./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1819401121 <...> Warning: Permanently added '10.128.0.153' (ED25519) to the list of known hosts. execve("./syz-executor1819401121", ["./syz-executor1819401121"], 0x7fff7c888880 /* 10 vars */) = 0 brk(NULL) = 0x55558ffa7000 brk(0x55558ffa7d00) = 0x55558ffa7d00 arch_prctl(ARCH_SET_FS, 0x55558ffa7380) = 0 set_tid_address(0x55558ffa7650) = 5851 set_robust_list(0x55558ffa7660, 24) = 0 rseq(0x55558ffa7ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1819401121", 4096) = 28 getrandom("\x02\x20\x5b\x49\x2c\x39\x7a\x4f", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55558ffa7d00 brk(0x55558ffc8d00) = 0x55558ffc8d00 brk(0x55558ffc9000) = 0x55558ffc9000 mprotect(0x7f856785c000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5853 attached , child_tidptr=0x55558ffa7650) = 5853 [pid 5853] set_robust_list(0x55558ffa7660, 24) = 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5853] mkdir("./syzkaller.xkAIXM", 0700./strace-static-x86_64: Process 5854 attached [pid 5851] <... clone resumed>, child_tidptr=0x55558ffa7650) = 5854 [pid 5854] set_robust_list(0x55558ffa7660, 24 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5854] <... set_robust_list resumed>) = 0 [pid 5853] <... mkdir resumed>) = 0 [pid 5853] chmod("./syzkaller.xkAIXM", 0777) = 0 [pid 5854] mkdir("./syzkaller.U7Z4r8", 0700 [pid 5853] chdir("./syzkaller.xkAIXM") = 0 [pid 5853] mkdir("./0", 0777 [pid 5851] <... clone resumed>, child_tidptr=0x55558ffa7650) = 5855 [pid 5854] <... mkdir resumed>) = 0 [pid 5853] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5855 attached [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5855] set_robust_list(0x55558ffa7660, 24 [pid 5854] chmod("./syzkaller.U7Z4r8", 0777 [pid 5853] openat(AT_FDCWD, "/dev/loop0", O_RDWR./strace-static-x86_64: Process 5856 attached [pid 5855] <... set_robust_list resumed>) = 0 [pid 5854] <... chmod resumed>) = 0 [pid 5851] <... clone resumed>, child_tidptr=0x55558ffa7650) = 5856 [pid 5856] set_robust_list(0x55558ffa7660, 24 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5855] mkdir("./syzkaller.s21XbC", 0700 [pid 5854] chdir("./syzkaller.U7Z4r8" [pid 5856] <... set_robust_list resumed>) = 0 [pid 5854] <... chdir resumed>) = 0 [pid 5853] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5857 attached [pid 5856] getrandom( [pid 5854] mkdir("./0", 0777 [pid 5853] ioctl(3, LOOP_CLR_FD [pid 5856] <... getrandom resumed>"\x7f\x5d\x72\xef\xf1\x6e\x5d\xfe", 8, GRND_NONBLOCK) = 8 [pid 5853] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5851] <... clone resumed>, child_tidptr=0x55558ffa7650) = 5857 [pid 5857] set_robust_list(0x55558ffa7660, 24 [pid 5856] getrandom( [pid 5855] <... mkdir resumed>) = 0 [pid 5857] <... set_robust_list resumed>) = 0 [pid 5856] <... getrandom resumed>"\x1c\xf1\xcf\x64\x8f\x88\x8b\xeb", 8, GRND_NONBLOCK) = 8 [pid 5853] close(3 [pid 5857] mkdir("./syzkaller.GLCibb", 0700 [pid 5856] mkdir("./syzkaller.8OOQ6c", 0700 [pid 5857] <... mkdir resumed>) = 0 [pid 5855] chmod("./syzkaller.s21XbC", 0777 [pid 5854] <... mkdir resumed>) = 0 [pid 5853] <... close resumed>) = 0 [pid 5855] <... chmod resumed>) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5857] chmod("./syzkaller.GLCibb", 0777 [pid 5856] <... mkdir resumed>) = 0 [pid 5855] chdir("./syzkaller.s21XbC" [pid 5854] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5857] <... chmod resumed>) = 0 ./strace-static-x86_64: Process 5858 attached [pid 5856] chmod("./syzkaller.8OOQ6c", 0777 [pid 5855] <... chdir resumed>) = 0 [pid 5854] <... openat resumed>) = 3 [pid 5857] chdir("./syzkaller.GLCibb" [pid 5856] <... chmod resumed>) = 0 [pid 5855] mkdir("./0", 0777 [pid 5858] set_robust_list(0x55558ffa7660, 24 [pid 5854] ioctl(3, LOOP_CLR_FD [pid 5858] <... set_robust_list resumed>) = 0 [pid 5856] chdir("./syzkaller.8OOQ6c" [pid 5854] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5858] chdir("./0" [pid 5857] <... chdir resumed>) = 0 [pid 5856] <... chdir resumed>) = 0 [pid 5855] <... mkdir resumed>) = 0 [pid 5858] <... chdir resumed>) = 0 [pid 5857] mkdir("./0", 0777 [pid 5856] mkdir("./0", 0777 [pid 5854] close(3 [pid 5858] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5854] <... close resumed>) = 0 [pid 5853] <... clone resumed>, child_tidptr=0x55558ffa7650) = 5858 [pid 5858] <... prctl resumed>) = 0 [pid 5854] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5858] setpgid(0, 0 [pid 5856] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5859 attached [pid 5858] <... setpgid resumed>) = 0 [pid 5855] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5856] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5855] <... openat resumed>) = 3 [pid 5858] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5856] <... openat resumed>) = 3 [pid 5859] set_robust_list(0x55558ffa7660, 24 [pid 5855] ioctl(3, LOOP_CLR_FD [pid 5857] <... mkdir resumed>) = 0 [pid 5859] <... set_robust_list resumed>) = 0 [pid 5858] <... openat resumed>) = 3 [pid 5857] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5855] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5856] ioctl(3, LOOP_CLR_FD [pid 5854] <... clone resumed>, child_tidptr=0x55558ffa7650) = 5859 [pid 5856] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5858] write(3, "1000", 4 [pid 5856] close(3 [pid 5858] <... write resumed>) = 4 [pid 5856] <... close resumed>) = 0 [pid 5858] close(3) = 0 [pid 5856] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5859] chdir("./0" [pid 5858] symlink("/dev/binderfs", "./binderfs" [pid 5857] <... openat resumed>) = 3 [pid 5855] close(3./strace-static-x86_64: Process 5860 attached [pid 5856] <... clone resumed>, child_tidptr=0x55558ffa7650) = 5860 [pid 5859] <... chdir resumed>) = 0 [pid 5858] <... symlink resumed>) = 0 [pid 5857] ioctl(3, LOOP_CLR_FD [pid 5855] <... close resumed>) = 0 [pid 5860] set_robust_list(0x55558ffa7660, 24 [pid 5859] prctl(PR_SET_PDEATHSIG, SIGKILL executing program [pid 5858] write(1, "executing program\n", 18 [pid 5857] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5855] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5860] <... set_robust_list resumed>) = 0 [pid 5859] <... prctl resumed>) = 0 [pid 5858] <... write resumed>) = 18 [pid 5857] close(3 [pid 5860] chdir("./0" [pid 5859] setpgid(0, 0 [pid 5858] memfd_create("syzkaller", 0 [pid 5857] <... close resumed>) = 0 ./strace-static-x86_64: Process 5861 attached [pid 5857] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5859] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 