f4e3730 /* 2 entries */, 32768) = 48 [pid 5822] getdents64(4, 0x55557f4e3730 /* 0 entries */, 32768) = 0 [pid 5822] close(4) = 0 [pid 5822] rmdir("./5/file0") = 0 [pid 5860] <... ioctl resumed>) = 0 [pid 5822] getdents64(3, 0x55557f4db6f0 /* 0 entries */, 32768) = 0 [pid 5822] close(3) = 0 [pid 5860] close(3 [pid 5822] rmdir("./5" [pid 5860] <... close resumed>) = 0 [pid 5822] <... rmdir resumed>) = 0 [pid 5860] close(4 [pid 5822] mkdir("./6", 0777 [pid 5860] <... close resumed>) = 0 [pid 5860] mkdir("./file0", 0777 [pid 5822] <... mkdir resumed>) = 0 [pid 5822] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5860] <... mkdir resumed>) = 0 [pid 5822] <... openat resumed>) = 3 [pid 5822] ioctl(3, LOOP_CLR_FD) = 0 [pid 5822] close(3 [ 95.640165][ T5860] loop1: detected capacity change from 0 to 32768 [pid 5860] mount("/dev/loop1", "./file0", "jfs", 0, "quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota" [pid 5861] <... write resumed>) = 16777216 [pid 5860] <... mount resumed>) = 0 [pid 5860] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5860] chdir("./file0") = 0 [pid 5860] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5860] exit_group(0) = ? [pid 5861] munmap(0x7fe8eb800000, 138412032 [pid 5860] +++ exited with 0 +++ [pid 5821] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5860, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [pid 5821] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5821] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5821] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5821] getdents64(3, 0x55557f4db6f0 /* 4 entries */, 32768) = 112 [pid 5821] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./6/binderfs") = 0 [pid 5821] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5861] <... munmap resumed>) = 0 [pid 5862] <... write resumed>) = 16777216 [pid 5861] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5861] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5821] <... umount2 resumed>) = 0 [pid 5862] munmap(0x7fe8eb800000, 138412032 [pid 5861] close(3 [pid 5821] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5861] <... close resumed>) = 0 [pid 5821] <... openat resumed>) = 4 [pid 5861] close(4 [pid 5821] newfstatat(4, "", [pid 5861] <... close resumed>) = 0 [pid 5821] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5861] mkdir("./file0", 0777 [pid 5821] getdents64(4, [pid 5861] <... mkdir resumed>) = 0 [pid 5821] <... getdents64 resumed>0x55557f4e3730 /* 2 entries */, 32768) = 48 [pid 5821] getdents64(4, 0x55557f4e3730 /* 0 entries */, 32768) = 0 [pid 5821] close(4) = 0 [pid 5821] rmdir("./6/file0") = 0 [pid 5821] getdents64(3, 0x55557f4db6f0 /* 0 entries */, 32768) = 0 [pid 5821] close(3) = 0 [pid 5821] rmdir("./6") = 0 [pid 5821] mkdir("./7", 0777) = 0 [pid 5821] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5861] mount("/dev/loop3", "./file0", "jfs", 0, "quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota" [pid 5821] ioctl(3, LOOP_CLR_FD) = 0 [ 95.784430][ T5861] loop3: detected capacity change from 0 to 32768 [pid 5821] close(3 [pid 5863] <... write resumed>) = 16777216 [pid 5862] <... munmap resumed>) = 0 [pid 5863] munmap(0x7fe8eb800000, 138412032 [pid 5862] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5862] ioctl(4, LOOP_SET_FD, 3 [pid 5861] <... mount resumed>) = 0 [pid 5861] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5861] chdir("./file0") = 0 [pid 5861] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5861] exit_group(0) = ? [pid 5861] +++ exited with 0 +++ [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5861, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=25 /* 0.25 s */} --- [pid 5823] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5823] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, 0x55557f4db6f0 /* 4 entries */, 32768) = 112 [pid 5823] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./6/binderfs") = 0 [ 95.875209][ T5862] loop4: detected capacity change from 0 to 32768 [pid 5823] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5862] <... ioctl resumed>) = 0 [pid 5863] <... munmap resumed>) = 0 [pid 5862] close(3) = 0 [pid 5862] close(4) = 0 [pid 5862] mkdir("./file0", 0777) = 0 [pid 5862] mount("/dev/loop4", "./file0", "jfs", 0, "quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota" [pid 5823] <... umount2 resumed>) = 0 [pid 5823] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5823] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(4, 0x55557f4e3730 /* 2 entries */, 32768) = 48 [pid 5823] getdents64(4, 0x55557f4e3730 /* 0 entries */, 32768) = 0 [pid 5823] close(4) = 0 [pid 5823] rmdir("./6/file0") = 0 [pid 5823] getdents64(3, 0x55557f4db6f0 /* 0 entries */, 32768) = 0 [pid 5823] close(3 [pid 5863] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5863] ioctl(4, LOOP_SET_FD, 3 [pid 5823] <... close resumed>) = 0 [pid 5862] <... mount resumed>) = 0 [pid 5862] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5823] rmdir("./6" [pid 5862] <... openat resumed>) = 3 [pid 5823] <... rmdir resumed>) = 0 [pid 5862] chdir("./file0") = 0 [pid 5823] mkdir("./7", 0777) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD) = 0 [pid 5823] close(3 [pid 5863] <... ioctl resumed>) = 0 [pid 5863] close(3) = 0 [pid 5863] close(4) = 0 [pid 5863] mkdir("./file0", 0777) = 0 [pid 5822] <... close resumed>) = 0 [pid 5863] mount("/dev/loop0", "./file0", "jfs", 0, "quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota" [pid 5822] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557f4da650) = 5864 [pid 5862] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) ./strace-static-x86_64: Process 5864 attached [ 95.951981][ T5863] loop0: detected capacity change from 0 to 32768 [pid 5862] exit_group(0 [pid 5863] <... mount resumed>) = 0 [pid 5864] set_robust_list(0x55557f4da660, 24 [pid 5863] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5862] <... exit_group resumed>) = ? [pid 5864] <... set_robust_list resumed>) = 0 [pid 5863] <... openat resumed>) = 3 [pid 5863] chdir("./file0") = 0 [pid 5863] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5863] exit_group(0 [pid 5864] chdir("./6" [pid 5863] <... exit_group resumed>) = ? [pid 5863] +++ exited with 0 +++ [pid 5864] <... chdir resumed>) = 0 [pid 5862] +++ exited with 0 +++ [pid 5864] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5862, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=24 /* 0.24 s */} --- [pid 5820] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5863, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=22 /* 0.22 s */} --- [pid 5864] <... prctl resumed>) = 0 [pid 5820] restart_syscall(<... resuming interrupted clone ...> [pid 5864] setpgid(0, 0) = 0 [pid 5864] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5820] <... restart_syscall resumed>) = 0 [pid 5864] write(3, "1000", 4) = 4 [pid 5864] close(3 [pid 5820] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5864] <... close resumed>) = 0 [pid 5820] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5820] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5824] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5820] newfstatat(3, "", [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5820] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5820] getdents64(3, [pid 5824] <... openat resumed>) = 3 [pid 5820] <... getdents64 resumed>0x55557f4db6f0 /* 4 entries */, 32768) = 112 [pid 5824] newfstatat(3, "", [pid 5820] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5820] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] getdents64(3, [pid 5820] newfstatat(AT_FDCWD, "./6/binderfs", [pid 5824] <... getdents64 resumed>0x55557f4db6f0 /* 4 entries */, 32768) = 112 [pid 5820] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5820] unlink("./6/binderfs" [pid 5864] symlink("/dev/binderfs", "./binderfs" [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5820] <... unlink