./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1699376814 <...> ATE, 1000000) = 0 [pid 6043] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6043] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6043] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6043] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6043] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6043] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1024]}, 88) = 1024 [pid 6043] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6043] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6043] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6044 attached [pid 6044] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6044] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6044] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6044] memfd_create("syzkaller", 0) = 3 [pid 6044] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6044] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [ 68.347915][ T6041] loop0: detected capacity change from 0 to 1024 [pid 6044] munmap(0x7f15b9a45000, 524288) = 0 [pid 6044] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6044] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6044] close(3) = 0 [pid 6044] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6044] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6044] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6044] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6044] ioctl(4, LOOP_CLR_FD) = 0 [pid 6044] close(4) = 0 [pid 6044] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6043] <... futex resumed>) = 0 [pid 6043] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6043] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6043] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6044] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6043] <... mmap resumed>) = 0x7f15b9aa4000 [pid 6043] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6043] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6043] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1025]}, 88) = 1025 [pid 6043] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6043] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6043] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6045 attached [pid 6045] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6045] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6045] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6045] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6045] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6044] <... mknodat resumed>) = 0 [pid 6044] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6044] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6045] <... mount resumed>) = 0 [pid 6045] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6045] chdir(".") = 0 [pid 6045] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6043] <... futex resumed>) = 0 [pid 6045] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6043] close(3) = 0 [pid 6043] close(4) = 0 [pid 6043] close(5) = -1 EBADF (Bad file descriptor) [pid 6043] close(6) = -1 EBADF (Bad file descriptor) [pid 6043] close(7) = -1 EBADF (Bad file descriptor) [pid 6043] close(8) = -1 EBADF (Bad file descriptor) [pid 6043] close(9) = -1 EBADF (Bad file descriptor) [pid 6043] close(10) = -1 EBADF (Bad file descriptor) [pid 6043] close(11) = -1 EBADF (Bad file descriptor) [pid 6043] close(12) = -1 EBADF (Bad file descriptor) [pid 6043] close(13) = -1 EBADF (Bad file descriptor) [pid 6043] close(14) = -1 EBADF (Bad file descriptor) [pid 6043] close(15) = -1 EBADF (Bad file descriptor) [pid 6043] close(16) = -1 EBADF (Bad file descriptor) [pid 6043] close(17) = -1 EBADF (Bad file descriptor) [pid 6043] close(18) = -1 EBADF (Bad file descriptor) [pid 6043] close(19) = -1 EBADF (Bad file descriptor) [pid 6043] close(20) = -1 EBADF (Bad file descriptor) [pid 6043] close(21) = -1 EBADF (Bad file descriptor) [pid 6043] close(22) = -1 EBADF (Bad file descriptor) [pid 6043] close(23) = -1 EBADF (Bad file descriptor) [pid 6043] close(24) = -1 EBADF (Bad file descriptor) [pid 6043] close(25) = -1 EBADF (Bad file descriptor) [pid 6043] close(26) = -1 EBADF (Bad file descriptor) [pid 6043] close(27) = -1 EBADF (Bad file descriptor) [pid 6043] close(28) = -1 EBADF (Bad file descriptor) [pid 6043] close(29) = -1 EBADF (Bad file descriptor) [pid 6043] exit_group(0) = ? [pid 6044] <... futex resumed>) = ? [pid 6044] +++ exited with 0 +++ [pid 6045] <... futex resumed>) = ? [pid 6045] +++ exited with 0 +++ [pid 6043] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1023, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./341", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./341", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./341/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./341/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./341/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./341/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./341/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./341/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./341/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./341/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./341/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./341") = 0 [pid 5019] mkdir("./342", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1026 ./strace-static-x86_64: Process 6046 attached [pid 6046] set_robust_list(0x555556a426a0, 24) = 0 [pid 6046] chdir("./342") = 0 [pid 6046] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6046] setpgid(0, 0) = 0 [ 68.410918][ T6044] loop0: detected capacity change from 0 to 1024 [pid 6046] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6046] write(3, "1000", 4) = 4 [pid 6046] close(3) = 0 [pid 6046] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6046] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6046] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6046] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6046] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6046] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6046] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6046] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1027]}, 88) = 1027 [pid 6046] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6046] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6046] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6047 attached [pid 6047] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6047] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6047] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6047] memfd_create("syzkaller", 0) = 3 [pid 6047] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6047] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6047] munmap(0x7f15b9a45000, 524288) = 0 [pid 6047] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6047] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6047] close(3) = 0 [pid 6047] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6047] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6047] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6047] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6047] ioctl(4, LOOP_CLR_FD) = 0 [pid 6047] close(4) = 0 [pid 6047] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6047] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6046] <... futex resumed>) = 0 [pid 6046] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6046] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6046] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6046] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6046] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6046] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1028]}, 88) = 1028 [pid 6046] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6046] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6046] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6047] <... futex resumed>) = 0 [pid 6047] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6048 attached [pid 6048] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6048] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6048] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6048] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6048] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6047] <... mknodat resumed>) = 0 [pid 6047] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6047] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6048] <... mount resumed>) = 0 [pid 6048] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6048] chdir(".") = 0 [pid 6048] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6046] <... futex resumed>) = 0 [pid 6048] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6046] close(3) = 0 [pid 6046] close(4) = 0 [pid 6046] close(5) = -1 EBADF (Bad file descriptor) [pid 6046] close(6) = -1 EBADF (Bad file descriptor) [pid 6046] close(7) = -1 EBADF (Bad file descriptor) [pid 6046] close(8) = -1 EBADF (Bad file descriptor) [pid 6046] close(9) = -1 EBADF (Bad file descriptor) [pid 6046] close(10) = -1 EBADF (Bad file descriptor) [pid 6046] close(11) = -1 EBADF (Bad file descriptor) [pid 6046] close(12) = -1 EBADF (Bad file descriptor) [pid 6046] close(13) = -1 EBADF (Bad file descriptor) [pid 6046] close(14) = -1 EBADF (Bad file descriptor) [pid 6046] close(15) = -1 EBADF (Bad file descriptor) [pid 6046] close(16) = -1 EBADF (Bad file descriptor) [pid 6046] close(17) = -1 EBADF (Bad file descriptor) [pid 6046] close(18) = -1 EBADF (Bad file descriptor) [pid 6046] close(19) = -1 EBADF (Bad file descriptor) [pid 6046] close(20) = -1 EBADF (Bad file descriptor) [pid 6046] close(21) = -1 EBADF (Bad file descriptor) [pid 6046] close(22) = -1 EBADF (Bad file descriptor) [pid 6046] close(23) = -1 EBADF (Bad file descriptor) [pid 6046] close(24) = -1 EBADF (Bad file descriptor) [pid 6046] close(25) = -1 EBADF (Bad file descriptor) [pid 6046] close(26) = -1 EBADF (Bad file descriptor) [pid 6046] close(27) = -1 EBADF (Bad file descriptor) [pid 6046] close(28) = -1 EBADF (Bad file descriptor) [pid 6046] close(29) = -1 EBADF (Bad file descriptor) [pid 6046] exit_group(0 [pid 6047] <... futex resumed>) = ? [pid 6046] <... exit_group resumed>) = ? [pid 6047] +++ exited with 0 +++ [pid 6048] <... futex resumed>) = ? [pid 6048] +++ exited with 0 +++ [pid 6046] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1026, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./342", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./342", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./342/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./342/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./342/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./342/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./342/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./342/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./342/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./342/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./342/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./342") = 0 [pid 5019] mkdir("./343", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1029 ./strace-static-x86_64: Process 6049 attached [pid 6049] set_robust_list(0x555556a426a0, 24) = 0 [pid 6049] chdir("./343") = 0 [pid 6049] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6049] setpgid(0, 0) = 0 [pid 6049] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6049] write(3, "1000", 4) = 4 [pid 6049] close(3) = 0 [pid 6049] symlink("/dev/binderfs", "./binderfs") = 0 [ 68.485162][ T6047] loop0: detected capacity change from 0 to 1024 [pid 6049] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6049] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6049] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6049] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6049] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6049] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6049] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1030]}, 88) = 1030 ./strace-static-x86_64: Process 6050 attached [pid 6050] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6050] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6050] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6050] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6049] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6049] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6050] <... futex resumed>) = 0 [pid 6049] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6050] memfd_create("syzkaller", 0) = 3 [pid 6050] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6050] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6050] munmap(0x7f15b9a45000, 524288) = 0 [pid 6050] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6050] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6050] close(3) = 0 [pid 6050] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6050] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6050] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6050] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6050] ioctl(4, LOOP_CLR_FD) = 0 [pid 6050] close(4) = 0 [pid 6050] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6049] <... futex resumed>) = 0 [pid 6049] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6050] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6049] <... futex resumed>) = 0 [pid 6049] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6049] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6049] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6049] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6050] <... mknodat resumed>) = 0 [pid 6049] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1031]}, 88) = 1031 ./strace-static-x86_64: Process 6051 attached [pid 6049] rt_sigprocmask(SIG_SETMASK, [], [pid 6051] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6049] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6051] <... rseq resumed>) = 0 [pid 6049] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6051] set_robust_list(0x7f15b9ac49a0, 24 [pid 6049] <... futex resumed>) = 0 [pid 6051] <... set_robust_list resumed>) = 0 [pid 6049] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6051] rt_sigprocmask(SIG_SETMASK, [], [pid 6050] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6051] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6051] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6051] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6050] <... futex resumed>) = 0 [pid 6050] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6051] <... mount resumed>) = 0 [pid 6051] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6051] chdir(".") = 0 [pid 6051] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6049] <... futex resumed>) = 0 [pid 6049] close(3) = 0 [pid 6049] close(4) = 0 [pid 6049] close(5) = -1 EBADF (Bad file descriptor) [pid 6049] close(6) = -1 EBADF (Bad file descriptor) [pid 6049] close(7) = -1 EBADF (Bad file descriptor) [pid 6049] close(8) = -1 EBADF (Bad file descriptor) [pid 6049] close(9) = -1 EBADF (Bad file descriptor) [pid 6049] close(10) = -1 EBADF (Bad file descriptor) [pid 6049] close(11) = -1 EBADF (Bad file descriptor) [pid 6049] close(12) = -1 EBADF (Bad file descriptor) [pid 6049] close(13) = -1 EBADF (Bad file descriptor) [pid 6049] close(14) = -1 EBADF (Bad file descriptor) [pid 6049] close(15) = -1 EBADF (Bad file descriptor) [pid 6049] close(16) = -1 EBADF (Bad file descriptor) [pid 6049] close(17) = -1 EBADF (Bad file descriptor) [pid 6049] close(18) = -1 EBADF (Bad file descriptor) [pid 6049] close(19) = -1 EBADF (Bad file descriptor) [pid 6049] close(20) = -1 EBADF (Bad file descriptor) [pid 6049] close(21) = -1 EBADF (Bad file descriptor) [pid 6049] close(22) = -1 EBADF (Bad file descriptor) [pid 6049] close(23) = -1 EBADF (Bad file descriptor) [pid 6049] close(24) = -1 EBADF (Bad file descriptor) [pid 6049] close(25) = -1 EBADF (Bad file descriptor) [pid 6049] close(26) = -1 EBADF (Bad file descriptor) [pid 6049] close(27 [pid 6051] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6049] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6049] close(28) = -1 EBADF (Bad file descriptor) [pid 6049] close(29) = -1 EBADF (Bad file descriptor) [pid 6049] exit_group(0 [pid 6050] <... futex resumed>) = ? [pid 6049] <... exit_group resumed>) = ? [pid 6051] <... futex resumed>) = ? [pid 6050] +++ exited with 0 +++ [pid 6051] +++ exited with 0 +++ [pid 6049] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1029, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./343", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./343", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./343/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./343/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./343/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./343/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./343/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./343/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./343/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./343/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./343/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./343") = 0 [pid 5019] mkdir("./344", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1032 ./strace-static-x86_64: Process 6052 attached [pid 6052] set_robust_list(0x555556a426a0, 24) = 0 [pid 6052] chdir("./344") = 0 [pid 6052] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6052] setpgid(0, 0) = 0 [pid 6052] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6052] write(3, "1000", 4) = 4 [pid 6052] close(3) = 0 [pid 6052] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6052] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6052] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6052] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6052] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6052] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6052] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6052] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1033]}, 88) = 1033 [pid 6052] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6052] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6052] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6053 attached [pid 6053] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6053] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6053] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6053] memfd_create("syzkaller", 0) = 3 [pid 6053] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [ 68.564228][ T6050] loop0: detected capacity change from 0 to 1024 [pid 6053] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6053] munmap(0x7f15b9a45000, 524288) = 0 [pid 6053] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6053] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6053] close(3) = 0 [pid 6053] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6053] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6053] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6053] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6053] ioctl(4, LOOP_CLR_FD) = 0 [pid 6053] close(4) = 0 [pid 6053] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6052] <... futex resumed>) = 0 [pid 6053] <... futex resumed>) = 1 [pid 6052] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6053] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6052] <... futex resumed>) = 0 [pid 6052] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6052] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6052] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6052] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6053] <... mknodat resumed>) = 0 [pid 6052] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6053] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6052] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} [pid 6053] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6054 attached [pid 6053] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6054] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6052] <... clone3 resumed> => {parent_tid=[1034]}, 88) = 1034 [pid 6054] <... rseq resumed>) = 0 [pid 6052] rt_sigprocmask(SIG_SETMASK, [], [pid 6054] set_robust_list(0x7f15b9ac49a0, 24 [pid 6052] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6054] <... set_robust_list resumed>) = 0 [pid 6052] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6054] rt_sigprocmask(SIG_SETMASK, [], [pid 6052] <... futex resumed>) = 0 [pid 6054] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6052] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6054] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6054] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6054] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6054] chdir(".") = 0 [pid 6054] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6052] <... futex resumed>) = 0 [pid 6052] close(3) = 0 [pid 6052] close(4) = 0 [pid 6052] close(5) = -1 EBADF (Bad file descriptor) [pid 6052] close(6) = -1 EBADF (Bad file descriptor) [pid 6052] close(7) = -1 EBADF (Bad file descriptor) [pid 6052] close(8) = -1 EBADF (Bad file descriptor) [pid 6052] close(9) = -1 EBADF (Bad file descriptor) [pid 6052] close(10) = -1 EBADF (Bad file descriptor) [pid 6052] close(11) = -1 EBADF (Bad file descriptor) [pid 6052] close(12) = -1 EBADF (Bad file descriptor) [pid 6052] close(13) = -1 EBADF (Bad file descriptor) [pid 6052] close(14) = -1 EBADF (Bad file descriptor) [pid 6052] close(15) = -1 EBADF (Bad file descriptor) [pid 6052] close(16) = -1 EBADF (Bad file descriptor) [pid 6052] close(17) = -1 EBADF (Bad file descriptor) [pid 6052] close(18) = -1 EBADF (Bad file descriptor) [pid 6052] close(19) = -1 EBADF (Bad file descriptor) [pid 6052] close(20) = -1 EBADF (Bad file descriptor) [pid 6052] close(21) = -1 EBADF (Bad file descriptor) [pid 6052] close(22) = -1 EBADF (Bad file descriptor) [pid 6052] close(23) = -1 EBADF (Bad file descriptor) [pid 6052] close(24) = -1 EBADF (Bad file descriptor) [pid 6052] close(25) = -1 EBADF (Bad file descriptor) [pid 6052] close(26) = -1 EBADF (Bad file descriptor) [pid 6052] close(27) = -1 EBADF (Bad file descriptor) [pid 6052] close(28 [pid 6054] <... futex resumed>) = 1 [pid 6052] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6052] close(29) = -1 EBADF (Bad file descriptor) [pid 6052] exit_group(0 [pid 6053] <... futex resumed>) = ? [pid 6052] <... exit_group resumed>) = ? [pid 6053] +++ exited with 0 +++ [pid 6054] +++ exited with 0 +++ [pid 6052] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1032, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./344", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./344", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./344/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./344/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./344/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./344/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./344/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./344/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./344/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./344/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./344/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./344") = 0 [pid 5019] mkdir("./345", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1035 ./strace-static-x86_64: Process 6055 attached [pid 6055] set_robust_list(0x555556a426a0, 24) = 0 [pid 6055] chdir("./345") = 0 [pid 6055] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6055] setpgid(0, 0) = 0 [pid 6055] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6055] write(3, "1000", 4) = 4 [pid 6055] close(3) = 0 [pid 6055] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6055] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6055] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6055] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6055] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6055] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6055] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 68.628162][ T6053] loop0: detected capacity change from 0 to 1024 [pid 6055] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6056 attached => {parent_tid=[1036]}, 88) = 1036 [pid 6055] rt_sigprocmask(SIG_SETMASK, [], [pid 6056] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6056] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6056] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6056] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6055] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6055] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6056] <... futex resumed>) = 0 [pid 6055] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6056] memfd_create("syzkaller", 0) = 3 [pid 6056] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6056] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6056] munmap(0x7f15b9a45000, 524288) = 0 [pid 6056] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6056] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6056] close(3) = 0 [pid 6056] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6056] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6056] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6056] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6056] ioctl(4, LOOP_CLR_FD) = 0 [pid 6056] close(4) = 0 [pid 6056] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6055] <... futex resumed>) = 0 [pid 6055] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6055] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6055] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6055] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6056] <... futex resumed>) = 1 [pid 6055] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6055] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1037]}, 88) = 1037 ./strace-static-x86_64: Process 6057 attached [pid 6056] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6055] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6055] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6057] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6055] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6057] <... rseq resumed>) = 0 [pid 6057] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6057] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6057] mkdir(".", 0777 [pid 6056] <... mknodat resumed>) = 0 [pid 6057] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 6056] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6056] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6057] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6057] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6057] chdir(".") = 0 [pid 6057] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6055] <... futex resumed>) = 0 [pid 6055] close(3) = 0 [pid 6057] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6055] close(4) = 0 [pid 6055] close(5) = -1 EBADF (Bad file descriptor) [pid 6055] close(6) = -1 EBADF (Bad file descriptor) [pid 6055] close(7) = -1 EBADF (Bad file descriptor) [pid 6055] close(8) = -1 EBADF (Bad file descriptor) [pid 6055] close(9) = -1 EBADF (Bad file descriptor) [pid 6055] close(10) = -1 EBADF (Bad file descriptor) [pid 6055] close(11) = -1 EBADF (Bad file descriptor) [pid 6055] close(12) = -1 EBADF (Bad file descriptor) [pid 6055] close(13) = -1 EBADF (Bad file descriptor) [pid 6055] close(14) = -1 EBADF (Bad file descriptor) [pid 6055] close(15) = -1 EBADF (Bad file descriptor) [pid 6055] close(16) = -1 EBADF (Bad file descriptor) [pid 6055] close(17) = -1 EBADF (Bad file descriptor) [pid 6055] close(18) = -1 EBADF (Bad file descriptor) [pid 6055] close(19) = -1 EBADF (Bad file descriptor) [pid 6055] close(20) = -1 EBADF (Bad file descriptor) [pid 6055] close(21) = -1 EBADF (Bad file descriptor) [pid 6055] close(22) = -1 EBADF (Bad file descriptor) [pid 6055] close(23) = -1 EBADF (Bad file descriptor) [pid 6055] close(24) = -1 EBADF (Bad file descriptor) [pid 6055] close(25) = -1 EBADF (Bad file descriptor) [pid 6055] close(26) = -1 EBADF (Bad file descriptor) [pid 6055] close(27) = -1 EBADF (Bad file descriptor) [pid 6055] close(28) = -1 EBADF (Bad file descriptor) [pid 6055] close(29) = -1 EBADF (Bad file descriptor) [pid 6055] exit_group(0 [pid 6057] <... futex resumed>) = ? [pid 6056] <... futex resumed>) = ? [pid 6055] <... exit_group resumed>) = ? [pid 6057] +++ exited with 0 +++ [pid 6056] +++ exited with 0 +++ [pid 6055] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1035, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./345", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./345", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./345/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./345/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./345/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./345/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./345/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./345/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./345/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./345/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./345/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./345") = 0 [pid 5019] mkdir("./346", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 68.698605][ T6056] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6058 attached [pid 6058] set_robust_list(0x555556a426a0, 24) = 0 [pid 6058] chdir("./346" [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1038 [pid 6058] <... chdir resumed>) = 0 [pid 6058] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6058] setpgid(0, 0) = 0 [pid 6058] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6058] write(3, "1000", 4) = 4 [pid 6058] close(3) = 0 [pid 6058] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6058] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6058] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6058] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6058] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6058] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6058] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6058] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6059 attached => {parent_tid=[1039]}, 88) = 1039 [pid 6059] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6059] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6059] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6059] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6058] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6058] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6059] <... futex resumed>) = 0 [pid 6058] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6059] memfd_create("syzkaller", 0) = 3 [pid 6059] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6059] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6059] munmap(0x7f15b9a45000, 524288) = 0 [pid 6059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6059] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6059] close(3) = 0 [pid 6059] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6059] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6059] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6059] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6059] ioctl(4, LOOP_CLR_FD) = 0 [pid 6059] close(4) = 0 [pid 6059] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6058] <... futex resumed>) = 0 [pid 6059] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6058] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6058] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6058] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6059] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6058] <... mmap resumed>) = 0x7f15b9aa4000 [pid 6058] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE [pid 6059] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6058] <... mprotect resumed>) = 0 [pid 6058] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6058] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1040]}, 88) = 1040 [pid 6058] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6058] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6058] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6060 attached [pid 6060] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6060] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6060] rt_sigprocmask(SIG_SETMASK, [], [pid 6059] <... mknodat resumed>) = 0 [pid 6059] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6060] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6059] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6060] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6060] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6060] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6060] chdir(".") = 0 [pid 6060] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6058] <... futex resumed>) = 0 [pid 6058] close(3) = 0 [pid 6058] close(4) = 0 [pid 6058] close(5) = -1 EBADF (Bad file descriptor) [pid 6058] close(6) = -1 EBADF (Bad file descriptor) [pid 6058] close(7 [pid 6060] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6058] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6058] close(8) = -1 EBADF (Bad file descriptor) [pid 6058] close(9) = -1 EBADF (Bad file descriptor) [pid 6058] close(10) = -1 EBADF (Bad file descriptor) [pid 6058] close(11) = -1 EBADF (Bad file descriptor) [pid 6058] close(12) = -1 EBADF (Bad file descriptor) [pid 6058] close(13) = -1 EBADF (Bad file descriptor) [pid 6058] close(14) = -1 EBADF (Bad file descriptor) [pid 6058] close(15) = -1 EBADF (Bad file descriptor) [pid 6058] close(16) = -1 EBADF (Bad file descriptor) [pid 6058] close(17) = -1 EBADF (Bad file descriptor) [pid 6058] close(18) = -1 EBADF (Bad file descriptor) [pid 6058] close(19) = -1 EBADF (Bad file descriptor) [pid 6058] close(20) = -1 EBADF (Bad file descriptor) [pid 6058] close(21) = -1 EBADF (Bad file descriptor) [pid 6058] close(22) = -1 EBADF (Bad file descriptor) [pid 6058] close(23) = -1 EBADF (Bad file descriptor) [pid 6058] close(24) = -1 EBADF (Bad file descriptor) [pid 6058] close(25) = -1 EBADF (Bad file descriptor) [pid 6058] close(26) = -1 EBADF (Bad file descriptor) [pid 6058] close(27) = -1 EBADF (Bad file descriptor) [pid 6058] close(28) = -1 EBADF (Bad file descriptor) [pid 6058] close(29) = -1 EBADF (Bad file descriptor) [pid 6058] exit_group(0 [pid 6059] <... futex resumed>) = ? [pid 6058] <... exit_group resumed>) = ? [pid 6060] <... futex resumed>) = ? [pid 6059] +++ exited with 0 +++ [pid 6060] +++ exited with 0 +++ [pid 6058] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1038, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./346", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./346", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./346/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./346/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./346/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./346/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./346/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./346/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./346/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./346/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./346/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./346") = 0 [pid 5019] mkdir("./347", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1041 ./strace-static-x86_64: Process 6061 attached [pid 6061] set_robust_list(0x555556a426a0, 24) = 0 [pid 6061] chdir("./347") = 0 [pid 6061] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6061] setpgid(0, 0) = 0 [pid 6061] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6061] write(3, "1000", 4) = 4 [pid 6061] close(3) = 0 [pid 6061] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6061] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6061] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6061] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6061] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6061] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6061] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6061] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1042]}, 88) = 1042 [pid 6061] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6061] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6061] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6062 attached [pid 6062] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6062] set_robust_list(0x7f15c1e659a0, 24) = 0 [ 68.780975][ T6059] loop0: detected capacity change from 0 to 1024 [pid 6062] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6062] memfd_create("syzkaller", 0) = 3 [pid 6062] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6062] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6062] munmap(0x7f15b9a45000, 524288) = 0 [pid 6062] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6062] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6062] close(3) = 0 [pid 6062] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6062] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6062] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6062] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6062] ioctl(4, LOOP_CLR_FD) = 0 [pid 6062] close(4) = 0 [pid 6062] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6061] <... futex resumed>) = 0 [pid 6061] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6061] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6061] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6061] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6061] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6061] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1043]}, 88) = 1043 [pid 6061] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6061] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6061] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6062] <... futex resumed>) = 1 [pid 6062] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 6062] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6062] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6063 attached [pid 6063] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6063] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6063] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6063] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6063] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6063] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6063] chdir(".") = 0 [pid 6063] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6061] <... futex resumed>) = 0 [pid 6061] close(3) = 0 [pid 6061] close(4) = 0 [pid 6061] close(5) = -1 EBADF (Bad file descriptor) [pid 6061] close(6) = -1 EBADF (Bad file descriptor) [pid 6061] close(7) = -1 EBADF (Bad file descriptor) [pid 6061] close(8) = -1 EBADF (Bad file descriptor) [pid 6061] close(9) = -1 EBADF (Bad file descriptor) [pid 6061] close(10) = -1 EBADF (Bad file descriptor) [pid 6061] close(11) = -1 EBADF (Bad file descriptor) [pid 6061] close(12) = -1 EBADF (Bad file descriptor) [pid 6063] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6061] close(13) = -1 EBADF (Bad file descriptor) [pid 6061] close(14) = -1 EBADF (Bad file descriptor) [pid 6061] close(15) = -1 EBADF (Bad file descriptor) [pid 6061] close(16) = -1 EBADF (Bad file descriptor) [pid 6061] close(17) = -1 EBADF (Bad file descriptor) [pid 6061] close(18) = -1 EBADF (Bad file descriptor) [pid 6061] close(19) = -1 EBADF (Bad file descriptor) [pid 6061] close(20) = -1 EBADF (Bad file descriptor) [pid 6061] close(21) = -1 EBADF (Bad file descriptor) [pid 6061] close(22) = -1 EBADF (Bad file descriptor) [pid 6061] close(23) = -1 EBADF (Bad file descriptor) [pid 6061] close(24) = -1 EBADF (Bad file descriptor) [pid 6061] close(25) = -1 EBADF (Bad file descriptor) [pid 6061] close(26) = -1 EBADF (Bad file descriptor) [pid 6061] close(27) = -1 EBADF (Bad file descriptor) [pid 6061] close(28) = -1 EBADF (Bad file descriptor) [pid 6061] close(29) = -1 EBADF (Bad file descriptor) [pid 6061] exit_group(0 [pid 6063] <... futex resumed>) = ? [pid 6062] <... futex resumed>) = ? [pid 6061] <... exit_group resumed>) = ? [pid 6062] +++ exited with 0 +++ [pid 6063] +++ exited with 0 +++ [pid 6061] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1041, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./347", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./347", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./347/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./347/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./347/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./347/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./347/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./347/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./347/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./347/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./347/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./347") = 0 [pid 5019] mkdir("./348", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1044 ./strace-static-x86_64: Process 6064 attached [pid 6064] set_robust_list(0x555556a426a0, 24) = 0 [pid 6064] chdir("./348") = 0 [pid 6064] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6064] setpgid(0, 0) = 0 [pid 6064] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6064] write(3, "1000", 4) = 4 [pid 6064] close(3) = 0 [pid 6064] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6064] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6064] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6064] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6064] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6064] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [ 68.849621][ T6062] loop0: detected capacity change from 0 to 1024 [pid 6064] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6064] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6065 attached => {parent_tid=[1045]}, 88) = 1045 [pid 6065] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6065] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6065] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6065] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6064] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6064] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6065] <... futex resumed>) = 0 [pid 6064] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6065] memfd_create("syzkaller", 0) = 3 [pid 6065] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6065] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6065] munmap(0x7f15b9a45000, 524288) = 0 [pid 6065] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6065] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6065] close(3) = 0 [pid 6065] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6065] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6065] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6065] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6065] ioctl(4, LOOP_CLR_FD) = 0 [pid 6065] close(4) = 0 [pid 6065] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6064] <... futex resumed>) = 0 [pid 6065] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6064] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6064] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6064] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6064] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6064] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6064] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} [pid 