5862 attached [pid 5860] <... chdir resumed>) = 0 [pid 5855] <... clone resumed>, child_tidptr=0x55558ffa7650) = 5861 [pid 5859] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5860] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5858] <... memfd_create resumed>) = 3 [pid 5860] <... prctl resumed>) = 0 [pid 5859] <... openat resumed>) = 3 [pid 5861] set_robust_list(0x55558ffa7660, 24 [pid 5860] setpgid(0, 0 [pid 5858] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5862] set_robust_list(0x55558ffa7660, 24 [pid 5861] <... set_robust_list resumed>) = 0 [pid 5860] <... setpgid resumed>) = 0 [pid 5859] write(3, "1000", 4 [pid 5858] <... mmap resumed>) = 0x7f855f39b000 [pid 5862] <... set_robust_list resumed>) = 0 [pid 5861] chdir("./0" [pid 5860] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5859] <... write resumed>) = 4 [pid 5857] <... clone resumed>, child_tidptr=0x55558ffa7650) = 5862 [pid 5862] chdir("./0" [pid 5861] <... chdir resumed>) = 0 [pid 5859] close(3 [pid 5861] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5859] <... close resumed>) = 0 [pid 5862] <... chdir resumed>) = 0 [pid 5861] <... prctl resumed>) = 0 [pid 5860] <... openat resumed>) = 3 [pid 5862] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5861] setpgid(0, 0 [pid 5860] write(3, "1000", 4 [pid 5859] symlink("/dev/binderfs", "./binderfs" [pid 5862] <... prctl resumed>) = 0 [pid 5861] <... setpgid resumed>) = 0 [pid 5859] <... symlink resumed>) = 0 [pid 5862] setpgid(0, 0 [pid 5861] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5860] <... write resumed>) = 4 [pid 5862] <... setpgid resumed>) = 0 [pid 5861] <... openat resumed>) = 3 [pid 5862] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECexecuting program [pid 5861] write(3, "1000", 4 [pid 5859] write(1, "executing program\n", 18 [pid 5861] <... write resumed>) = 4 [pid 5860] close(3 [pid 5861] close(3 [pid 5859] <... write resumed>) = 18 [pid 5862] <... openat resumed>) = 3 [pid 5860] <... close resumed>) = 0 [pid 5859] memfd_create("syzkaller", 0 [pid 5860] symlink("/dev/binderfs", "./binderfs" [pid 5862] write(3, "1000", 4 [pid 5861] <... close resumed>) = 0 [pid 5862] <... write resumed>) = 4 [pid 5861] symlink("/dev/binderfs", "./binderfs" [pid 5859] <... memfd_create resumed>) = 3 [pid 5862] close(3 [pid 5861] <... symlink resumed>) = 0 [pid 5859] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5862] <... close resumed>) = 0 [pid 5860] <... symlink resumed>) = 0 [pid 5859] <... mmap resumed>) = 0x7f855f39b000 [pid 5862] symlink("/dev/binderfs", "./binderfs" [pid 5861] write(1, "executing program\n", 18 [pid 5860] write(1, "executing program\n", 18executing program executing program executing program ) = 18 [pid 5862] <... symlink resumed>) = 0 [pid 5861] <... write resumed>) = 18 [pid 5861] memfd_create("syzkaller", 0 [pid 5862] write(1, "executing program\n", 18) = 18 [pid 5861] <... memfd_create resumed>) = 3 [pid 5860] memfd_create("syzkaller", 0 [pid 5862] memfd_create("syzkaller", 0 [pid 5861] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5860] <... memfd_create resumed>) = 3 [pid 5860] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5861] <... mmap resumed>) = 0x7f855f39b000 [pid 5860] <... mmap resumed>) = 0x7f855f39b000 [pid 5862] <... memfd_create resumed>) = 3 [pid 5862] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f855f39b000 [pid 5858] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5862] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5861] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5859] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5860] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5858] <... write resumed>) = 16777216 [pid 5858] munmap(0x7f855f39b000, 138412032) = 0 [pid 5858] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5858] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5858] close(3) = 0 [pid 5858] close(4) = 0 [pid 5858] mkdir("./file0", 0777) = 0 [ 108.813731][ T5858] loop0: detected capacity change from 0 to 32768 [pid 5858] mount("/dev/loop0", "./file0", "jfs", MS_NOSUID, "noquota,nointegrity,grpquota,nodiscard,iocharset=cp932,nodiscard,quota,noquota,nointegrity," [pid 5862] <... write resumed>) = 16777216 [pid 5862] munmap(0x7f855f39b000, 138412032 [pid 5858] <... mount resumed>) = 0 [pid 5858] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5858] chdir("./file0") = 0 [pid 5858] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5858] exit_group(0) = ? [pid 5862] <... munmap resumed>) = 0 [pid 5858] +++ exited with 0 +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5858, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=29 /* 0.29 s */} --- [pid 5862] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5853] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5862] <... openat resumed>) = 4 [pid 5853] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5862] ioctl(4, LOOP_SET_FD, 3 [pid 5853] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(3, 0x55558ffa86f0 /* 4 entries */, 32768) = 112 [pid 5862] <... ioctl resumed>) = 0 [pid 5862] close(3 [pid 5853] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5862] <... close resumed>) = 0 [pid 5862] close(4) = 0 [pid 5860] <... write resumed>) = 16777216 [pid 5862] mkdir("./file0", 0777) = 0 [pid 5860] munmap(0x7f855f39b000, 138412032 [pid 5862] mount("/dev/loop4", "./file0", "jfs", MS_NOSUID, "noquota,nointegrity,grpquota,nodiscard,iocharset=cp932,nodiscard,quota,noquota,nointegrity," [pid 5859] <... write resumed>) = 16777216 [pid 5861] <... write resumed>) = 16777216 [pid 5860] <... munmap resumed>) = 0 [ 108.949182][ T5862] loop4: detected capacity change from 0 to 32768 [pid 5862] <... mount resumed>) = 0 [pid 5861] munmap(0x7f855f39b000, 138412032 [pid 5859] munmap(0x7f855f39b000, 138412032 [pid 5862] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5860] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5862] <... openat resumed>) = 3 [pid 5860] <... openat resumed>) = 4 [pid 5860] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5862] chdir("./file0" [pid 5853] <... umount2 resumed>) = 0 [pid 5862] <... chdir resumed>) = 0 [pid 5862] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5853] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5862] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5860] close(3 [pid 5862] exit_group(0 [pid 5860] <... close resumed>) = 0 [pid 5862] <... exit_group resumed>) = ? [pid 5860] close(4 [pid 5862] +++ exited with 0 +++ [pid 5860] <... close resumed>) = 0 [pid 5853] newfstatat(AT_FDCWD, "./0/file0", [pid 5857] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5862, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=28 /* 0.28 s */} --- [pid 5860] mkdir("./file0", 0777) = 0 [pid 5859] <... munmap resumed>) = 0 [pid 5857] restart_syscall(<... resuming interrupted clone ...