resumed>) = 0 [pid 5864] <... symlink resumed>) = 0 [pid 5824] newfstatat(AT_FDCWD, "./6/binderfs", [pid 5820] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 executing program [pid 5864] write(1, "executing program\n", 18 [pid 5824] unlink("./6/binderfs" [pid 5864] <... write resumed>) = 18 [pid 5864] memfd_create("syzkaller", 0) = 3 [pid 5824] <... unlink resumed>) = 0 [pid 5864] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5824] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5864] <... mmap resumed>) = 0x7fe8eb800000 [pid 5820] <... umount2 resumed>) = 0 [pid 5820] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5820] newfstatat(AT_FDCWD, "./6/file0", [pid 5824] <... umount2 resumed>) = 0 [pid 5820] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5820] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./6/file0", [pid 5820] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5820] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5820] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5820] getdents64(4, [pid 5824] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5820] <... getdents64 resumed>0x55557f4e3730 /* 2 entries */, 32768) = 48 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5820] getdents64(4, 0x55557f4e3730 /* 0 entries */, 32768) = 0 [pid 5824] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5820] close(4 [pid 5824] <... openat resumed>) = 4 [pid 5820] <... close resumed>) = 0 [pid 5824] newfstatat(4, "", [pid 5820] rmdir("./6/file0" [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5820] <... rmdir resumed>) = 0 [pid 5824] getdents64(4, [pid 5820] getdents64(3, [pid 5824] <... getdents64 resumed>0x55557f4e3730 /* 2 entries */, 32768) = 48 [pid 5820] <... getdents64 resumed>0x55557f4db6f0 /* 0 entries */, 32768) = 0 [pid 5824] getdents64(4, [pid 5820] close(3 [pid 5824] <... getdents64 resumed>0x55557f4e3730 /* 0 entries */, 32768) = 0 [pid 5824] close(4 [pid 5820] <... close resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 5820] rmdir("./6" [pid 5824] rmdir("./6/file0" [pid 5821] <... close resumed>) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5820] <... rmdir resumed>) = 0 [pid 5824] getdents64(3, [pid 5821] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] <... getdents64 resumed>0x55557f4db6f0 /* 0 entries */, 32768) = 0 [pid 5820] mkdir("./7", 0777./strace-static-x86_64: Process 5865 attached [pid 5824] close(3) = 0 [pid 5824] rmdir("./6") = 0 [pid 5821] <... clone resumed>, child_tidptr=0x55557f4da650) = 5865 [pid 5865] set_robust_list(0x55557f4da660, 24 [pid 5824] mkdir("./7", 0777 [pid 5820] <... mkdir resumed>) = 0 [pid 5865] <... set_robust_list resumed>) = 0 [pid 5824] <... mkdir resumed>) = 0 [pid 5865] chdir("./7" [pid 5820] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5824] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5865] <... chdir resumed>) = 0 [pid 5865] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5824] <... openat resumed>) = 3 [pid 5865] <... prctl resumed>) = 0 [pid 5820] <... openat resumed>) = 3 [pid 5820] ioctl(3, LOOP_CLR_FD [pid 5865] setpgid(0, 0 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5865] <... setpgid resumed>) = 0 [pid 5824] <... ioctl resumed>) = 0 [pid 5865] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5824] close(3 [pid 5865] <... openat resumed>) = 3 [pid 5820] <... ioctl resumed>) = 0 [pid 5865] write(3, "1000", 4 [pid 5820] close(3 [pid 5865] <... write resumed>) = 4 [pid 5865] close(3) = 0 [pid 5865] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5865] write(1, "executing program\n", 18) = 18 [pid 5865] memfd_create("syzkaller", 0) = 3 [pid 5865] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8eb800000 [pid 5864] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5823] <... close resumed>) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5866 attached [pid 5866] set_robust_list(0x55557f4da660, 24 [pid 5823] <... clone resumed>, child_tidptr=0x55557f4da650) = 5866 [pid 5866] <... set_robust_list resumed>) = 0 [pid 5866] chdir("./7") = 0 [pid 5866] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5866] setpgid(0, 0) = 0 [pid 5866] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5866] write(3, "1000", 4) = 4 [pid 5866] close(3) = 0 [pid 5866] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5866] write(1, "executing program\n", 18) = 18 [pid 5866] memfd_create("syzkaller", 0) = 3 [pid 5866] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8eb800000 [pid 5820] <... close resumed>) = 0 [pid 5820] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] <... close resumed>) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5867 attached [pid 5867] set_robust_list(0x55557f4da660, 24) = 0 ./strace-static-x86_64: Process 5868 attached [pid 5867] chdir("./7" [pid 5820] <... clone resumed>, child_tidptr=0x55557f4da650) = 5867 [pid 5867] <... chdir resumed>) = 0 [pid 5867] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5867] setpgid(0, 0 [pid 5868] set_robust_list(0x55557f4da660, 24 [pid 5867] <... setpgid resumed>) = 0 [pid 5867] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5867] write(3, "1000", 4) = 4 [pid 5867] close(3) = 0 [pid 5867] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5867] write(1, "executing program\n", 18) = 18 [pid 5867] memfd_create("syzkaller", 0 [pid 5868] <... set_robust_list resumed>) = 0 [pid 5867] <... memfd_create resumed>) = 3 [pid 5868] chdir("./7" [pid 5867] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5824] <... clone resumed>, child_tidptr=0x55557f4da650) = 5868 [pid 5867] <... mmap resumed>) = 0x7fe8eb800000 [pid 5868] <... chdir resumed>) = 0 [pid 5868] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5868] setpgid(0, 0) = 0 [pid 5868] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5865] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5868] write(3, "1000", 4) = 4 [pid 5868] close(3) = 0 [pid 5868] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5868] write(1, "executing program\n", 18) = 18 [pid 5868] memfd_create("syzkaller", 0) = 3 [pid 5868] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8eb800000 [pid 5864] <... write resumed>) = 16777216 [pid 5866] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5864] munmap(0x7fe8eb800000, 138412032 [pid 5867] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5864] <... munmap resumed>) = 0 [pid 5864] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5864] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5864] close(3) = 0 [pid 5864] close(4) = 0 [pid 5864] mkdir("./file0", 0777) = 0 [pid 5864] mount("/dev/loop2", "./file0", "jfs", 0, "quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota") = 0 [pid 5864] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5864] chdir("./file0") = 0 [pid 5864] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [ 96.723969][ T5864] loop2: detected capacity change from 0 to 32768 [pid 5864] exit_group(0) = ? [pid 5864] +++ exited with 0 +++ [pid 5822] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5864, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=29 /* 0.29 s */} --- [pid 5822] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5822] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5822] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5822] getdents64(3, 0x55557f4db6f0 /* 4 entries */, 32768) = 112 [pid 5822] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5822] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5822] unlink("./6/binderfs") = 0 [pid 5822] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5868] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5822] <... umount2 resumed>) = 0 [pid 