6065] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6064] <... clone3 resumed> => {parent_tid=[1046]}, 88) = 1046 ./strace-static-x86_64: Process 6066 attached [pid 6064] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6064] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6064] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6065] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6066] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6066] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6066] rt_sigprocmask(SIG_SETMASK, [], [pid 6065] <... mknodat resumed>) = 0 [pid 6066] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6066] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6066] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6065] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6065] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6066] <... mount resumed>) = 0 [pid 6066] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6066] chdir(".") = 0 [pid 6066] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6064] <... futex resumed>) = 0 [pid 6064] close(3) = 0 [pid 6064] close(4) = 0 [pid 6064] close(5) = -1 EBADF (Bad file descriptor) [pid 6064] close(6) = -1 EBADF (Bad file descriptor) [pid 6064] close(7) = -1 EBADF (Bad file descriptor) [pid 6064] close(8) = -1 EBADF (Bad file descriptor) [pid 6064] close(9) = -1 EBADF (Bad file descriptor) [pid 6066] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6064] close(10) = -1 EBADF (Bad file descriptor) [pid 6064] close(11) = -1 EBADF (Bad file descriptor) [pid 6064] close(12) = -1 EBADF (Bad file descriptor) [pid 6064] close(13) = -1 EBADF (Bad file descriptor) [pid 6064] close(14) = -1 EBADF (Bad file descriptor) [pid 6064] close(15) = -1 EBADF (Bad file descriptor) [pid 6064] close(16) = -1 EBADF (Bad file descriptor) [pid 6064] close(17) = -1 EBADF (Bad file descriptor) [pid 6064] close(18) = -1 EBADF (Bad file descriptor) [pid 6064] close(19) = -1 EBADF (Bad file descriptor) [pid 6064] close(20) = -1 EBADF (Bad file descriptor) [pid 6064] close(21) = -1 EBADF (Bad file descriptor) [pid 6064] close(22) = -1 EBADF (Bad file descriptor) [pid 6064] close(23) = -1 EBADF (Bad file descriptor) [pid 6064] close(24) = -1 EBADF (Bad file descriptor) [pid 6064] close(25) = -1 EBADF (Bad file descriptor) [pid 6064] close(26) = -1 EBADF (Bad file descriptor) [pid 6064] close(27) = -1 EBADF (Bad file descriptor) [pid 6064] close(28) = -1 EBADF (Bad file descriptor) [pid 6064] close(29) = -1 EBADF (Bad file descriptor) [pid 6064] exit_group(0 [pid 6065] <... futex resumed>) = ? [pid 6064] <... exit_group resumed>) = ? [pid 6066] <... futex resumed>) = ? [pid 6065] +++ exited with 0 +++ [pid 6066] +++ exited with 0 +++ [pid 6064] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1044, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./348", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./348", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./348/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./348/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./348/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./348/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./348/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./348/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./348/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./348/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./348/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./348") = 0 [pid 5019] mkdir("./349", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 68.918903][ T6065] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1047 ./strace-static-x86_64: Process 6067 attached [pid 6067] set_robust_list(0x555556a426a0, 24) = 0 [pid 6067] chdir("./349") = 0 [pid 6067] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6067] setpgid(0, 0) = 0 [pid 6067] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6067] write(3, "1000", 4) = 4 [pid 6067] close(3) = 0 [pid 6067] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6067] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6067] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6067] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6067] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6067] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6067] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6067] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6068 attached [pid 6068] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6068] set_robust_list(0x7f15c1e659a0, 24 [pid 6067] <... clone3 resumed> => {parent_tid=[1048]}, 88) = 1048 [pid 6068] <... set_robust_list resumed>) = 0 [pid 6068] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6068] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6067] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6067] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6068] <... futex resumed>) = 0 [pid 6068] memfd_create("syzkaller", 0) = 3 [pid 6068] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6067] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6068] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6068] munmap(0x7f15b9a45000, 524288) = 0 [pid 6068] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6068] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6068] close(3) = 0 [pid 6068] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6068] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6068] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6068] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6068] ioctl(4, LOOP_CLR_FD) = 0 [pid 6068] close(4) = 0 [pid 6068] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6067] <... futex resumed>) = 0 [pid 6068] <... futex resumed>) = 1 [pid 6067] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6068] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6067] <... futex resumed>) = 0 [pid 6067] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6067] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6067] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6067] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6067] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6069 attached [pid 6068] <... mknodat resumed>) = 0 [pid 6069] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6067] <... clone3 resumed> => {parent_tid=[1049]}, 88) = 1049 [pid 6068] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6068] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6069] <... rseq resumed>) = 0 [pid 6069] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6069] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6069] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6067] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6067] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6067] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6069] <... futex resumed>) = 0 [pid 6069] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6069] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6069] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6069] chdir(".") = 0 [pid 6069] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6067] <... futex resumed>) = 0 [pid 6067] close(3) = 0 [pid 6067] close(4) = 0 [pid 6067] close(5) = -1 EBADF (Bad file descriptor) [pid 6067] close(6) = -1 EBADF (Bad file descriptor) [pid 6067] close(7) = -1 EBADF (Bad file descriptor) [pid 6067] close(8) = -1 EBADF (Bad file descriptor) [pid 6067] close(9) = -1 EBADF (Bad file descriptor) [pid 6067] close(10) = -1 EBADF (Bad file descriptor) [pid 6067] close(11) = -1 EBADF (Bad file descriptor) [pid 6067] close(12) = -1 EBADF (Bad file descriptor) [pid 6067] close(13) = -1 EBADF (Bad file descriptor) [pid 6067] close(14) = -1 EBADF (Bad file descriptor) [pid 6067] close(15) = -1 EBADF (Bad file descriptor) [pid 6067] close(16) = -1 EBADF (Bad file descriptor) [pid 6067] close(17) = -1 EBADF (Bad file descriptor) [pid 6067] close(18) = -1 EBADF (Bad file descriptor) [pid 6067] close(19) = -1 EBADF (Bad file descriptor) [pid 6067] close(20) = -1 EBADF (Bad file descriptor) [pid 6067] close(21) = -1 EBADF (Bad file descriptor) [pid 6067] close(22) = -1 EBADF (Bad file descriptor) [pid 6067] close(23) = -1 EBADF (Bad file descriptor) [pid 6067] close(24) = -1 EBADF (Bad file descriptor) [pid 6067] close(25) = -1 EBADF (Bad file descriptor) [pid 6067] close(26) = -1 EBADF (Bad file descriptor) [pid 6067] close(27) = -1 EBADF (Bad file descriptor) [pid 6067] close(28) = -1 EBADF (Bad file descriptor) [pid 6067] close(29) = -1 EBADF (Bad file descriptor) [pid 6067] exit_group(0) = ? [pid 6068] <... futex resumed>) = ? [pid 6068] +++ exited with 0 +++ [pid 6069] <... futex resumed>) = ? [pid 6069] +++ exited with 0 +++ [pid 6067] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1047, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./349", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./349", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./349/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./349/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./349/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./349/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./349/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./349/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./349/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./349/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./349/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./349") = 0 [pid 5019] mkdir("./350", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 68.995421][ T6068] loop0: detected capacity change from 0 to 1024 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1050 ./strace-static-x86_64: Process 6070 attached [pid 6070] set_robust_list(0x555556a426a0, 24) = 0 [pid 6070] chdir("./350") = 0 [pid 6070] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6070] setpgid(0, 0) = 0 [pid 6070] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6070] write(3, "1000", 4) = 4 [pid 6070] close(3) = 0 [pid 6070] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6070] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6070] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6070] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6070] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6070] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6070] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6070] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1051]}, 88) = 1051 [pid 6070] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6070] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6070] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6071 attached [pid 6071] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6071] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6071] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6071] memfd_create("syzkaller", 0) = 3 [pid 6071] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6071] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6071] munmap(0x7f15b9a45000, 524288) = 0 [pid 6071] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6071] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6071] close(3) = 0 [pid 6071] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6071] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6071] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6071] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6071] ioctl(4, LOOP_CLR_FD) = 0 [pid 6071] close(4) = 0 [pid 6071] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6070] <... futex resumed>) = 0 [pid 6070] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6070] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6070] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6071] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6070] <... mmap resumed>) = 0x7f15b9aa4000 [pid 6070] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6070] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6070] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1052]}, 88) = 1052 [pid 6070] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6070] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6070] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6072 attached [pid 6072] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6072] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6072] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6072] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6072] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6071] <... mknodat resumed>) = 0 [pid 6071] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6071] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6072] <... mount resumed>) = 0 [pid 6072] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6072] chdir(".") = 0 [pid 6072] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6070] <... futex resumed>) = 0 [pid 6072] <... futex resumed>) = 1 [pid 6070] close(3) = 0 [pid 6070] close(4) = 0 [pid 6070] close(5) = -1 EBADF (Bad file descriptor) [pid 6070] close(6) = -1 EBADF (Bad file descriptor) [pid 6070] close(7 [pid 6072] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6070] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6070] close(8) = -1 EBADF (Bad file descriptor) [pid 6070] close(9) = -1 EBADF (Bad file descriptor) [pid 6070] close(10) = -1 EBADF (Bad file descriptor) [pid 6070] close(11) = -1 EBADF (Bad file descriptor) [pid 6070] close(12) = -1 EBADF (Bad file descriptor) [pid 6070] close(13) = -1 EBADF (Bad file descriptor) [pid 6070] close(14) = -1 EBADF (Bad file descriptor) [pid 6070] close(15) = -1 EBADF (Bad file descriptor) [pid 6070] close(16) = -1 EBADF (Bad file descriptor) [pid 6070] close(17) = -1 EBADF (Bad file descriptor) [pid 6070] close(18) = -1 EBADF (Bad file descriptor) [pid 6070] close(19) = -1 EBADF (Bad file descriptor) [pid 6070] close(20) = -1 EBADF (Bad file descriptor) [pid 6070] close(21) = -1 EBADF (Bad file descriptor) [pid 6070] close(22) = -1 EBADF (Bad file descriptor) [pid 6070] close(23) = -1 EBADF (Bad file descriptor) [pid 6070] close(24) = -1 EBADF (Bad file descriptor) [pid 6070] close(25) = -1 EBADF (Bad file descriptor) [pid 6070] close(26) = -1 EBADF (Bad file descriptor) [pid 6070] close(27) = -1 EBADF (Bad file descriptor) [pid 6070] close(28) = -1 EBADF (Bad file descriptor) [pid 6070] close(29) = -1 EBADF (Bad file descriptor) [pid 6070] exit_group(0 [pid 6071] <... futex resumed>) = ? [pid 6070] <... exit_group resumed>) = ? [pid 6071] +++ exited with 0 +++ [pid 6072] <... futex resumed>) = ? [pid 6072] +++ exited with 0 +++ [pid 6070] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1050, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./350", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./350", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./350/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./350/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./350/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./350/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 69.071159][ T6071] loop0: detected capacity change from 0 to 1024 [pid 5019] openat(AT_FDCWD, "./350/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./350/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./350/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./350/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./350/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./350") = 0 [pid 5019] mkdir("./351", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1053 ./strace-static-x86_64: Process 6073 attached [pid 6073] set_robust_list(0x555556a426a0, 24) = 0 [pid 6073] chdir("./351") = 0 [pid 6073] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6073] setpgid(0, 0) = 0 [pid 6073] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6073] write(3, "1000", 4) = 4 [pid 6073] close(3) = 0 [pid 6073] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6073] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6073] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6073] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6073] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6073] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6073] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6073] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6074 attached => {parent_tid=[1054]}, 88) = 1054 [pid 6074] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6073] rt_sigprocmask(SIG_SETMASK, [], [pid 6074] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6074] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6074] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6073] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6073] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6074] <... futex resumed>) = 0 [pid 6073] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6074] memfd_create("syzkaller", 0) = 3 [pid 6074] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6074] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6074] munmap(0x7f15b9a45000, 524288) = 0 [pid 6074] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6074] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6074] close(3) = 0 [pid 6074] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6074] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6074] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6074] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6074] ioctl(4, LOOP_CLR_FD) = 0 [pid 6074] close(4) = 0 [pid 6074] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6073] <... futex resumed>) = 0 [pid 6073] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6073] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6073] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6073] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6073] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6073] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1055]}, 88) = 1055 [pid 6073] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 6075 attached [pid 6074] <... futex resumed>) = 1 [pid 6073] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6074] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6073] <... futex resumed>) = 0 [pid 6075] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6073] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6075] <... rseq resumed>) = 0 [pid 6075] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6074] <... mknodat resumed>) = 0 [pid 6074] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6074] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6075] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6075] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6075] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6075] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6075] chdir(".") = 0 [pid 6075] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6073] <... futex resumed>) = 0 [pid 6075] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6073] close(3) = 0 [pid 6073] close(4) = 0 [pid 6073] close(5) = -1 EBADF (Bad file descriptor) [pid 6073] close(6) = -1 EBADF (Bad file descriptor) [pid 6073] close(7) = -1 EBADF (Bad file descriptor) [pid 6073] close(8) = -1 EBADF (Bad file descriptor) [pid 6073] close(9) = -1 EBADF (Bad file descriptor) [pid 6073] close(10) = -1 EBADF (Bad file descriptor) [pid 6073] close(11) = -1 EBADF (Bad file descriptor) [pid 6073] close(12) = -1 EBADF (Bad file descriptor) [pid 6073] close(13) = -1 EBADF (Bad file descriptor) [pid 6073] close(14) = -1 EBADF (Bad file descriptor) [pid 6073] close(15) = -1 EBADF (Bad file descriptor) [pid 6073] close(16) = -1 EBADF (Bad file descriptor) [pid 6073] close(17) = -1 EBADF (Bad file descriptor) [pid 6073] close(18) = -1 EBADF (Bad file descriptor) [pid 6073] close(19) = -1 EBADF (Bad file descriptor) [pid 6073] close(20) = -1 EBADF (Bad file descriptor) [pid 6073] close(21) = -1 EBADF (Bad file descriptor) [pid 6073] close(22) = -1 EBADF (Bad file descriptor) [pid 6073] close(23) = -1 EBADF (Bad file descriptor) [pid 6073] close(24) = -1 EBADF (Bad file descriptor) [pid 6073] close(25) = -1 EBADF (Bad file descriptor) [pid 6073] close(26) = -1 EBADF (Bad file descriptor) [pid 6073] close(27) = -1 EBADF (Bad file descriptor) [pid 6073] close(28) = -1 EBADF (Bad file descriptor) [pid 6073] close(29) = -1 EBADF (Bad file descriptor) [pid 6073] exit_group(0 [pid 6075] <... futex resumed>) = ? [pid 6074] <... futex resumed>) = ? [pid 6075] +++ exited with 0 +++ [pid 6074] +++ exited with 0 +++ [pid 6073] <... exit_group resumed>) = ? [pid 6073] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1053, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./351", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./351", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./351/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./351/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./351/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./351/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./351/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./351/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./351/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./351/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 69.162458][ T6074] loop0: detected capacity change from 0 to 1024 [pid 5019] unlink("./351/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./351") = 0 [pid 5019] mkdir("./352", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1056 ./strace-static-x86_64: Process 6076 attached [pid 6076] set_robust_list(0x555556a426a0, 24) = 0 [pid 6076] chdir("./352") = 0 [pid 6076] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6076] setpgid(0, 0) = 0 [pid 6076] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6076] write(3, "1000", 4) = 4 [pid 6076] close(3) = 0 [pid 6076] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6076] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6076] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6076] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6076] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6076] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6076] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6076] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6077 attached [pid 6077] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6077] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6077] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6077] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6076] <... clone3 resumed> => {parent_tid=[1057]}, 88) = 1057 [pid 6076] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6076] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6077] <... futex resumed>) = 0 [pid 6076] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6077] memfd_create("syzkaller", 0) = 3 [pid 6077] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6077] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6077] munmap(0x7f15b9a45000, 524288) = 0 [pid 6077] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6077] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6077] close(3) = 0 [pid 6077] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6077] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6077] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6077] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6077] ioctl(4, LOOP_CLR_FD) = 0 [pid 6077] close(4) = 0 [pid 6077] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6076] <... futex resumed>) = 0 [pid 6077] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6076] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6076] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6076] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6076] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6076] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6076] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1058]}, 88) = 1058 [pid 6076] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6076] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6076] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6078 attached [pid 6077] <... mknodat resumed>) = 0 [pid 6078] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6078] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6078] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6077] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6078] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6078] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6077] <... futex resumed>) = 0 [pid 6077] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6078] <... mount resumed>) = 0 [pid 6078] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6078] chdir(".") = 0 [pid 6078] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6076] <... futex resumed>) = 0 [pid 6076] close(3) = 0 [pid 6076] close(4) = 0 [pid 6076] close(5) = -1 EBADF (Bad file descriptor) [pid 6076] close(6) = -1 EBADF (Bad file descriptor) [pid 6076] close(7) = -1 EBADF (Bad file descriptor) [pid 6076] close(8) = -1 EBADF (Bad file descriptor) [pid 6076] close(9) = -1 EBADF (Bad file descriptor) [pid 6076] close(10) = -1 EBADF (Bad file descriptor) [pid 6076] close(11) = -1 EBADF (Bad file descriptor) [pid 6076] close(12) = -1 EBADF (Bad file descriptor) [pid 6076] close(13) = -1 EBADF (Bad file descriptor) [pid 6076] close(14) = -1 EBADF (Bad file descriptor) [pid 6076] close(15) = -1 EBADF (Bad file descriptor) [pid 6076] close(16) = -1 EBADF (Bad file descriptor) [pid 6076] close(17) = -1 EBADF (Bad file descriptor) [pid 6076] close(18) = -1 EBADF (Bad file descriptor) [pid 6076] close(19) = -1 EBADF (Bad file descriptor) [pid 6076] close(20) = -1 EBADF (Bad file descriptor) [pid 6076] close(21) = -1 EBADF (Bad file descriptor) [pid 6076] close(22) = -1 EBADF (Bad file descriptor) [pid 6076] close(23) = -1 EBADF (Bad file descriptor) [pid 6076] close(24) = -1 EBADF (Bad file descriptor) [pid 6076] close(25) = -1 EBADF (Bad file descriptor) [pid 6076] close(26) = -1 EBADF (Bad file descriptor) [pid 6076] close(27) = -1 EBADF (Bad file descriptor) [pid 6076] close(28) = -1 EBADF (Bad file descriptor) [pid 6076] close(29) = -1 EBADF (Bad file descriptor) [pid 6076] exit_group(0 [pid 6077] <... futex resumed>) = ? [pid 6076] <... exit_group resumed>) = ? [pid 6077] +++ exited with 0 +++ [pid 6078] <... futex resumed>) = ? [pid 6078] +++ exited with 0 +++ [pid 6076] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1056, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5019] umount2("./352", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./352", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./352/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./352/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./352/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./352/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./352/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./352/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./352/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./352/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./352/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./352") = 0 [pid 5019] mkdir("./353", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1059 ./strace-static-x86_64: Process 6079 attached [pid 6079] set_robust_list(0x555556a426a0, 24) = 0 [pid 6079] chdir("./353") = 0 [pid 6079] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6079] setpgid(0, 0) = 0 [pid 6079] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6079] write(3, "1000", 4) = 4 [pid 6079] close(3) = 0 [pid 6079] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6079] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6079] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6079] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6079] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6079] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6079] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6079] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1060]}, 88) = 1060 [pid 6079] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6079] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6079] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6080 attached [pid 6080] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6080] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6080] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6080] memfd_create("syzkaller", 0) = 3 [pid 6080] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6080] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [ 69.246862][ T6077] loop0: detected capacity change from 0 to 1024 [pid 6080] munmap(0x7f15b9a45000, 524288) = 0 [pid 6080] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6080] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6080] close(3) = 0 [pid 6080] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6080] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6080] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6080] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6080] ioctl(4, LOOP_CLR_FD) = 0 [pid 6080] close(4) = 0 [pid 6080] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6079] <... futex resumed>) = 0 [pid 6080] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6079] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6079] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6079] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6079] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6079] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6079] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6081 attached => {parent_tid=[1061]}, 88) = 1061 [pid 6081] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6079] rt_sigprocmask(SIG_SETMASK, [], [pid 6081] <... rseq resumed>) = 0 [pid 6079] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6081] set_robust_list(0x7f15b9ac49a0, 24 [pid 6079] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6081] <... set_robust_list resumed>) = 0 [pid 6079] <... futex resumed>) = 0 [pid 6081] rt_sigprocmask(SIG_SETMASK, [], [pid 6079] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6081] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6081] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6081] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6080] <... mknodat resumed>) = 0 [pid 6080] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6080] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6081] <... mount resumed>) = 0 [pid 6081] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6081] chdir(".") = 0 [pid 6081] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6079] <... futex resumed>) = 0 [pid 6079] close(3) = 0 [pid 6079] close(4) = 0 [pid 6079] close(5) = -1 EBADF (Bad file descriptor) [pid 6079] close(6) = -1 EBADF (Bad file descriptor) [pid 6079] close(7) = -1 EBADF (Bad file descriptor) [pid 6079] close(8) = -1 EBADF (Bad file descriptor) [pid 6079] close(9) = -1 EBADF (Bad file descriptor) [pid 6079] close(10) = -1 EBADF (Bad file descriptor) [pid 6079] close(11) = -1 EBADF (Bad file descriptor) [pid 6079] close(12) = -1 EBADF (Bad file descriptor) [pid 6079] close(13) = -1 EBADF (Bad file descriptor) [pid 6079] close(14) = -1 EBADF (Bad file descriptor) [pid 6079] close(15) = -1 EBADF (Bad file descriptor) [pid 6079] close(16) = -1 EBADF (Bad file descriptor) [pid 6079] close(17) = -1 EBADF (Bad file descriptor) [pid 6079] close(18) = -1 EBADF (Bad file descriptor) [pid 6079] close(19) = -1 EBADF (Bad file descriptor) [pid 6079] close(20) = -1 EBADF (Bad file descriptor) [pid 6079] close(21) = -1 EBADF (Bad file descriptor) [pid 6079] close(22) = -1 EBADF (Bad file descriptor) [pid 6079] close(23) = -1 EBADF (Bad file descriptor) [pid 6079] close(24) = -1 EBADF (Bad file descriptor) [pid 6079] close(25) = -1 EBADF (Bad file descriptor) [pid 6079] close(26) = -1 EBADF (Bad file descriptor) [pid 6079] close(27) = -1 EBADF (Bad file descriptor) [pid 6079] close(28) = -1 EBADF (Bad file descriptor) [pid 6079] close(29) = -1 EBADF (Bad file descriptor) [pid 6079] exit_group(0) = ? [pid 6080] <... futex resumed>) = ? [pid 6080] +++ exited with 0 +++ [pid 6081] <... futex resumed>) = ? [pid 6081] +++ exited with 0 +++ [pid 6079] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1059, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5019] umount2("./353", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./353", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./353/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./353/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./353/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./353/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./353/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./353/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./353/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./353/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./353/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./353") = 0 [pid 5019] mkdir("./354", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1062 ./strace-static-x86_64: Process 6082 attached [pid 6082] set_robust_list(0x555556a426a0, 24) = 0 [pid 6082] chdir("./354") = 0 [pid 6082] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6082] setpgid(0, 0) = 0 [pid 6082] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6082] write(3, "1000", 4) = 4 [pid 6082] close(3) = 0 [pid 6082] symlink("/dev/binderfs", "./binderfs") = 0 [ 69.308691][ T6080] loop0: detected capacity change from 0 to 1024 [pid 6082] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6082] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6082] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6082] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6082] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6082] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6082] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6083 attached => {parent_tid=[1063]}, 88) = 1063 [pid 6083] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053 [pid 6082] rt_sigprocmask(SIG_SETMASK, [], [pid 6083] <... rseq resumed>) = 0 [pid 6082] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6083] set_robust_list(0x7f15c1e659a0, 24 [pid 6082] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6083] <... set_robust_list resumed>) = 0 [pid 6082] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6083] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6083] memfd_create("syzkaller", 0) = 3 [pid 6083] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6083] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6083] munmap(0x7f15b9a45000, 524288) = 0 [pid 6083] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6083] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6083] close(3) = 0 [pid 6083] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6083] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6083] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6083] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6083] ioctl(4, LOOP_CLR_FD) = 0 [pid 6083] close(4) = 0 [pid 6083] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6082] <... futex resumed>) = 0 [pid 6083] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6082] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6083] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6082] <... futex resumed>) = 0 [pid 6083] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6082] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6082] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6083] <... mknodat resumed>) = 0 [pid 6082] <... mmap resumed>) = 0x7f15b9aa4000 [pid 6083] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6082] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE [pid 6083] <... futex resumed>) = 0 [pid 6083] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6082] <... mprotect resumed>) = 0 [pid 6082] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6082] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6084 attached [pid 6084] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6082] <... clone3 resumed> => {parent_tid=[1064]}, 88) = 1064 [pid 6084] <... rseq resumed>) = 0 [pid 6082] rt_sigprocmask(SIG_SETMASK, [], [pid 6084] set_robust_list(0x7f15b9ac49a0, 24 [pid 6082] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6082] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6082] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6084] <... set_robust_list resumed>) = 0 [pid 6084] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6084] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6084] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6084] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6084] chdir(".") = 0 [pid 6084] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6082] <... futex resumed>) = 0 [pid 6082] close(3) = 0 [pid 6082] close(4) = 0 [pid 6084] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6082] close(5) = -1 EBADF (Bad file descriptor) [pid 6082] close(6) = -1 EBADF (Bad file descriptor) [pid 6082] close(7) = -1 EBADF (Bad file descriptor) [pid 6082] close(8) = -1 EBADF (Bad file descriptor) [pid 6082] close(9) = -1 EBADF (Bad file descriptor) [pid 6082] close(10) = -1 EBADF (Bad file descriptor) [pid 6082] close(11) = -1 EBADF (Bad file descriptor) [pid 6082] close(12) = -1 EBADF (Bad file descriptor) [pid 6082] close(13) = -1 EBADF (Bad file descriptor) [pid 6082] close(14) = -1 EBADF (Bad file descriptor) [pid 6082] close(15) = -1 EBADF (Bad file descriptor) [pid 6082] close(16) = -1 EBADF (Bad file descriptor) [pid 6082] close(17) = -1 EBADF (Bad file descriptor) [pid 6082] close(18) = -1 EBADF (Bad file descriptor) [pid 6082] close(19) = -1 EBADF (Bad file descriptor) [pid 6082] close(20) = -1 EBADF (Bad file descriptor) [pid 6082] close(21) = -1 EBADF (Bad file descriptor) [pid 6082] close(22) = -1 EBADF (Bad file descriptor) [pid 6082] close(23) = -1 EBADF (Bad file descriptor) [pid 6082] close(24) = -1 EBADF (Bad file descriptor) [pid 6082] close(25) = -1 EBADF (Bad file descriptor) [pid 6082] close(26) = -1 EBADF (Bad file descriptor) [pid 6082] close(27) = -1 EBADF (Bad file descriptor) [pid 6082] close(28) = -1 EBADF (Bad file descriptor) [pid 6082] close(29) = -1 EBADF (Bad file descriptor) [pid 6082] exit_group(0 [pid 6083] <... futex resumed>) = ? [pid 6082] <... exit_group resumed>) = ? [pid 6084] <... futex resumed>) = ? [pid 6083] +++ exited with 0 +++ [pid 6084] +++ exited with 0 +++ [pid 6082] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1062, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./354", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./354", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./354/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./354/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./354/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./354/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./354/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./354/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./354/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./354/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./354/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./354") = 0 [pid 5019] mkdir("./355", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 69.383253][ T6083] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1065 ./strace-static-x86_64: Process 6085 attached [pid 6085] set_robust_list(0x555556a426a0, 24) = 0 [pid 6085] chdir("./355") = 0 [pid 6085] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6085] setpgid(0, 0) = 0 [pid 6085] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6085] write(3, "1000", 4) = 4 [pid 6085] close(3) = 0 [pid 6085] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6085] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6085] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6085] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6085] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6085] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6085] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6085] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6086 attached => {parent_tid=[1066]}, 88) = 1066 [pid 6086] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053 [pid 6085] rt_sigprocmask(SIG_SETMASK, [], [pid 6086] <... rseq resumed>) = 0 [pid 6085] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6086] set_robust_list(0x7f15c1e659a0, 24 [pid 6085] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6086] <... set_robust_list resumed>) = 0 [pid 6085] <... futex resumed>) = 0 [pid 6086] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6085] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6086] memfd_create("syzkaller", 0) = 3 [pid 6086] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6086] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6086] munmap(0x7f15b9a45000, 524288) = 0 [pid 6086] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6086] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6086] close(3) = 0 [pid 6086] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6086] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6086] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6086] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6086] ioctl(4, LOOP_CLR_FD) = 0 [pid 6086] close(4) = 0 [pid 6086] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6086] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6085] <... futex resumed>) = 0 [pid 6085] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6085] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6085] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6085] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6085] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6086] <... futex resumed>) = 0 [pid 6085] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} [pid 6086] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6087 attached [pid 6085] <... clone3 resumed> => {parent_tid=[1067]}, 88) = 1067 [pid 6085] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6087] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6085] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6086] <... mknodat resumed>) = 0 [pid 6085] <... futex resumed>) = 0 [pid 6085] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6086] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6087] <... rseq resumed>) = 0 [pid 6087] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6087] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6087] mkdir(".", 0777 [pid 6086] <... futex resumed>) = 0 [pid 6087] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 6087] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6086] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6087] <... mount resumed>) = 0 [pid 6087] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6087] chdir(".") = 0 [pid 6087] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6085] <... futex resumed>) = 0 [pid 6085] close(3) = 0 [pid 6085] close(4) = 0 [pid 6085] close(5) = -1 EBADF (Bad file descriptor) [pid 6085] close(6) = -1 EBADF (Bad file descriptor) [pid 6085] close(7) = -1 EBADF (Bad file descriptor) [pid 6085] close(8) = -1 EBADF (Bad file descriptor) [pid 6085] close(9) = -1 EBADF (Bad file descriptor) [pid 6085] close(10) = -1 EBADF (Bad file descriptor) [pid 