> [pid 5853] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5857] <... restart_syscall resumed>) = 0 [pid 5853] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5860] mount("/dev/loop3", "./file0", "jfs", MS_NOSUID, "noquota,nointegrity,grpquota,nodiscard,iocharset=cp932,nodiscard,quota,noquota,nointegrity," [pid 5853] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5861] <... munmap resumed>) = 0 [pid 5859] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5857] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5853] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5857] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5857] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5853] getdents64(4, 0x55558ffb0730 /* 2 entries */, 32768) = 48 [pid 5853] getdents64(4, 0x55558ffb0730 /* 0 entries */, 32768) = 0 [pid 5853] close(4) = 0 [pid 5857] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] rmdir("./0/file0" [pid 5859] <... openat resumed>) = 4 [ 109.037682][ T5860] loop3: detected capacity change from 0 to 32768 [pid 5853] <... rmdir resumed>) = 0 [pid 5861] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5859] ioctl(4, LOOP_SET_FD, 3 [pid 5857] getdents64(3, [pid 5859] <... ioctl resumed>) = 0 [pid 5857] <... getdents64 resumed>0x55558ffa86f0 /* 4 entries */, 32768) = 112 [pid 5861] <... openat resumed>) = 4 [pid 5860] <... mount resumed>) = 0 [pid 5859] close(3 [pid 5857] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5853] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5859] <... close resumed>) = 0 [pid 5861] ioctl(4, LOOP_SET_FD, 3 [pid 5860] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5859] close(4 [pid 5853] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5860] <... openat resumed>) = 3 [pid 5859] <... close resumed>) = 0 [pid 5853] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5861] <... ioctl resumed>) = 0 [pid 5860] chdir("./file0" [pid 5859] mkdir("./file0", 0777 [pid 5853] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] unlink("./0/binderfs") = 0 [pid 5859] <... mkdir resumed>) = 0 [pid 5860] <... chdir resumed>) = 0 [pid 5860] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5853] getdents64(3, [pid 5860] exit_group(0 [pid 5853] <... getdents64 resumed>0x55558ffa86f0 /* 0 entries */, 32768) = 0 [pid 5861] close(3 [pid 5860] <... exit_group resumed>) = ? [pid 5861] <... close resumed>) = 0 [pid 5860] +++ exited with 0 +++ [pid 5859] mount("/dev/loop1", "./file0", "jfs", MS_NOSUID, "noquota,nointegrity,grpquota,nodiscard,iocharset=cp932,nodiscard,quota,noquota,nointegrity," [pid 5853] close(3 [ 109.112980][ T5859] loop1: detected capacity change from 0 to 32768 [ 109.133295][ T5861] loop2: detected capacity change from 0 to 32768 [pid 5861] close(4) = 0 [pid 5857] <... umount2 resumed>) = 0 [pid 5853] <... close resumed>) = 0 [pid 5856] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5860, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=35 /* 0.35 s */} --- [pid 5856] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5856] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5856] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5856] getdents64(3, 0x55558ffa86f0 /* 4 entries */, 32768) = 112 [pid 5856] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5853] rmdir("./0" [pid 5861] mkdir("./file0", 0777) = 0 [pid 5853] <... rmdir resumed>) = 0 [pid 5857] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5857] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5861] mount("/dev/loop2", "./file0", "jfs", MS_NOSUID, "noquota,nointegrity,grpquota,nodiscard,iocharset=cp932,nodiscard,quota,noquota,nointegrity," [pid 5853] mkdir("./1", 0777) = 0 [pid 5857] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5857] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5857] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5857] getdents64(4, 0x55558ffb0730 /* 2 entries */, 32768) = 48 [pid 5857] getdents64(4, 0x55558ffb0730 /* 0 entries */, 32768) = 0 [pid 5857] close(4) = 0 [pid 5859] <... mount resumed>) = 0 [pid 5856] <... umount2 resumed>) = 0 [pid 5857] rmdir("./0/file0" [pid 5853] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5859] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5856] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5859] <... openat resumed>) = 3 [pid 5859] chdir("./file0" [pid 5856] newfstatat(AT_FDCWD, "./0/file0", [pid 5859] <... chdir resumed>) = 0 [pid 5859] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5857] <... rmdir resumed>) = 0 [pid 5856] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] <... openat resumed>) = 3 [pid 5859] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5856] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5861] <... mount resumed>) = 0 [pid 5857] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5856] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5853] ioctl(3, LOOP_CLR_FD [pid 5861] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5859] exit_group(0 [pid 5857] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5856] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5861] <... openat resumed>) = 3 [pid 5859] <... exit_group resumed>) = ? [pid 5853] <... ioctl resumed>) = 0 [pid 5861] chdir("./file0" [pid 5859] +++ exited with 0 +++ [pid 5857] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5856] <... openat resumed>) = 4 [pid 5853] close(3 [pid 5861] <... chdir resumed>) = 0 [pid 5854] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5859, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=31 /* 0.31 s */} --- [pid 5856] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5856] getdents64(4, 0x55558ffb0730 /* 2 entries */, 32768) = 48 [pid 5856] getdents64(4, 0x55558ffb0730 /* 0 entries */, 32768) = 0 [pid 5856] close(4 [pid 5854] restart_syscall(<... resuming interrupted clone ...