5822] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5822] newfstatat(AT_FDCWD, "./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5822] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5822] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5822] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5822] getdents64(4, 0x55557f4e3730 /* 2 entries */, 32768) = 48 [pid 5822] getdents64(4, 0x55557f4e3730 /* 0 entries */, 32768) = 0 [pid 5822] close(4) = 0 [pid 5822] rmdir("./6/file0") = 0 [pid 5822] getdents64(3, 0x55557f4db6f0 /* 0 entries */, 32768) = 0 [pid 5822] close(3) = 0 [pid 5822] rmdir("./6") = 0 [pid 5822] mkdir("./7", 0777) = 0 [pid 5822] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5822] ioctl(3, LOOP_CLR_FD) = 0 [pid 5822] close(3 [pid 5865] <... write resumed>) = 16777216 [pid 5865] munmap(0x7fe8eb800000, 138412032) = 0 [pid 5865] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5865] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5865] close(3) = 0 [pid 5865] close(4) = 0 [pid 5865] mkdir("./file0", 0777) = 0 [pid 5865] mount("/dev/loop1", "./file0", "jfs", 0, "quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota") = 0 [pid 5865] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5865] chdir("./file0") = 0 [pid 5865] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5865] exit_group(0) = ? [pid 5865] +++ exited with 0 +++ [pid 5821] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5865, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=26 /* 0.26 s */} --- [pid 5821] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5821] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5821] getdents64(3, 0x55557f4db6f0 /* 4 entries */, 32768) = 112 [pid 5821] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./7/binderfs") = 0 [ 96.995444][ T5865] loop1: detected capacity change from 0 to 32768 [pid 5821] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5821] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5821] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5821] getdents64(4, 0x55557f4e3730 /* 2 entries */, 32768) = 48 [pid 5821] getdents64(4, 0x55557f4e3730 /* 0 entries */, 32768) = 0 [pid 5821] close(4) = 0 [pid 5821] rmdir("./7/file0") = 0 [pid 5821] getdents64(3, 0x55557f4db6f0 /* 0 entries */, 32768) = 0 [pid 5821] close(3) = 0 [pid 5821] rmdir("./7") = 0 [pid 5821] mkdir("./8", 0777) = 0 [pid 5821] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5821] ioctl(3, LOOP_CLR_FD) = 0 [pid 5821] close(3 [pid 5867] <... write resumed>) = 16777216 [pid 5867] munmap(0x7fe8eb800000, 138412032 [pid 5866] <... write resumed>) = 16777216 [pid 5866] munmap(0x7fe8eb800000, 138412032 [pid 5822] <... close resumed>) = 0 [pid 5867] <... munmap resumed>) = 0 [pid 5867] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5866] <... munmap resumed>) = 0 [pid 5822] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5867] <... openat resumed>) = 4 [pid 5867] ioctl(4, LOOP_SET_FD, 3 [pid 5866] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 5869 attached ) = 4 [pid 5867] <... ioctl resumed>) = 0 [pid 5867] close(3) = 0 [pid 5867] close(4) = 0 [pid 5867] mkdir("./file0", 0777) = 0 [pid 5866] ioctl(4, LOOP_SET_FD, 3 [pid 5869] set_robust_list(0x55557f4da660, 24 [pid 5867] mount("/dev/loop0", "./file0", "jfs", 0, "quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota" [pid 5822] <... clone resumed>, child_tidptr=0x55557f4da650) = 5869 [pid 5869] <... set_robust_list resumed>) = 0 [pid 5869] chdir("./7") = 0 [pid 5869] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5869] setpgid(0, 0) = 0 [pid 5869] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5869] write(3, "1000", 4executing program ) = 4 [pid 5869] close(3) = 0 [pid 5869] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5869] write(1, "executing program\n", 18) = 18 [pid 5869] memfd_create("syzkaller", 0) = 3 [pid 5869] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8eb800000 [pid 5866] <... ioctl resumed>) = 0 [pid 5866] close(3 [pid 5867] <... mount resumed>) = 0 [pid 5866] <... close resumed>) = 0 [pid 5867] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5866] close(4 [pid 5867] <... openat resumed>) = 3 [pid 5866] <... close resumed>) = 0 [pid 5867] chdir("./file0" [pid 5866] mkdir("./file0", 0777 [pid 5867] <... chdir resumed>) = 0 [pid 5866] <... mkdir resumed>) = 0 [pid 5867] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5866] mount("/dev/loop3", "./file0", "jfs", 0, "quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota" [pid 5867] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5867] exit_group(0) = ? [pid 5867] +++ exited with 0 +++ [pid 5820] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5867, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=18 /* 0.18 s */} --- [pid 5820] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5820] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5868] <... write resumed>) = 16777216 [pid 5820] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5820] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 97.214628][ T5867] loop0: detected capacity change from 0 to 32768 [ 97.246899][ T5866] loop3: detected capacity change from 0 to 32768 [pid 5820] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5820] getdents64(3, 0x55557f4db6f0 /* 4 entries */, 32768) = 112 [pid 5820] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5820] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5820] unlink("./7/binderfs" [pid 5868] munmap(0x7fe8eb800000, 138412032 [pid 5820] <... unlink resumed>) = 0 [pid 5820] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5866] <... mount resumed>) = 0 [pid 5866] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5866] chdir("./file0") = 0 [pid 5866] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5866] exit_group(0) = ? [pid 5866] +++ exited with 0 +++ [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5866, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=26 /* 0.26 s */} --- [pid 5823] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5823] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5868] <... munmap resumed>) = 0 [pid 5823] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, 0x55557f4db6f0 /* 4 entries */, 32768) = 112 [pid 5823] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./7/binderfs" [pid 5868] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5823] <... unlink resumed>) = 0 [pid 5868] <... openat resumed>) = 4 [pid 5823] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5868] ioctl(4, LOOP_SET_FD, 3 [pid 5820] <... umount2 resumed>) = 0 [pid 5820] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5820] newfstatat(AT_FDCWD, "./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5820] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5820] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5820] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5820] getdents64(4, 0x55557f4e3730 /* 2 entries */, 32768) = 48 [pid 5820] getdents64(4, 0x55557f4e3730 /* 0 entries */, 32768) = 0 [pid 5820] close(4) = 0 [pid 5820] rmdir("./7/file0") = 0 [pid 5868] <... ioctl resumed>) = 0 [pid 5820] getdents64(3, [pid 5868] close(3 [pid 5820] <... getdents64 resumed>0x55557f4db6f0 /* 0 entries */, 32768) = 0 [pid 5820] close(3) = 0 [pid 5820] rmdir("./7" [pid 5868] <... close resumed>) = 0 [pid 5820] <... rmdir resumed>) = 0 [pid 5868] close(4 [pid 5820] mkdir("./8", 0777 [pid 5868] <... close resumed>) = 0 [pid 5868] mkdir("./file0", 0777 [pid 5820] <... mkdir resumed>) = 0 [pid 5820] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5868] <... mkdir resumed>) = 0 [pid 5823] <... umount2 resumed>) = 0 [pid 5868] mount("/dev/loop4", "./file0", "jfs", 0, "quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota" [pid 5823] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5820] ioctl(3, LOOP_CLR_FD [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./7/file0", [pid 5820] <... ioctl resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5820] close(3 [pid 5823] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5868] <... mount resumed>) = 0 [pid 5823] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5820] <... close resumed>) = 0 [pid 5868] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5868] chdir("./file0") = 0 [pid 5868] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5868] exit_group(0 [pid 5823] <... openat resumed>) = 4 [pid 5868] <... exit_group resumed>) = ? [pid 5823] newfstatat(4, "", [pid 5820] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 5870 attached [pid 5823] getdents64(4, 0x55557f4e3730 /* 2 entries */, 32768) = 48 [pid 5820] <... clone resumed>, child_tidptr=0x55557f4da650) = 5870 [pid 5823] getdents64(4, 0x55557f4e3730 /* 0 entries */, 32768) = 0 [pid 5823] close(4 [pid 5870] set_robust_list(0x55557f4da660, 24 [pid 5823] <... close resumed>) = 0 [pid 5870] <... set_robust_list resumed>) = 0 [pid 5868] +++ exited with 0 +++ [pid 5823] rmdir("./7/file0" [pid 5870] chdir("./8" [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5868, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=30 /* 0.30 s */} --- [pid 5870] <... chdir resumed>) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 5870] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5823] getdents64(3, [pid 5824] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... getdents64 resumed>0x55557f4db6f0 /* 0 entries */, 32768) = 0 [pid 5870] <... prctl resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] close(3 [pid 5870] setpgid(0, 0 [pid 5824] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... close resumed>) = 0 [pid 5870] <... setpgid resumed>) = 0 [pid 5824] <... openat resumed>) = 3 [pid 5823] rmdir("./7" [pid 5870] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [ 97.343127][ T5868] loop4: detected capacity change from 0 to 32768 [pid 5824] newfstatat(3, "", [pid 5823] <... rmdir resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] mkdir("./8", 0777 [pid 5870] <... openat resumed>) = 3 [pid 5824] getdents64(3, [pid 5823] <... mkdir resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55557f4db6f0 /* 4 entries */, 32768) = 112 [pid 5823] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5870] write(3, "1000", 4 [pid 5824] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... openat resumed>) = 3 [pid 5870] <... write resumed>) = 4 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5870] close(3 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 5870] <... close resumed>) = 0 [pid 5824] newfstatat(AT_FDCWD, "./7/binderfs", [pid 5823] <... ioctl resumed>) = 0 [pid 5870] symlink("/dev/binderfs", "./binderfs" [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] close(3executing program [pid 5870] <... symlink resumed>) = 0 [pid 5824] unlink("./7/binderfs" [pid 5870] write(1, "executing program\n", 18) = 18 [pid 5870] memfd_create("syzkaller", 0) = 3 [pid 5870] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8eb800000 [pid 5824] <... unlink resumed>) = 0 [pid 5824] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5824] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5824] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(4, 0x55557f4e3730 /* 2 entries */, 32768) = 48 [pid 5824] getdents64(4, 0x55557f4e3730 /* 0 entries */, 32768) = 0 [pid 5824] close(4) = 0 [pid 5824] rmdir("./7/file0" [pid 5821] <... close resumed>) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5824] getdents64(3, [pid 5821] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] <... getdents64 resumed>0x55557f4db6f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3) = 0 [pid 5824] rmdir("./7"./strace-static-x86_64: Process 5871 attached ) = 0 [pid 5824] mkdir("./8", 0777 [pid 5871] set_robust_list(0x55557f4da660, 24 [pid 5824] <... mkdir resumed>) = 0 [pid 5871] <... set_robust_list resumed>) = 0 [pid 5821] <... clone resumed>, child_tidptr=0x55557f4da650) = 5871 [pid 5824] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5824] ioctl(3, LOOP_CLR_FD) = 0 [pid 5824] close(3 [pid 5871] chdir("./8") = 0 [pid 5871] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5871] setpgid(0, 0) = 0 [pid 5871] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5871] write(3, "1000", 4) = 4 [pid 5869] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5871] close(3) = 0 [pid 5871] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5871] write(1, "executing program\n", 18executing program ) = 18 [pid 5871] memfd_create("syzkaller", 0) = 3 [pid 5871] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8eb800000 [pid 5870] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5823] <... close resumed>) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557f4da650) = 5872 ./strace-static-x86_64: Process 5872 attached [pid 5872] set_robust_list(0x55557f4da660, 24) = 0 executing program [pid 5872] chdir("./8") = 0 [pid 5872] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5872] setpgid(0, 0) = 0 [pid 5872] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5872] write(3, "1000", 4) = 4 [pid 5872] close(3) = 0 [pid 5872] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5872] write(1, "executing program\n", 18) = 18 [pid 5872] memfd_create("syzkaller", 0) = 3 [pid 5872] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8eb800000 [pid 5824] <... close resumed>) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5873 attached , child_tidptr=0x55557f4da650) = 5873 [pid 5873] set_robust_list(0x55557f4da660, 24) = 0 [pid 5873] chdir("./8") = 0 [pid 5873] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5873] setpgid(0, 0) = 0 [pid 5873] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5873] write(3, "1000", 4) = 4 [pid 5873] close(3) = 0 [pid 5873] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5873] write(1, "executing program\n", 18) = 18 [pid 5873] memfd_create("syzkaller", 0) = 3 [pid 5873] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8eb800000 [pid 5871] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5872] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5869] <... write resumed>) = 16777216 [pid 5869] munmap(0x7fe8eb800000, 138412032 [pid 5873] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5869] <... munmap resumed>) = 0 [pid 5869] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5869] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5869] close(3) = 0 [pid 5869] close(4) = 0 [pid 5869] mkdir("./file0", 0777) = 0 [pid 5869] mount("/dev/loop2", "./file0", "jfs", 0, "quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota") = 0 [pid 5869] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5869] chdir("./file0") = 0 [pid 5869] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5869] exit_group(0) = ? [pid 5869] +++ exited with 0 +++ [pid 5822] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5869, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=27 /* 0.27 s */} --- [pid 5822] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5822] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5822] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5822] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5822] getdents64(3, 0x55557f4db6f0 /* 4 entries */, 32768) = 112 [pid 5822] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5822] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5822] unlink("./7/binderfs") = 0 [ 98.124597][ T5869] loop2: detected capacity change from 0 to 32768 [pid 5822] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5822] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5822] newfstatat(AT_FDCWD, "./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5822] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5822] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5822] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5822] getdents64(4, 0x55557f4e3730 /* 2 entries */, 32768) = 48 [pid 5822] getdents64(4, 