6085] close(11) = -1 EBADF (Bad file descriptor) [pid 6085] close(12) = -1 EBADF (Bad file descriptor) [pid 6085] close(13) = -1 EBADF (Bad file descriptor) [pid 6085] close(14) = -1 EBADF (Bad file descriptor) [pid 6085] close(15) = -1 EBADF (Bad file descriptor) [pid 6085] close(16) = -1 EBADF (Bad file descriptor) [pid 6085] close(17) = -1 EBADF (Bad file descriptor) [pid 6085] close(18) = -1 EBADF (Bad file descriptor) [pid 6085] close(19) = -1 EBADF (Bad file descriptor) [pid 6085] close(20) = -1 EBADF (Bad file descriptor) [pid 6085] close(21) = -1 EBADF (Bad file descriptor) [pid 6085] close(22) = -1 EBADF (Bad file descriptor) [pid 6085] close(23) = -1 EBADF (Bad file descriptor) [pid 6085] close(24) = -1 EBADF (Bad file descriptor) [pid 6085] close(25) = -1 EBADF (Bad file descriptor) [pid 6085] close(26) = -1 EBADF (Bad file descriptor) [pid 6085] close(27) = -1 EBADF (Bad file descriptor) [pid 6085] close(28) = -1 EBADF (Bad file descriptor) [pid 6085] close(29) = -1 EBADF (Bad file descriptor) [pid 6085] exit_group(0 [pid 6086] <... futex resumed>) = ? [pid 6085] <... exit_group resumed>) = ? [pid 6086] +++ exited with 0 +++ [pid 6087] +++ exited with 0 +++ [pid 6085] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1065, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./355", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./355", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./355/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./355/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./355/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./355/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./355/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./355/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./355/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./355/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./355/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./355") = 0 [pid 5019] mkdir("./356", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1068 ./strace-static-x86_64: Process 6088 attached [pid 6088] set_robust_list(0x555556a426a0, 24) = 0 [pid 6088] chdir("./356") = 0 [pid 6088] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6088] setpgid(0, 0) = 0 [pid 6088] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6088] write(3, "1000", 4) = 4 [pid 6088] close(3) = 0 [pid 6088] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6088] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6088] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6088] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6088] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6088] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6088] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6088] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1069]}, 88) = 1069 [pid 6088] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6088] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6088] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6089 attached [pid 6089] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6089] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6089] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 69.466956][ T6086] loop0: detected capacity change from 0 to 1024 [pid 6089] memfd_create("syzkaller", 0) = 3 [pid 6089] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6089] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6089] munmap(0x7f15b9a45000, 524288) = 0 [pid 6089] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6089] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6089] close(3) = 0 [pid 6089] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6089] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6089] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6089] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6089] ioctl(4, LOOP_CLR_FD) = 0 [pid 6089] close(4) = 0 [pid 6089] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6088] <... futex resumed>) = 0 [pid 6089] <... futex resumed>) = 1 [pid 6089] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6088] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6088] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6088] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6088] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6088] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6088] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6090 attached => {parent_tid=[1070]}, 88) = 1070 [pid 6088] rt_sigprocmask(SIG_SETMASK, [], [pid 6090] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6090] set_robust_list(0x7f15b9ac49a0, 24 [pid 6088] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6088] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6088] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6090] <... set_robust_list resumed>) = 0 [pid 6090] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6090] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6089] <... mknodat resumed>) = 0 [pid 6090] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6089] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6089] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6090] <... mount resumed>) = 0 [pid 6090] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6090] chdir(".") = 0 [pid 6090] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6088] <... futex resumed>) = 0 [pid 6088] close(3) = 0 [pid 6088] close(4) = 0 [pid 6088] close(5) = -1 EBADF (Bad file descriptor) [pid 6088] close(6) = -1 EBADF (Bad file descriptor) [pid 6088] close(7) = -1 EBADF (Bad file descriptor) [pid 6088] close(8) = -1 EBADF (Bad file descriptor) [pid 6088] close(9) = -1 EBADF (Bad file descriptor) [pid 6088] close(10) = -1 EBADF (Bad file descriptor) [pid 6088] close(11) = -1 EBADF (Bad file descriptor) [pid 6088] close(12) = -1 EBADF (Bad file descriptor) [pid 6088] close(13) = -1 EBADF (Bad file descriptor) [pid 6088] close(14) = -1 EBADF (Bad file descriptor) [pid 6088] close(15) = -1 EBADF (Bad file descriptor) [pid 6088] close(16) = -1 EBADF (Bad file descriptor) [pid 6088] close(17) = -1 EBADF (Bad file descriptor) [pid 6088] close(18) = -1 EBADF (Bad file descriptor) [pid 6088] close(19) = -1 EBADF (Bad file descriptor) [pid 6088] close(20) = -1 EBADF (Bad file descriptor) [pid 6088] close(21) = -1 EBADF (Bad file descriptor) [pid 6088] close(22) = -1 EBADF (Bad file descriptor) [pid 6088] close(23) = -1 EBADF (Bad file descriptor) [pid 6088] close(24) = -1 EBADF (Bad file descriptor) [pid 6088] close(25) = -1 EBADF (Bad file descriptor) [pid 6088] close(26) = -1 EBADF (Bad file descriptor) [pid 6088] close(27) = -1 EBADF (Bad file descriptor) [pid 6088] close(28 [pid 6090] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6088] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6088] close(29) = -1 EBADF (Bad file descriptor) [pid 6088] exit_group(0 [pid 6089] <... futex resumed>) = ? [pid 6088] <... exit_group resumed>) = ? [pid 6090] <... futex resumed>) = ? [pid 6089] +++ exited with 0 +++ [pid 6090] +++ exited with 0 +++ [pid 6088] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1068, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./356", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./356", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./356/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./356/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./356/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./356/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./356/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./356/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./356/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./356/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./356/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./356") = 0 [pid 5019] mkdir("./357", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1071 ./strace-static-x86_64: Process 6091 attached [pid 6091] set_robust_list(0x555556a426a0, 24) = 0 [pid 6091] chdir("./357") = 0 [pid 6091] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6091] setpgid(0, 0) = 0 [pid 6091] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6091] write(3, "1000", 4) = 4 [pid 6091] close(3) = 0 [pid 6091] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6091] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 69.533491][ T6089] loop0: detected capacity change from 0 to 1024 [pid 6091] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6091] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6091] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6091] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6091] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6091] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6092 attached => {parent_tid=[1072]}, 88) = 1072 [pid 6092] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6092] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6091] rt_sigprocmask(SIG_SETMASK, [], [pid 6092] rt_sigprocmask(SIG_SETMASK, [], [pid 6091] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6092] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6091] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6091] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6092] memfd_create("syzkaller", 0) = 3 [pid 6092] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6092] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6092] munmap(0x7f15b9a45000, 524288) = 0 [pid 6092] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6092] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6092] close(3) = 0 [pid 6092] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6092] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6092] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6092] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6092] ioctl(4, LOOP_CLR_FD) = 0 [pid 6092] close(4) = 0 [pid 6092] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6091] <... futex resumed>) = 0 [pid 6091] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6091] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6091] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6091] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6091] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6091] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1073]}, 88) = 1073 [pid 6091] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6091] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6091] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6092] <... futex resumed>) = 1 [pid 6092] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6093 attached [pid 6093] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6092] <... mknodat resumed>) = 0 [pid 6092] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6092] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6093] <... rseq resumed>) = 0 [pid 6093] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6093] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6093] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6093] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6093] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6093] chdir(".") = 0 [pid 6093] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6091] <... futex resumed>) = 0 [pid 6091] close(3) = 0 [pid 6091] close(4) = 0 [pid 6091] close(5) = -1 EBADF (Bad file descriptor) [pid 6091] close(6) = -1 EBADF (Bad file descriptor) [pid 6091] close(7) = -1 EBADF (Bad file descriptor) [pid 6091] close(8) = -1 EBADF (Bad file descriptor) [pid 6091] close(9) = -1 EBADF (Bad file descriptor) [pid 6091] close(10) = -1 EBADF (Bad file descriptor) [pid 6091] close(11) = -1 EBADF (Bad file descriptor) [pid 6091] close(12) = -1 EBADF (Bad file descriptor) [pid 6091] close(13) = -1 EBADF (Bad file descriptor) [pid 6091] close(14) = -1 EBADF (Bad file descriptor) [pid 6091] close(15) = -1 EBADF (Bad file descriptor) [pid 6093] <... futex resumed>) = 1 [pid 6091] close(16 [pid 6093] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6091] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6091] close(17) = -1 EBADF (Bad file descriptor) [pid 6091] close(18) = -1 EBADF (Bad file descriptor) [pid 6091] close(19) = -1 EBADF (Bad file descriptor) [pid 6091] close(20) = -1 EBADF (Bad file descriptor) [pid 6091] close(21) = -1 EBADF (Bad file descriptor) [pid 6091] close(22) = -1 EBADF (Bad file descriptor) [pid 6091] close(23) = -1 EBADF (Bad file descriptor) [pid 6091] close(24) = -1 EBADF (Bad file descriptor) [pid 6091] close(25) = -1 EBADF (Bad file descriptor) [pid 6091] close(26) = -1 EBADF (Bad file descriptor) [pid 6091] close(27) = -1 EBADF (Bad file descriptor) [pid 6091] close(28) = -1 EBADF (Bad file descriptor) [pid 6091] close(29) = -1 EBADF (Bad file descriptor) [pid 6091] exit_group(0 [pid 6093] <... futex resumed>) = ? [pid 6092] <... futex resumed>) = ? [pid 6091] <... exit_group resumed>) = ? [pid 6093] +++ exited with 0 +++ [pid 6092] +++ exited with 0 +++ [pid 6091] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1071, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./357", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./357", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./357/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./357/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./357/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./357/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./357/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./357/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./357/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./357/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./357/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./357") = 0 [pid 5019] mkdir("./358", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 69.604480][ T6092] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1074 ./strace-static-x86_64: Process 6094 attached [pid 6094] set_robust_list(0x555556a426a0, 24) = 0 [pid 6094] chdir("./358") = 0 [pid 6094] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6094] setpgid(0, 0) = 0 [pid 6094] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6094] write(3, "1000", 4) = 4 [pid 6094] close(3) = 0 [pid 6094] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6094] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6094] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6094] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6094] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6094] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6094] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6094] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6095 attached [pid 6095] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6095] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6095] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6095] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6094] <... clone3 resumed> => {parent_tid=[1075]}, 88) = 1075 [pid 6094] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6094] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6094] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6095] <... futex resumed>) = 0 [pid 6095] memfd_create("syzkaller", 0) = 3 [pid 6095] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6095] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6095] munmap(0x7f15b9a45000, 524288) = 0 [pid 6095] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6095] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6095] close(3) = 0 [pid 6095] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6095] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6095] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6095] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6095] ioctl(4, LOOP_CLR_FD) = 0 [pid 6095] close(4) = 0 [pid 6095] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6094] <... futex resumed>) = 0 [pid 6094] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6094] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6094] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6094] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6094] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6094] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1076]}, 88) = 1076 ./strace-static-x86_64: Process 6096 attached [pid 6094] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6094] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6094] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6095] <... futex resumed>) = 1 [pid 6095] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6096] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6095] <... mknodat resumed>) = 0 [pid 6096] set_robust_list(0x7f15b9ac49a0, 24 [pid 6095] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6095] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6096] <... set_robust_list resumed>) = 0 [pid 6096] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6096] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6096] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6096] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6096] chdir(".") = 0 [pid 6096] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6094] <... futex resumed>) = 0 [pid 6094] close(3) = 0 [pid 6094] close(4) = 0 [pid 6094] close(5) = -1 EBADF (Bad file descriptor) [pid 6094] close(6) = -1 EBADF (Bad file descriptor) [pid 6094] close(7) = -1 EBADF (Bad file descriptor) [pid 6094] close(8) = -1 EBADF (Bad file descriptor) [pid 6094] close(9) = -1 EBADF (Bad file descriptor) [pid 6094] close(10) = -1 EBADF (Bad file descriptor) [pid 6094] close(11) = -1 EBADF (Bad file descriptor) [pid 6094] close(12) = -1 EBADF (Bad file descriptor) [pid 6094] close(13) = -1 EBADF (Bad file descriptor) [pid 6094] close(14 [pid 6096] <... futex resumed>) = 1 [pid 6094] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6096] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6094] close(15) = -1 EBADF (Bad file descriptor) [pid 6094] close(16) = -1 EBADF (Bad file descriptor) [pid 6094] close(17) = -1 EBADF (Bad file descriptor) [pid 6094] close(18) = -1 EBADF (Bad file descriptor) [pid 6094] close(19) = -1 EBADF (Bad file descriptor) [pid 6094] close(20) = -1 EBADF (Bad file descriptor) [pid 6094] close(21) = -1 EBADF (Bad file descriptor) [pid 6094] close(22) = -1 EBADF (Bad file descriptor) [pid 6094] close(23) = -1 EBADF (Bad file descriptor) [pid 6094] close(24) = -1 EBADF (Bad file descriptor) [pid 6094] close(25) = -1 EBADF (Bad file descriptor) [pid 6094] close(26) = -1 EBADF (Bad file descriptor) [pid 6094] close(27) = -1 EBADF (Bad file descriptor) [pid 6094] close(28) = -1 EBADF (Bad file descriptor) [pid 6094] close(29) = -1 EBADF (Bad file descriptor) [pid 6094] exit_group(0 [pid 6096] <... futex resumed>) = ? [pid 6095] <... futex resumed>) = ? [pid 6094] <... exit_group resumed>) = ? [pid 6096] +++ exited with 0 +++ [pid 6095] +++ exited with 0 +++ [pid 6094] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1074, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] umount2("./358", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./358", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./358/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./358/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./358/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./358/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./358/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./358/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./358/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./358/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./358/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./358") = 0 [pid 5019] mkdir("./359", 0777) = 0 [ 69.683852][ T6095] loop0: detected capacity change from 0 to 1024 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6097 attached [pid 6097] set_robust_list(0x555556a426a0, 24 [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1077 [pid 6097] <... set_robust_list resumed>) = 0 [pid 6097] chdir("./359") = 0 [pid 6097] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6097] setpgid(0, 0) = 0 [pid 6097] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6097] write(3, "1000", 4) = 4 [pid 6097] close(3) = 0 [pid 6097] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6097] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6097] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6097] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6097] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6097] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6097] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6097] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6098 attached [pid 6098] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6098] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6098] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6098] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6097] <... clone3 resumed> => {parent_tid=[1078]}, 88) = 1078 [pid 6097] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6097] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6098] <... futex resumed>) = 0 [pid 6097] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6098] memfd_create("syzkaller", 0) = 3 [pid 6098] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6098] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6098] munmap(0x7f15b9a45000, 524288) = 0 [pid 6098] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6098] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6098] close(3) = 0 [pid 6098] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6098] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6098] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6098] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6098] ioctl(4, LOOP_CLR_FD) = 0 [pid 6098] close(4) = 0 [pid 6098] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6097] <... futex resumed>) = 0 [pid 6098] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6097] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6098] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6097] <... futex resumed>) = 0 [pid 6097] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6097] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6097] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6097] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6097] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1079]}, 88) = 1079 [pid 6097] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6097] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6097] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6099 attached [pid 6098] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6099] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6098] <... mknodat resumed>) = 0 [pid 6099] <... rseq resumed>) = 0 [pid 6098] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6099] set_robust_list(0x7f15b9ac49a0, 24 [pid 6098] <... futex resumed>) = 0 [pid 6099] <... set_robust_list resumed>) = 0 [pid 6098] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6099] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6099] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6099] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6099] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6099] chdir(".") = 0 [pid 6099] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6097] <... futex resumed>) = 0 [pid 6097] close(3) = 0 [pid 6097] close(4 [pid 6099] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6097] <... close resumed>) = 0 [pid 6097] close(5) = -1 EBADF (Bad file descriptor) [pid 6097] close(6) = -1 EBADF (Bad file descriptor) [pid 6097] close(7) = -1 EBADF (Bad file descriptor) [pid 6097] close(8) = -1 EBADF (Bad file descriptor) [pid 6097] close(9) = -1 EBADF (Bad file descriptor) [pid 6097] close(10) = -1 EBADF (Bad file descriptor) [pid 6097] close(11) = -1 EBADF (Bad file descriptor) [pid 6097] close(12) = -1 EBADF (Bad file descriptor) [pid 6097] close(13) = -1 EBADF (Bad file descriptor) [pid 6097] close(14) = -1 EBADF (Bad file descriptor) [pid 6097] close(15) = -1 EBADF (Bad file descriptor) [pid 6097] close(16) = -1 EBADF (Bad file descriptor) [pid 6097] close(17) = -1 EBADF (Bad file descriptor) [pid 6097] close(18) = -1 EBADF (Bad file descriptor) [pid 6097] close(19) = -1 EBADF (Bad file descriptor) [pid 6097] close(20) = -1 EBADF (Bad file descriptor) [pid 6097] close(21) = -1 EBADF (Bad file descriptor) [pid 6097] close(22) = -1 EBADF (Bad file descriptor) [pid 6097] close(23) = -1 EBADF (Bad file descriptor) [pid 6097] close(24) = -1 EBADF (Bad file descriptor) [pid 6097] close(25) = -1 EBADF (Bad file descriptor) [pid 6097] close(26) = -1 EBADF (Bad file descriptor) [pid 6097] close(27) = -1 EBADF (Bad file descriptor) [pid 6097] close(28) = -1 EBADF (Bad file descriptor) [pid 6097] close(29) = -1 EBADF (Bad file descriptor) [pid 6097] exit_group(0 [pid 6098] <... futex resumed>) = ? [pid 6097] <... exit_group resumed>) = ? [pid 6099] <... futex resumed>) = ? [pid 6098] +++ exited with 0 +++ [pid 6099] +++ exited with 0 +++ [pid 6097] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1077, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./359", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./359", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./359/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./359/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./359/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./359/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./359/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./359/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./359/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./359/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./359/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./359") = 0 [pid 5019] mkdir("./360", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 69.762470][ T6098] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6100 attached [pid 6100] set_robust_list(0x555556a426a0, 24 [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1080 [pid 6100] <... set_robust_list resumed>) = 0 [pid 6100] chdir("./360") = 0 [pid 6100] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6100] setpgid(0, 0) = 0 [pid 6100] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6100] write(3, "1000", 4) = 4 [pid 6100] close(3) = 0 [pid 6100] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6100] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6100] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6100] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6100] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6100] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6100] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6100] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1081]}, 88) = 1081 [pid 6100] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6101 attached [pid 6101] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6101] set_robust_list(0x7f15c1e659a0, 24 [pid 6100] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6101] <... set_robust_list resumed>) = 0 [pid 6101] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6101] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6100] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6101] <... futex resumed>) = 0 [pid 6100] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6101] memfd_create("syzkaller", 0) = 3 [pid 6101] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6101] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6101] munmap(0x7f15b9a45000, 524288) = 0 [pid 6101] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6101] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6101] close(3) = 0 [pid 6101] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6101] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6101] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6101] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6101] ioctl(4, LOOP_CLR_FD) = 0 [pid 6101] close(4) = 0 [pid 6101] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6100] <... futex resumed>) = 0 [pid 6100] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6100] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6100] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6100] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6100] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6100] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6102 attached => {parent_tid=[1082]}, 88) = 1082 [pid 6102] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6100] rt_sigprocmask(SIG_SETMASK, [], [pid 6102] <... rseq resumed>) = 0 [pid 6100] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6102] set_robust_list(0x7f15b9ac49a0, 24 [pid 6100] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6100] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6102] <... set_robust_list resumed>) = 0 [pid 6101] <... futex resumed>) = 1 [pid 6101] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6102] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6101] <... mknodat resumed>) = 0 [pid 6102] mkdir(".", 0777 [pid 6101] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6101] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6102] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 6102] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6102] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6102] chdir(".") = 0 [pid 6102] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6100] <... futex resumed>) = 0 [pid 6100] close(3) = 0 [pid 6100] close(4) = 0 [pid 6100] close(5 [pid 6102] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6100] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6100] close(6) = -1 EBADF (Bad file descriptor) [pid 6100] close(7) = -1 EBADF (Bad file descriptor) [pid 6100] close(8) = -1 EBADF (Bad file descriptor) [pid 6100] close(9) = -1 EBADF (Bad file descriptor) [pid 6100] close(10) = -1 EBADF (Bad file descriptor) [pid 6100] close(11) = -1 EBADF (Bad file descriptor) [pid 6100] close(12) = -1 EBADF (Bad file descriptor) [pid 6100] close(13) = -1 EBADF (Bad file descriptor) [pid 6100] close(14) = -1 EBADF (Bad file descriptor) [pid 6100] close(15) = -1 EBADF (Bad file descriptor) [pid 6100] close(16) = -1 EBADF (Bad file descriptor) [pid 6100] close(17) = -1 EBADF (Bad file descriptor) [pid 6100] close(18) = -1 EBADF (Bad file descriptor) [pid 6100] close(19) = -1 EBADF (Bad file descriptor) [pid 6100] close(20) = -1 EBADF (Bad file descriptor) [pid 6100] close(21) = -1 EBADF (Bad file descriptor) [pid 6100] close(22) = -1 EBADF (Bad file descriptor) [pid 6100] close(23) = -1 EBADF (Bad file descriptor) [pid 6100] close(24) = -1 EBADF (Bad file descriptor) [pid 6100] close(25) = -1 EBADF (Bad file descriptor) [pid 6100] close(26) = -1 EBADF (Bad file descriptor) [pid 6100] close(27) = -1 EBADF (Bad file descriptor) [pid 6100] close(28) = -1 EBADF (Bad file descriptor) [pid 6100] close(29) = -1 EBADF (Bad file descriptor) [pid 6100] exit_group(0) = ? [pid 6102] <... futex resumed>) = ? [pid 6101] <... futex resumed>) = ? [pid 6101] +++ exited with 0 +++ [pid 6102] +++ exited with 0 +++ [pid 6100] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1080, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./360", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./360", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./360/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./360/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./360/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./360/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./360/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./360/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./360/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./360/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./360/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./360") = 0 [pid 5019] mkdir("./361", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1083 ./strace-static-x86_64: Process 6103 attached [pid 6103] set_robust_list(0x555556a426a0, 24) = 0 [pid 6103] chdir("./361") = 0 [pid 6103] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6103] setpgid(0, 0) = 0 [pid 6103] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6103] write(3, "1000", 4) = 4 [pid 6103] close(3) = 0 [pid 6103] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6103] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6103] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6103] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6103] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6103] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6103] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6103] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6104 attached [pid 6104] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6104] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6104] rt_sigprocmask(SIG_SETMASK, [], [pid 6103] <... clone3 resumed> => {parent_tid=[1084]}, 88) = 1084 [pid 6104] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6104] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6103] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6103] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6104] <... futex resumed>) = 0 [pid 6104] memfd_create("syzkaller", 0 [pid 6103] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6104] <... memfd_create resumed>) = 3 [pid 6104] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [ 69.842631][ T6101] loop0: detected capacity change from 0 to 1024 [pid 6104] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6104] munmap(0x7f15b9a45000, 524288) = 0 [pid 6104] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6104] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6104] close(3) = 0 [pid 6104] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6104] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6104] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6104] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6104] ioctl(4, LOOP_CLR_FD) = 0 [pid 6104] close(4) = 0 [pid 6104] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6104] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6103] <... futex resumed>) = 0 [pid 6103] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6104] <... futex resumed>) = 0 [pid 6104] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6103] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6103] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6103] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6103] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6103] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1085]}, 88) = 1085 [pid 6104] <... mknodat resumed>) = 0 [pid 6103] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6103] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6103] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6105 attached [pid 6105] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6105] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6105] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6104] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6105] mkdir(".", 0777 [pid 6104] <... futex resumed>) = 0 [pid 6105] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 6105] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6104] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6105] <... mount resumed>) = 0 [pid 6105] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6105] chdir(".") = 0 [pid 6105] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6103] <... futex resumed>) = 0 [pid 6103] close(3) = 0 [pid 6103] close(4) = 0 [pid 6103] close(5) = -1 EBADF (Bad file descriptor) [pid 6103] close(6) = -1 EBADF (Bad file descriptor) [pid 6103] close(7) = -1 EBADF (Bad file descriptor) [pid 6103] close(8) = -1 EBADF (Bad file descriptor) [pid 6103] close(9) = -1 EBADF (Bad file descriptor) [pid 6103] close(10) = -1 EBADF (Bad file descriptor) [pid 6103] close(11) = -1 EBADF (Bad file descriptor) [pid 6103] close(12) = -1 EBADF (Bad file descriptor) [pid 6103] close(13) = -1 EBADF (Bad file descriptor) [pid 6103] close(14) = -1 EBADF (Bad file descriptor) [pid 6103] close(15) = -1 EBADF (Bad file descriptor) [pid 6103] close(16) = -1 EBADF (Bad file descriptor) [pid 6103] close(17) = -1 EBADF (Bad file descriptor) [pid 6103] close(18) = -1 EBADF (Bad file descriptor) [pid 6103] close(19) = -1 EBADF (Bad file descriptor) [pid 6103] close(20) = -1 EBADF (Bad file descriptor) [pid 6103] close(21) = -1 EBADF (Bad file descriptor) [pid 6103] close(22) = -1 EBADF (Bad file descriptor) [pid 6103] close(23) = -1 EBADF (Bad file descriptor) [pid 6103] close(24) = -1 EBADF (Bad file descriptor) [pid 6103] close(25) = -1 EBADF (Bad file descriptor) [pid 6103] close(26) = -1 EBADF (Bad file descriptor) [pid 6103] close(27) = -1 EBADF (Bad file descriptor) [pid 6103] close(28) = -1 EBADF (Bad file descriptor) [pid 6103] close(29) = -1 EBADF (Bad file descriptor) [pid 6103] exit_group(0) = ? [pid 6105] <... futex resumed>) = ? [pid 6104] <... futex resumed>) = ? [pid 6104] +++ exited with 0 +++ [pid 6105] +++ exited with 0 +++ [pid 6103] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1083, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] umount2("./361", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./361", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./361/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./361/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./361/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./361/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./361/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./361/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./361/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./361/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./361/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./361") = 0 [pid 5019] mkdir("./362", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1086 ./strace-static-x86_64: Process 6106 attached [pid 6106] set_robust_list(0x555556a426a0, 24) = 0 [pid 6106] chdir("./362") = 0 [pid 6106] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6106] setpgid(0, 0) = 0 [pid 6106] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6106] write(3, "1000", 4) = 4 [pid 6106] close(3) = 0 [pid 6106] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6106] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6106] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6106] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6106] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [ 69.909485][ T6104] loop0: detected capacity change from 0 to 1024 [pid 6106] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6106] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6106] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6107 attached => {parent_tid=[1087]}, 88) = 1087 [pid 6107] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6107] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6107] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6107] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6106] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6106] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6107] <... futex resumed>) = 0 [pid 6107] memfd_create("syzkaller", 0 [pid 6106] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6107] <... memfd_create resumed>) = 3 [pid 6107] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6107] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6107] munmap(0x7f15b9a45000, 524288) = 0 [pid 6107] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6107] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6107] close(3) = 0 [pid 6107] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6107] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6107] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6107] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6107] ioctl(4, LOOP_CLR_FD) = 0 [pid 6107] close(4) = 0 [pid 6107] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6106] <... futex resumed>) = 0 [pid 6106] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6107] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6106] <... futex resumed>) = 0 [pid 6106] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6107] <... mknodat resumed>) = 0 [pid 6106] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6106] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6106] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6106] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6108 attached => {parent_tid=[1088]}, 88) = 1088 [pid 6106] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6106] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6106] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6107] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6107] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6108] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6108] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6108] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6108] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6108] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6108] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6108] chdir(".") = 0 [pid 6108] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6106] <... futex resumed>) = 0 [pid 6106] close(3) = 0 [pid 6106] close(4 [pid 6108] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6106] <... close resumed>) = 0 [pid 6106] close(5) = -1 EBADF (Bad file descriptor) [pid 6106] close(6) = -1 EBADF (Bad file descriptor) [pid 6106] close(7) = -1 EBADF (Bad file descriptor) [pid 6106] close(8) = -1 EBADF (Bad file descriptor) [pid 6106] close(9) = -1 EBADF (Bad file descriptor) [pid 6106] close(10) = -1 EBADF (Bad file descriptor) [pid 6106] close(11) = -1 EBADF (Bad file descriptor) [pid 6106] close(12) = -1 EBADF (Bad file descriptor) [pid 6106] close(13) = -1 EBADF (Bad file descriptor) [pid 6106] close(14) = -1 EBADF (Bad file descriptor) [pid 6106] close(15) = -1 EBADF (Bad file descriptor) [pid 6106] close(16) = -1 EBADF (Bad file descriptor) [pid 6106] close(17) = -1 EBADF (Bad file descriptor) [pid 6106] close(18) = -1 EBADF (Bad file descriptor) [pid 6106] close(19) = -1 EBADF (Bad file descriptor) [pid 6106] close(20) = -1 EBADF (Bad file descriptor) [pid 6106] close(21) = -1 EBADF (Bad file descriptor) [pid 6106] close(22) = -1 EBADF (Bad file descriptor) [pid 6106] close(23) = -1 EBADF (Bad file descriptor) [pid 6106] close(24) = -1 EBADF (Bad file descriptor) [pid 6106] close(25) = -1 EBADF (Bad file descriptor) [pid 6106] close(26) = -1 EBADF (Bad file descriptor) [pid 6106] close(27) = -1 EBADF (Bad file descriptor) [pid 6106] close(28) = -1 EBADF (Bad file descriptor) [pid 6106] close(29) = -1 EBADF (Bad file descriptor) [pid 6106] exit_group(0 [pid 6107] <... futex resumed>) = ? [pid 6106] <... exit_group resumed>) = ? [pid 6108] <... futex resumed>) = ? [pid 6107] +++ exited with 0 +++ [pid 6108] +++ exited with 0 +++ [pid 