> [pid 5856] <... close resumed>) = 0 [pid 5856] rmdir("./0/file0" [pid 5861] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5857] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5856] <... rmdir resumed>) = 0 [pid 5854] <... restart_syscall resumed>) = 0 [pid 5861] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5857] unlink("./0/binderfs") = 0 [pid 5861] exit_group(0 [pid 5854] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5856] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5861] <... exit_group resumed>) = ? [pid 5857] getdents64(3, [pid 5854] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5857] <... getdents64 resumed>0x55558ffa86f0 /* 0 entries */, 32768) = 0 [pid 5856] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5854] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5856] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5856] unlink("./0/binderfs") = 0 [pid 5856] getdents64(3, [pid 5861] +++ exited with 0 +++ [pid 5857] close(3 [pid 5856] <... getdents64 resumed>0x55558ffa86f0 /* 0 entries */, 32768) = 0 [pid 5854] <... openat resumed>) = 3 [pid 5857] <... close resumed>) = 0 [pid 5856] close(3 [pid 5854] newfstatat(3, "", [pid 5855] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5861, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=30 /* 0.30 s */} --- [pid 5854] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5855] restart_syscall(<... resuming interrupted clone ...> [pid 5857] rmdir("./0" [pid 5854] getdents64(3, [pid 5857] <... rmdir resumed>) = 0 [pid 5856] <... close resumed>) = 0 [pid 5855] <... restart_syscall resumed>) = 0 [pid 5854] <... getdents64 resumed>0x55558ffa86f0 /* 4 entries */, 32768) = 112 [pid 5856] rmdir("./0" [pid 5857] mkdir("./1", 0777 [pid 5856] <... rmdir resumed>) = 0 [pid 5854] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5855] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5857] <... mkdir resumed>) = 0 [pid 5855] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5856] mkdir("./1", 0777 [pid 5855] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5857] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5856] <... mkdir resumed>) = 0 [pid 5855] <... openat resumed>) = 3 [pid 5855] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5855] getdents64(3, [pid 5856] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5855] <... getdents64 resumed>0x55558ffa86f0 /* 4 entries */, 32768) = 112 [pid 5856] <... openat resumed>) = 3 [pid 5855] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5856] ioctl(3, LOOP_CLR_FD) = 0 [pid 5856] close(3) = 0 [pid 5856] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5866 attached , child_tidptr=0x55558ffa7650) = 5866 [pid 5866] set_robust_list(0x55558ffa7660, 24) = 0 [pid 5866] chdir("./1") = 0 [pid 5866] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5866] setpgid(0, 0) = 0 [pid 5866] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5866] write(3, "1000", 4) = 4 [pid 5866] close(3) = 0 [pid 5866] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5857] <... openat resumed>) = 3 [pid 5866] write(1, "executing program\n", 18) = 18 [pid 5866] memfd_create("syzkaller", 0 [pid 5857] ioctl(3, LOOP_CLR_FD [pid 5866] <... memfd_create resumed>) = 3 [pid 5857] <... ioctl resumed>) = 0 [pid 5857] close(3 [pid 5866] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f855f39b000 [pid 5854] <... umount2 resumed>) = 0 [pid 5855] <... umount2 resumed>) = 0 [pid 5854] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5854] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5854] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5854] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5854] newfstatat(4, "", [pid 5855] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5854] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5855] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5854] getdents64(4, 0x55558ffb0730 /* 2 entries */, 32768) = 48 [pid 5854] getdents64(4, [pid 5855] newfstatat(AT_FDCWD, "./0/file0", [pid 5854] <... getdents64 resumed>0x55558ffb0730 /* 0 entries */, 32768) = 0 [pid 5855] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5854] close(4 [pid 5855] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5854] <... close resumed>) = 0 [pid 5855] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5854] rmdir("./0/file0" [pid 5855] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5854] <... rmdir resumed>) = 0 [pid 5855] <... openat resumed>) = 4 [pid 5855] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5854] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5855] getdents64(4, [pid 5854] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5855] <... getdents64 resumed>0x55558ffb0730 /* 2 entries */, 32768) = 48 [pid 5854] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5855] getdents64(4, [pid 5854] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5855] <... getdents64 resumed>0x55558ffb0730 /* 0 entries */, 32768) = 0 [pid 5854] unlink("./0/binderfs" [pid 5855] close(4 [pid 5854] <... unlink resumed>) = 0 [pid 5855] <... close resumed>) = 0 [pid 5854] getdents64(3, [pid 5855] rmdir("./0/file0" [pid 5854] <... getdents64 resumed>0x55558ffa86f0 /* 0 entries */, 32768) = 0 [pid 5855] <... rmdir resumed>) = 0 [pid 5854] close(3) = 0 [pid 5854] rmdir("./0" [pid 5855] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5854] <... rmdir resumed>) = 0 [pid 5855] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5855] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5854] mkdir("./1", 0777) = 0 [pid 5855] unlink("./0/binderfs") = 0 [pid 5855] getdents64(3, 0x55558ffa86f0 /* 0 entries */, 32768) = 0 [pid 5855] close(3 [pid 5854] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5854] ioctl(3, LOOP_CLR_FD) = 0 [pid 5854] close(3) = 0 [pid 5855] <... close resumed>) = 0 [pid 5854] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5855] rmdir("./0") = 0 [pid 5855] mkdir("./1", 0777) = 0 ./strace-static-x86_64: Process 5868 attached [pid 5868] set_robust_list(0x55558ffa7660, 24 [pid 5855] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5868] <... set_robust_list resumed>) = 0 [pid 5855] <... openat resumed>) = 3 [pid 5854] <... clone resumed>, child_tidptr=0x55558ffa7650) = 5868 [pid 5868] chdir("./1" [pid 5855] ioctl(3, LOOP_CLR_FD [pid 5868] <... chdir resumed>) = 0 [pid 5855] <... ioctl resumed>) = 0 [pid 5868] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5855] close(3 [pid 5868] <... prctl resumed>) = 0 [pid 5855] <... close resumed>) = 0 [pid 5868] setpgid(0, 0 [pid 5855] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5868] <... setpgid resumed>) = 0 [pid 5868] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5855] <... clone