0x55557f4e3730 /* 0 entries */, 32768) = 0 [pid 5822] close(4) = 0 [pid 5822] rmdir("./7/file0") = 0 [pid 5822] getdents64(3, 0x55557f4db6f0 /* 0 entries */, 32768) = 0 [pid 5822] close(3) = 0 [pid 5822] rmdir("./7") = 0 [pid 5822] mkdir("./8", 0777) = 0 [pid 5822] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5822] ioctl(3, LOOP_CLR_FD) = 0 [pid 5822] close(3) = 0 [pid 5822] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557f4da650) = 5874 ./strace-static-x86_64: Process 5874 attached [pid 5874] set_robust_list(0x55557f4da660, 24) = 0 [pid 5874] chdir("./8") = 0 [pid 5874] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5874] setpgid(0, 0) = 0 [pid 5874] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5870] <... write resumed>) = 16777216 [pid 5870] munmap(0x7fe8eb800000, 138412032 [pid 5874] write(3, "1000", 4) = 4 [pid 5874] close(3) = 0 [pid 5874] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5874] write(1, "executing program\n", 18) = 18 [pid 5874] memfd_create("syzkaller", 0) = 3 [pid 5870] <... munmap resumed>) = 0 [pid 5874] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8eb800000 [pid 5870] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5870] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5870] close(3) = 0 [pid 5870] close(4) = 0 [pid 5870] mkdir("./file0", 0777) = 0 [pid 5870] mount("/dev/loop0", "./file0", "jfs", 0, "quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota") = 0 [pid 5870] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5870] chdir("./file0") = 0 [pid 5870] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5870] exit_group(0) = ? [ 98.275877][ T5870] loop0: detected capacity change from 0 to 32768 [pid 5870] +++ exited with 0 +++ [pid 5820] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5870, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=21 /* 0.21 s */} --- [pid 5820] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5820] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5820] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5820] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5820] getdents64(3, 0x55557f4db6f0 /* 4 entries */, 32768) = 112 [pid 5820] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5820] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5820] unlink("./8/binderfs") = 0 [pid 5820] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5820] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5820] newfstatat(AT_FDCWD, "./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5820] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5820] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5820] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5820] getdents64(4, 0x55557f4e3730 /* 2 entries */, 32768) = 48 [pid 5820] getdents64(4, 0x55557f4e3730 /* 0 entries */, 32768) = 0 [pid 5820] close(4) = 0 [pid 5820] rmdir("./8/file0") = 0 [pid 5820] getdents64(3, 0x55557f4db6f0 /* 0 entries */, 32768) = 0 [pid 5820] close(3) = 0 [pid 5820] rmdir("./8" [pid 5871] <... write resumed>) = 16777216 [pid 5820] <... rmdir resumed>) = 0 [pid 5871] munmap(0x7fe8eb800000, 138412032 [pid 5820] mkdir("./9", 0777) = 0 [pid 5820] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5872] <... write resumed>) = 16777216 [pid 5871] <... munmap resumed>) = 0 [pid 5820] <... openat resumed>) = 3 [pid 5820] ioctl(3, LOOP_CLR_FD) = 0 [pid 5871] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5820] close(3 [pid 5872] munmap(0x7fe8eb800000, 138412032 [pid 5871] <... openat resumed>) = 4 [pid 5871] ioctl(4, LOOP_SET_FD, 3 [pid 5872] <... munmap resumed>) = 0 [pid 5871] <... ioctl resumed>) = 0 [pid 5872] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5872] ioctl(4, LOOP_SET_FD, 3 [pid 5871] close(3) = 0 [pid 5871] close(4) = 0 [pid 5871] mkdir("./file0", 0777) = 0 [ 98.522213][ T5871] loop1: detected capacity change from 0 to 32768 [pid 5871] mount("/dev/loop1", "./file0", "jfs", 0, "quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota" [pid 5872] <... ioctl resumed>) = 0 [pid 5871] <... mount resumed>) = 0 [pid 5871] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5871] chdir("./file0") = 0 [pid 5871] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5873] <... write resumed>) = 16777216 [pid 5872] close(3 [pid 5871] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5872] <... close resumed>) = 0 [pid 5871] exit_group(0 [pid 5872] close(4) = 0 [pid 5872] mkdir("./file0", 0777) = 0 [pid 5872] mount("/dev/loop3", "./file0", "jfs", 0, "quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota" [pid 5871] <... exit_group resumed>) = ? [pid 5873] munmap(0x7fe8eb800000, 138412032 [pid 5871] +++ exited with 0 +++ [pid 5821] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5871, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=21 /* 0.21 s */} --- [pid 5821] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5821] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5821] getdents64(3, 0x55557f4db6f0 /* 4 entries */, 32768) = 112 [pid 5821] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 98.572967][ T5872] loop3: detected capacity change from 0 to 32768 [pid 5821] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5872] <... mount resumed>) = 0 [pid 5821] unlink("./8/binderfs" [pid 5872] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5872] chdir("./file0" [pid 5821] <... unlink resumed>) = 0 [pid 5872] <... chdir resumed>) = 0 [pid 5872] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5821] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5872] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5872] exit_group(0) = ? [pid 5872] +++ exited with 0 +++ [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5872, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=25 /* 0.25 s */} --- [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 5873] <... munmap resumed>) = 0 [pid 5823] <... restart_syscall resumed>) = 0 [pid 5873] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5873] ioctl(4, LOOP_SET_FD, 3 [pid 5823] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5823] newfstatat(3, "", [pid 5874] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5873] <... ioctl resumed>) = 0 [pid 5821] <... umount2 resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5873] close(3) = 0 [pid 5823] getdents64(3, [pid 5873] close(4 [pid 5821] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... getdents64 resumed>0x55557f4db6f0 /* 4 entries */, 32768) = 112 [pid 5873] <... close resumed>) = 0 [pid 5873] mkdir("./file0", 0777 [pid 5823] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5873] <... mkdir resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5873] mount("/dev/loop4", "./file0", "jfs", 0, "quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota" [pid 5823] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] unlink("./8/binderfs" [pid 5821] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5821] newfstatat(4, "", [pid 5823] <... unlink resumed>) = 0 [pid 5821] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] getdents64(4, 0x55557f4e3730 /* 2 entries */, 32768) = 48 [pid 5821] getdents64(4, 0x55557f4e3730 /* 0 entries */, 32768) = 0 [pid 5873] <... mount resumed>) = 0 [pid 5823] <... umount2 resumed>) = 0 [pid 5821] close(4) = 0 [pid 5821] rmdir("./8/file0" [pid 5873] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5823] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5873] <... openat resumed>) = 3 [pid 5873] chdir("./file0" [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5873] <... chdir resumed>) = 0 [pid 5823] newfstatat(AT_FDCWD, "./8/file0", [pid 5873] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5873] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5823] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] <... rmdir resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5873] exit_group(0 [pid 5823] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5873] <... exit_group resumed>) = ? [pid 5823] <... openat resumed>) = 4 [pid 5823] newfstatat(4, "", [pid 5821] getdents64(3, [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(4, [pid 5821] <... getdents64 resumed>0x55557f4db6f0 /* 0 entries */, 32768) = 0 [pid 5821] close(3 [pid 5823] <... getdents64 resumed>0x55557f4e3730 /* 2 entries */, 32768) = 48 [pid 5823] getdents64(4, [pid 5821] <... close resumed>) = 0 [pid 5821] rmdir("./8" [pid 5823] <... getdents64 resumed>0x55557f4e3730 /* 0 entries */, 32768) = 0 [pid 5821] <... rmdir resumed>) = 0 [pid 5821] mkdir("./9", 0777 [pid 5873] +++ exited with 0 +++ [pid 5823] close(4 [pid 5821] <... mkdir resumed>) = 0 [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5873, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=22 /* 0.22 s */} --- [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 5823] <... close resumed>) = 0 [pid 5823] rmdir("./8/file0" [pid 5821] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5821] ioctl(3, LOOP_CLR_FD) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 5821] close(3 [ 98.658753][ T5873] loop4: detected capacity change from 0 to 32768 [pid 5823] getdents64(3, 0x55557f4db6f0 /* 0 entries */, 32768) = 0 [pid 5823] close(3) = 0 [pid 5823] rmdir("./8") = 0 [pid 5823] mkdir("./9", 0777 [pid 5824] <... restart_syscall resumed>) = 0 [pid 5824] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5823] <... mkdir resumed>) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, 0x55557f4db6f0 /* 4 entries */, 32768) = 112 [pid 5824] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./8/binderfs") = 0 [pid 5824] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... openat resumed>) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD) = 0 [pid 5823] close(3 [pid 5824] <... umount2 resumed>) = 0 [pid 5824] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5824] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(4, 0x55557f4e3730 /* 2 entries */, 32768) = 48 [pid 5824] getdents64(4, 0x55557f4e3730 /* 0 entries */, 32768) = 0 [pid 5824] close(4) = 0 [pid 5824] rmdir("./8/file0") = 0 [pid 5824] getdents64(3, 0x55557f4db6f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3) = 0 [pid 5824] rmdir("./8") = 0 [pid 5824] mkdir("./9", 0777) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5824] ioctl(3, LOOP_CLR_FD) = 0 [pid 5824] close(3 [pid 5820] <... close resumed>) = 0 [pid 5820] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5875 attached , child_tidptr=0x55557f4da650) = 5875 [pid 5875] set_robust_list(0x55557f4da660, 24) = 0 [pid 5875] chdir("./9") = 0 [pid 5875] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5875] setpgid(0, 0) = 0 [pid 5875] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5875] write(3, "1000", 4) = 4 [pid 5875] close(3) = 0 [pid 5875] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5875] write(1, "executing program\n", 18) = 18 [pid 5875] memfd_create("syzkaller", 0) = 3 [pid 5875] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8eb800000 [pid 5824] <... close resumed>) = 0 [pid 5821] <... close resumed>) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] <... close resumed>) = 0 [pid 5821] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] <... clone resumed>, child_tidptr=0x55557f4da650) = 5877 ./strace-static-x86_64: Process 5876 attached ./strace-static-x86_64: Process 5877 attached [pid 5876] set_robust_list(0x55557f4da660, 24 [pid 5875] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5876] <... set_robust_list resumed>) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5821] <... clone resumed>, child_tidptr=0x55557f4da650) = 5876 [pid 5876] chdir("./9" [pid 5823] <... clone resumed>, child_tidptr=0x55557f4da650) = 5878 executing program ./strace-static-x86_64: Process 5878 attached [pid 5878] set_robust_list(0x55557f4da660, 24) = 0 [pid 5878] chdir("./9") = 0 [pid 5878] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5878] setpgid(0, 0) = 0 [pid 5878] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5878] write(3, "1000", 4) = 4 [pid 5878] close(3) = 0 [pid 5878] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5878] write(1, "executing program\n", 18) = 18 [pid 5878] memfd_create("syzkaller", 0) = 3 [pid 5878] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8eb800000 [pid 5877] set_robust_list(0x55557f4da660, 24 [pid 5876] <... chdir resumed>) = 0 [pid 5874] <... write resumed>) = 16777216 [pid 5877] <... set_robust_list resumed>) = 0 [pid 5876] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5874] munmap(0x7fe8eb800000, 138412032executing program [pid 5877] chdir("./9" [pid 5876] <... prctl resumed>) = 0 [pid 5876] setpgid(0, 0) = 0 [pid 5876] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5876] write(3, "1000", 4) = 4 [pid 5876] close(3) = 0 [pid 5876] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5876] write(1, "executing program\n", 18) = 18 [pid 5876] memfd_create("syzkaller", 0) = 3 [pid 5876] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8eb800000 [pid 5877] <... chdir resumed>) = 0 [pid 5877] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5877] setpgid(0, 0 [pid 5874] <... munmap resumed>) = 0 [pid 5877] <... setpgid resumed>) = 0 [pid 5877] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5874] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5877] <... openat resumed>) = 3 [pid 5874] <... openat resumed>) = 4 [pid 5874] ioctl(4, LOOP_SET_FD, 3 [pid 5877] write(3, "1000", 4) = 4 [pid 5877] close(3) = 0 [pid 5877] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5877] write(1, "executing program\n", 18executing program ) = 18 [pid 5874] <... ioctl resumed>) = 0 [pid 5877] memfd_create("syzkaller", 0 [pid 5874] close(3) = 0 [pid 5874] close(4 [pid 5877] <... memfd_create resumed>) = 3 [pid 5874] <... close resumed>) = 0 [pid 5877] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5874] mkdir("./file0", 0777) = 0 [pid 5877] <... mmap resumed>) = 0x7fe8eb800000 [ 99.193056][ T5874] loop2: detected capacity change from 0 to 32768 [pid 5874] mount("/dev/loop2", "./file0", "jfs", 0, "quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota") = 0 [pid 5874] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5874] chdir("./file0") = 0 [pid 5874] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5878] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5874] exit_group(0) = ? [pid 5874] +++ exited with 0 +++ [pid 5822] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5874, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=21 /* 0.21 s */} --- [pid 5822] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5822] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5822] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5822] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5822] getdents64(3, 0x55557f4db6f0 /* 4 entries */, 32768) = 112 [pid 5822] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5822] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5822] unlink("./8/binderfs") = 0 [pid 5822] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5876] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5822] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5877] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5822] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5822] newfstatat(AT_FDCWD, "./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5822] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5822] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5822] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5822] getdents64(4, 0x55557f4e3730 /* 2 entries */, 32768) = 48 [pid 5822] getdents64(4, 0x55557f4e3730 /* 0 entries */, 32768) = 0 [pid 5822] close(4) = 0 [pid 5822] rmdir("./8/file0") = 0 [pid 5822] getdents64(3, 0x55557f4db6f0 /* 0 entries */, 32768) = 0 [pid 5822] close(3) = 0 [pid 5822] rmdir("./8") = 0 [pid 5822] mkdir("./9", 0777) = 0 [pid 5822] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5822] ioctl(3, LOOP_CLR_FD) = 0 [pid 5822] close(3 [pid 5875] <... write resumed>) = 16777216 [pid 5875] munmap(0x7fe8eb800000, 138412032) = 0 [pid 5875] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5875] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5875] close(3) = 0 [pid 5875] close(4) = 0 [pid 5875] mkdir("./file0", 0777) = 0 [ 99.535303][ T5875] loop0: detected capacity change from 0 to 32768 [pid 5875] mount("/dev/loop0", "./file0", "jfs", 0, "quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota") = 0 [pid 5875] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5875] chdir("./file0") = 0 [pid 5875] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5875] exit_group(0) = ? [pid 5875] +++ exited with 0 +++ [pid 5820] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5875, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=23 /* 0.23 s */} --- [pid 5820] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5820] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5820] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5820] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5820] getdents64(3, 0x55557f4db6f0 /* 4 entries */, 32768) = 112 [pid 5820] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5820] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5820] unlink("./9/binderfs") = 0 [pid 5820] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5820] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5820] newfstatat(AT_FDCWD, "./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5820] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5820] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5820] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5820] getdents64(4, 0x55557f4e3730 /* 2 entries */, 32768) = 48 [pid 5820] getdents64(4, 0x55557f4e3730 /* 0 entries */, 32768) = 0 [pid 5820] close(4) = 0 [pid 5820] rmdir("./9/file0") = 0 [pid 5820] getdents64(3, 0x55557f4db6f0 /* 0 entries */, 32768) = 0 [pid 5820] close(3) = 0 [pid 5820] rmdir("./9") = 0 [pid 5820] mkdir("./10", 0777) = 0 [pid 5820] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5820] ioctl(3, LOOP_CLR_FD) = 0 [pid 5820] close(3 [pid 5878] <... write resumed>) = 16777216 [pid 5878] munmap(0x7fe8eb800000, 138412032 [pid 5822] <... close resumed>) = 0 [pid 5822] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5879 attached [pid 5879] set_robust_list(0x55557f4da660, 24 [pid 5822] <... clone resumed>, child_tidptr=0x55557f4da650) = 5879 [pid 5879] <... set_robust_list resumed>) = 0 [pid 5879] chdir("./9") = 0 [pid 5879] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5879] setpgid(0, 0) = 0 [pid 5879] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5879] write(3, "1000", 4) = 4 [pid 5879] close(3) = 0 [pid 5879] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5879] write(1, "executing program\n", 18) = 18 [pid 5879] memfd_create("syzkaller", 0 [pid 5878] <... munmap resumed>) = 0 [pid 5879] <... memfd_create resumed>) = 3 [pid 5879] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8eb800000 [pid 5878] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5878] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5878] close(3) = 0 [pid 5878] close(4) = 0 [pid 5878] mkdir("./file0", 0777) = 0 [pid 5878] mount("/dev/loop3", "./file0", "jfs", 0, "quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota") = 0 [pid 5878] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5878] chdir("./file0") = 0 [pid 5878] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [ 99.823083][ T5878] loop3: detected capacity change from 0 to 32768 [pid 5878] exit_group(0 [pid 5876] <... write resumed>) = 16777216 [pid 5878] <... exit_group resumed>) = ? [pid 5878] +++ exited with 0 +++ [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5878, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=21 /* 0.21 s */} --- [pid 5876] munmap(0x7fe8eb800000, 138412032 [pid 5823] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5823] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5877] <... write resumed>) = 16777216 [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, [pid 5877] munmap(0x7fe8eb800000, 138412032 [pid 5823] <... getdents64 resumed>0x55557f4db6f0 /* 4 entries */, 32768) = 112 [pid 5823] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5820] <... close resumed>) = 0 [pid 5877] <... munmap resumed>) = 0 [pid 5876] <... munmap resumed>) = 0 [pid 5823] newfstatat(AT_FDCWD, "./9/binderfs", [pid 5877] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5876] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5820] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5877] <... openat resumed>) = 4 [pid 5876] <... openat resumed>) = 4 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 5880 attached [pid 5823] unlink("./9/binderfs" [pid 5877] ioctl(4, LOOP_SET_FD, 3 [pid 5876] ioctl(4, LOOP_SET_FD, 3 [pid 5823] <... unlink resumed>) = 0 [pid 5880] set_robust_list(0x55557f4da660, 24 [pid 5823] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5880] <... set_robust_list resumed>) = 0 [pid 5880] chdir("./10") = 0 [pid 5820] <... clone resumed>, child_tidptr=0x55557f4da650) = 5880 [pid 5880] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5880] setpgid(0, 0) = 0 [pid 5880] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5880] write(3, "1000", 4) = 4 [pid 5880] close(3) = 0 [pid 5880] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5880] write(1, "executing program\n", 18executing program ) = 18 [pid 5877] <... ioctl resumed>) = 0 [pid 5880] memfd_create("syzkaller", 0 [pid 5876] <... ioctl resumed>) = 0 [pid 5880] <... memfd_create resumed>) = 3 [pid 5880] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5877] close(3 [pid 5876] close(3 [pid 5823] <... umount2 resumed>) = 0 [pid 5876] <... close resumed>) = 0 [pid 5876] close(4 [pid 5880] <... mmap resumed>) = 0x7fe8eb800000 [pid 5823] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5876] <... close resumed>) = 0 [pid 5876] mkdir("./file0", 0777 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./9/file0", [pid 5877] <... close resumed>) = 0 [pid 5876] <... mkdir resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5877] close(4 [pid 5876] mount("/dev/loop1", "./file0", "jfs", 0, "quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota" [pid 5877] <... close resumed>) = 0 [pid 5823] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5877] mkdir("./file0", 0777) = 0 [pid 5877] mount("/dev/loop4", "./file0", "jfs", 0, "quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota" [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5823] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(4, 0x55557f4e3730 /* 2 entries */, 32768) = 48 [pid 5823] getdents64(4, 0x55557f4e3730 /* 0 entries */, 32768) = 0 [pid 5823] close(4) = 0 [ 99.956469][ T5876] loop1: detected capacity change from 0 to 32768 [ 99.963495][ T5877] loop4: detected capacity change from 0 to 32768 [pid 5823] rmdir("./9/file0") = 0 [pid 5823] getdents64(3, 0x55557f4db6f0 /* 0 entries */, 32768) = 0 [pid 5823] close(3) = 0 [pid 5823] rmdir("./9") = 0 [pid 5823] mkdir("./10", 0777 [pid 5877] <... mount resumed>) = 0 [pid 5877] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5823] <... mkdir resumed>) = 0 [pid 5877] <... openat resumed>) = 3 [pid 5876] <... mount resumed>) = 0 [pid 5877] chdir("./file0" [pid 5823] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5877] <... chdir resumed>) = 0 [pid 5877] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5823] <... openat resumed>) = 3 [pid 5877] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5823] ioctl(3, LOOP_CLR_FD [pid 5876] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5877] exit_group(0 [pid 5823] <... ioctl resumed>) = 0 [pid 5877] <... exit_group resumed>) = ? [pid 5823] close(3 [pid 5876] <... openat resumed>) = 3 [pid 5876] chdir("./file0") = 0 [pid 5876] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5876] exit_group(0) = ? [pid 5876] +++ exited with 0 +++ [pid 5821] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5876, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=25 /* 0.25 s */} --- [pid 5821] restart_syscall(<... resuming interrupted clone ...