6106] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1086, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./362", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./362", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./362/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./362/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./362/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./362/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./362/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./362/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./362/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./362/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./362/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./362") = 0 [pid 5019] mkdir("./363", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1089 ./strace-static-x86_64: Process 6109 attached [ 69.981555][ T6107] loop0: detected capacity change from 0 to 1024 [pid 6109] set_robust_list(0x555556a426a0, 24) = 0 [pid 6109] chdir("./363") = 0 [pid 6109] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6109] setpgid(0, 0) = 0 [pid 6109] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6109] write(3, "1000", 4) = 4 [pid 6109] close(3) = 0 [pid 6109] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6109] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6109] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6109] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6109] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6109] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6109] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6109] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6110 attached => {parent_tid=[1090]}, 88) = 1090 [pid 6110] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6110] set_robust_list(0x7f15c1e659a0, 24 [pid 6109] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6110] <... set_robust_list resumed>) = 0 [pid 6110] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6110] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6109] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6110] <... futex resumed>) = 0 [pid 6109] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6110] memfd_create("syzkaller", 0) = 3 [pid 6110] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6110] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6110] munmap(0x7f15b9a45000, 524288) = 0 [pid 6110] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6110] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6110] close(3) = 0 [pid 6110] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6110] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6110] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6110] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6110] ioctl(4, LOOP_CLR_FD) = 0 [pid 6110] close(4) = 0 [pid 6110] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6109] <... futex resumed>) = 0 [pid 6109] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6109] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6109] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6110] <... futex resumed>) = 1 [pid 6109] <... mmap resumed>) = 0x7f15b9aa4000 [pid 6109] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6109] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6109] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} [pid 6110] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6109] <... clone3 resumed> => {parent_tid=[1091]}, 88) = 1091 [pid 6109] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6109] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6109] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6110] <... mknodat resumed>) = 0 [pid 6110] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6110] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6111 attached [pid 6111] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6111] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6111] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6111] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6111] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6111] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6111] chdir(".") = 0 [pid 6111] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6109] <... futex resumed>) = 0 [pid 6109] close(3) = 0 [pid 6109] close(4 [pid 6111] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6109] <... close resumed>) = 0 [pid 6109] close(5) = -1 EBADF (Bad file descriptor) [pid 6109] close(6) = -1 EBADF (Bad file descriptor) [pid 6109] close(7) = -1 EBADF (Bad file descriptor) [pid 6109] close(8) = -1 EBADF (Bad file descriptor) [pid 6109] close(9) = -1 EBADF (Bad file descriptor) [pid 6109] close(10) = -1 EBADF (Bad file descriptor) [pid 6109] close(11) = -1 EBADF (Bad file descriptor) [pid 6109] close(12) = -1 EBADF (Bad file descriptor) [pid 6109] close(13) = -1 EBADF (Bad file descriptor) [pid 6109] close(14) = -1 EBADF (Bad file descriptor) [pid 6109] close(15) = -1 EBADF (Bad file descriptor) [pid 6109] close(16) = -1 EBADF (Bad file descriptor) [pid 6109] close(17) = -1 EBADF (Bad file descriptor) [pid 6109] close(18) = -1 EBADF (Bad file descriptor) [pid 6109] close(19) = -1 EBADF (Bad file descriptor) [pid 6109] close(20) = -1 EBADF (Bad file descriptor) [pid 6109] close(21) = -1 EBADF (Bad file descriptor) [pid 6109] close(22) = -1 EBADF (Bad file descriptor) [pid 6109] close(23) = -1 EBADF (Bad file descriptor) [pid 6109] close(24) = -1 EBADF (Bad file descriptor) [pid 6109] close(25) = -1 EBADF (Bad file descriptor) [pid 6109] close(26) = -1 EBADF (Bad file descriptor) [pid 6109] close(27) = -1 EBADF (Bad file descriptor) [pid 6109] close(28) = -1 EBADF (Bad file descriptor) [pid 6109] close(29) = -1 EBADF (Bad file descriptor) [pid 6109] exit_group(0 [pid 6111] <... futex resumed>) = ? [pid 6110] <... futex resumed>) = ? [pid 6109] <... exit_group resumed>) = ? [pid 6111] +++ exited with 0 +++ [pid 6110] +++ exited with 0 +++ [pid 6109] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1089, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./363", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./363", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [ 70.062858][ T6110] loop0: detected capacity change from 0 to 1024 [pid 5019] umount2("./363/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./363/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./363/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./363/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./363/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./363/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./363/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./363/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./363/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./363") = 0 [pid 5019] mkdir("./364", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1092 ./strace-static-x86_64: Process 6112 attached [pid 6112] set_robust_list(0x555556a426a0, 24) = 0 [pid 6112] chdir("./364") = 0 [pid 6112] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6112] setpgid(0, 0) = 0 [pid 6112] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6112] write(3, "1000", 4) = 4 [pid 6112] close(3) = 0 [pid 6112] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6112] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6112] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6112] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6112] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6112] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6112] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6112] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6113 attached => {parent_tid=[1093]}, 88) = 1093 [pid 6113] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053 [pid 6112] rt_sigprocmask(SIG_SETMASK, [], [pid 6113] <... rseq resumed>) = 0 [pid 6112] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6113] set_robust_list(0x7f15c1e659a0, 24 [pid 6112] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6113] <... set_robust_list resumed>) = 0 [pid 6112] <... futex resumed>) = 0 [pid 6112] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6113] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6113] memfd_create("syzkaller", 0) = 3 [pid 6113] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6113] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6113] munmap(0x7f15b9a45000, 524288) = 0 [pid 6113] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6113] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6113] close(3) = 0 [pid 6113] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6113] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6113] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6113] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6113] ioctl(4, LOOP_CLR_FD) = 0 [pid 6113] close(4) = 0 [pid 6113] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6113] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6112] <... futex resumed>) = 0 [pid 6112] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6113] <... futex resumed>) = 0 [pid 6112] <... futex resumed>) = 1 [pid 6113] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6112] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6112] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6113] <... mknodat resumed>) = 0 [pid 6112] <... mmap resumed>) = 0x7f15b9aa4000 [pid 6113] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6112] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE [pid 6113] <... futex resumed>) = 0 [pid 6113] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6112] <... mprotect resumed>) = 0 [pid 6112] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6112] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6114 attached [pid 6114] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6112] <... clone3 resumed> => {parent_tid=[1094]}, 88) = 1094 [pid 6114] <... rseq resumed>) = 0 [pid 6112] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6114] set_robust_list(0x7f15b9ac49a0, 24 [pid 6112] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6114] <... set_robust_list resumed>) = 0 [pid 6112] <... futex resumed>) = 0 [pid 6114] rt_sigprocmask(SIG_SETMASK, [], [pid 6112] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6114] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6114] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6114] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6114] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6114] chdir(".") = 0 [pid 6114] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6112] <... futex resumed>) = 0 [pid 6112] close(3) = 0 [pid 6112] close(4) = 0 [pid 6112] close(5) = -1 EBADF (Bad file descriptor) [pid 6112] close(6) = -1 EBADF (Bad file descriptor) [pid 6114] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6112] close(7) = -1 EBADF (Bad file descriptor) [pid 6112] close(8) = -1 EBADF (Bad file descriptor) [pid 6112] close(9) = -1 EBADF (Bad file descriptor) [pid 6112] close(10) = -1 EBADF (Bad file descriptor) [pid 6112] close(11) = -1 EBADF (Bad file descriptor) [pid 6112] close(12) = -1 EBADF (Bad file descriptor) [pid 6112] close(13) = -1 EBADF (Bad file descriptor) [pid 6112] close(14) = -1 EBADF (Bad file descriptor) [pid 6112] close(15) = -1 EBADF (Bad file descriptor) [pid 6112] close(16) = -1 EBADF (Bad file descriptor) [pid 6112] close(17) = -1 EBADF (Bad file descriptor) [pid 6112] close(18) = -1 EBADF (Bad file descriptor) [pid 6112] close(19) = -1 EBADF (Bad file descriptor) [pid 6112] close(20) = -1 EBADF (Bad file descriptor) [pid 6112] close(21) = -1 EBADF (Bad file descriptor) [pid 6112] close(22) = -1 EBADF (Bad file descriptor) [pid 6112] close(23) = -1 EBADF (Bad file descriptor) [pid 6112] close(24) = -1 EBADF (Bad file descriptor) [pid 6112] close(25) = -1 EBADF (Bad file descriptor) [pid 6112] close(26) = -1 EBADF (Bad file descriptor) [pid 6112] close(27) = -1 EBADF (Bad file descriptor) [pid 6112] close(28) = -1 EBADF (Bad file descriptor) [pid 6112] close(29) = -1 EBADF (Bad file descriptor) [pid 6112] exit_group(0 [pid 6113] <... futex resumed>) = ? [pid 6114] <... futex resumed>) = ? [pid 6112] <... exit_group resumed>) = ? [pid 6113] +++ exited with 0 +++ [pid 6114] +++ exited with 0 +++ [pid 6112] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1092, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./364", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./364", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./364/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./364/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./364/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./364/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./364/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./364/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./364/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./364/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./364/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./364") = 0 [pid 5019] mkdir("./365", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 70.129160][ T6113] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1095 ./strace-static-x86_64: Process 6115 attached [pid 6115] set_robust_list(0x555556a426a0, 24) = 0 [pid 6115] chdir("./365") = 0 [pid 6115] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6115] setpgid(0, 0) = 0 [pid 6115] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6115] write(3, "1000", 4) = 4 [pid 6115] close(3) = 0 [pid 6115] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6115] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6115] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6115] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6115] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6115] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6115] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6115] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6116 attached [pid 6116] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6115] <... clone3 resumed> => {parent_tid=[1096]}, 88) = 1096 [pid 6115] rt_sigprocmask(SIG_SETMASK, [], [pid 6116] set_robust_list(0x7f15c1e659a0, 24 [pid 6115] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6116] <... set_robust_list resumed>) = 0 [pid 6116] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6116] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6115] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6116] <... futex resumed>) = 0 [pid 6115] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6116] memfd_create("syzkaller", 0) = 3 [pid 6116] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6116] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6116] munmap(0x7f15b9a45000, 524288) = 0 [pid 6116] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6116] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6116] close(3) = 0 [pid 6116] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6116] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6116] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6116] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6116] ioctl(4, LOOP_CLR_FD) = 0 [pid 6116] close(4) = 0 [pid 6116] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6116] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6115] <... futex resumed>) = 0 [pid 6115] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6115] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6115] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6115] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6115] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6115] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1097]}, 88) = 1097 [pid 6115] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6115] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6115] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6117 attached [pid 6117] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6117] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6117] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6117] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6117] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6116] <... futex resumed>) = 0 [pid 6116] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6117] <... mount resumed>) = 0 [pid 6117] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6117] chdir(".") = 0 [pid 6117] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6115] <... futex resumed>) = 0 [pid 6117] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6116] <... mknodat resumed>) = 0 [pid 6116] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6116] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6115] close(3) = 0 [pid 6115] close(4) = 0 [pid 6115] close(5) = -1 EBADF (Bad file descriptor) [pid 6115] close(6) = -1 EBADF (Bad file descriptor) [pid 6115] close(7) = -1 EBADF (Bad file descriptor) [pid 6115] close(8) = -1 EBADF (Bad file descriptor) [pid 6115] close(9) = -1 EBADF (Bad file descriptor) [pid 6115] close(10) = -1 EBADF (Bad file descriptor) [pid 6115] close(11) = -1 EBADF (Bad file descriptor) [pid 6115] close(12) = -1 EBADF (Bad file descriptor) [pid 6115] close(13) = -1 EBADF (Bad file descriptor) [pid 6115] close(14) = -1 EBADF (Bad file descriptor) [pid 6115] close(15) = -1 EBADF (Bad file descriptor) [pid 6115] close(16) = -1 EBADF (Bad file descriptor) [pid 6115] close(17) = -1 EBADF (Bad file descriptor) [pid 6115] close(18) = -1 EBADF (Bad file descriptor) [pid 6115] close(19) = -1 EBADF (Bad file descriptor) [pid 6115] close(20) = -1 EBADF (Bad file descriptor) [pid 6115] close(21) = -1 EBADF (Bad file descriptor) [pid 6115] close(22) = -1 EBADF (Bad file descriptor) [pid 6115] close(23) = -1 EBADF (Bad file descriptor) [pid 6115] close(24) = -1 EBADF (Bad file descriptor) [pid 6115] close(25) = -1 EBADF (Bad file descriptor) [pid 6115] close(26) = -1 EBADF (Bad file descriptor) [pid 6115] close(27) = -1 EBADF (Bad file descriptor) [pid 6115] close(28) = -1 EBADF (Bad file descriptor) [pid 6115] close(29) = -1 EBADF (Bad file descriptor) [pid 6115] exit_group(0 [pid 6117] <... futex resumed>) = ? [pid 6116] <... futex resumed>) = ? [pid 6115] <... exit_group resumed>) = ? [pid 6117] +++ exited with 0 +++ [pid 6116] +++ exited with 0 +++ [pid 6115] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1095, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] umount2("./365", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./365", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./365/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./365/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./365/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./365/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./365/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./365/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./365/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./365/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./365/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./365") = 0 [pid 5019] mkdir("./366", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1098 ./strace-static-x86_64: Process 6118 attached [pid 6118] set_robust_list(0x555556a426a0, 24) = 0 [pid 6118] chdir("./366") = 0 [pid 6118] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6118] setpgid(0, 0) = 0 [pid 6118] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6118] write(3, "1000", 4) = 4 [pid 6118] close(3) = 0 [pid 6118] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6118] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6118] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [ 70.209053][ T6116] loop0: detected capacity change from 0 to 1024 [pid 6118] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6118] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6118] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6118] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6118] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6119 attached => {parent_tid=[1099]}, 88) = 1099 [pid 6119] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6119] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6118] rt_sigprocmask(SIG_SETMASK, [], [pid 6119] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6119] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6118] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6118] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6118] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6119] <... futex resumed>) = 0 [pid 6119] memfd_create("syzkaller", 0) = 3 [pid 6119] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6119] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6119] munmap(0x7f15b9a45000, 524288) = 0 [pid 6119] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6119] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6119] close(3) = 0 [pid 6119] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6119] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6119] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6119] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6119] ioctl(4, LOOP_CLR_FD) = 0 [pid 6119] close(4) = 0 [pid 6119] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6118] <... futex resumed>) = 0 [pid 6119] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6118] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6119] <... futex resumed>) = 0 [pid 6119] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6118] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6118] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6118] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6118] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6119] <... mknodat resumed>) = 0 [pid 6118] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1100]}, 88) = 1100 [pid 6119] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6118] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6118] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6118] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6120 attached [pid 6120] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6120] set_robust_list(0x7f15b9ac49a0, 24 [pid 6119] <... futex resumed>) = 0 [pid 6120] <... set_robust_list resumed>) = 0 [pid 6120] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6120] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6120] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6119] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6120] <... mount resumed>) = 0 [pid 6120] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6120] chdir(".") = 0 [pid 6120] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6118] <... futex resumed>) = 0 [pid 6118] close(3) = 0 [pid 6118] close(4) = 0 [pid 6118] close(5) = -1 EBADF (Bad file descriptor) [pid 6118] close(6) = -1 EBADF (Bad file descriptor) [pid 6118] close(7) = -1 EBADF (Bad file descriptor) [pid 6118] close(8 [pid 6120] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6118] close(9) = -1 EBADF (Bad file descriptor) [pid 6118] close(10) = -1 EBADF (Bad file descriptor) [pid 6118] close(11) = -1 EBADF (Bad file descriptor) [pid 6118] close(12) = -1 EBADF (Bad file descriptor) [pid 6118] close(13) = -1 EBADF (Bad file descriptor) [pid 6118] close(14) = -1 EBADF (Bad file descriptor) [pid 6118] close(15) = -1 EBADF (Bad file descriptor) [pid 6118] close(16) = -1 EBADF (Bad file descriptor) [pid 6118] close(17) = -1 EBADF (Bad file descriptor) [pid 6118] close(18) = -1 EBADF (Bad file descriptor) [pid 6118] close(19) = -1 EBADF (Bad file descriptor) [pid 6118] close(20) = -1 EBADF (Bad file descriptor) [pid 6118] close(21) = -1 EBADF (Bad file descriptor) [pid 6118] close(22) = -1 EBADF (Bad file descriptor) [pid 6118] close(23) = -1 EBADF (Bad file descriptor) [pid 6118] close(24) = -1 EBADF (Bad file descriptor) [pid 6118] close(25) = -1 EBADF (Bad file descriptor) [pid 6118] close(26) = -1 EBADF (Bad file descriptor) [pid 6118] close(27) = -1 EBADF (Bad file descriptor) [pid 6118] close(28) = -1 EBADF (Bad file descriptor) [pid 6118] close(29) = -1 EBADF (Bad file descriptor) [pid 6118] exit_group(0 [pid 6119] <... futex resumed>) = ? [pid 6120] <... futex resumed>) = ? [pid 6118] <... exit_group resumed>) = ? [pid 6119] +++ exited with 0 +++ [pid 6120] +++ exited with 0 +++ [pid 6118] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1098, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./366", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./366", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./366/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./366/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./366/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./366/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./366/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./366/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./366/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./366/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./366/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./366") = 0 [pid 5019] mkdir("./367", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1101 ./strace-static-x86_64: Process 6121 attached [ 70.281414][ T6119] loop0: detected capacity change from 0 to 1024 [pid 6121] set_robust_list(0x555556a426a0, 24) = 0 [pid 6121] chdir("./367") = 0 [pid 6121] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6121] setpgid(0, 0) = 0 [pid 6121] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6121] write(3, "1000", 4) = 4 [pid 6121] close(3) = 0 [pid 6121] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6121] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6121] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6121] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6121] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6121] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6121] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6121] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6122 attached => {parent_tid=[1102]}, 88) = 1102 [pid 6122] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6122] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6122] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6122] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6121] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6121] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6122] <... futex resumed>) = 0 [pid 6121] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6122] memfd_create("syzkaller", 0) = 3 [pid 6122] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6122] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6122] munmap(0x7f15b9a45000, 524288) = 0 [pid 6122] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6122] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6122] close(3) = 0 [pid 6122] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6122] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6122] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6122] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6122] ioctl(4, LOOP_CLR_FD) = 0 [pid 6122] close(4) = 0 [pid 6122] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6121] <... futex resumed>) = 0 [pid 6121] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6121] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6121] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6121] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6121] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6121] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1103]}, 88) = 1103 [pid 6121] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6121] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6121] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6122] <... futex resumed>) = 1 [pid 6122] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6123 attached [pid 6123] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6123] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6123] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6122] <... mknodat resumed>) = 0 [pid 6122] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6123] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6123] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6122] <... futex resumed>) = 0 [pid 6122] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6123] <... mount resumed>) = 0 [pid 6123] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6123] chdir(".") = 0 [pid 6123] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6121] <... futex resumed>) = 0 [pid 6121] close(3) = 0 [pid 6121] close(4 [pid 6123] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6121] <... close resumed>) = 0 [pid 6121] close(5) = -1 EBADF (Bad file descriptor) [pid 6121] close(6) = -1 EBADF (Bad file descriptor) [pid 6121] close(7) = -1 EBADF (Bad file descriptor) [pid 6121] close(8) = -1 EBADF (Bad file descriptor) [pid 6121] close(9) = -1 EBADF (Bad file descriptor) [pid 6121] close(10) = -1 EBADF (Bad file descriptor) [pid 6121] close(11) = -1 EBADF (Bad file descriptor) [pid 6121] close(12) = -1 EBADF (Bad file descriptor) [pid 6121] close(13) = -1 EBADF (Bad file descriptor) [pid 6121] close(14) = -1 EBADF (Bad file descriptor) [pid 6121] close(15) = -1 EBADF (Bad file descriptor) [pid 6121] close(16) = -1 EBADF (Bad file descriptor) [pid 6121] close(17) = -1 EBADF (Bad file descriptor) [pid 6121] close(18) = -1 EBADF (Bad file descriptor) [pid 6121] close(19) = -1 EBADF (Bad file descriptor) [pid 6121] close(20) = -1 EBADF (Bad file descriptor) [pid 6121] close(21) = -1 EBADF (Bad file descriptor) [pid 6121] close(22) = -1 EBADF (Bad file descriptor) [pid 6121] close(23) = -1 EBADF (Bad file descriptor) [pid 6121] close(24) = -1 EBADF (Bad file descriptor) [pid 6121] close(25) = -1 EBADF (Bad file descriptor) [pid 6121] close(26) = -1 EBADF (Bad file descriptor) [pid 6121] close(27) = -1 EBADF (Bad file descriptor) [pid 6121] close(28) = -1 EBADF (Bad file descriptor) [pid 6121] close(29) = -1 EBADF (Bad file descriptor) [pid 6121] exit_group(0) = ? [pid 6122] <... futex resumed>) = ? [pid 6123] <... futex resumed>) = ? [pid 6122] +++ exited with 0 +++ [pid 6123] +++ exited with 0 +++ [pid 6121] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1101, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./367", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./367", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./367/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./367/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./367/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./367/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./367/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./367/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./367/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./367/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./367/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./367") = 0 [pid 5019] mkdir("./368", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 70.363817][ T6122] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1104 ./strace-static-x86_64: Process 6124 attached [pid 6124] set_robust_list(0x555556a426a0, 24) = 0 [pid 6124] chdir("./368") = 0 [pid 6124] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6124] setpgid(0, 0) = 0 [pid 6124] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6124] write(3, "1000", 4) = 4 [pid 6124] close(3) = 0 [pid 6124] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6124] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6124] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6124] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6124] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6124] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6124] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6124] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1105]}, 88) = 1105 [pid 6124] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6124] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6124] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6125 attached [pid 6125] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6125] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6125] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6125] memfd_create("syzkaller", 0) = 3 [pid 6125] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6125] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6125] munmap(0x7f15b9a45000, 524288) = 0 [pid 6125] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6125] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6125] close(3) = 0 [pid 6125] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6125] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6125] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6125] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6125] ioctl(4, LOOP_CLR_FD) = 0 [pid 6125] close(4) = 0 [pid 6125] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6124] <... futex resumed>) = 0 [pid 6124] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6124] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6124] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6124] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6124] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6124] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1106]}, 88) = 1106 [pid 6124] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6124] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6124] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6126 attached [pid 6126] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6126] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6126] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6125] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6126] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6126] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6126] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6126] chdir(".") = 0 [pid 6126] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6124] <... futex resumed>) = 0 [pid 6126] <... futex resumed>) = 1 [pid 6126] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6125] <... mknodat resumed>) = 0 [pid 6125] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6124] close(3) = 0 [pid 6124] close(4) = 0 [pid 6124] close(5) = -1 EBADF (Bad file descriptor) [pid 6124] close(6) = -1 EBADF (Bad file descriptor) [pid 6124] close(7) = -1 EBADF (Bad file descriptor) [pid 6124] close(8) = -1 EBADF (Bad file descriptor) [pid 6124] close(9) = -1 EBADF (Bad file descriptor) [pid 6124] close(10) = -1 EBADF (Bad file descriptor) [pid 6124] close(11) = -1 EBADF (Bad file descriptor) [pid 6124] close(12) = -1 EBADF (Bad file descriptor) [pid 6124] close(13) = -1 EBADF (Bad file descriptor) [pid 6124] close(14) = -1 EBADF (Bad file descriptor) [pid 6124] close(15) = -1 EBADF (Bad file descriptor) [pid 6124] close(16) = -1 EBADF (Bad file descriptor) [pid 6124] close(17) = -1 EBADF (Bad file descriptor) [pid 6124] close(18) = -1 EBADF (Bad file descriptor) [pid 6124] close(19) = -1 EBADF (Bad file descriptor) [pid 6124] close(20) = -1 EBADF (Bad file descriptor) [pid 6124] close(21) = -1 EBADF (Bad file descriptor) [pid 6124] close(22) = -1 EBADF (Bad file descriptor) [pid 6124] close(23) = -1 EBADF (Bad file descriptor) [pid 6124] close(24) = -1 EBADF (Bad file descriptor) [pid 6124] close(25) = -1 EBADF (Bad file descriptor) [pid 6124] close(26) = -1 EBADF (Bad file descriptor) [pid 6124] close(27) = -1 EBADF (Bad file descriptor) [pid 6124] close(28) = -1 EBADF (Bad file descriptor) [pid 6124] close(29) = -1 EBADF (Bad file descriptor) [pid 6124] exit_group(0) = ? [pid 6126] <... futex resumed>) = ? [pid 6125] +++ exited with 0 +++ [pid 6126] +++ exited with 0 +++ [pid 6124] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1104, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5019] umount2("./368", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./368", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./368/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./368/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./368/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./368/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./368/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./368/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./368/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./368/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./368/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./368") = 0 [pid 5019] mkdir("./369", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1107 ./strace-static-x86_64: Process 6127 attached [pid 6127] set_robust_list(0x555556a426a0, 24) = 0 [pid 6127] chdir("./369") = 0 [pid 6127] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6127] setpgid(0, 0) = 0 [pid 6127] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6127] write(3, "1000", 4) = 4 [pid 6127] close(3) = 0 [pid 6127] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6127] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6127] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6127] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6127] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6127] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6127] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6127] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1108]}, 88) = 1108 [pid 6127] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6127] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6127] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6128 attached [pid 6128] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6128] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6128] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6128] memfd_create("syzkaller", 0) = 3 [ 70.439905][ T6125] loop0: detected capacity change from 0 to 1024 [pid 6128] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6128] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6128] munmap(0x7f15b9a45000, 524288) = 0 [pid 6128] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6128] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6128] close(3) = 0 [pid 6128] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6128] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6128] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6128] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6128] ioctl(4, LOOP_CLR_FD) = 0 [pid 6128] close(4) = 0 [pid 6128] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6127] <... futex resumed>) = 0 [pid 6127] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6127] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6127] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6127] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6127] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6127] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6129 attached => {parent_tid=[1109]}, 88) = 1109 [pid 6129] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6127] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6127] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6127] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6128] <... futex resumed>) = 1 [pid 6128] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6129] <... rseq resumed>) = 0 [pid 6129] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6129] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6129] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6129] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6128] <... mknodat resumed>) = 0 [pid 6128] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6128] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6129] <... mount resumed>) = 0 [pid 6129] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6129] chdir(".") = 0 [pid 6129] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6127] <... futex resumed>) = 0 [pid 6127] close(3) = 0 [pid 6127] close(4) = 0 [pid 6127] close(5) = -1 EBADF (Bad file descriptor) [pid 6127] close(6) = -1 EBADF (Bad file descriptor) [pid 6127] close(7) = -1 EBADF (Bad file descriptor) [pid 6127] close(8) = -1 EBADF (Bad file descriptor) [pid 6127] close(9) = -1 EBADF (Bad file descriptor) [pid 6127] close(10) = -1 EBADF (Bad file descriptor) [pid 6127] close(11) = -1 EBADF (Bad file descriptor) [pid 6127] close(12) = -1 EBADF (Bad file descriptor) [pid 6127] close(13) = -1 EBADF (Bad file descriptor) [pid 6127] close(14) = -1 EBADF (Bad file descriptor) [pid 6127] close(15) = -1 EBADF (Bad file descriptor) [pid 6127] close(16) = -1 EBADF (Bad file descriptor) [pid 6127] close(17) = -1 EBADF (Bad file descriptor) [pid 6127] close(18) = -1 EBADF (Bad file descriptor) [pid 6127] close(19) = -1 EBADF (Bad file descriptor) [pid 6127] close(20) = -1 EBADF (Bad file descriptor) [pid 6127] close(21) = -1 EBADF (Bad file descriptor) [pid 6129] <... futex resumed>) = 1 [pid 6127] close(22 [pid 6129] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6127] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6127] close(23) = -1 EBADF (Bad file descriptor) [pid 6127] close(24) = -1 EBADF (Bad file descriptor) [pid 6127] close(25) = -1 EBADF (Bad file descriptor) [pid 6127] close(26) = -1 EBADF (Bad file descriptor) [pid 6127] close(27) = -1 EBADF (Bad file descriptor) [pid 6127] close(28) = -1 EBADF (Bad file descriptor) [pid 6127] close(29) = -1 EBADF (Bad file descriptor) [pid 6127] exit_group(0 [pid 6129] <... futex resumed>) = ? [pid 6128] <... futex resumed>) = ? [pid 6127] <... exit_group resumed>) = ? [pid 6129] +++ exited with 0 +++ [pid 6128] +++ exited with 0 +++ [pid 6127] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1107, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./369", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./369", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./369/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./369/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./369/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./369/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./369/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./369/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./369/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./369/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./369/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./369") = 0 [pid 5019] mkdir("./370", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 70.510029][ T6128] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1110 ./strace-static-x86_64: Process 6130 attached [pid 6130] set_robust_list(0x555556a426a0, 24) = 0 [pid 6130] chdir("./370") = 0 [pid 6130] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6130] setpgid(0, 0) = 0 [pid 6130] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6130] write(3, "1000", 4) = 4 [pid 6130] close(3) = 0 [pid 6130] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6130] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6130] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6130] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6130] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6130] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6130] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6130] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1111]}, 88) = 1111 ./strace-static-x86_64: Process 6131 attached [pid 6130] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6130] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6130] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6131] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6131] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6131] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6131] memfd_create("syzkaller", 0) = 3 [pid 