resumed>, child_tidptr=0x55558ffa7650) = 5869 [pid 5868] write(3, "1000", 4./strace-static-x86_64: Process 5869 attached ) = 4 [pid 5868] close(3) = 0 [pid 5868] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5869] set_robust_list(0x55558ffa7660, 24 [pid 5868] write(1, "executing program\n", 18) = 18 [pid 5868] memfd_create("syzkaller", 0 [pid 5869] <... set_robust_list resumed>) = 0 [pid 5869] chdir("./1" [pid 5868] <... memfd_create resumed>) = 3 [pid 5868] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f855f39b000 [pid 5869] <... chdir resumed>) = 0 [pid 5869] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5869] setpgid(0, 0) = 0 [pid 5869] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5869] write(3, "1000", 4) = 4 [pid 5869] close(3) = 0 [pid 5869] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5869] write(1, "executing program\n", 18) = 18 [pid 5869] memfd_create("syzkaller", 0) = 3 [pid 5869] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f855f39b000 [pid 5853] <... close resumed>) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5870 attached [pid 5866] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5857] <... close resumed>) = 0 [pid 5853] <... clone resumed>, child_tidptr=0x55558ffa7650) = 5870 [pid 5870] set_robust_list(0x55558ffa7660, 24) = 0 [pid 5870] chdir("./1") = 0 [pid 5857] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5870] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 5871 attached ) = 0 [pid 5871] set_robust_list(0x55558ffa7660, 24 [pid 5870] setpgid(0, 0 [pid 5857] <... clone resumed>, child_tidptr=0x55558ffa7650) = 5871 [pid 5870] <... setpgid resumed>) = 0 [pid 5871] <... set_robust_list resumed>) = 0 [pid 5870] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5871] chdir("./1" [pid 5870] write(3, "1000", 4 [pid 5871] <... chdir resumed>) = 0 [pid 5870] <... write resumed>) = 4 [pid 5871] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5870] close(3 [pid 5871] <... prctl resumed>) = 0 [pid 5870] <... close resumed>) = 0 [pid 5871] setpgid(0, 0 [pid 5870] symlink("/dev/binderfs", "./binderfs" [pid 5871] <... setpgid resumed>) = 0 [pid 5870] <... symlink resumed>) = 0 [pid 5871] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECexecuting program [pid 5870] write(1, "executing program\n", 18) = 18 [pid 5871] <... openat resumed>) = 3 [pid 5870] memfd_create("syzkaller", 0) = 3 [pid 5871] write(3, "1000", 4) = 4 [pid 5870] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f855f39b000 [pid 5871] close(3) = 0 [pid 5871] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5871] write(1, "executing program\n", 18executing program ) = 18 [pid 5871] memfd_create("syzkaller", 0) = 3 [pid 5869] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5868] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5871] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f855f39b000 [pid 5870] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5871] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5866] <... write resumed>) = 16777216 [pid 5866] munmap(0x7f855f39b000, 138412032) = 0 [pid 5866] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5866] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5866] close(3) = 0 [pid 5866] close(4) = 0 [pid 5866] mkdir("./file0", 0777) = 0 [pid 5866] mount("/dev/loop3", "./file0", "jfs", MS_NOSUID, "noquota,nointegrity,grpquota,nodiscard,iocharset=cp932,nodiscard,quota,noquota,nointegrity,") = 0 [ 110.486534][ T5866] loop3: detected capacity change from 0 to 32768 [pid 5866] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5866] chdir("./file0") = 0 [pid 5866] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5866] exit_group(0) = ? [pid 5866] +++ exited with 0 +++ [pid 5856] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5866, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=28 /* 0.28 s */} --- [pid 5856] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5856] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5856] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5856] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5856] getdents64(3, 0x55558ffa86f0 /* 4 entries */, 32768) = 112 [pid 5856] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5869] <... write resumed>) = 16777216 [pid 5868] <... write resumed>) = 16777216 [pid 5869] munmap(0x7f855f39b000, 138412032 [pid 5856] <... umount2 resumed>) = 0 [pid 5856] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5868] munmap(0x7f855f39b000, 138412032 [pid 5856] newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5856] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5868] <... munmap resumed>) = 0 [pid 5856] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5868] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5869] <... munmap resumed>) = 0 [pid 5856] <... openat resumed>) = 4 [pid 5869] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5856] newfstatat(4, "", [pid 5869] <... openat resumed>) = 4 [pid 5869] ioctl(4, LOOP_SET_FD, 3 [pid 5856] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5868] <... openat resumed>) = 4 [pid 5856] getdents64(4, [pid 5868] ioctl(4, LOOP_SET_FD, 3 [pid 5869] <... ioctl resumed>) = 0 [pid 5856] <... getdents64 resumed>0x55558ffb0730 /* 2 entries */, 32768) = 48 [pid 5869] close(3) = 0 [pid 5856] getdents64(4, [pid 5869] close(4 [pid 5856] <... getdents64 resumed>0x55558ffb0730 /* 0 entries */, 32768) = 0 [pid 5869] <... close resumed>) = 0 [pid 5856] close(4 [pid 5869] mkdir("./file0", 0777 [pid 5868] <... ioctl resumed>) = 0 [pid 5856] <... close resumed>) = 0 [pid 5869] <... mkdir resumed>) = 0 [pid 5856] rmdir("./1/file0" [pid 5869] mount("/dev/loop2", "./file0", "jfs", MS_NOSUID, "noquota,nointegrity,grpquota,nodiscard,iocharset=cp932,nodiscard,quota,noquota,nointegrity," [pid 5856] <... rmdir resumed>) = 0 [pid 5868] close(3 [pid 5856] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5868] <... close resumed>) = 0 [pid 5856] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5868] close(4) = 0 [pid 5868] mkdir("./file0", 0777) = 0 [pid 5868] mount("/dev/loop1", "./file0", "jfs", MS_NOSUID, "noquota,nointegrity,grpquota,nodiscard,iocharset=cp932,nodiscard,quota,noquota,nointegrity," [pid 5856] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5856] unlink("./1/binderfs" [pid 5869] <... mount resumed>) = 0 [pid 5869] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5856] <... unlink resumed>) = 0 [pid 5869] <... openat resumed>) = 3 [pid 5869] chdir("./file0" [pid 5868] <... mount resumed>) = 0 [pid 5856] getdents64(3, [pid 5869] <... chdir resumed>) = 0 [pid 5868] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5856] <... getdents64 resumed>0x55558ffa86f0 /* 0 entries */, 32768) = 0 [ 110.704199][ T5869] loop2: detected capacity change from 0 to 32768 [ 110.715766][ T5868] loop1: detected capacity change from 0 to 32768 [pid 5856] close(3 [pid 5868] <... openat resumed>) = 3 [pid 5869] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5856] <... close resumed>) = 0 [pid 5869] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5856] rmdir("./1" [pid 5869] exit_group(0) = ? [pid 5869] +++ exited with 0 +++ [pid 5856] <... rmdir resumed>) = 0 [pid 5855] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5869, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=28 /* 0.28 s */} --- [pid 5868] chdir("./file0" [pid 5855] restart_syscall(<... resuming interrupted clone ...