> [pid 5879] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5821] <... restart_syscall resumed>) = 0 [pid 5821] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5877] +++ exited with 0 +++ [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5877, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=26 /* 0.26 s */} --- [pid 5821] <... openat resumed>) = 3 [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 5821] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5821] getdents64(3, [pid 5824] <... restart_syscall resumed>) = 0 [pid 5821] <... getdents64 resumed>0x55557f4db6f0 /* 4 entries */, 32768) = 112 [pid 5821] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./9/binderfs", [pid 5824] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5821] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... openat resumed>) = 3 [pid 5821] unlink("./9/binderfs" [pid 5824] newfstatat(3, "", [pid 5821] <... unlink resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5821] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] getdents64(3, 0x55557f4db6f0 /* 4 entries */, 32768) = 112 [pid 5824] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./9/binderfs") = 0 [ 100.086247][ T5824] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN PTI [ 100.098197][ T5824] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 100.106718][ T5824] CPU: 1 UID: 0 PID: 5824 Comm: syz-executor146 Not tainted 6.15.0-rc4-syzkaller-00011-gf15d97df5afa #0 PREEMPT(full) [ 100.119203][ T5824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 100.129279][ T5824] RIP: 0010:lmLogSync+0x22e/0x9d0 [ 100.134368][ T5824] Code: 20 bc fe 4d 8d 7e f0 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 50 ac e5 fe 4d 8b 3f 49 83 c7 30 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 34 ac e5 fe 49 8b 3f e8 4c 20 bc fe [ 100.153994][ T5824] RSP: 0018:ffffc90004117a40 EFLAGS: 00010206 [ 100.160100][ T5824] RAX: 0000000000000006 RBX: dffffc0000000000 RCX: ffff88803269da00 [ 100.168095][ T5824] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 100.176085][ T5824] RBP: ffffc90004117b48 R08: ffffc9000411799f R09: 0000000000000000 [ 100.184062][ T5824] R10: ffffc90004117828 R11: fffff52000822f34 R12: ffff88802611e000 [ 100.192038][ T5824] R13: dffffc0000000000 R14: ffff888032364638 R15: 0000000000000030 [ 100.200009][ T5824] FS: 000055557f4da380(0000) GS:ffff888126202000(0000) knlGS:0000000000000000 [ 100.208937][ T5824] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 100.215522][ T5824] CR2: 00007fe8ebb7d000 CR3: 000000007d374000 CR4: 00000000003526f0 [ 100.223507][ T5824] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 100.231482][ T5824] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 100.239465][ T5824] Call Trace: [ 100.242758][ T5824] [ 100.245723][ T5824] ? __pfx___mutex_lock+0x10/0x10 [ 100.250773][ T5824] ? __pfx_lmLogSync+0x10/0x10 [ 100.255554][ T5824] ? __pfx_dquot_writeback_dquots+0x10/0x10 [ 100.261460][ T5824] ? __pfx___writeback_inodes_sb_nr+0x10/0x10 [ 100.267528][ T5824] jfs_syncpt+0x7b/0x90 [ 100.271694][ T5824] jfs_sync_fs+0x87/0xa0 [ 100.275942][ T5824] sync_filesystem+0xeb/0x230 [ 100.280630][ T5824] generic_shutdown_super+0x6f/0x2c0 [ 100.285920][ T5824] kill_block_super+0x44/0x90 [ 100.290600][ T5824] deactivate_locked_super+0xb9/0x130 [ 100.295973][ T5824] cleanup_mnt+0x425/0x4c0 [ 100.300407][ T5824] ? lockdep_hardirqs_on+0x9c/0x150 [ 100.305634][ T5824] task_work_run+0x1d1/0x260 [ 100.310244][ T5824] ? __pfx_task_work_run+0x10/0x10 [ 100.315372][ T5824] ? path_umount+0x249/0xf60 [ 100.319977][ T5824] ptrace_notify+0x281/0x2c0 [ 100.324581][ T5824] ? __pfx_ptrace_notify+0x10/0x10 [ 100.329791][ T5824] ? __pfx_path_umount+0x10/0x10 [ 100.334731][ T5824] ? user_path_at+0x44/0x60 [ 100.339240][ T5824] syscall_exit_work+0xc2/0x1d0 [ 100.344095][ T5824] syscall_exit_to_user_mode_prepare+0x6f/0xe0 [ 100.350259][ T5824] syscall_exit_to_user_mode+0x12/0x120 [ 100.355824][ T5824] do_syscall_64+0x103/0x210 [ 100.360448][ T5824] ? clear_bhb_loop+0x45/0xa0 [ 100.365139][ T5824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.371039][ T5824] RIP: 0033:0x7fe8f3dcf477 [ 100.375467][ T5824] Code: 07 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 100.395170][ T5824] RSP: 002b:00007fff4918c988 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 100.403591][ T5824] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fe8f3dcf477 [ 100.411565][ T5824] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff4918ca40 [ 100.419708][ T5824] RBP: 00007fff4918ca40 R08: 0000000000000000 R09: 0000000000000000 [ 100.427700][ T5824] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007fff4918dab0 [ 100.435669][ T5824] R13: 000055557f4db6c0 R14: 000000000000000a R15: 431bde82d7b634db [ 100.443649][ T5824] [ 100.446670][ T5824] Modules linked in: [ 100.451271][ T5824] ---[ end trace 0000000000000000 ]--- [pid 5824] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5880] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5823] <... close resumed>) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5881 attached [pid 5879] <... write resumed>) = 16777216 [pid 5823] <... clone resumed>, child_tidptr=0x55557f4da650) = 5881 [pid 5879] munmap(0x7fe8eb800000, 138412032 [pid 5881] set_robust_list(0x55557f4da660, 24) = 0 [pid 5879] <... munmap resumed>) = 0 [pid 5881] chdir("./10" [pid 5879] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5881] <... chdir resumed>) = 0 [ 100.546458][ T5824] RIP: 0010:lmLogSync+0x22e/0x9d0 [ 100.551595][ T5824] Code: 20 bc fe 4d 8d 7e f0 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 50 ac e5 fe 4d 8b 3f 49 83 c7 30 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 34 ac e5 fe 49 8b 3f e8 4c 20 bc fe [ 100.580042][ T5824] RSP: 0018:ffffc90004117a40 EFLAGS: 00010206 [ 100.586455][ T5824] RAX: 0000000000000006 RBX: dffffc0000000000 RCX: ffff88803269da00 [pid 5879] ioctl(4, LOOP_SET_FD, 3 [pid 5881] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5879] <... ioctl resumed>) = 0 [pid 5879] close(3 [pid 5881] <... prctl resumed>) = 0 [pid 5879] <... close resumed>) = 0 [ 100.594752][ T5824] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 100.604562][ T5879] loop2: detected capacity change from 0 to 32768 [ 100.611818][ T5824] RBP: ffffc90004117b48 R08: ffffc9000411799f R09: 0000000000000000 [ 100.620069][ T5824] R10: ffffc90004117828 R11: fffff52000822f34 R12: ffff88802611e000 [ 100.628451][ T5824] R13: dffffc0000000000 R14: ffff888032364638 R15: 0000000000000030 [ 100.636592][ T5824] FS: 000055557f4da380(0000) GS:ffff888126202000(0000) knlGS:0000000000000000 [pid 5880] <... write resumed>) = 16777216 [pid 5881] setpgid(0, 0 [pid 5879] close(4 [pid 5880] munmap(0x7fe8eb800000, 138412032 [pid 5881] <... setpgid resumed>) = 0 [pid 5881] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5881] write(3, "1000", 4) = 4 [pid 5881] close(3) = 0 [ 100.645809][ T5824] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 100.652492][ T5824] CR2: 00007fe8f3d997b5 CR3: 000000007d374000 CR4: 00000000003526f0 [ 100.660500][ T5824] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 100.668534][ T5824] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 100.676563][ T5824] Kernel panic - not syncing: Fatal exception [ 100.682960][ T5824] Kernel Offset: disabled [ 100.687334][ T5824] Rebooting in 86400 seconds..