6131] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6131] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6131] munmap(0x7f15b9a45000, 524288) = 0 [pid 6131] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6131] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6131] close(3) = 0 [pid 6131] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6131] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6131] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6131] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6131] ioctl(4, LOOP_CLR_FD) = 0 [pid 6131] close(4) = 0 [pid 6131] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6130] <... futex resumed>) = 0 [pid 6131] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6130] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6131] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6130] <... futex resumed>) = 0 [pid 6131] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6130] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6130] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6130] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6130] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6131] <... mknodat resumed>) = 0 [pid 6130] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} [pid 6131] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6130] <... clone3 resumed> => {parent_tid=[1112]}, 88) = 1112 [pid 6131] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6130] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6130] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6130] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6132 attached [pid 6132] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6132] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6132] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6132] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6132] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6132] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6132] chdir(".") = 0 [pid 6132] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6130] <... futex resumed>) = 0 [pid 6132] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6130] close(3) = 0 [pid 6130] close(4) = 0 [pid 6130] close(5) = -1 EBADF (Bad file descriptor) [pid 6130] close(6) = -1 EBADF (Bad file descriptor) [pid 6130] close(7) = -1 EBADF (Bad file descriptor) [pid 6130] close(8) = -1 EBADF (Bad file descriptor) [pid 6130] close(9) = -1 EBADF (Bad file descriptor) [pid 6130] close(10) = -1 EBADF (Bad file descriptor) [pid 6130] close(11) = -1 EBADF (Bad file descriptor) [pid 6130] close(12) = -1 EBADF (Bad file descriptor) [pid 6130] close(13) = -1 EBADF (Bad file descriptor) [pid 6130] close(14) = -1 EBADF (Bad file descriptor) [pid 6130] close(15) = -1 EBADF (Bad file descriptor) [pid 6130] close(16) = -1 EBADF (Bad file descriptor) [pid 6130] close(17) = -1 EBADF (Bad file descriptor) [pid 6130] close(18) = -1 EBADF (Bad file descriptor) [pid 6130] close(19) = -1 EBADF (Bad file descriptor) [pid 6130] close(20) = -1 EBADF (Bad file descriptor) [pid 6130] close(21) = -1 EBADF (Bad file descriptor) [pid 6130] close(22) = -1 EBADF (Bad file descriptor) [pid 6130] close(23) = -1 EBADF (Bad file descriptor) [pid 6130] close(24) = -1 EBADF (Bad file descriptor) [pid 6130] close(25) = -1 EBADF (Bad file descriptor) [pid 6130] close(26) = -1 EBADF (Bad file descriptor) [pid 6130] close(27) = -1 EBADF (Bad file descriptor) [pid 6130] close(28) = -1 EBADF (Bad file descriptor) [pid 6130] close(29) = -1 EBADF (Bad file descriptor) [pid 6130] exit_group(0 [pid 6132] <... futex resumed>) = ? [pid 6131] <... futex resumed>) = ? [pid 6130] <... exit_group resumed>) = ? [pid 6132] +++ exited with 0 +++ [pid 6131] +++ exited with 0 +++ [pid 6130] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1110, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./370", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./370", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./370/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./370/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./370/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./370/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./370/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./370/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./370/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 70.595154][ T6131] loop0: detected capacity change from 0 to 1024 [pid 5019] newfstatat(AT_FDCWD, "./370/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./370/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./370") = 0 [pid 5019] mkdir("./371", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1113 ./strace-static-x86_64: Process 6133 attached [pid 6133] set_robust_list(0x555556a426a0, 24) = 0 [pid 6133] chdir("./371") = 0 [pid 6133] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6133] setpgid(0, 0) = 0 [pid 6133] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6133] write(3, "1000", 4) = 4 [pid 6133] close(3) = 0 [pid 6133] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6133] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6133] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6133] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6133] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6133] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6133] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6133] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6134 attached => {parent_tid=[1114]}, 88) = 1114 [pid 6134] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6133] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6134] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6134] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6134] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6133] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6134] <... futex resumed>) = 0 [pid 6133] <... futex resumed>) = 1 [pid 6133] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6134] memfd_create("syzkaller", 0) = 3 [pid 6134] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6134] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6134] munmap(0x7f15b9a45000, 524288) = 0 [pid 6134] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6134] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6134] close(3) = 0 [pid 6134] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6134] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6134] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6134] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6134] ioctl(4, LOOP_CLR_FD) = 0 [pid 6134] close(4) = 0 [pid 6134] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6133] <... futex resumed>) = 0 [pid 6133] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6133] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6133] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6134] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6133] <... mmap resumed>) = 0x7f15b9aa4000 [pid 6133] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6133] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6133] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1115]}, 88) = 1115 [pid 6133] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6133] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6133] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6135 attached [pid 6135] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6135] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6135] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6135] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6135] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6135] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6135] chdir(".") = 0 [pid 6135] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6133] <... futex resumed>) = 0 [pid 6135] <... futex resumed>) = 1 [pid 6135] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6134] <... mknodat resumed>) = 0 [pid 6134] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6134] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6133] close(3) = 0 [pid 6133] close(4) = 0 [pid 6133] close(5) = -1 EBADF (Bad file descriptor) [pid 6133] close(6) = -1 EBADF (Bad file descriptor) [pid 6133] close(7) = -1 EBADF (Bad file descriptor) [pid 6133] close(8) = -1 EBADF (Bad file descriptor) [pid 6133] close(9) = -1 EBADF (Bad file descriptor) [pid 6133] close(10) = -1 EBADF (Bad file descriptor) [pid 6133] close(11) = -1 EBADF (Bad file descriptor) [pid 6133] close(12) = -1 EBADF (Bad file descriptor) [pid 6133] close(13) = -1 EBADF (Bad file descriptor) [pid 6133] close(14) = -1 EBADF (Bad file descriptor) [pid 6133] close(15) = -1 EBADF (Bad file descriptor) [pid 6133] close(16) = -1 EBADF (Bad file descriptor) [pid 6133] close(17) = -1 EBADF (Bad file descriptor) [pid 6133] close(18) = -1 EBADF (Bad file descriptor) [pid 6133] close(19) = -1 EBADF (Bad file descriptor) [pid 6133] close(20) = -1 EBADF (Bad file descriptor) [pid 6133] close(21) = -1 EBADF (Bad file descriptor) [pid 6133] close(22) = -1 EBADF (Bad file descriptor) [pid 6133] close(23) = -1 EBADF (Bad file descriptor) [pid 6133] close(24) = -1 EBADF (Bad file descriptor) [pid 6133] close(25) = -1 EBADF (Bad file descriptor) [pid 6133] close(26) = -1 EBADF (Bad file descriptor) [pid 6133] close(27) = -1 EBADF (Bad file descriptor) [pid 6133] close(28) = -1 EBADF (Bad file descriptor) [pid 6133] close(29) = -1 EBADF (Bad file descriptor) [pid 6133] exit_group(0) = ? [pid 6134] <... futex resumed>) = ? [pid 6135] <... futex resumed>) = ? [pid 6135] +++ exited with 0 +++ [pid 6134] +++ exited with 0 +++ [pid 6133] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1113, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./371", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./371", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./371/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./371/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./371/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./371/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./371/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./371/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./371/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./371/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./371/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./371") = 0 [pid 5019] mkdir("./372", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1116 ./strace-static-x86_64: Process 6136 attached [pid 6136] set_robust_list(0x555556a426a0, 24) = 0 [pid 6136] chdir("./372") = 0 [pid 6136] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6136] setpgid(0, 0) = 0 [pid 6136] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6136] write(3, "1000", 4) = 4 [pid 6136] close(3) = 0 [pid 6136] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6136] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 70.682978][ T6134] loop0: detected capacity change from 0 to 1024 [pid 6136] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6136] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6136] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6136] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6136] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6136] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1117]}, 88) = 1117 [pid 6136] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6136] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6136] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6137 attached [pid 6137] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6137] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6137] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6137] memfd_create("syzkaller", 0) = 3 [pid 6137] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6137] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6137] munmap(0x7f15b9a45000, 524288) = 0 [pid 6137] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6137] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6137] close(3) = 0 [pid 6137] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6137] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6137] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6137] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6137] ioctl(4, LOOP_CLR_FD) = 0 [pid 6137] close(4) = 0 [pid 6137] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6136] <... futex resumed>) = 0 [pid 6136] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6136] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6136] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6136] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6136] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6136] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1118]}, 88) = 1118 [pid 6136] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6136] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6136] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6137] <... futex resumed>) = 1 [pid 6137] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 6137] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6137] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6139 attached [pid 6139] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6139] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6139] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6139] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6139] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6139] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6139] chdir(".") = 0 [pid 6139] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6136] <... futex resumed>) = 0 [pid 6136] close(3) = 0 [pid 6136] close(4) = 0 [pid 6136] close(5) = -1 EBADF (Bad file descriptor) [pid 6136] close(6) = -1 EBADF (Bad file descriptor) [pid 6136] close(7) = -1 EBADF (Bad file descriptor) [pid 6136] close(8) = -1 EBADF (Bad file descriptor) [pid 6136] close(9) = -1 EBADF (Bad file descriptor) [pid 6136] close(10) = -1 EBADF (Bad file descriptor) [pid 6136] close(11) = -1 EBADF (Bad file descriptor) [pid 6136] close(12) = -1 EBADF (Bad file descriptor) [pid 6136] close(13) = -1 EBADF (Bad file descriptor) [pid 6136] close(14) = -1 EBADF (Bad file descriptor) [pid 6136] close(15) = -1 EBADF (Bad file descriptor) [pid 6136] close(16) = -1 EBADF (Bad file descriptor) [pid 6136] close(17) = -1 EBADF (Bad file descriptor) [pid 6136] close(18) = -1 EBADF (Bad file descriptor) [pid 6136] close(19) = -1 EBADF (Bad file descriptor) [pid 6136] close(20) = -1 EBADF (Bad file descriptor) [pid 6136] close(21) = -1 EBADF (Bad file descriptor) [pid 6136] close(22) = -1 EBADF (Bad file descriptor) [pid 6136] close(23) = -1 EBADF (Bad file descriptor) [pid 6136] close(24) = -1 EBADF (Bad file descriptor) [pid 6136] close(25) = -1 EBADF (Bad file descriptor) [pid 6136] close(26) = -1 EBADF (Bad file descriptor) [pid 6136] close(27) = -1 EBADF (Bad file descriptor) [pid 6136] close(28) = -1 EBADF (Bad file descriptor) [pid 6136] close(29) = -1 EBADF (Bad file descriptor) [pid 6136] exit_group(0 [pid 6137] <... futex resumed>) = ? [pid 6136] <... exit_group resumed>) = ? [pid 6137] +++ exited with 0 +++ [pid 6139] <... futex resumed>) = ? [pid 6139] +++ exited with 0 +++ [pid 6136] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1116, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./372", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./372", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./372/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./372/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./372/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./372/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./372/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./372/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./372/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./372/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./372/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./372") = 0 [pid 5019] mkdir("./373", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1119 ./strace-static-x86_64: Process 6140 attached [pid 6140] set_robust_list(0x555556a426a0, 24) = 0 [pid 6140] chdir("./373") = 0 [pid 6140] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6140] setpgid(0, 0) = 0 [pid 6140] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6140] write(3, "1000", 4) = 4 [pid 6140] close(3) = 0 [pid 6140] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6140] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6140] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6140] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6140] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6140] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6140] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 70.755167][ T6137] loop0: detected capacity change from 0 to 1024 [pid 6140] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1120]}, 88) = 1120 [pid 6140] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6140] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6140] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6141 attached [pid 6141] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6141] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6141] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6141] memfd_create("syzkaller", 0) = 3 [pid 6141] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6141] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6141] munmap(0x7f15b9a45000, 524288) = 0 [pid 6141] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6141] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6141] close(3) = 0 [pid 6141] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6141] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6141] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6141] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6141] ioctl(4, LOOP_CLR_FD) = 0 [pid 6141] close(4) = 0 [pid 6141] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6140] <... futex resumed>) = 0 [pid 6140] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6140] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6140] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6140] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6140] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6140] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1121]}, 88) = 1121 [pid 6140] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6140] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6140] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6141] <... futex resumed>) = 1 [pid 6141] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 6141] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6141] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6142 attached [pid 6142] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6142] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6142] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6142] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6142] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6142] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6142] chdir(".") = 0 [pid 6142] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6140] <... futex resumed>) = 0 [pid 6140] close(3) = 0 [pid 6140] close(4) = 0 [pid 6140] close(5) = -1 EBADF (Bad file descriptor) [pid 6140] close(6) = -1 EBADF (Bad file descriptor) [pid 6140] close(7) = -1 EBADF (Bad file descriptor) [pid 6140] close(8) = -1 EBADF (Bad file descriptor) [pid 6140] close(9) = -1 EBADF (Bad file descriptor) [pid 6140] close(10) = -1 EBADF (Bad file descriptor) [pid 6140] close(11) = -1 EBADF (Bad file descriptor) [pid 6140] close(12) = -1 EBADF (Bad file descriptor) [pid 6140] close(13) = -1 EBADF (Bad file descriptor) [pid 6140] close(14) = -1 EBADF (Bad file descriptor) [pid 6140] close(15) = -1 EBADF (Bad file descriptor) [pid 6140] close(16) = -1 EBADF (Bad file descriptor) [pid 6140] close(17) = -1 EBADF (Bad file descriptor) [pid 6140] close(18) = -1 EBADF (Bad file descriptor) [pid 6140] close(19) = -1 EBADF (Bad file descriptor) [pid 6140] close(20) = -1 EBADF (Bad file descriptor) [pid 6140] close(21) = -1 EBADF (Bad file descriptor) [pid 6140] close(22) = -1 EBADF (Bad file descriptor) [pid 6140] close(23) = -1 EBADF (Bad file descriptor) [pid 6140] close(24) = -1 EBADF (Bad file descriptor) [pid 6140] close(25) = -1 EBADF (Bad file descriptor) [pid 6140] close(26) = -1 EBADF (Bad file descriptor) [pid 6140] close(27) = -1 EBADF (Bad file descriptor) [pid 6140] close(28) = -1 EBADF (Bad file descriptor) [pid 6140] close(29) = -1 EBADF (Bad file descriptor) [pid 6140] exit_group(0 [pid 6141] <... futex resumed>) = ? [pid 6140] <... exit_group resumed>) = ? [pid 6141] +++ exited with 0 +++ [pid 6142] <... futex resumed>) = ? [pid 6142] +++ exited with 0 +++ [pid 6140] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1119, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./373", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./373", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./373/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./373/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./373/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./373/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./373/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./373/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./373/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./373/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./373/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./373") = 0 [pid 5019] mkdir("./374", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1122 ./strace-static-x86_64: Process 6143 attached [pid 6143] set_robust_list(0x555556a426a0, 24) = 0 [pid 6143] chdir("./374") = 0 [pid 6143] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6143] setpgid(0, 0) = 0 [ 70.813658][ T6141] loop0: detected capacity change from 0 to 1024 [pid 6143] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6143] write(3, "1000", 4) = 4 [pid 6143] close(3) = 0 [pid 6143] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6143] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6143] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6143] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6143] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6143] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6143] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6143] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1123]}, 88) = 1123 [pid 6143] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6143] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6143] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6144 attached [pid 6144] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6144] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6144] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6144] memfd_create("syzkaller", 0) = 3 [pid 6144] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6144] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6144] munmap(0x7f15b9a45000, 524288) = 0 [pid 6144] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6144] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6144] close(3) = 0 [pid 6144] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6144] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6144] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6144] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6144] ioctl(4, LOOP_CLR_FD) = 0 [pid 6144] close(4) = 0 [pid 6144] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6143] <... futex resumed>) = 0 [pid 6143] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6143] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6143] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6143] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6143] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6143] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1124]}, 88) = 1124 [pid 6143] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6143] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6143] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6144] <... futex resumed>) = 1 [pid 6144] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 6144] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6144] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6145 attached [pid 6145] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6145] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6145] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6145] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6145] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6145] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6145] chdir(".") = 0 [pid 6145] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6143] <... futex resumed>) = 0 [pid 6143] close(3) = 0 [pid 6143] close(4) = 0 [pid 6143] close(5) = -1 EBADF (Bad file descriptor) [pid 6143] close(6) = -1 EBADF (Bad file descriptor) [pid 6143] close(7) = -1 EBADF (Bad file descriptor) [pid 6143] close(8) = -1 EBADF (Bad file descriptor) [pid 6143] close(9) = -1 EBADF (Bad file descriptor) [pid 6143] close(10) = -1 EBADF (Bad file descriptor) [pid 6143] close(11) = -1 EBADF (Bad file descriptor) [pid 6143] close(12) = -1 EBADF (Bad file descriptor) [pid 6143] close(13) = -1 EBADF (Bad file descriptor) [pid 6143] close(14) = -1 EBADF (Bad file descriptor) [pid 6143] close(15) = -1 EBADF (Bad file descriptor) [pid 6143] close(16) = -1 EBADF (Bad file descriptor) [pid 6143] close(17) = -1 EBADF (Bad file descriptor) [pid 6143] close(18) = -1 EBADF (Bad file descriptor) [pid 6143] close(19) = -1 EBADF (Bad file descriptor) [pid 6143] close(20) = -1 EBADF (Bad file descriptor) [pid 6143] close(21) = -1 EBADF (Bad file descriptor) [pid 6143] close(22) = -1 EBADF (Bad file descriptor) [pid 6143] close(23) = -1 EBADF (Bad file descriptor) [pid 6143] close(24) = -1 EBADF (Bad file descriptor) [pid 6143] close(25) = -1 EBADF (Bad file descriptor) [pid 6143] close(26) = -1 EBADF (Bad file descriptor) [pid 6143] close(27) = -1 EBADF (Bad file descriptor) [pid 6143] close(28) = -1 EBADF (Bad file descriptor) [pid 6143] close(29) = -1 EBADF (Bad file descriptor) [pid 6143] exit_group(0 [pid 6144] <... futex resumed>) = ? [pid 6143] <... exit_group resumed>) = ? [pid 6144] +++ exited with 0 +++ [pid 6145] <... futex resumed>) = ? [pid 6145] +++ exited with 0 +++ [pid 6143] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1122, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./374", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./374", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./374/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./374/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./374/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./374/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./374/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./374/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./374/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./374/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./374/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./374") = 0 [pid 5019] mkdir("./375", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1125 [ 70.887980][ T6144] loop0: detected capacity change from 0 to 1024 ./strace-static-x86_64: Process 6146 attached [pid 6146] set_robust_list(0x555556a426a0, 24) = 0 [pid 6146] chdir("./375") = 0 [pid 6146] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6146] setpgid(0, 0) = 0 [pid 6146] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6146] write(3, "1000", 4) = 4 [pid 6146] close(3) = 0 [pid 6146] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6146] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6146] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6146] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6146] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6146] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6146] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6146] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1126]}, 88) = 1126 [pid 6146] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6146] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6146] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6147 attached [pid 6147] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6147] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6147] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6147] memfd_create("syzkaller", 0) = 3 [pid 6147] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6147] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6147] munmap(0x7f15b9a45000, 524288) = 0 [pid 6147] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6147] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6147] close(3) = 0 [pid 6147] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6147] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6147] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6147] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6147] ioctl(4, LOOP_CLR_FD) = 0 [pid 6147] close(4) = 0 [pid 6147] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6146] <... futex resumed>) = 0 [pid 6146] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6146] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6146] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6146] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6146] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6146] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1127]}, 88) = 1127 [pid 6146] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6146] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6146] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6147] <... futex resumed>) = 1 [pid 6147] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 6147] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6147] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6148 attached [pid 6148] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6148] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6148] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6148] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6148] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6148] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6148] chdir(".") = 0 [pid 6148] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6146] <... futex resumed>) = 0 [pid 6146] close(3) = 0 [pid 6146] close(4) = 0 [pid 6146] close(5) = -1 EBADF (Bad file descriptor) [pid 6146] close(6) = -1 EBADF (Bad file descriptor) [pid 6146] close(7) = -1 EBADF (Bad file descriptor) [pid 6146] close(8) = -1 EBADF (Bad file descriptor) [pid 6146] close(9) = -1 EBADF (Bad file descriptor) [pid 6146] close(10) = -1 EBADF (Bad file descriptor) [pid 6146] close(11) = -1 EBADF (Bad file descriptor) [pid 6146] close(12) = -1 EBADF (Bad file descriptor) [pid 6146] close(13) = -1 EBADF (Bad file descriptor) [pid 6146] close(14) = -1 EBADF (Bad file descriptor) [pid 6146] close(15) = -1 EBADF (Bad file descriptor) [pid 6146] close(16) = -1 EBADF (Bad file descriptor) [pid 6146] close(17) = -1 EBADF (Bad file descriptor) [pid 6146] close(18) = -1 EBADF (Bad file descriptor) [pid 6146] close(19) = -1 EBADF (Bad file descriptor) [pid 6146] close(20) = -1 EBADF (Bad file descriptor) [pid 6146] close(21) = -1 EBADF (Bad file descriptor) [pid 6146] close(22) = -1 EBADF (Bad file descriptor) [pid 6146] close(23) = -1 EBADF (Bad file descriptor) [pid 6146] close(24) = -1 EBADF (Bad file descriptor) [pid 6146] close(25) = -1 EBADF (Bad file descriptor) [pid 6146] close(26) = -1 EBADF (Bad file descriptor) [pid 6146] close(27) = -1 EBADF (Bad file descriptor) [pid 6146] close(28) = -1 EBADF (Bad file descriptor) [pid 6146] close(29) = -1 EBADF (Bad file descriptor) [pid 6146] exit_group(0 [pid 6147] <... futex resumed>) = ? [pid 6146] <... exit_group resumed>) = ? [pid 6147] +++ exited with 0 +++ [pid 6148] <... futex resumed>) = ? [pid 6148] +++ exited with 0 +++ [pid 6146] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1125, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./375", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./375", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./375/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./375/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./375/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./375/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./375/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./375/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./375/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./375/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./375/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./375") = 0 [pid 5019] mkdir("./376", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 70.966663][ T6147] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1128 ./strace-static-x86_64: Process 6149 attached [pid 6149] set_robust_list(0x555556a426a0, 24) = 0 [pid 6149] chdir("./376") = 0 [pid 6149] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6149] setpgid(0, 0) = 0 [pid 6149] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6149] write(3, "1000", 4) = 4 [pid 6149] close(3) = 0 [pid 6149] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6149] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6149] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6149] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6149] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6149] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6149] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6149] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6150 attached => {parent_tid=[1129]}, 88) = 1129 [pid 6150] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6150] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6150] rt_sigprocmask(SIG_SETMASK, [], [pid 6149] rt_sigprocmask(SIG_SETMASK, [], [pid 6150] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6149] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6150] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6149] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6150] <... futex resumed>) = 0 [pid 6149] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6150] memfd_create("syzkaller", 0) = 3 [pid 6150] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6150] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6150] munmap(0x7f15b9a45000, 524288) = 0 [pid 6150] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6150] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6150] close(3) = 0 [pid 6150] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6150] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6150] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6150] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6150] ioctl(4, LOOP_CLR_FD) = 0 [pid 6150] close(4) = 0 [pid 6150] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6150] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6149] <... futex resumed>) = 0 [pid 6149] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6150] <... futex resumed>) = 0 [pid 6150] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6149] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6149] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6149] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6149] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6149] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1130]}, 88) = 1130 [pid 6149] rt_sigprocmask(SIG_SETMASK, [], [pid 6150] <... mknodat resumed>) = 0 [pid 6150] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6150] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6149] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6149] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6149] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6151 attached [pid 6151] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6151] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6151] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6151] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6151] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6151] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6151] chdir(".") = 0 [pid 6151] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6149] <... futex resumed>) = 0 [pid 6151] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6149] close(3) = 0 [pid 6149] close(4) = 0 [pid 6149] close(5) = -1 EBADF (Bad file descriptor) [pid 6149] close(6) = -1 EBADF (Bad file descriptor) [pid 6149] close(7) = -1 EBADF (Bad file descriptor) [pid 6149] close(8) = -1 EBADF (Bad file descriptor) [pid 6149] close(9) = -1 EBADF (Bad file descriptor) [pid 6149] close(10) = -1 EBADF (Bad file descriptor) [pid 6149] close(11) = -1 EBADF (Bad file descriptor) [pid 6149] close(12) = -1 EBADF (Bad file descriptor) [pid 6149] close(13) = -1 EBADF (Bad file descriptor) [pid 6149] close(14) = -1 EBADF (Bad file descriptor) [pid 6149] close(15) = -1 EBADF (Bad file descriptor) [pid 6149] close(16) = -1 EBADF (Bad file descriptor) [pid 6149] close(17) = -1 EBADF (Bad file descriptor) [pid 6149] close(18) = -1 EBADF (Bad file descriptor) [pid 6149] close(19) = -1 EBADF (Bad file descriptor) [pid 6149] close(20) = -1 EBADF (Bad file descriptor) [pid 6149] close(21) = -1 EBADF (Bad file descriptor) [pid 6149] close(22) = -1 EBADF (Bad file descriptor) [pid 6149] close(23) = -1 EBADF (Bad file descriptor) [pid 6149] close(24) = -1 EBADF (Bad file descriptor) [pid 6149] close(25) = -1 EBADF (Bad file descriptor) [pid 6149] close(26) = -1 EBADF (Bad file descriptor) [pid 6149] close(27) = -1 EBADF (Bad file descriptor) [pid 6149] close(28) = -1 EBADF (Bad file descriptor) [pid 6149] close(29) = -1 EBADF (Bad file descriptor) [pid 6149] exit_group(0 [pid 6150] <... futex resumed>) = ? [pid 6149] <... exit_group resumed>) = ? [pid 6150] +++ exited with 0 +++ [pid 6151] <... futex resumed>) = ? [pid 6151] +++ exited with 0 +++ [pid 6149] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1128, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [ 71.056575][ T6150] loop0: detected capacity change from 0 to 1024 [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./376", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./376", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./376/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./376/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./376/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./376/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./376/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./376/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./376/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./376/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./376/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./376") = 0 [pid 5019] mkdir("./377", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1131 ./strace-static-x86_64: Process 6152 attached [pid 6152] set_robust_list(0x555556a426a0, 24) = 0 [pid 6152] chdir("./377") = 0 [pid 6152] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6152] setpgid(0, 0) = 0 [pid 6152] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6152] write(3, "1000", 4) = 4 [pid 6152] close(3) = 0 [pid 6152] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6152] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6152] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6152] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6152] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6152] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6152] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6152] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1132]}, 88) = 1132 [pid 6152] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6152] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6152] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6153 attached [pid 6153] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6153] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6153] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6153] memfd_create("syzkaller", 0) = 3 [pid 6153] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6153] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6153] munmap(0x7f15b9a45000, 524288) = 0 [pid 6153] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6153] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6153] close(3) = 0 [pid 6153] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6153] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6153] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6153] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6153] ioctl(4, LOOP_CLR_FD) = 0 [pid 6153] close(4) = 0 [pid 6153] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6152] <... futex resumed>) = 0 [pid 6152] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6152] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6152] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6152] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6152] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6152] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1133]}, 88) = 1133 ./strace-static-x86_64: Process 6154 attached [pid 6152] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6152] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6152] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6153] <... futex resumed>) = 1 [pid 6153] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6154] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6154] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6154] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6154] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6154] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6153] <... mknodat resumed>) = 0 [pid 6153] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6153] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6154] <... mount resumed>) = 0 [pid 6154] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6154] chdir(".") = 0 [pid 6154] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6152] <... futex resumed>) = 0 [pid 6152] close(3) = 0 [pid 6152] close(4) = 0 [pid 6152] close(5) = -1 EBADF (Bad file descriptor) [pid 6152] close(6) = -1 EBADF (Bad file descriptor) [pid 6152] close(7) = -1 EBADF (Bad file descriptor) [pid 6152] close(8) = -1 EBADF (Bad file descriptor) [pid 6152] close(9) = -1 EBADF (Bad file descriptor) [pid 6152] close(10) = -1 EBADF (Bad file descriptor) [pid 6152] close(11) = -1 EBADF (Bad file descriptor) [pid 6152] close(12) = -1 EBADF (Bad file descriptor) [pid 6152] close(13) = -1 EBADF (Bad file descriptor) [pid 6152] close(14) = -1 EBADF (Bad file descriptor) [pid 6152] close(15) = -1 EBADF (Bad file descriptor) [pid 6152] close(16) = -1 EBADF (Bad file descriptor) [pid 6152] close(17) = -1 EBADF (Bad file descriptor) [pid 6152] close(18) = -1 EBADF (Bad file descriptor) [pid 6152] close(19) = -1 EBADF (Bad file descriptor) [pid 6152] close(20) = -1 EBADF (Bad file descriptor) [pid 6152] close(21) = -1 EBADF (Bad file descriptor) [pid 6152] close(22) = -1 EBADF (Bad file descriptor) [pid 6152] close(23) = -1 EBADF (Bad file descriptor) [pid 6152] close(24) = -1 EBADF (Bad file descriptor) [pid 6152] close(25) = -1 EBADF (Bad file descriptor) [pid 6152] close(26) = -1 EBADF (Bad file descriptor) [pid 