> [pid 5868] <... chdir resumed>) = 0 [pid 5856] mkdir("./2", 0777 [pid 5868] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5856] <... mkdir resumed>) = 0 [pid 5868] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5868] exit_group(0 [pid 5856] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5855] <... restart_syscall resumed>) = 0 [pid 5856] <... openat resumed>) = 3 [pid 5855] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5855] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5855] newfstatat(3, "", [pid 5856] ioctl(3, LOOP_CLR_FD [pid 5855] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5855] getdents64(3, 0x55558ffa86f0 /* 4 entries */, 32768) = 112 [pid 5856] <... ioctl resumed>) = 0 [pid 5855] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5868] <... exit_group resumed>) = ? [pid 5856] close(3 [pid 5868] +++ exited with 0 +++ [pid 5854] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5868, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=34 /* 0.34 s */} --- [pid 5854] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5854] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5854] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5854] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5854] getdents64(3, 0x55558ffa86f0 /* 4 entries */, 32768) = 112 [pid 5870] <... write resumed>) = 16777216 [pid 5854] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5870] munmap(0x7f855f39b000, 138412032 [pid 5855] <... umount2 resumed>) = 0 [pid 5855] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5855] newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5870] <... munmap resumed>) = 0 [pid 5855] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5854] <... umount2 resumed>) = 0 [pid 5855] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5870] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5855] newfstatat(4, "", [pid 5870] <... openat resumed>) = 4 [pid 5855] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5854] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5870] ioctl(4, LOOP_SET_FD, 3 [pid 5855] getdents64(4, [pid 5854] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5855] <... getdents64 resumed>0x55558ffb0730 /* 2 entries */, 32768) = 48 [pid 5854] newfstatat(AT_FDCWD, "./1/file0", [pid 5855] getdents64(4, 0x55558ffb0730 /* 0 entries */, 32768) = 0 [pid 5855] close(4) = 0 [pid 5854] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5855] rmdir("./1/file0") = 0 [pid 5855] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5855] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5854] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5855] unlink("./1/binderfs") = 0 [pid 5855] getdents64(3, 0x55558ffa86f0 /* 0 entries */, 32768) = 0 [pid 5855] close(3) = 0 [pid 5855] rmdir("./1" [pid 5854] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5855] <... rmdir resumed>) = 0 [pid 5855] mkdir("./2", 0777 [pid 5854] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5870] <... ioctl resumed>) = 0 [pid 5854] <... openat resumed>) = 4 [pid 5870] close(3 [pid 5855] <... mkdir resumed>) = 0 [pid 5854] newfstatat(4, "", [pid 5870] <... close resumed>) = 0 [pid 5855] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5870] close(4) = 0 [ 110.914543][ T5870] loop0: detected capacity change from 0 to 32768 [pid 5854] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5870] mkdir("./file0", 0777 [pid 5855] <... openat resumed>) = 3 [pid 5854] getdents64(4, 0x55558ffb0730 /* 2 entries */, 32768) = 48 [pid 5854] getdents64(4, 0x55558ffb0730 /* 0 entries */, 32768) = 0 [pid 5854] close(4) = 0 [pid 5854] rmdir("./1/file0") = 0 [pid 5854] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5854] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5854] unlink("./1/binderfs" [pid 5870] <... mkdir resumed>) = 0 [pid 5855] ioctl(3, LOOP_CLR_FD [pid 5854] <... unlink resumed>) = 0 [pid 5855] <... ioctl resumed>) = 0 [pid 5855] close(3 [pid 5854] getdents64(3, [pid 5870] mount("/dev/loop0", "./file0", "jfs", MS_NOSUID, "noquota,nointegrity,grpquota,nodiscard,iocharset=cp932,nodiscard,quota,noquota,nointegrity," [pid 5855] <... close resumed>) = 0 [pid 5854] <... getdents64 resumed>0x55558ffa86f0 /* 0 entries */, 32768) = 0 [pid 5855] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5854] close(3) = 0 [pid 5854] rmdir("./1" [pid 5855] <... clone resumed>, child_tidptr=0x55558ffa7650) = 5872 [pid 5854] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 5872 attached [pid 5854] mkdir("./2", 0777 [pid 5872] set_robust_list(0x55558ffa7660, 24 [pid 5854] <... mkdir resumed>) = 0 [pid 5872] <... set_robust_list resumed>) = 0 [pid 5854] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5872] chdir("./2" [pid 5854] <... openat resumed>) = 3 [pid 5872] <... chdir resumed>) = 0 [pid 5854] ioctl(3, LOOP_CLR_FD [pid 5872] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5854] <... ioctl resumed>) = 0 [pid 5872] <... prctl resumed>) = 0 [pid 5854] close(3 [pid 5872] setpgid(0, 0 [pid 5854] <... close resumed>) = 0 [pid 5872] <... setpgid resumed>) = 0 [pid 5854] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5870] <... mount resumed>) = 0 ./strace-static-x86_64: Process 5873 attached [pid 5870] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5872] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5870] <... openat resumed>) = 3 [pid 5870] chdir("./file0" [pid 5854] <... clone resumed>, child_tidptr=0x55558ffa7650) = 5873 [pid 5870] <... chdir resumed>) = 0 [pid 5870] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5872] <... openat