6152] close(27) = -1 EBADF (Bad file descriptor) [pid 6152] close(28) = -1 EBADF (Bad file descriptor) [pid 6152] close(29) = -1 EBADF (Bad file descriptor) [pid 6152] exit_group(0) = ? [pid 6153] <... futex resumed>) = ? [pid 6153] +++ exited with 0 +++ [pid 6154] <... futex resumed>) = ? [pid 6154] +++ exited with 0 +++ [pid 6152] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1131, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./377", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./377", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./377/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./377/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./377/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./377/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./377/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./377/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./377/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./377/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./377/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./377") = 0 [pid 5019] mkdir("./378", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1134 ./strace-static-x86_64: Process 6155 attached [ 71.175649][ T6153] loop0: detected capacity change from 0 to 1024 [pid 6155] set_robust_list(0x555556a426a0, 24) = 0 [pid 6155] chdir("./378") = 0 [pid 6155] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6155] setpgid(0, 0) = 0 [pid 6155] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6155] write(3, "1000", 4) = 4 [pid 6155] close(3) = 0 [pid 6155] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6155] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6155] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6155] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6155] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6155] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6155] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6155] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6156 attached => {parent_tid=[1135]}, 88) = 1135 [pid 6155] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6155] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6155] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6156] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6156] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6156] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6156] memfd_create("syzkaller", 0) = 3 [pid 6156] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6156] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6156] munmap(0x7f15b9a45000, 524288) = 0 [pid 6156] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6156] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6156] close(3) = 0 [pid 6156] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6156] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6156] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6156] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6156] ioctl(4, LOOP_CLR_FD) = 0 [pid 6156] close(4) = 0 [pid 6156] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6155] <... futex resumed>) = 0 [pid 6155] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6155] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6155] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6155] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6155] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6155] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1136]}, 88) = 1136 [pid 6155] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6155] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6155] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6156] <... futex resumed>) = 1 [pid 6156] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 6156] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6156] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6157 attached [pid 6157] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6157] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6157] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6157] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6157] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6157] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6157] chdir(".") = 0 [pid 6157] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6155] <... futex resumed>) = 0 [pid 6155] close(3) = 0 [pid 6155] close(4) = 0 [pid 6155] close(5) = -1 EBADF (Bad file descriptor) [pid 6155] close(6) = -1 EBADF (Bad file descriptor) [pid 6155] close(7) = -1 EBADF (Bad file descriptor) [pid 6155] close(8) = -1 EBADF (Bad file descriptor) [pid 6155] close(9) = -1 EBADF (Bad file descriptor) [pid 6155] close(10) = -1 EBADF (Bad file descriptor) [pid 6155] close(11) = -1 EBADF (Bad file descriptor) [pid 6155] close(12) = -1 EBADF (Bad file descriptor) [pid 6155] close(13) = -1 EBADF (Bad file descriptor) [pid 6155] close(14) = -1 EBADF (Bad file descriptor) [pid 6157] <... futex resumed>) = 1 [pid 6155] close(15) = -1 EBADF (Bad file descriptor) [pid 6155] close(16) = -1 EBADF (Bad file descriptor) [pid 6155] close(17) = -1 EBADF (Bad file descriptor) [pid 6155] close(18) = -1 EBADF (Bad file descriptor) [pid 6155] close(19) = -1 EBADF (Bad file descriptor) [pid 6155] close(20) = -1 EBADF (Bad file descriptor) [pid 6155] close(21) = -1 EBADF (Bad file descriptor) [pid 6155] close(22) = -1 EBADF (Bad file descriptor) [pid 6155] close(23) = -1 EBADF (Bad file descriptor) [pid 6155] close(24) = -1 EBADF (Bad file descriptor) [pid 6155] close(25) = -1 EBADF (Bad file descriptor) [pid 6155] close(26) = -1 EBADF (Bad file descriptor) [pid 6155] close(27) = -1 EBADF (Bad file descriptor) [pid 6155] close(28) = -1 EBADF (Bad file descriptor) [pid 6155] close(29) = -1 EBADF (Bad file descriptor) [pid 6155] exit_group(0 [pid 6156] <... futex resumed>) = ? [pid 6155] <... exit_group resumed>) = ? [pid 6156] +++ exited with 0 +++ [pid 6157] +++ exited with 0 +++ [pid 6155] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1134, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./378", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./378", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./378/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./378/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./378/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./378/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./378/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./378/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./378/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./378/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./378/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./378") = 0 [pid 5019] mkdir("./379", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1137 ./strace-static-x86_64: Process 6158 attached [pid 6158] set_robust_list(0x555556a426a0, 24) = 0 [pid 6158] chdir("./379") = 0 [ 71.249065][ T6156] loop0: detected capacity change from 0 to 1024 [pid 6158] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6158] setpgid(0, 0) = 0 [pid 6158] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6158] write(3, "1000", 4) = 4 [pid 6158] close(3) = 0 [pid 6158] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6158] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6158] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6158] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6158] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6158] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6158] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6158] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6159 attached [pid 6159] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6159] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6159] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6159] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6158] <... clone3 resumed> => {parent_tid=[1138]}, 88) = 1138 [pid 6158] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6158] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6158] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6159] <... futex resumed>) = 0 [pid 6159] memfd_create("syzkaller", 0) = 3 [pid 6159] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6159] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6159] munmap(0x7f15b9a45000, 524288) = 0 [pid 6159] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6159] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6159] close(3) = 0 [pid 6159] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6159] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6159] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6159] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6159] ioctl(4, LOOP_CLR_FD) = 0 [pid 6159] close(4) = 0 [pid 6159] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6159] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6158] <... futex resumed>) = 0 [pid 6158] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6158] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6158] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6159] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6158] <... mmap resumed>) = 0x7f15b9aa4000 [pid 6159] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6158] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6158] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6158] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1139]}, 88) = 1139 [pid 6158] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6158] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6158] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6160 attached [pid 6160] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6159] <... mknodat resumed>) = 0 [pid 6159] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6159] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6160] <... rseq resumed>) = 0 [pid 6160] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6160] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6160] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6160] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6160] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6160] chdir(".") = 0 [pid 6160] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6158] <... futex resumed>) = 0 [pid 6158] close(3) = 0 [pid 6158] close(4) = 0 [pid 6158] close(5) = -1 EBADF (Bad file descriptor) [pid 6158] close(6) = -1 EBADF (Bad file descriptor) [pid 6158] close(7) = -1 EBADF (Bad file descriptor) [pid 6158] close(8) = -1 EBADF (Bad file descriptor) [pid 6158] close(9) = -1 EBADF (Bad file descriptor) [pid 6158] close(10) = -1 EBADF (Bad file descriptor) [pid 6158] close(11) = -1 EBADF (Bad file descriptor) [pid 6158] close(12) = -1 EBADF (Bad file descriptor) [pid 6158] close(13) = -1 EBADF (Bad file descriptor) [pid 6158] close(14) = -1 EBADF (Bad file descriptor) [pid 6158] close(15) = -1 EBADF (Bad file descriptor) [pid 6158] close(16) = -1 EBADF (Bad file descriptor) [pid 6160] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6158] close(17) = -1 EBADF (Bad file descriptor) [pid 6158] close(18) = -1 EBADF (Bad file descriptor) [pid 6158] close(19) = -1 EBADF (Bad file descriptor) [pid 6158] close(20) = -1 EBADF (Bad file descriptor) [pid 6158] close(21) = -1 EBADF (Bad file descriptor) [pid 6158] close(22) = -1 EBADF (Bad file descriptor) [pid 6158] close(23) = -1 EBADF (Bad file descriptor) [pid 6158] close(24) = -1 EBADF (Bad file descriptor) [pid 6158] close(25) = -1 EBADF (Bad file descriptor) [pid 6158] close(26) = -1 EBADF (Bad file descriptor) [pid 6158] close(27) = -1 EBADF (Bad file descriptor) [pid 6158] close(28) = -1 EBADF (Bad file descriptor) [pid 6158] close(29) = -1 EBADF (Bad file descriptor) [pid 6158] exit_group(0 [pid 6159] <... futex resumed>) = ? [pid 6158] <... exit_group resumed>) = ? [pid 6159] +++ exited with 0 +++ [pid 6160] <... futex resumed>) = ? [pid 6160] +++ exited with 0 +++ [pid 6158] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1137, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./379", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./379", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./379/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./379/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./379/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./379/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./379/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./379/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./379/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./379/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./379/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./379") = 0 [pid 5019] mkdir("./380", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1140 ./strace-static-x86_64: Process 6161 attached [pid 6161] set_robust_list(0x555556a426a0, 24) = 0 [pid 6161] chdir("./380") = 0 [ 71.325163][ T6159] loop0: detected capacity change from 0 to 1024 [pid 6161] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6161] setpgid(0, 0) = 0 [pid 6161] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6161] write(3, "1000", 4) = 4 [pid 6161] close(3) = 0 [pid 6161] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6161] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6161] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6161] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6161] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6161] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6161] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6161] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6162 attached => {parent_tid=[1141]}, 88) = 1141 [pid 6162] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6162] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6162] rt_sigprocmask(SIG_SETMASK, [], [pid 6161] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6162] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6161] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6162] memfd_create("syzkaller", 0 [pid 6161] <... futex resumed>) = 0 [pid 6162] <... memfd_create resumed>) = 3 [pid 6162] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6161] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6162] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6162] munmap(0x7f15b9a45000, 524288) = 0 [pid 6162] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6162] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6162] close(3) = 0 [pid 6162] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6162] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6162] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6162] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6162] ioctl(4, LOOP_CLR_FD) = 0 [pid 6162] close(4) = 0 [pid 6162] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6161] <... futex resumed>) = 0 [pid 6161] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6162] <... futex resumed>) = 1 [pid 6161] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6161] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6161] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6162] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6161] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6161] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1142]}, 88) = 1142 ./strace-static-x86_64: Process 6163 attached [pid 6161] rt_sigprocmask(SIG_SETMASK, [], [pid 6163] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6161] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6163] <... rseq resumed>) = 0 [pid 6161] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6163] set_robust_list(0x7f15b9ac49a0, 24 [pid 6161] <... futex resumed>) = 0 [pid 6163] <... set_robust_list resumed>) = 0 [pid 6161] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6163] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6163] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6162] <... mknodat resumed>) = 0 [pid 6163] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6162] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6162] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6163] <... mount resumed>) = 0 [pid 6163] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6163] chdir(".") = 0 [pid 6163] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6161] <... futex resumed>) = 0 [pid 6163] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6161] close(3) = 0 [pid 6161] close(4) = 0 [pid 6161] close(5) = -1 EBADF (Bad file descriptor) [pid 6161] close(6) = -1 EBADF (Bad file descriptor) [pid 6161] close(7) = -1 EBADF (Bad file descriptor) [pid 6161] close(8) = -1 EBADF (Bad file descriptor) [pid 6161] close(9) = -1 EBADF (Bad file descriptor) [pid 6161] close(10) = -1 EBADF (Bad file descriptor) [pid 6161] close(11) = -1 EBADF (Bad file descriptor) [pid 6161] close(12) = -1 EBADF (Bad file descriptor) [pid 6161] close(13) = -1 EBADF (Bad file descriptor) [pid 6161] close(14) = -1 EBADF (Bad file descriptor) [pid 6161] close(15) = -1 EBADF (Bad file descriptor) [pid 6161] close(16) = -1 EBADF (Bad file descriptor) [pid 6161] close(17) = -1 EBADF (Bad file descriptor) [pid 6161] close(18) = -1 EBADF (Bad file descriptor) [pid 6161] close(19) = -1 EBADF (Bad file descriptor) [pid 6161] close(20) = -1 EBADF (Bad file descriptor) [pid 6161] close(21) = -1 EBADF (Bad file descriptor) [pid 6161] close(22) = -1 EBADF (Bad file descriptor) [pid 6161] close(23) = -1 EBADF (Bad file descriptor) [pid 6161] close(24) = -1 EBADF (Bad file descriptor) [pid 6161] close(25) = -1 EBADF (Bad file descriptor) [pid 6161] close(26) = -1 EBADF (Bad file descriptor) [pid 6161] close(27) = -1 EBADF (Bad file descriptor) [pid 6161] close(28) = -1 EBADF (Bad file descriptor) [pid 6161] close(29) = -1 EBADF (Bad file descriptor) [pid 6161] exit_group(0) = ? [pid 6163] <... futex resumed>) = ? [pid 6162] <... futex resumed>) = ? [pid 6163] +++ exited with 0 +++ [pid 6162] +++ exited with 0 +++ [pid 6161] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1140, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./380", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./380", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./380/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./380/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./380/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./380/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./380/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./380/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./380/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./380/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./380/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./380") = 0 [pid 5019] mkdir("./381", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1143 ./strace-static-x86_64: Process 6164 attached [pid 6164] set_robust_list(0x555556a426a0, 24) = 0 [pid 6164] chdir("./381") = 0 [pid 6164] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6164] setpgid(0, 0) = 0 [pid 6164] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6164] write(3, "1000", 4) = 4 [pid 6164] close(3) = 0 [pid 6164] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6164] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6164] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6164] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6164] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6164] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6164] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 71.400773][ T6162] loop0: detected capacity change from 0 to 1024 [pid 6164] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1144]}, 88) = 1144 [pid 6164] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6164] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6164] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6165 attached [pid 6165] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6165] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6165] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6165] memfd_create("syzkaller", 0) = 3 [pid 6165] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6165] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6165] munmap(0x7f15b9a45000, 524288) = 0 [pid 6165] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6165] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6165] close(3) = 0 [pid 6165] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6165] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6165] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6165] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6165] ioctl(4, LOOP_CLR_FD) = 0 [pid 6165] close(4) = 0 [pid 6165] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6164] <... futex resumed>) = 0 [pid 6165] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6164] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6164] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6164] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6164] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6164] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6164] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1145]}, 88) = 1145 [pid 6164] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6164] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6164] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6165] <... mknodat resumed>) = 0 [pid 6165] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6165] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6166 attached [pid 6166] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6166] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6166] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6166] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6166] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6166] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6166] chdir(".") = 0 [pid 6166] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6164] <... futex resumed>) = 0 [pid 6166] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6164] close(3) = 0 [pid 6164] close(4) = 0 [pid 6164] close(5) = -1 EBADF (Bad file descriptor) [pid 6164] close(6) = -1 EBADF (Bad file descriptor) [pid 6164] close(7) = -1 EBADF (Bad file descriptor) [pid 6164] close(8) = -1 EBADF (Bad file descriptor) [pid 6164] close(9) = -1 EBADF (Bad file descriptor) [pid 6164] close(10) = -1 EBADF (Bad file descriptor) [pid 6164] close(11) = -1 EBADF (Bad file descriptor) [pid 6164] close(12) = -1 EBADF (Bad file descriptor) [pid 6164] close(13) = -1 EBADF (Bad file descriptor) [pid 6164] close(14) = -1 EBADF (Bad file descriptor) [pid 6164] close(15) = -1 EBADF (Bad file descriptor) [pid 6164] close(16) = -1 EBADF (Bad file descriptor) [pid 6164] close(17) = -1 EBADF (Bad file descriptor) [pid 6164] close(18) = -1 EBADF (Bad file descriptor) [pid 6164] close(19) = -1 EBADF (Bad file descriptor) [pid 6164] close(20) = -1 EBADF (Bad file descriptor) [pid 6164] close(21) = -1 EBADF (Bad file descriptor) [pid 6164] close(22) = -1 EBADF (Bad file descriptor) [pid 6164] close(23) = -1 EBADF (Bad file descriptor) [pid 6164] close(24) = -1 EBADF (Bad file descriptor) [pid 6164] close(25) = -1 EBADF (Bad file descriptor) [pid 6164] close(26) = -1 EBADF (Bad file descriptor) [pid 6164] close(27) = -1 EBADF (Bad file descriptor) [pid 6164] close(28) = -1 EBADF (Bad file descriptor) [pid 6164] close(29) = -1 EBADF (Bad file descriptor) [pid 6164] exit_group(0) = ? [pid 6166] <... futex resumed>) = ? [pid 6166] +++ exited with 0 +++ [pid 6165] <... futex resumed>) = ? [pid 6165] +++ exited with 0 +++ [pid 6164] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1143, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] umount2("./381", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./381", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./381/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./381/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./381/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./381/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./381/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./381/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./381/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./381/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./381/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./381") = 0 [pid 5019] mkdir("./382", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [ 71.471688][ T6165] loop0: detected capacity change from 0 to 1024 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1146 ./strace-static-x86_64: Process 6167 attached [pid 6167] set_robust_list(0x555556a426a0, 24) = 0 [pid 6167] chdir("./382") = 0 [pid 6167] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6167] setpgid(0, 0) = 0 [pid 6167] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6167] write(3, "1000", 4) = 4 [pid 6167] close(3) = 0 [pid 6167] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6167] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6167] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6167] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6167] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6167] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6167] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6167] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6168 attached [pid 6168] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6168] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6168] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6168] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6167] <... clone3 resumed> => {parent_tid=[1147]}, 88) = 1147 [pid 6167] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6167] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6168] <... futex resumed>) = 0 [pid 6168] memfd_create("syzkaller", 0) = 3 [pid 6168] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6167] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6168] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6168] munmap(0x7f15b9a45000, 524288) = 0 [pid 6168] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6168] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6168] close(3) = 0 [pid 6168] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6168] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6168] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6168] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6168] ioctl(4, LOOP_CLR_FD) = 0 [pid 6168] close(4) = 0 [pid 6168] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6167] <... futex resumed>) = 0 [pid 6167] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6167] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6167] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6167] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6167] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6167] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1148]}, 88) = 1148 [pid 6167] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6167] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6167] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6168] <... futex resumed>) = 1 [pid 6168] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6169 attached [pid 6169] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6169] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6169] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6169] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6169] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6168] <... mknodat resumed>) = 0 [pid 6168] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6168] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6169] <... mount resumed>) = 0 [pid 6169] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6169] chdir(".") = 0 [pid 6169] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6167] <... futex resumed>) = 0 [pid 6167] close(3) = 0 [pid 6167] close(4) = 0 [pid 6167] close(5) = -1 EBADF (Bad file descriptor) [pid 6167] close(6) = -1 EBADF (Bad file descriptor) [pid 6167] close(7) = -1 EBADF (Bad file descriptor) [pid 6167] close(8) = -1 EBADF (Bad file descriptor) [pid 6167] close(9) = -1 EBADF (Bad file descriptor) [pid 6167] close(10) = -1 EBADF (Bad file descriptor) [pid 6167] close(11) = -1 EBADF (Bad file descriptor) [pid 6167] close(12) = -1 EBADF (Bad file descriptor) [pid 6167] close(13) = -1 EBADF (Bad file descriptor) [pid 6167] close(14) = -1 EBADF (Bad file descriptor) [pid 6167] close(15) = -1 EBADF (Bad file descriptor) [pid 6167] close(16) = -1 EBADF (Bad file descriptor) [pid 6167] close(17) = -1 EBADF (Bad file descriptor) [pid 6167] close(18) = -1 EBADF (Bad file descriptor) [pid 6167] close(19) = -1 EBADF (Bad file descriptor) [pid 6167] close(20) = -1 EBADF (Bad file descriptor) [pid 6167] close(21 [pid 6169] <... futex resumed>) = 1 [pid 6167] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6169] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6167] close(22) = -1 EBADF (Bad file descriptor) [pid 6167] close(23) = -1 EBADF (Bad file descriptor) [pid 6167] close(24) = -1 EBADF (Bad file descriptor) [pid 6167] close(25) = -1 EBADF (Bad file descriptor) [pid 6167] close(26) = -1 EBADF (Bad file descriptor) [pid 6167] close(27) = -1 EBADF (Bad file descriptor) [pid 6167] close(28) = -1 EBADF (Bad file descriptor) [pid 6167] close(29) = -1 EBADF (Bad file descriptor) [pid 6167] exit_group(0) = ? [pid 6168] <... futex resumed>) = ? [pid 6168] +++ exited with 0 +++ [pid 6169] <... futex resumed>) = ? [pid 6169] +++ exited with 0 +++ [pid 6167] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1146, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] umount2("./382", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./382", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./382/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./382/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./382/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./382/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./382/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./382/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./382/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./382/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./382/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./382") = 0 [pid 5019] mkdir("./383", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1149 ./strace-static-x86_64: Process 6170 attached [pid 6170] set_robust_list(0x555556a426a0, 24) = 0 [pid 6170] chdir("./383") = 0 [pid 6170] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6170] setpgid(0, 0) = 0 [pid 6170] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6170] write(3, "1000", 4) = 4 [pid 6170] close(3) = 0 [pid 6170] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6170] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6170] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6170] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6170] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6170] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6170] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6170] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1150]}, 88) = 1150 [pid 6170] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6170] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6170] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6171 attached [pid 6171] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6171] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6171] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6171] memfd_create("syzkaller", 0) = 3 [pid 6171] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6171] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6171] munmap(0x7f15b9a45000, 524288) = 0 [pid 6171] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 71.549071][ T6168] loop0: detected capacity change from 0 to 1024 [pid 6171] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6171] close(3) = 0 [pid 6171] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6171] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6171] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6171] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6171] ioctl(4, LOOP_CLR_FD) = 0 [pid 6171] close(4) = 0 [pid 6171] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6170] <... futex resumed>) = 0 [pid 6170] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6170] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6170] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6170] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6170] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6170] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1151]}, 88) = 1151 [pid 6170] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6170] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6170] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6171] <... futex resumed>) = 1 [pid 6171] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6172 attached [pid 6172] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6172] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6172] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6172] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6172] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6171] <... mknodat resumed>) = 0 [pid 6171] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6171] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6172] <... mount resumed>) = 0 [pid 6172] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6172] chdir(".") = 0 [pid 6172] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6170] <... futex resumed>) = 0 [pid 6170] close(3) = 0 [pid 6170] close(4) = 0 [pid 6170] close(5) = -1 EBADF (Bad file descriptor) [pid 6170] close(6) = -1 EBADF (Bad file descriptor) [pid 6170] close(7) = -1 EBADF (Bad file descriptor) [pid 6170] close(8) = -1 EBADF (Bad file descriptor) [pid 6170] close(9) = -1 EBADF (Bad file descriptor) [pid 6170] close(10) = -1 EBADF (Bad file descriptor) [pid 6170] close(11) = -1 EBADF (Bad file descriptor) [pid 6170] close(12) = -1 EBADF (Bad file descriptor) [pid 6170] close(13) = -1 EBADF (Bad file descriptor) [pid 6170] close(14) = -1 EBADF (Bad file descriptor) [pid 6170] close(15) = -1 EBADF (Bad file descriptor) [pid 6170] close(16) = -1 EBADF (Bad file descriptor) [pid 6170] close(17) = -1 EBADF (Bad file descriptor) [pid 6170] close(18) = -1 EBADF (Bad file descriptor) [pid 6170] close(19) = -1 EBADF (Bad file descriptor) [pid 6170] close(20) = -1 EBADF (Bad file descriptor) [pid 6170] close(21) = -1 EBADF (Bad file descriptor) [pid 6170] close(22) = -1 EBADF (Bad file descriptor) [pid 6170] close(23) = -1 EBADF (Bad file descriptor) [pid 6170] close(24) = -1 EBADF (Bad file descriptor) [pid 6170] close(25) = -1 EBADF (Bad file descriptor) [pid 6170] close(26) = -1 EBADF (Bad file descriptor) [pid 6170] close(27) = -1 EBADF (Bad file descriptor) [pid 6170] close(28) = -1 EBADF (Bad file descriptor) [pid 6170] close(29) = -1 EBADF (Bad file descriptor) [pid 6170] exit_group(0) = ? [pid 6171] <... futex resumed>) = ? [pid 6171] +++ exited with 0 +++ [pid 6172] <... futex resumed>) = ? [pid 6172] +++ exited with 0 +++ [pid 6170] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1149, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./383", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./383", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./383/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./383/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./383/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./383/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./383/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./383/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./383/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./383/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./383/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./383") = 0 [pid 5019] mkdir("./384", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1152 ./strace-static-x86_64: Process 6173 attached [ 71.608409][ T6171] loop0: detected capacity change from 0 to 1024 [pid 6173] set_robust_list(0x555556a426a0, 24) = 0 [pid 6173] chdir("./384") = 0 [pid 6173] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6173] setpgid(0, 0) = 0 [pid 6173] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6173] write(3, "1000", 4) = 4 [pid 6173] close(3) = 0 [pid 6173] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6173] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6173] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6173] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6173] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6173] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6173] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6173] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6174 attached => {parent_tid=[1153]}, 88) = 1153 [pid 6174] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053 [pid 6173] rt_sigprocmask(SIG_SETMASK, [], [pid 6174] <... rseq resumed>) = 0 [pid 6173] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6174] set_robust_list(0x7f15c1e659a0, 24 [pid 6173] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6174] <... set_robust_list resumed>) = 0 [pid 6173] <... futex resumed>) = 0 [pid 6174] rt_sigprocmask(SIG_SETMASK, [], [pid 6173] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6174] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6174] memfd_create("syzkaller", 0) = 3 [pid 6174] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6174] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6174] munmap(0x7f15b9a45000, 524288) = 0 [pid 6174] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6174] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6174] close(3) = 0 [pid 6174] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6174] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6174] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6174] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6174] ioctl(4, LOOP_CLR_FD) = 0 [pid 6174] close(4) = 0 [pid 6174] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6173] <... futex resumed>) = 0 [pid 6173] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6173] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6173] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6173] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6173] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6173] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1154]}, 88) = 1154 [pid 6173] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6173] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6173] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6175 attached [pid 6175] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6175] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6175] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6175] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6174] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6175] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6174] <... mknodat resumed>) = 0 [pid 6174] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6174] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6175] <... mount resumed>) = 0 [pid 6175] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6175] chdir(".") = 0 [pid 6175] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6173] <... futex resumed>) = 0 [pid 6175] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6173] close(3) = 0 [pid 6173] close(4) = 0 [pid 6173] close(5) = -1 EBADF (Bad file descriptor) [pid 6173] close(6) = -1 EBADF (Bad file descriptor) [pid 6173] close(7) = -1 EBADF (Bad file descriptor) [pid 6173] close(8) = -1 EBADF (Bad file descriptor) [pid 6173] close(9) = -1 EBADF (Bad file descriptor) [pid 6173] close(10) = -1 EBADF (Bad file descriptor) [pid 6173] close(11) = -1 EBADF (Bad file descriptor) [pid 6173] close(12) = -1 EBADF (Bad file descriptor) [pid 6173] close(13) = -1 EBADF (Bad file descriptor) [pid 6173] close(14) = -1 EBADF (Bad file descriptor) [pid 6173] close(15) = -1 EBADF (Bad file descriptor) [pid 6173] close(16) = -1 EBADF (Bad file descriptor) [pid 6173] close(17) = -1 EBADF (Bad file descriptor) [pid 6173] close(18) = -1 EBADF (Bad file descriptor) [pid 6173] close(19) = -1 EBADF (Bad file descriptor) [pid 6173] close(20) = -1 EBADF (Bad file descriptor) [pid 6173] close(21) = -1 EBADF (Bad file descriptor) [pid 6173] close(22) = -1 EBADF (Bad file descriptor) [pid 6173] close(23) = -1 EBADF (Bad file descriptor) [pid 6173] close(24) = -1 EBADF (Bad file descriptor) [pid 6173] close(25) = -1 EBADF (Bad file descriptor) [pid 6173] close(26) = -1 EBADF (Bad file descriptor) [pid 6173] close(27) = -1 EBADF (Bad file descriptor) [pid 6173] close(28) = -1 EBADF (Bad file descriptor) [pid 6173] close(29) = -1 EBADF (Bad file descriptor) [pid 6173] exit_group(0 [pid 6175] <... futex resumed>) = ? [pid 6174] <... futex resumed>) = ? [pid 6173] <... exit_group resumed>) = ? [pid 6175] +++ exited with 0 +++ [pid 6174] +++ exited with 0 +++ [pid 6173] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1152, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./384", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./384", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./384/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./384/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./384/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./384/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./384/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [ 71.683377][ T6174] loop0: detected capacity change from 0 to 1024 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./384/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./384/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./384/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./384/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./384") = 0 [pid 5019] mkdir("./385", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6176 attached [pid 6176] set_robust_list(0x555556a426a0, 24) = 0 [pid 6176] chdir("./385" [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1155 [pid 6176] <... chdir resumed>) = 0 [pid 6176] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6176] setpgid(0, 0) = 0 [pid 6176] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6176] write(3, "1000", 4) = 4 [pid 6176] close(3) = 0 [pid 6176] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6176] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6176] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6176] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6176] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6176] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6176] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6176] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1156]}, 88) = 1156 [pid 6176] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6176] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6176] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6177 attached [pid 6177] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6177] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6177] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6177] memfd_create("syzkaller", 0) = 3 [pid 6177] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6177] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6177] munmap(0x7f15b9a45000, 524288) = 0 [pid 6177] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6177] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6177] close(3) = 0 [pid 6177] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6177] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6177] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6177] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6177] ioctl(4, LOOP_CLR_FD) = 0 [pid 6177] close(4) = 0 [pid 6177] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6176] <... futex resumed>) = 0 [pid 6176] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6176] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6176] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6176] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6176] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6176] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1157]}, 88) = 1157 [pid 6176] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6176] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6176] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6177] <... futex resumed>) = 1 [pid 6177] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6178 attached ) = 0 [pid 6177] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6177] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6178] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6178] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6178] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6178] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6178] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6178] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6178] chdir(".") = 0 [pid 6178] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6176] <... futex resumed>) = 0 [pid 6176] close(3) = 0 [pid 6176] close(4) = 0 [pid 6176] close(5) = -1 EBADF (Bad file descriptor) [pid 6178] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6176] close(6) = -1 EBADF (Bad file descriptor) [pid 6176] close(7) = -1 EBADF (Bad file descriptor) [pid 6176] close(8) = -1 EBADF (Bad file descriptor) [pid 6176] close(9) = -1 EBADF (Bad file descriptor) [pid 6176] close(10) = -1 EBADF (Bad file descriptor) [pid 6176] close(11) = -1 EBADF (Bad file descriptor) [pid 6176] close(12) = -1 EBADF (Bad file descriptor) [pid 6176] close(13) = -1 EBADF (Bad file descriptor) [pid 6176] close(14) = -1 EBADF (Bad file descriptor) [pid 6176] close(15) = -1 EBADF (Bad file descriptor) [pid 6176] close(16) = -1 EBADF (Bad file descriptor) [pid 6176] close(17) = -1 EBADF (Bad file descriptor) [pid 6176] close(18) = -1 EBADF (Bad file descriptor) [pid 6176] close(19) = -1 EBADF (Bad file descriptor) [pid 6176] close(20) = -1 EBADF (Bad file descriptor) [pid 6176] close(21) = -1 EBADF (Bad file descriptor) [pid 6176] close(22) = -1 EBADF (Bad file descriptor) [pid 6176] close(23) = -1 EBADF (Bad file descriptor) [pid 6176] close(24) = -1 EBADF (Bad file descriptor) [pid 6176] close(25) = -1 EBADF (Bad file descriptor) [pid 6176] close(26) = -1 EBADF (Bad file descriptor) [pid 6176] close(27) = -1 EBADF (Bad file descriptor) [pid 6176] close(28) = -1 EBADF (Bad file descriptor) [pid 6176] close(29) = -1 EBADF (Bad file descriptor) [pid 6176] exit_group(0 [pid 6178] <... futex resumed>) = ? [pid 6177] <... futex resumed>) = ? [pid 6176] <... exit_group resumed>) = ? [pid 6178] +++ exited with 0 +++ [pid 6177] +++ exited with 0 +++ [pid 6176] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1155, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] umount2("./385", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./385", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 71.769612][ T6177] loop0: detected capacity change from 0 to 1024 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./385/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./385/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./385/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./385/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./385/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./385/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./385/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./385/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./385/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./385") = 0 [pid 5019] mkdir("./386", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6179 attached [pid 6179] set_robust_list(0x555556a426a0, 24) = 0 [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1158 [pid 6179] chdir("./386") = 0 [pid 6179] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6179] setpgid(0, 0) = 0 [pid 6179] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6179] write(3, "1000", 4) = 4 [pid 6179] close(3) = 0 [pid 6179] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6179] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6179] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6179] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6179] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6179] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6179] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6179] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6180 attached => {parent_tid=[1159]}, 88) = 1159 [pid 6180] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6180] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6180] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6180] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6179] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6179] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6180] <... futex resumed>) = 0 [pid 6179] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6180] memfd_create("syzkaller", 0) = 3 [pid 6180] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6180] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6180] munmap(0x7f15b9a45000, 524288) = 0 [pid 6180] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6180] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6180] close(3) = 0 [pid 6180] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6180] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6180] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6180] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6180] ioctl(4, LOOP_CLR_FD) = 0 [pid 6180] close(4) = 0 [pid 6180] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6179] <... futex resumed>) = 0 [pid 6179] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6179] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6179] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6179] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6179] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6179] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1160]}, 88) = 1160 ./strace-static-x86_64: Process 6181 attached [pid 6179] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6179] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6179] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6180] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6181] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6181] set_robust_list(0x7f15b9ac49a0, 24 [pid 6180] <... mknodat resumed>) = 0 [pid 6180] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6180] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6181] <... set_robust_list resumed>) = 0 [pid 6181] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6181] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6181] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6181] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6181] chdir(".") = 0 [pid 6181] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6179] <... futex resumed>) = 0 [pid 6179] close(3) = 0 [pid 6179] close(4) = 0 [pid 6179] close(5) = -1 EBADF (Bad file descriptor) [pid 6179] close(6) = -1 EBADF (Bad file descriptor) [pid 6179] close(7) = -1 EBADF (Bad file descriptor) [pid 6179] close(8) = -1 EBADF (Bad file descriptor) [pid 6179] close(9) = -1 EBADF (Bad file descriptor) [pid 6179] close(10) = -1 EBADF (Bad file descriptor) [pid 6179] close(11) = -1 EBADF (Bad file descriptor) [pid 6179] close(12) = -1 EBADF (Bad file descriptor) [pid 6179] close(13) = -1 EBADF (Bad file descriptor) [pid 6179] close(14) = -1 EBADF (Bad file descriptor) [pid 6179] close(15) = -1 EBADF (Bad file descriptor) [pid 6179] close(16 [pid 6181] <... futex resumed>) = 1 [pid 6179] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6181] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6179] close(17) = -1 EBADF (Bad file descriptor) [pid 6179] close(18) = -1 EBADF (Bad file descriptor) [pid 6179] close(19) = -1 EBADF (Bad file descriptor) [pid 6179] close(20) = -1 EBADF (Bad file descriptor) [pid 6179] close(21) = -1 EBADF (Bad file descriptor) [pid 6179] close(22) = -1 EBADF (Bad file descriptor) [pid 6179] close(23) = -1 EBADF (Bad file descriptor) [pid 6179] close(24) = -1 EBADF (Bad file descriptor) [pid 6179] close(25) = -1 EBADF (Bad file descriptor) [pid 6179] close(26) = -1 EBADF (Bad file descriptor) [pid 6179] close(27) = -1 EBADF (Bad file descriptor) [pid 6179] close(28) = -1 EBADF (Bad file descriptor) [pid 6179] close(29) = -1 EBADF (Bad file descriptor) [pid 6179] exit_group(0 [pid 6181] <... futex resumed>) = ? [pid 6180] <... futex resumed>) = ? [pid 6179] <... exit_group resumed>) = ? [pid 6181] +++ exited with 0 +++ [pid 6180] +++ exited with 0 +++ [pid 6179] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1158, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5019] umount2("./386", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./386", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./386/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./386/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./386/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./386/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./386/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./386/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./386/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./386/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./386/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./386") = 0 [pid 5019] mkdir("./387", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1161 ./strace-static-x86_64: Process 6182 attached [pid 6182] set_robust_list(0x555556a426a0, 24) = 0 [pid 6182] chdir("./387") = 0 [ 71.851566][ T6180] loop0: detected capacity change from 0 to 1024 [pid 6182] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6182] setpgid(0, 0) = 0 [pid 6182] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6182] write(3, "1000", 4) = 4 [pid 6182] close(3) = 0 [pid 6182] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6182] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6182] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6182] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6182] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6182] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6182] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6182] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6183 attached => {parent_tid=[1162]}, 88) = 1162 [pid 6183] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6183] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6183] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6183] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6182] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6182] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6183] <... futex resumed>) = 0 [pid 6183] memfd_create("syzkaller", 0 [pid 6182] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6183] <... memfd_create resumed>) = 3 [pid 6183] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6183] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6183] munmap(0x7f15b9a45000, 524288) = 0 [pid 6183] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6183] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6183] close(3) = 0 [pid 6183] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6183] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6183] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6183] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6183] ioctl(4, LOOP_CLR_FD) = 0 [pid 6183] close(4) = 0 [pid 6183] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6182] <... futex resumed>) = 0 [pid 6182] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6182] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6182] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6182] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6182] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6182] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6184 attached [pid 6184] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6182] <... clone3 resumed> => {parent_tid=[1163]}, 88) = 1163 [pid 6184] <... rseq resumed>) = 0 [pid 6182] rt_sigprocmask(SIG_SETMASK, [], [pid 6184] set_robust_list(0x7f15b9ac49a0, 24 [pid 6182] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6184] <... set_robust_list resumed>) = 0 [pid 6182] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6184] rt_sigprocmask(SIG_SETMASK, [], [pid 6182] <... futex resumed>) = 0 [pid 6184] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6182] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6184] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6184] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6183] <... futex resumed>) = 1 [pid 6183] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6184] <... mount resumed>) = 0 [pid 6184] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6184] chdir(".") = 0 [pid 6184] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6182] <... futex resumed>) = 0 [pid 6184] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6183] <... mknodat resumed>) = 0 [pid 6183] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6183] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6182] close(3) = 0 [pid 6182] close(4) = 0 [pid 6182] close(5) = -1 EBADF (Bad file descriptor) [pid 6182] close(6) = -1 EBADF (Bad file descriptor) [pid 6182] close(7) = -1 EBADF (Bad file descriptor) [pid 6182] close(8) = -1 EBADF (Bad file descriptor) [pid 6182] close(9) = -1 EBADF (Bad file descriptor) [pid 6182] close(10) = -1 EBADF (Bad file descriptor) [pid 6182] close(11) = -1 EBADF (Bad file descriptor) [pid 6182] close(12) = -1 EBADF (Bad file descriptor) [pid 6182] close(13) = -1 EBADF (Bad file descriptor) [pid 6182] close(14) = -1 EBADF (Bad file descriptor) [pid 6182] close(15) = -1 EBADF (Bad file descriptor) [pid 6182] close(16) = -1 EBADF (Bad file descriptor) [pid 6182] close(17) = -1 EBADF (Bad file descriptor) [pid 6182] close(18) = -1 EBADF (Bad file descriptor) [pid 6182] close(19) = -1 EBADF (Bad file descriptor) [pid 6182] close(20) = -1 EBADF (Bad file descriptor) [pid 6182] close(21) = -1 EBADF (Bad file descriptor) [pid 6182] close(22) = -1 EBADF (Bad file descriptor) [pid 6182] close(23) = -1 EBADF (Bad file descriptor) [pid 6182] close(24) = -1 EBADF (Bad file descriptor) [pid 6182] close(25) = -1 EBADF (Bad file descriptor) [pid 6182] close(26) = -1 EBADF (Bad file descriptor) [pid 6182] close(27) = -1 EBADF (Bad file descriptor) [pid 6182] close(28) = -1 EBADF (Bad file descriptor) [pid 6182] close(29) = -1 EBADF (Bad file descriptor) [pid 6182] exit_group(0 [pid 6184] <... futex resumed>) = ? [pid 6182] <... exit_group resumed>) = ? [pid 6184] +++ exited with 0 +++ [pid 6183] <... futex resumed>) = ? [pid 6183] +++ exited with 0 +++ [pid 6182] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1161, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./387", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./387", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./387/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./387/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./387/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./387/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./387/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./387/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./387/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./387/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./387/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./387") = 0 [pid 5019] mkdir("./388", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 71.929762][ T6183] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6185 attached [pid 6185] set_robust_list(0x555556a426a0, 24) = 0 [pid 6185] chdir("./388" [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1164 [pid 6185] <... chdir resumed>) = 0 [pid 6185] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6185] setpgid(0, 0) = 0 [pid 6185] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6185] write(3, "1000", 4) = 4 [pid 6185] close(3) = 0 [pid 6185] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6185] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6185] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6185] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6185] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6185] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6185] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6185] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1165]}, 88) = 1165 [pid 6185] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6185] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6185] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6186 attached [pid 6186] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6186] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6186] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6186] memfd_create("syzkaller", 0) = 3 [pid 6186] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6186] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6186] munmap(0x7f15b9a45000, 524288) = 0 [pid 6186] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6186] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6186] close(3) = 0 [pid 6186] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6186] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6186] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6186] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6186] ioctl(4, LOOP_CLR_FD) = 0 [pid 6186] close(4) = 0 [pid 6186] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6185] <... futex resumed>) = 0 [pid 6186] <... futex resumed>) = 1 [pid 6185] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6186] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6185] <... futex resumed>) = 0 [pid 6185] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6185] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6185] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6185] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6185] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1166]}, 88) = 1166 ./strace-static-x86_64: Process 6187 attached [pid 6187] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6187] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6187] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6185] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6187] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6185] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6187] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6185] <... futex resumed>) = 0 [pid 6185] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6187] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6187] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6186] <... mknodat resumed>) = 0 [pid 6186] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6186] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6187] <... mount resumed>) = 0 [pid 6187] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6187] chdir(".") = 0 [pid 6187] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6185] <... futex resumed>) = 0 [pid 6185] close(3) = 0 [pid 6185] close(4) = 0 [pid 6185] close(5) = -1 EBADF (Bad file descriptor) [pid 6185] close(6) = -1 EBADF (Bad file descriptor) [pid 6185] close(7) = -1 EBADF (Bad file descriptor) [pid 6185] close(8) = -1 EBADF (Bad file descriptor) [pid 6185] close(9) = -1 EBADF (Bad file descriptor) [pid 6185] close(10) = -1 EBADF (Bad file descriptor) [pid 6185] close(11) = -1 EBADF (Bad file descriptor) [pid 6185] close(12) = -1 EBADF (Bad file descriptor) [pid 6185] close(13) = -1 EBADF (Bad file descriptor) [pid 6185] close(14) = -1 EBADF (Bad file descriptor) [pid 6185] close(15) = -1 EBADF (Bad file descriptor) [pid 6185] close(16) = -1 EBADF (Bad file descriptor) [pid 6185] close(17) = -1 EBADF (Bad file descriptor) [pid 6185] close(18) = -1 EBADF (Bad file descriptor) [pid 6185] close(19) = -1 EBADF (Bad file descriptor) [pid 6185] close(20) = -1 EBADF (Bad file descriptor) [pid 6185] close(21) = -1 EBADF (Bad file descriptor) [pid 6185] close(22) = -1 EBADF (Bad file descriptor) [pid 6185] close(23) = -1 EBADF (Bad file descriptor) [pid 6185] close(24) = -1 EBADF (Bad file descriptor) [pid 6185] close(25) = -1 EBADF (Bad file descriptor) [pid 6185] close(26) = -1 EBADF (Bad file descriptor) [pid 6187] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6185] close(27) = -1 EBADF (Bad file descriptor) [pid 6185] close(28) = -1 EBADF (Bad file descriptor) [pid 6185] close(29) = -1 EBADF (Bad file descriptor) [pid 6185] exit_group(0 [pid 6186] <... futex resumed>) = ? [pid 6185] <... exit_group resumed>) = ? [pid 6187] <... futex resumed>) = ? [pid 6186] +++ exited with 0 +++ [pid 6187] +++ exited with 0 +++ [pid 6185] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1164, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./388", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./388", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./388/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./388/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./388/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./388/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./388/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./388/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./388/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./388/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./388/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./388") = 0 [pid 5019] mkdir("./389", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 72.008110][ T6186] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6188 attached [pid 6188] set_robust_list(0x555556a426a0, 24) = 0 [pid 6188] chdir("./389" [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1167 [pid 6188] <... chdir resumed>) = 0 [pid 6188] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6188] setpgid(0, 0) = 0 [pid 6188] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6188] write(3, "1000", 4) = 4 [pid 6188] close(3) = 0 [pid 6188] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6188] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6188] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6188] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6188] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6188] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6188] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6188] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1168]}, 88) = 1168 [pid 6188] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6188] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6188] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6189 attached [pid 6189] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6189] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6189] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6189] memfd_create("syzkaller", 0) = 3 [pid 6189] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6189] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6189] munmap(0x7f15b9a45000, 524288) = 0 [pid 6189] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6189] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6189] close(3) = 0 [pid 6189] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6189] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6189] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6189] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6189] ioctl(4, LOOP_CLR_FD) = 0 [pid 6189] close(4) = 0 [pid 6189] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6188] <... futex resumed>) = 0 [pid 6189] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6188] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6188] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6188] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6188] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6188] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6188] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1169]}, 88) = 1169 [pid 6188] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6188] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6188] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6190 attached [pid 6190] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6190] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6190] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6190] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6190] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6189] <... mknodat resumed>) = 0 [pid 6189] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6189] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6190] <... mount resumed>) = 0 [pid 6190] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6190] chdir(".") = 0 [pid 6190] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6188] <... futex resumed>) = 0 [pid 6188] close(3) = 0 [pid 6188] close(4) = 0 [pid 6188] close(5) = -1 EBADF (Bad file descriptor) [pid 6188] close(6) = -1 EBADF (Bad file descriptor) [pid 6188] close(7) = -1 EBADF (Bad file descriptor) [pid 6188] close(8) = -1 EBADF (Bad file descriptor) [pid 6188] close(9) = -1 EBADF (Bad file descriptor) [pid 6188] close(10) = -1 EBADF (Bad file descriptor) [pid 6188] close(11) = -1 EBADF (Bad file descriptor) [pid 6188] close(12) = -1 EBADF (Bad file descriptor) [pid 6188] close(13) = -1 EBADF (Bad file descriptor) [pid 6188] close(14) = -1 EBADF (Bad file descriptor) [pid 6188] close(15) = -1 EBADF (Bad file descriptor) [pid 6188] close(16) = -1 EBADF (Bad file descriptor) [pid 6188] close(17) = -1 EBADF (Bad file descriptor) [pid 6188] close(18) = -1 EBADF (Bad file descriptor) [pid 6188] close(19) = -1 EBADF (Bad file descriptor) [pid 6188] close(20) = -1 EBADF (Bad file descriptor) [pid 6188] close(21) = -1 EBADF (Bad file descriptor) [pid 6188] close(22) = -1 EBADF (Bad file descriptor) [pid 6188] close(23) = -1 EBADF (Bad file descriptor) [pid 6188] close(24) = -1 EBADF (Bad file descriptor) [pid 6188] close(25) = -1 EBADF (Bad file descriptor) [pid 6188] close(26) = -1 EBADF (Bad file descriptor) [pid 6188] close(27) = -1 EBADF (Bad file descriptor) [pid 6188] close(28) = -1 EBADF (Bad file descriptor) [pid 6188] close(29) = -1 EBADF (Bad file descriptor) [pid 6188] exit_group(0) = ? [pid 6190] +++ exited with 0 +++ [pid 6189] <... futex resumed>) = ? [pid 6189] +++ exited with 0 +++ [pid 6188] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1167, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./389", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./389", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./389/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./389/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./389/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./389/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./389/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./389/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./389/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./389/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./389/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./389") = 0 [pid 5019] mkdir("./390", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [ 72.084776][ T6189] loop0: detected capacity change from 0 to 1024 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1170 ./strace-static-x86_64: Process 6191 attached [pid 6191] set_robust_list(0x555556a426a0, 24) = 0 [pid 6191] chdir("./390") = 0 [pid 6191] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6191] setpgid(0, 0) = 0 [pid 6191] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6191] write(3, "1000", 4) = 4 [pid 6191] close(3) = 0 [pid 6191] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6191] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6191] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6191] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6191] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6191] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6191] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6191] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6192 attached => {parent_tid=[1171]}, 88) = 1171 [pid 6192] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6191] rt_sigprocmask(SIG_SETMASK, [], [pid 6192] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6192] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6192] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6191] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6191] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6192] <... futex resumed>) = 0 [pid 6191] <... futex resumed>) = 1 [pid 6191] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6192] memfd_create("syzkaller", 0) = 3 [pid 6192] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6192] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6192] munmap(0x7f15b9a45000, 524288) = 0 [pid 6192] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6192] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6192] close(3) = 0 [pid 6192] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6192] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6192] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6192] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6192] ioctl(4, LOOP_CLR_FD) = 0 [pid 6192] close(4) = 0 [pid 6192] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6191] <... futex resumed>) = 0 [pid 6192] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6191] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6192] <... futex resumed>) = 0 [pid 6192] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6191] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6191] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6191] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6191] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6191] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1172]}, 88) = 1172 [pid 6191] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6191] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6193 attached [pid 6192] <... mknodat resumed>) = 0 [pid 6191] <... futex resumed>) = 0 [pid 6193] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6192] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6192] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6191] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6193] <... rseq resumed>) = 0 [pid 6193] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6193] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6193] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6193] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6193] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6193] chdir(".") = 0 [pid 6193] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6191] <... futex resumed>) = 0 [pid 6191] close(3) = 0 [pid 6191] close(4) = 0 [pid 6191] close(5) = -1 EBADF (Bad file descriptor) [pid 6191] close(6) = -1 EBADF (Bad file descriptor) [pid 6191] close(7) = -1 EBADF (Bad file descriptor) [pid 6191] close(8) = -1 EBADF (Bad file descriptor) [pid 6193] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6191] close(9) = -1 EBADF (Bad file descriptor) [pid 6191] close(10) = -1 EBADF (Bad file descriptor) [pid 6191] close(11) = -1 EBADF (Bad file descriptor) [pid 6191] close(12) = -1 EBADF (Bad file descriptor) [pid 6191] close(13) = -1 EBADF (Bad file descriptor) [pid 6191] close(14) = -1 EBADF (Bad file descriptor) [pid 6191] close(15) = -1 EBADF (Bad file descriptor) [pid 6191] close(16) = -1 EBADF (Bad file descriptor) [pid 6191] close(17) = -1 EBADF (Bad file descriptor) [pid 6191] close(18) = -1 EBADF (Bad file descriptor) [pid 6191] close(19) = -1 EBADF (Bad file descriptor) [pid 6191] close(20) = -1 EBADF (Bad file descriptor) [pid 6191] close(21) = -1 EBADF (Bad file descriptor) [pid 6191] close(22) = -1 EBADF (Bad file descriptor) [pid 6191] close(23) = -1 EBADF (Bad file descriptor) [pid 6191] close(24) = -1 EBADF (Bad file descriptor) [pid 6191] close(25) = -1 EBADF (Bad file descriptor) [pid 6191] close(26) = -1 EBADF (Bad file descriptor) [pid 6191] close(27) = -1 EBADF (Bad file descriptor) [pid 6191] close(28) = -1 EBADF (Bad file descriptor) [pid 6191] close(29) = -1 EBADF (Bad file descriptor) [pid 6191] exit_group(0 [pid 6192] <... futex resumed>) = ? [pid 6191] <... exit_group resumed>) = ? [pid 6193] <... futex resumed>) = ? [pid 6192] +++ exited with 0 +++ [pid 6193] +++ exited with 0 +++ [pid 6191] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1170, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./390", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./390", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./390/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./390/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./390/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./390/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./390/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./390/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./390/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./390/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./390/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./390") = 0 [pid 5019] mkdir("./391", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 72.165074][ T6192] loop0: detected capacity change from 0 to 1024 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6194 attached [pid 6194] set_robust_list(0x555556a426a0, 24 [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1173 [pid 6194] <... set_robust_list resumed>) = 0 [pid 6194] chdir("./391") = 0 [pid 6194] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6194] setpgid(0, 0) = 0 [pid 6194] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6194] write(3, "1000", 4) = 4 [pid 6194] close(3) = 0 [pid 6194] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6194] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6194] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6194] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6194] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6194] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6194] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6194] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6195 attached => {parent_tid=[1174]}, 88) = 1174 [pid 6195] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6195] set_robust_list(0x7f15c1e659a0, 24 [pid 6194] rt_sigprocmask(SIG_SETMASK, [], [pid 6195] <... set_robust_list resumed>) = 0 [pid 6195] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6195] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6194] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6194] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6195] <... futex resumed>) = 0 [pid 6194] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6195] memfd_create("syzkaller", 0) = 3 [pid 6195] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6195] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6195] munmap(0x7f15b9a45000, 524288) = 0 [pid 6195] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6195] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6195] close(3) = 0 [pid 6195] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6195] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6195] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6195] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6195] ioctl(4, LOOP_CLR_FD) = 0 [pid 6195] close(4) = 0 [pid 6195] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6194] <... futex resumed>) = 0 [pid 6194] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6194] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6194] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6194] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6194] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6194] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1175]}, 88) = 1175 [pid 6194] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6194] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 6196 attached [pid 6194] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6195] <... futex resumed>) = 1 [pid 6195] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6196] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6196] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6196] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6196] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6196] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6195] <... mknodat resumed>) = 0 [pid 6195] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6195] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6196] <... mount resumed>) = 0 [pid 6196] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6196] chdir(".") = 0 [pid 6196] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6194] <... futex resumed>) = 0 [pid 6194] close(3) = 0 [pid 6194] close(4) = 0 [pid 6196] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6194] close(5) = -1 EBADF (Bad file descriptor) [pid 6194] close(6) = -1 EBADF (Bad file descriptor) [pid 6194] close(7) = -1 EBADF (Bad file descriptor) [pid 6194] close(8) = -1 EBADF (Bad file descriptor) [pid 6194] close(9) = -1 EBADF (Bad file descriptor) [pid 6194] close(10) = -1 EBADF (Bad file descriptor) [pid 6194] close(11) = -1 EBADF (Bad file descriptor) [pid 6194] close(12) = -1 EBADF (Bad file descriptor) [pid 6194] close(13) = -1 EBADF (Bad file descriptor) [pid 6194] close(14) = -1 EBADF (Bad file descriptor) [pid 6194] close(15) = -1 EBADF (Bad file descriptor) [pid 6194] close(16) = -1 EBADF (Bad file descriptor) [pid 6194] close(17) = -1 EBADF (Bad file descriptor) [pid 6194] close(18) = -1 EBADF (Bad file descriptor) [pid 6194] close(19) = -1 EBADF (Bad file descriptor) [pid 6194] close(20) = -1 EBADF (Bad file descriptor) [pid 6194] close(21) = -1 EBADF (Bad file descriptor) [pid 6194] close(22) = -1 EBADF (Bad file descriptor) [pid 6194] close(23) = -1 EBADF (Bad file descriptor) [pid 6194] close(24) = -1 EBADF (Bad file descriptor) [pid 6194] close(25) = -1 EBADF (Bad file descriptor) [pid 6194] close(26) = -1 EBADF (Bad file descriptor) [pid 6194] close(27) = -1 EBADF (Bad file descriptor) [pid 6194] close(28) = -1 EBADF (Bad file descriptor) [pid 6194] close(29) = -1 EBADF (Bad file descriptor) [pid 6194] exit_group(0 [pid 6196] <... futex resumed>) = ? [pid 6195] <... futex resumed>) = ? [pid 6194] <... exit_group resumed>) = ? [pid 6196] +++ exited with 0 +++ [pid 6195] +++ exited with 0 +++ [pid 6194] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1173, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./391", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./391", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./391/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./391/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./391/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./391/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./391/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./391/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./391/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./391/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./391/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./391") = 0 [pid 5019] mkdir("./392", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1176 ./strace-static-x86_64: Process 6197 attached [pid 6197] set_robust_list(0x555556a426a0, 24) = 0 [ 72.248675][ T6195] loop0: detected capacity change from 0 to 1024 [pid 6197] chdir("./392") = 0 [pid 6197] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6197] setpgid(0, 0) = 0 [pid 6197] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6197] write(3, "1000", 4) = 4 [pid 6197] close(3) = 0 [pid 6197] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6197] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6197] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6197] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6197] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6197] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6197] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6197] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6198 attached => {parent_tid=[1177]}, 88) = 1177 [pid 6198] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053 [pid 6197] rt_sigprocmask(SIG_SETMASK, [], [pid 6198] <... rseq resumed>) = 0 [pid 6198] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6198] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6198] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6197] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6197] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6197] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6198] <... futex resumed>) = 0 [pid 6198] memfd_create("syzkaller", 0) = 3 [pid 6198] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6198] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6198] munmap(0x7f15b9a45000, 524288) = 0 [pid 6198] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6198] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6198] close(3) = 0 [pid 6198] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6198] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6198] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6198] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6198] ioctl(4, LOOP_CLR_FD) = 0 [pid 6198] close(4) = 0 [pid 6198] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6197] <... futex resumed>) = 0 [pid 6197] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6197] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6197] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6197] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6197] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6197] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1178]}, 88) = 1178 [pid 6197] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6197] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6197] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6198] <... futex resumed>) = 1 [pid 6198] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6199 attached [pid 6199] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6198] <... mknodat resumed>) = 0 [pid 6198] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6198] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6199] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6199] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6199] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6199] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6199] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6199] chdir(".") = 