resumed>) = 3 [pid 5870] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5873] set_robust_list(0x55558ffa7660, 24) = 0 [pid 5873] chdir("./2" [pid 5872] write(3, "1000", 4 [pid 5873] <... chdir resumed>) = 0 [pid 5872] <... write resumed>) = 4 [pid 5873] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5872] close(3 [pid 5873] <... prctl resumed>) = 0 [pid 5872] <... close resumed>) = 0 [pid 5872] symlink("/dev/binderfs", "./binderfs"executing program [pid 5873] setpgid(0, 0 [pid 5872] <... symlink resumed>) = 0 [pid 5873] <... setpgid resumed>) = 0 [pid 5872] write(1, "executing program\n", 18 [pid 5873] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5872] <... write resumed>) = 18 [pid 5873] <... openat resumed>) = 3 [pid 5872] memfd_create("syzkaller", 0 [pid 5870] exit_group(0 [pid 5872] <... memfd_create resumed>) = 3 [pid 5873] write(3, "1000", 4 [pid 5870] <... exit_group resumed>) = ? [pid 5872] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5873] <... write resumed>) = 4 [pid 5873] close(3) = 0 [pid 5873] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5873] write(1, "executing program\n", 18 [pid 5872] <... mmap resumed>) = 0x7f855f39b000 [pid 5870] +++ exited with 0 +++ [pid 5873] <... write resumed>) = 18 [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5870, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=32 /* 0.32 s */} --- [pid 5873] memfd_create("syzkaller", 0) = 3 [pid 5873] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f855f39b000 [pid 5856] <... close resumed>) = 0 [pid 5853] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5871] <... write resumed>) = 16777216 [pid 5856] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5853] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 ./strace-static-x86_64: Process 5874 attached [pid 5871] munmap(0x7f855f39b000, 138412032 [pid 5853] newfstatat(3, "", [pid 5874] set_robust_list(0x55558ffa7660, 24 [pid 5853] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5874] <... set_robust_list resumed>) = 0 [pid 5856] <... clone resumed>, child_tidptr=0x55558ffa7650) = 5874 [pid 5874] chdir("./2" [pid 5853] getdents64(3, [pid 5874] <... chdir resumed>) = 0 [pid 5874] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5853] <... getdents64 resumed>0x55558ffa86f0 /* 4 entries */, 32768) = 112 [pid 5853] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5874] <... prctl resumed>) = 0 [pid 5874] setpgid(0, 0) = 0 [pid 5871] <... munmap resumed>) = 0 [pid 5874] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5871] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5874] write(3, "1000", 4 [pid 5871] <... openat resumed>) = 4 [pid 5874] <... write resumed>) = 4 [pid 5871] ioctl(4, LOOP_SET_FD, 3 [pid 5874] close(3) = 0 [pid 5871] <... ioctl resumed>) = 0 [pid 5874] symlink("/dev/binderfs", "./binderfs" [pid 5871] close(3 [pid 5874] <... symlink resumed>) = 0 [pid 5871] <... close resumed>) = 0 executing program [pid 5874] write(1, "executing program\n", 18 [pid 5871] close(4 [pid 5874] <... write resumed>) = 18 [pid 5871] <... close resumed>) = 0 [pid 5874] memfd_create("syzkaller", 0 [pid 5871] mkdir("./file0", 0777 [pid 5853] <... umount2 resumed>) = 0 [pid 5874] <... memfd_create resumed>) = 3 [pid 5871] <... mkdir resumed>) = 0 [pid 5853] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5874] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5871] mount("/dev/loop4", "./file0", "jfs", MS_NOSUID, "noquota,nointegrity,grpquota,nodiscard,iocharset=cp932,nodiscard,quota,noquota,nointegrity," [pid 5853] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5874] <... mmap resumed>) = 0x7f855f39b000 [ 111.282244][ T5871] loop4: detected capacity change from 0 to 32768 [pid 5853] newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(4, 0x55558ffb0730 /* 2 entries */, 32768) = 48 [pid 5853] getdents64(4, 0x55558ffb0730 /* 0 entries */, 32768) = 0 [pid 5853] close(4) = 0 [pid 5853] rmdir("./1/file0") = 0 [pid 5871] <... mount resumed>) = 0 [pid 5871] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5853] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5871] <... openat resumed>) = 3 [pid 5853] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5871] chdir("./file0" [pid 5853] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5871] <... chdir resumed>) = 0 [pid 5871] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5853] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5871] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5871] exit_group(0 [pid 5853] unlink("./1/binderfs" [pid 5871] <... exit_group resumed>) = ? [pid 5853] <... unlink resumed>) = 0 [pid 5871] +++ exited with 0 +++ [pid 5853] getdents64(3, [pid 5857] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5871, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=30 /* 0.30 s */} --- [pid 5853] <... getdents64 resumed>0x55558ffa86f0 /* 0 entries */, 32768) = 0 [pid 5853] close(3 [pid 5857] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5853] <... close resumed>) = 0 [pid 5857] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5853] rmdir("./1") = 0 [pid 5857] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5853] mkdir("./2", 0777 [pid 5857] <... openat resumed>) = 3 [pid 5857] newfstatat(3, "", [pid 5853] <... mkdir resumed>) = 0 [pid 5857] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5857] getdents64(3, [pid 5853] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5857] <... getdents64 resumed>0x55558ffa86f0 /* 4 entries */, 32768) = 112 [pid 5853] <... openat resumed>) = 3 [pid 5857] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5853] ioctl(3, LOOP_CLR_FD) = 0 [pid 5853] close(3) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5875 attached , child_tidptr=0x55558ffa7650) = 5875 [pid 5875] set_robust_list(0x55558ffa7660, 24) = 0 [pid 5875] chdir("./2") = 0 [pid 5875] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5875] setpgid(0, 0) = 0 [pid 5875] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5875] write(3, "1000", 4) = 4 [pid 5875] close(3) = 0 [pid 5875] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5875] write(1, "executing program\n", 18) = 18 [pid 5873] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5875] memfd_create("syzkaller", 0) = 3 [pid 5875] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f855f39b000 [pid 5857] <... umount2 resumed>) = 0 [pid 5857] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5857] newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5857] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5857] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5857] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5857] getdents64(4, 0x55558ffb0730 /* 2 entries */, 32768) = 48 [pid 5857] getdents64(4, 0x55558ffb0730 /* 0 entries */, 32768) = 0 [pid 5857] close(4) = 0 [pid 5857] rmdir("./1/file0") = 0 [pid 5857] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5857] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5857] unlink("./1/binderfs") = 0 [pid 5857] getdents64(3, 0x55558ffa86f0 /* 0 entries */, 32768) = 0 [pid 5857] close(3) = 0 [pid 5857] rmdir("./1") = 0 [pid 5857] mkdir("./2", 0777 [pid 5872] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5874] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5857] <... mkdir resumed>) = 0 [pid 5857] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5857] ioctl(3, LOOP_CLR_FD) = 0 [pid 5857] close(3) = 0 [pid 5857] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ffa7650) = 5876 ./strace-static-x86_64: Process 5876 attached [pid 5876] set_robust_list(0x55558ffa7660, 24) = 0 [pid 5876] chdir("./2") = 0 [pid 5876] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5876] setpgid(0, 0) = 0 [pid 5876] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5876] write(3, "1000", 4) = 4 [pid 5876] close(3) = 0 [pid 5876] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5876] write(1, "executing program\n", 18) = 18 [pid 5876] memfd_create("syzkaller", 0) = 3 [pid 5876] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f855f39b000 [pid 5875] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5876] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5873] <... write resumed>) = 16777216 [pid 5873] munmap(0x7f855f39b000, 138412032) = 0 [pid 5873] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5873] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5873] close(3) = 0 [pid 5873] close(4) = 0 [pid 5873] mkdir("./file0", 0777) = 0 [pid 5873] mount("/dev/loop1", "./file0", "jfs", MS_NOSUID, "noquota,nointegrity,grpquota,nodiscard,iocharset=cp932,nodiscard,quota,noquota,nointegrity,") = 0 [pid 5873] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5873] chdir("./file0") = 0 [ 112.360243][ T5873] loop1: detected capacity change from 0 to 32768 [pid 5873] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5873] exit_group(0) = ? [pid 5873] +++ exited with 0 +++ [pid 5854] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5873, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=27 /* 0.27 s */} --- [pid 5854] restart_syscall(<... resuming interrupted clone ...> [pid 5872] <... write resumed>) = 16777216 [pid 5854] <... restart_syscall resumed>) = 0 [pid 5854] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5854] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5872] munmap(0x7f855f39b000, 138412032 [pid 5854] newfstatat(3, "", [pid 5874] <... write resumed>) = 16777216 [pid 5854] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5854] getdents64(3, 0x55558ffa86f0 /* 4 entries */, 32768) = 112 [pid 5874] munmap(0x7f855f39b000, 138412032 [pid 5854] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5872] <... munmap resumed>) = 0 [pid 5872] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5872] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5872] close(3) = 0 [pid 5872] close(4) = 0 [pid 5872] mkdir("./file0", 0777) = 0 [pid 5874] <... munmap resumed>) = 0 [pid 5872] mount("/dev/loop2", "./file0", "jfs", MS_NOSUID, "noquota,nointegrity,grpquota,nodiscard,iocharset=cp932,nodiscard,quota,noquota,nointegrity," [pid 5854] <... umount2 resumed>) = 0 [pid 5874] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5854] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5874] <... openat resumed>) = 4 [pid 5854] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5874] ioctl(4, LOOP_SET_FD, 3 [pid 5854] newfstatat(AT_FDCWD, "./2/file0", [pid 5875] <... write resumed>) = 16777216 [pid 5874] <... ioctl resumed>) = 0 [pid 5854] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5874] close(3 [pid 5854] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5874] <... close resumed>) = 0 [pid 5854] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5874] close(4) = 0 [pid 5854] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5874] mkdir("./file0", 0777 [pid 5854] <... openat resumed>) = 4 [ 112.519746][ T5872] loop2: detected capacity change from 0 to 32768 [pid 5875] munmap(0x7f855f39b000, 138412032 [pid 5854] newfstatat(4, "", [pid 5874] <... mkdir resumed>) = 0 [pid 5854] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5872] <... mount resumed>) = 0 [pid 5854] getdents64(4, [pid 5874] mount("/dev/loop3", "./file0", "jfs", MS_NOSUID, "noquota,nointegrity,grpquota,nodiscard,iocharset=cp932,nodiscard,quota,noquota,nointegrity," [pid 5872] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5854] <... getdents64 resumed>0x55558ffb0730 /* 2 entries */, 32768) = 48 [pid 5872] <... openat resumed>) = 3 [pid 5872] chdir("./file0" [pid 5854] getdents64(4, [pid 5872] <... chdir resumed>) = 0 [pid 5872] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5854] <... getdents64 resumed>0x55558ffb0730 /* 0 entries */, 32768) = 0 [pid 5872] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5854] close(4 [pid 5872] exit_group(0 [pid 5854] <... close resumed>) = 0 [pid 5872] <... exit_group resumed>) = ? [pid 5854] rmdir("./2/file0" [pid 5872] +++ exited with 0 +++ [pid 5854] <... rmdir resumed>) = 0 [pid 5874] <... mount resumed>) = 0 [pid 5854] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5874] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5855] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5872, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=32 /* 0.32 s */} --- [pid 5854] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5874] <... openat resumed>) = 3 [pid 5855] restart_syscall(<... resuming interrupted clone ...> [pid 5854] newfstatat(AT_FDCWD, "./2/binderfs", [ 112.569128][ T5874] loop3: detected capacity change from 0 to 32768 [pid 5874] chdir("./file0" [pid 5855] <... restart_syscall resumed>) = 0 [pid 5854] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5854] unlink("./2/binderfs") = 0 [pid 5875] <... munmap resumed>) = 0 [pid 5874] <... chdir resumed>) = 0 [pid 5875] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5874] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5854] getdents64(3,