0 [pid 6199] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6197] <... futex resumed>) = 0 [pid 6197] close(3) = 0 [pid 6197] close(4) = 0 [pid 6197] close(5) = -1 EBADF (Bad file descriptor) [pid 6197] close(6) = -1 EBADF (Bad file descriptor) [pid 6197] close(7) = -1 EBADF (Bad file descriptor) [pid 6197] close(8) = -1 EBADF (Bad file descriptor) [pid 6197] close(9) = -1 EBADF (Bad file descriptor) [pid 6197] close(10) = -1 EBADF (Bad file descriptor) [pid 6197] close(11 [pid 6199] <... futex resumed>) = 1 [pid 6197] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6199] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6197] close(12) = -1 EBADF (Bad file descriptor) [pid 6197] close(13) = -1 EBADF (Bad file descriptor) [pid 6197] close(14) = -1 EBADF (Bad file descriptor) [pid 6197] close(15) = -1 EBADF (Bad file descriptor) [pid 6197] close(16) = -1 EBADF (Bad file descriptor) [pid 6197] close(17) = -1 EBADF (Bad file descriptor) [pid 6197] close(18) = -1 EBADF (Bad file descriptor) [pid 6197] close(19) = -1 EBADF (Bad file descriptor) [pid 6197] close(20) = -1 EBADF (Bad file descriptor) [pid 6197] close(21) = -1 EBADF (Bad file descriptor) [pid 6197] close(22) = -1 EBADF (Bad file descriptor) [pid 6197] close(23) = -1 EBADF (Bad file descriptor) [pid 6197] close(24) = -1 EBADF (Bad file descriptor) [pid 6197] close(25) = -1 EBADF (Bad file descriptor) [pid 6197] close(26) = -1 EBADF (Bad file descriptor) [pid 6197] close(27) = -1 EBADF (Bad file descriptor) [pid 6197] close(28) = -1 EBADF (Bad file descriptor) [pid 6197] close(29) = -1 EBADF (Bad file descriptor) [pid 6197] exit_group(0 [pid 6199] <... futex resumed>) = ? [pid 6198] <... futex resumed>) = ? [pid 6197] <... exit_group resumed>) = ? [pid 6199] +++ exited with 0 +++ [pid 6198] +++ exited with 0 +++ [pid 6197] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1176, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] umount2("./392", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./392", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./392/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./392/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./392/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./392/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./392/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./392/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./392/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./392/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./392/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./392") = 0 [pid 5019] mkdir("./393", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1179 ./strace-static-x86_64: Process 6200 attached [pid 6200] set_robust_list(0x555556a426a0, 24) = 0 [pid 6200] chdir("./393") = 0 [pid 6200] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6200] setpgid(0, 0) = 0 [pid 6200] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6200] write(3, "1000", 4) = 4 [pid 6200] close(3) = 0 [pid 6200] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6200] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6200] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6200] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6200] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6200] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6200] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6200] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6201 attached => {parent_tid=[1180]}, 88) = 1180 [pid 6201] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6201] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6201] rt_sigprocmask(SIG_SETMASK, [], [pid 6200] rt_sigprocmask(SIG_SETMASK, [], [pid 6201] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6200] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6201] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6200] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6201] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6200] <... futex resumed>) = 0 [pid 6200] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6201] memfd_create("syzkaller", 0) = 3 [pid 6201] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6201] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6201] munmap(0x7f15b9a45000, 524288) = 0 [pid 6201] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 72.326416][ T6198] loop0: detected capacity change from 0 to 1024 [pid 6201] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6201] close(3) = 0 [pid 6201] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6201] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6201] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6201] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6201] ioctl(4, LOOP_CLR_FD) = 0 [pid 6201] close(4) = 0 [pid 6201] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6200] <... futex resumed>) = 0 [pid 6200] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6200] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6200] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6200] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6200] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6200] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1181]}, 88) = 1181 [pid 6200] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6200] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6200] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6201] <... futex resumed>) = 1 [pid 6201] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6202 attached [pid 6202] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6202] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6202] rt_sigprocmask(SIG_SETMASK, [], [pid 6201] <... mknodat resumed>) = 0 [pid 6201] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6201] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6202] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6202] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6202] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6202] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6202] chdir(".") = 0 [pid 6202] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6200] <... futex resumed>) = 0 [pid 6200] close(3) = 0 [pid 6200] close(4) = 0 [pid 6202] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6200] close(5) = -1 EBADF (Bad file descriptor) [pid 6200] close(6) = -1 EBADF (Bad file descriptor) [pid 6200] close(7) = -1 EBADF (Bad file descriptor) [pid 6200] close(8) = -1 EBADF (Bad file descriptor) [pid 6200] close(9) = -1 EBADF (Bad file descriptor) [pid 6200] close(10) = -1 EBADF (Bad file descriptor) [pid 6200] close(11) = -1 EBADF (Bad file descriptor) [pid 6200] close(12) = -1 EBADF (Bad file descriptor) [pid 6200] close(13) = -1 EBADF (Bad file descriptor) [pid 6200] close(14) = -1 EBADF (Bad file descriptor) [pid 6200] close(15) = -1 EBADF (Bad file descriptor) [pid 6200] close(16) = -1 EBADF (Bad file descriptor) [pid 6200] close(17) = -1 EBADF (Bad file descriptor) [pid 6200] close(18) = -1 EBADF (Bad file descriptor) [pid 6200] close(19) = -1 EBADF (Bad file descriptor) [pid 6200] close(20) = -1 EBADF (Bad file descriptor) [pid 6200] close(21) = -1 EBADF (Bad file descriptor) [pid 6200] close(22) = -1 EBADF (Bad file descriptor) [pid 6200] close(23) = -1 EBADF (Bad file descriptor) [pid 6200] close(24) = -1 EBADF (Bad file descriptor) [pid 6200] close(25) = -1 EBADF (Bad file descriptor) [pid 6200] close(26) = -1 EBADF (Bad file descriptor) [pid 6200] close(27) = -1 EBADF (Bad file descriptor) [pid 6200] close(28) = -1 EBADF (Bad file descriptor) [pid 6200] close(29) = -1 EBADF (Bad file descriptor) [pid 6200] exit_group(0 [pid 6202] <... futex resumed>) = ? [pid 6201] <... futex resumed>) = ? [pid 6200] <... exit_group resumed>) = ? [pid 6202] +++ exited with 0 +++ [pid 6201] +++ exited with 0 +++ [pid 6200] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1179, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] umount2("./393", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./393", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./393/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./393/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./393/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./393/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./393/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./393/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./393/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./393/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./393/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./393") = 0 [pid 5019] mkdir("./394", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1182 ./strace-static-x86_64: Process 6203 attached [pid 6203] set_robust_list(0x555556a426a0, 24) = 0 [pid 6203] chdir("./394") = 0 [pid 6203] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6203] setpgid(0, 0) = 0 [pid 6203] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6203] write(3, "1000", 4) = 4 [pid 6203] close(3) = 0 [pid 6203] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6203] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6203] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6203] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6203] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6203] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6203] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6203] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6204 attached => {parent_tid=[1183]}, 88) = 1183 [pid 6204] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053 [pid 6203] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6204] <... rseq resumed>) = 0 [pid 6204] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6204] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6204] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6203] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6203] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6204] <... futex resumed>) = 0 [pid 6204] memfd_create("syzkaller", 0) = 3 [pid 6204] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [ 72.386818][ T6201] loop0: detected capacity change from 0 to 1024 [pid 6204] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6204] munmap(0x7f15b9a45000, 524288) = 0 [pid 6204] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6204] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6204] close(3) = 0 [pid 6204] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6204] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6204] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6204] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6204] ioctl(4, LOOP_CLR_FD) = 0 [pid 6204] close(4) = 0 [pid 6204] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6203] <... futex resumed>) = 0 [pid 6203] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6203] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6203] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6203] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6203] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6203] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1184]}, 88) = 1184 [pid 6203] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6203] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6205 attached ) = 0 [pid 6203] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6204] <... futex resumed>) = 1 [pid 6204] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6205] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6204] <... mknodat resumed>) = 0 [pid 6205] set_robust_list(0x7f15b9ac49a0, 24 [pid 6204] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6204] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6205] <... set_robust_list resumed>) = 0 [pid 6205] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6205] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6205] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6205] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6205] chdir(".") = 0 [pid 6205] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6203] <... futex resumed>) = 0 [pid 6203] close(3) = 0 [pid 6203] close(4) = 0 [pid 6203] close(5) = -1 EBADF (Bad file descriptor) [pid 6203] close(6) = -1 EBADF (Bad file descriptor) [pid 6203] close(7) = -1 EBADF (Bad file descriptor) [pid 6203] close(8 [pid 6205] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6203] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6203] close(9) = -1 EBADF (Bad file descriptor) [pid 6203] close(10) = -1 EBADF (Bad file descriptor) [pid 6203] close(11) = -1 EBADF (Bad file descriptor) [pid 6203] close(12) = -1 EBADF (Bad file descriptor) [pid 6203] close(13) = -1 EBADF (Bad file descriptor) [pid 6203] close(14) = -1 EBADF (Bad file descriptor) [pid 6203] close(15) = -1 EBADF (Bad file descriptor) [pid 6203] close(16) = -1 EBADF (Bad file descriptor) [pid 6203] close(17) = -1 EBADF (Bad file descriptor) [pid 6203] close(18) = -1 EBADF (Bad file descriptor) [pid 6203] close(19) = -1 EBADF (Bad file descriptor) [pid 6203] close(20) = -1 EBADF (Bad file descriptor) [pid 6203] close(21) = -1 EBADF (Bad file descriptor) [pid 6203] close(22) = -1 EBADF (Bad file descriptor) [pid 6203] close(23) = -1 EBADF (Bad file descriptor) [pid 6203] close(24) = -1 EBADF (Bad file descriptor) [pid 6203] close(25) = -1 EBADF (Bad file descriptor) [pid 6203] close(26) = -1 EBADF (Bad file descriptor) [pid 6203] close(27) = -1 EBADF (Bad file descriptor) [pid 6203] close(28) = -1 EBADF (Bad file descriptor) [pid 6203] close(29) = -1 EBADF (Bad file descriptor) [pid 6203] exit_group(0 [pid 6204] <... futex resumed>) = ? [pid 6203] <... exit_group resumed>) = ? [pid 6205] <... futex resumed>) = ? [pid 6204] +++ exited with 0 +++ [pid 6205] +++ exited with 0 +++ [pid 6203] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1182, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./394", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./394", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./394/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./394/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./394/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./394/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./394/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./394/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./394/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./394/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./394/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./394") = 0 [pid 5019] mkdir("./395", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1185 ./strace-static-x86_64: Process 6206 attached [pid 6206] set_robust_list(0x555556a426a0, 24) = 0 [pid 6206] chdir("./395") = 0 [pid 6206] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6206] setpgid(0, 0) = 0 [pid 6206] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6206] write(3, "1000", 4) = 4 [pid 6206] close(3) = 0 [pid 6206] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6206] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6206] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6206] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6206] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6206] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6206] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6206] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1186]}, 88) = 1186 [pid 6206] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6206] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6206] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6207 attached [pid 6207] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6207] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6207] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6207] memfd_create("syzkaller", 0) = 3 [pid 6207] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [ 72.452007][ T6204] loop0: detected capacity change from 0 to 1024 [pid 6207] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6207] munmap(0x7f15b9a45000, 524288) = 0 [pid 6207] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6207] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6207] close(3) = 0 [pid 6207] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6207] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6207] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6207] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6207] ioctl(4, LOOP_CLR_FD) = 0 [pid 6207] close(4) = 0 [pid 6207] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6206] <... futex resumed>) = 0 [pid 6207] <... futex resumed>) = 1 [pid 6207] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6206] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6206] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6206] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6206] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6206] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6206] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6208 attached => {parent_tid=[1187]}, 88) = 1187 [pid 6208] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6206] rt_sigprocmask(SIG_SETMASK, [], [pid 6208] <... rseq resumed>) = 0 [pid 6206] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6208] set_robust_list(0x7f15b9ac49a0, 24 [pid 6206] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6208] <... set_robust_list resumed>) = 0 [pid 6206] <... futex resumed>) = 0 [pid 6206] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6208] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6208] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6208] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6207] <... mknodat resumed>) = 0 [pid 6207] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6207] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6208] <... mount resumed>) = 0 [pid 6208] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6208] chdir(".") = 0 [pid 6208] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6206] <... futex resumed>) = 0 [pid 6206] close(3) = 0 [pid 6206] close(4) = 0 [pid 6206] close(5) = -1 EBADF (Bad file descriptor) [pid 6206] close(6) = -1 EBADF (Bad file descriptor) [pid 6206] close(7) = -1 EBADF (Bad file descriptor) [pid 6206] close(8) = -1 EBADF (Bad file descriptor) [pid 6206] close(9) = -1 EBADF (Bad file descriptor) [pid 6206] close(10) = -1 EBADF (Bad file descriptor) [pid 6206] close(11) = -1 EBADF (Bad file descriptor) [pid 6206] close(12) = -1 EBADF (Bad file descriptor) [pid 6206] close(13) = -1 EBADF (Bad file descriptor) [pid 6206] close(14) = -1 EBADF (Bad file descriptor) [pid 6206] close(15) = -1 EBADF (Bad file descriptor) [pid 6206] close(16) = -1 EBADF (Bad file descriptor) [pid 6206] close(17) = -1 EBADF (Bad file descriptor) [pid 6206] close(18) = -1 EBADF (Bad file descriptor) [pid 6206] close(19) = -1 EBADF (Bad file descriptor) [pid 6206] close(20) = -1 EBADF (Bad file descriptor) [pid 6206] close(21) = -1 EBADF (Bad file descriptor) [pid 6206] close(22) = -1 EBADF (Bad file descriptor) [pid 6206] close(23) = -1 EBADF (Bad file descriptor) [pid 6206] close(24) = -1 EBADF (Bad file descriptor) [pid 6206] close(25) = -1 EBADF (Bad file descriptor) [pid 6206] close(26) = -1 EBADF (Bad file descriptor) [pid 6206] close(27) = -1 EBADF (Bad file descriptor) [pid 6206] close(28) = -1 EBADF (Bad file descriptor) [pid 6206] close(29) = -1 EBADF (Bad file descriptor) [pid 6206] exit_group(0) = ? [pid 6207] <... futex resumed>) = ? [pid 6207] +++ exited with 0 +++ [pid 6208] <... futex resumed>) = ? [pid 6208] +++ exited with 0 +++ [pid 6206] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1185, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./395", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./395", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./395/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./395/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./395/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./395/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./395/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./395/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./395/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./395/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./395/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./395") = 0 [pid 5019] mkdir("./396", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1188 ./strace-static-x86_64: Process 6209 attached [pid 6209] set_robust_list(0x555556a426a0, 24) = 0 [pid 6209] chdir("./396") = 0 [pid 6209] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6209] setpgid(0, 0) = 0 [pid 6209] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6209] write(3, "1000", 4) = 4 [pid 6209] close(3) = 0 [ 72.518015][ T6207] loop0: detected capacity change from 0 to 1024 [pid 6209] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6209] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6209] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6209] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6209] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6209] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6209] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6209] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1189]}, 88) = 1189 ./strace-static-x86_64: Process 6210 attached [pid 6210] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6210] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6210] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6210] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6209] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6209] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6210] <... futex resumed>) = 0 [pid 6209] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6210] memfd_create("syzkaller", 0) = 3 [pid 6210] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6210] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6210] munmap(0x7f15b9a45000, 524288) = 0 [pid 6210] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6210] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6210] close(3) = 0 [pid 6210] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6210] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6210] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6210] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6210] ioctl(4, LOOP_CLR_FD) = 0 [pid 6210] close(4) = 0 [pid 6210] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6209] <... futex resumed>) = 0 [pid 6210] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6209] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6210] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6209] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6210] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6209] <... futex resumed>) = 0 [pid 6209] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6210] <... mknodat resumed>) = 0 [pid 6209] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE [pid 6210] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6209] <... mprotect resumed>) = 0 [pid 6210] <... futex resumed>) = 0 [pid 6209] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6210] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6209] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6209] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6211 attached => {parent_tid=[1190]}, 88) = 1190 [pid 6211] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6209] rt_sigprocmask(SIG_SETMASK, [], [pid 6211] <... rseq resumed>) = 0 [pid 6211] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6211] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6211] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6209] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6209] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6211] <... futex resumed>) = 0 [pid 6209] <... futex resumed>) = 1 [pid 6211] mkdir(".", 0777 [pid 6209] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6211] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 6211] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6211] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6211] chdir(".") = 0 [pid 6211] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6209] <... futex resumed>) = 0 [pid 6211] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6209] close(3) = 0 [pid 6209] close(4) = 0 [pid 6209] close(5) = -1 EBADF (Bad file descriptor) [pid 6209] close(6) = -1 EBADF (Bad file descriptor) [pid 6209] close(7) = -1 EBADF (Bad file descriptor) [pid 6209] close(8) = -1 EBADF (Bad file descriptor) [pid 6209] close(9) = -1 EBADF (Bad file descriptor) [pid 6209] close(10) = -1 EBADF (Bad file descriptor) [pid 6209] close(11) = -1 EBADF (Bad file descriptor) [pid 6209] close(12) = -1 EBADF (Bad file descriptor) [pid 6209] close(13) = -1 EBADF (Bad file descriptor) [pid 6209] close(14) = -1 EBADF (Bad file descriptor) [pid 6209] close(15) = -1 EBADF (Bad file descriptor) [pid 6209] close(16) = -1 EBADF (Bad file descriptor) [pid 6209] close(17) = -1 EBADF (Bad file descriptor) [pid 6209] close(18) = -1 EBADF (Bad file descriptor) [pid 6209] close(19) = -1 EBADF (Bad file descriptor) [pid 6209] close(20) = -1 EBADF (Bad file descriptor) [pid 6209] close(21) = -1 EBADF (Bad file descriptor) [pid 6209] close(22) = -1 EBADF (Bad file descriptor) [pid 6209] close(23) = -1 EBADF (Bad file descriptor) [pid 6209] close(24) = -1 EBADF (Bad file descriptor) [pid 6209] close(25) = -1 EBADF (Bad file descriptor) [pid 6209] close(26) = -1 EBADF (Bad file descriptor) [pid 6209] close(27) = -1 EBADF (Bad file descriptor) [pid 6209] close(28) = -1 EBADF (Bad file descriptor) [pid 6209] close(29) = -1 EBADF (Bad file descriptor) [pid 6209] exit_group(0 [pid 6211] <... futex resumed>) = ? [pid 6210] <... futex resumed>) = ? [pid 6209] <... exit_group resumed>) = ? [pid 6211] +++ exited with 0 +++ [pid 6210] +++ exited with 0 +++ [pid 6209] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1188, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [ 72.593661][ T6210] loop0: detected capacity change from 0 to 1024 [pid 5019] umount2("./396", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./396", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./396/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./396/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./396/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./396/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./396/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./396/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./396/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./396/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./396/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./396") = 0 [pid 5019] mkdir("./397", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6212 attached [pid 6212] set_robust_list(0x555556a426a0, 24) = 0 [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1191 [pid 6212] chdir("./397") = 0 [pid 6212] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6212] setpgid(0, 0) = 0 [pid 6212] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6212] write(3, "1000", 4) = 4 [pid 6212] close(3) = 0 [pid 6212] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6212] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6212] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6212] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6212] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6212] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6212] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6212] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6213 attached => {parent_tid=[1192]}, 88) = 1192 [pid 6213] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053 [pid 6212] rt_sigprocmask(SIG_SETMASK, [], [pid 6213] <... rseq resumed>) = 0 [pid 6212] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6213] set_robust_list(0x7f15c1e659a0, 24 [pid 6212] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6213] <... set_robust_list resumed>) = 0 [pid 6212] <... futex resumed>) = 0 [pid 6213] rt_sigprocmask(SIG_SETMASK, [], [pid 6212] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6213] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6213] memfd_create("syzkaller", 0) = 3 [pid 6213] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6213] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6213] munmap(0x7f15b9a45000, 524288) = 0 [pid 6213] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6213] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6213] close(3) = 0 [pid 6213] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6213] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6213] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6213] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6213] ioctl(4, LOOP_CLR_FD) = 0 [pid 6213] close(4) = 0 [pid 6213] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6212] <... futex resumed>) = 0 [pid 6212] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6212] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6213] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6212] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6212] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6212] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6213] <... mknodat resumed>) = 0 [pid 6212] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6213] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6212] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} [pid 6213] <... futex resumed>) = 0 [pid 6213] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6214 attached [pid 6214] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6212] <... clone3 resumed> => {parent_tid=[1193]}, 88) = 1193 [pid 6214] <... rseq resumed>) = 0 [pid 6214] set_robust_list(0x7f15b9ac49a0, 24 [pid 6212] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6214] <... set_robust_list resumed>) = 0 [pid 6212] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6214] rt_sigprocmask(SIG_SETMASK, [], [pid 6212] <... futex resumed>) = 0 [pid 6214] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6212] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6214] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6214] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6214] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6214] chdir(".") = 0 [pid 6214] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6212] <... futex resumed>) = 0 [pid 6214] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6212] close(3) = 0 [pid 6212] close(4) = 0 [pid 6212] close(5) = -1 EBADF (Bad file descriptor) [pid 6212] close(6) = -1 EBADF (Bad file descriptor) [pid 6212] close(7) = -1 EBADF (Bad file descriptor) [pid 6212] close(8) = -1 EBADF (Bad file descriptor) [pid 6212] close(9) = -1 EBADF (Bad file descriptor) [pid 6212] close(10) = -1 EBADF (Bad file descriptor) [pid 6212] close(11) = -1 EBADF (Bad file descriptor) [pid 6212] close(12) = -1 EBADF (Bad file descriptor) [pid 6212] close(13) = -1 EBADF (Bad file descriptor) [pid 6212] close(14) = -1 EBADF (Bad file descriptor) [pid 6212] close(15) = -1 EBADF (Bad file descriptor) [pid 6212] close(16) = -1 EBADF (Bad file descriptor) [pid 6212] close(17) = -1 EBADF (Bad file descriptor) [pid 6212] close(18) = -1 EBADF (Bad file descriptor) [pid 6212] close(19) = -1 EBADF (Bad file descriptor) [pid 6212] close(20) = -1 EBADF (Bad file descriptor) [pid 6212] close(21) = -1 EBADF (Bad file descriptor) [pid 6212] close(22) = -1 EBADF (Bad file descriptor) [pid 6212] close(23) = -1 EBADF (Bad file descriptor) [pid 6212] close(24) = -1 EBADF (Bad file descriptor) [pid 6212] close(25) = -1 EBADF (Bad file descriptor) [pid 6212] close(26) = -1 EBADF (Bad file descriptor) [pid 6212] close(27) = -1 EBADF (Bad file descriptor) [pid 6212] close(28) = -1 EBADF (Bad file descriptor) [pid 6212] close(29) = -1 EBADF (Bad file descriptor) [pid 6212] exit_group(0 [pid 6214] <... futex resumed>) = ? [pid 6213] <... futex resumed>) = ? [pid 6212] <... exit_group resumed>) = ? [pid 6214] +++ exited with 0 +++ [pid 6213] +++ exited with 0 +++ [pid 6212] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1191, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./397", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./397", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./397/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./397/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./397/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./397/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./397/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./397/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./397/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./397/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./397/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./397") = 0 [pid 5019] mkdir("./398", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 72.693784][ T6213] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1194 ./strace-static-x86_64: Process 6215 attached [pid 6215] set_robust_list(0x555556a426a0, 24) = 0 [pid 6215] chdir("./398") = 0 [pid 6215] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6215] setpgid(0, 0) = 0 [pid 6215] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6215] write(3, "1000", 4) = 4 [pid 6215] close(3) = 0 [pid 6215] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6215] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6215] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6215] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6215] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6215] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6215] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6215] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6216 attached => {parent_tid=[1195]}, 88) = 1195 [pid 6216] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6216] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6216] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6216] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6215] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6215] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6216] <... futex resumed>) = 0 [pid 6215] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6216] memfd_create("syzkaller", 0) = 3 [pid 6216] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6216] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6216] munmap(0x7f15b9a45000, 524288) = 0 [pid 6216] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6216] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6216] close(3) = 0 [pid 6216] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6216] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6216] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6216] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6216] ioctl(4, LOOP_CLR_FD) = 0 [pid 6216] close(4) = 0 [pid 6216] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6215] <... futex resumed>) = 0 [pid 6216] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6215] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6215] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6216] <... mknodat resumed>) = 0 [pid 6215] <... futex resumed>) = 0 [pid 6215] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6215] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE [pid 6216] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6215] <... mprotect resumed>) = 0 [pid 6216] <... futex resumed>) = 0 [pid 6215] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6216] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6215] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6215] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6217 attached [pid 6217] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6215] <... clone3 resumed> => {parent_tid=[1196]}, 88) = 1196 [pid 6215] rt_sigprocmask(SIG_SETMASK, [], [pid 6217] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6217] rt_sigprocmask(SIG_SETMASK, [], [pid 6215] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6217] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6217] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6215] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6217] <... futex resumed>) = 0 [pid 6215] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6217] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6217] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6217] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6217] chdir(".") = 0 [pid 6217] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6215] <... futex resumed>) = 0 [pid 6215] close(3) = 0 [pid 6215] close(4 [pid 6217] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6215] <... close resumed>) = 0 [pid 6215] close(5) = -1 EBADF (Bad file descriptor) [pid 6215] close(6) = -1 EBADF (Bad file descriptor) [pid 6215] close(7) = -1 EBADF (Bad file descriptor) [pid 6215] close(8) = -1 EBADF (Bad file descriptor) [pid 6215] close(9) = -1 EBADF (Bad file descriptor) [pid 6215] close(10) = -1 EBADF (Bad file descriptor) [pid 6215] close(11) = -1 EBADF (Bad file descriptor) [pid 6215] close(12) = -1 EBADF (Bad file descriptor) [pid 6215] close(13) = -1 EBADF (Bad file descriptor) [pid 6215] close(14) = -1 EBADF (Bad file descriptor) [pid 6215] close(15) = -1 EBADF (Bad file descriptor) [pid 6215] close(16) = -1 EBADF (Bad file descriptor) [pid 6215] close(17) = -1 EBADF (Bad file descriptor) [pid 6215] close(18) = -1 EBADF (Bad file descriptor) [pid 6215] close(19) = -1 EBADF (Bad file descriptor) [pid 6215] close(20) = -1 EBADF (Bad file descriptor) [pid 6215] close(21) = -1 EBADF (Bad file descriptor) [pid 6215] close(22) = -1 EBADF (Bad file descriptor) [pid 6215] close(23) = -1 EBADF (Bad file descriptor) [pid 6215] close(24) = -1 EBADF (Bad file descriptor) [pid 6215] close(25) = -1 EBADF (Bad file descriptor) [pid 6215] close(26) = -1 EBADF (Bad file descriptor) [pid 6215] close(27) = -1 EBADF (Bad file descriptor) [pid 6215] close(28) = -1 EBADF (Bad file descriptor) [pid 6215] close(29) = -1 EBADF (Bad file descriptor) [pid 6215] exit_group(0) = ? [pid 6217] <... futex resumed>) = ? [pid 6217] +++ exited with 0 +++ [pid 6216] <... futex resumed>) = ? [pid 6216] +++ exited with 0 +++ [pid 6215] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1194, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./398", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./398", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./398/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./398/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./398/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./398/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./398/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./398/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./398/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./398/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./398/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./398") = 0 [pid 5019] mkdir("./399", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 72.777810][ T6216] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6218 attached [pid 6218] set_robust_list(0x555556a426a0, 24) = 0 [pid 6218] chdir("./399" [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1197 [pid 6218] <... chdir resumed>) = 0 [pid 6218] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6218] setpgid(0, 0) = 0 [pid 6218] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6218] write(3, "1000", 4) = 4 [pid 6218] close(3) = 0 [pid 6218] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6218] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6218] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6218] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6218] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6218] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6218] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6218] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1198]}, 88) = 1198 [pid 6218] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6218] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6218] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6219 attached [pid 6219] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6219] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6219] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6219] memfd_create("syzkaller", 0) = 3 [pid 6219] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6219] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6219] munmap(0x7f15b9a45000, 524288) = 0 [pid 6219] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6219] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6219] close(3) = 0 [pid 6219] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6219] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6219] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6219] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6219] ioctl(4, LOOP_CLR_FD) = 0 [pid 6219] close(4) = 0 [pid 6219] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6218] <... futex resumed>) = 0 [pid 6218] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6218] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6218] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6218] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6218] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6218] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1199]}, 88) = 1199 [pid 6218] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6218] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6218] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6219] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6220 attached [pid 6220] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6219] <... mknodat resumed>) = 0 [pid 6219] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6219] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6220] <... rseq resumed>) = 0 [pid 6220] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6220] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6220] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6220] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6220] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6220] chdir(".") = 0 [pid 6220] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6218] <... futex resumed>) = 0 [pid 6218] close(3) = 0 [pid 6218] close(4) = 0 [pid 6218] close(5) = -1 EBADF (Bad file descriptor) [pid 6218] close(6) = -1 EBADF (Bad file descriptor) [pid 6218] close(7) = -1 EBADF (Bad file descriptor) [pid 6218] close(8) = -1 EBADF (Bad file descriptor) [pid 6218] close(9) = -1 EBADF (Bad file descriptor) [pid 6218] close(10) = -1 EBADF (Bad file descriptor) [pid 6218] close(11) = -1 EBADF (Bad file descriptor) [pid 6218] close(12) = -1 EBADF (Bad file descriptor) [pid 6218] close(13) = -1 EBADF (Bad file descriptor) [pid 6218] close(14) = -1 EBADF (Bad file descriptor) [pid 6218] close(15) = -1 EBADF (Bad file descriptor) [pid 6218] close(16) = -1 EBADF (Bad file descriptor) [pid 6218] close(17) = -1 EBADF (Bad file descriptor) [pid 6218] close(18) = -1 EBADF (Bad file descriptor) [pid 6218] close(19) = -1 EBADF (Bad file descriptor) [pid 6218] close(20) = -1 EBADF (Bad file descriptor) [pid 6218] close(21) = -1 EBADF (Bad file descriptor) [pid 6218] close(22) = -1 EBADF (Bad file descriptor) [pid 6218] close(23) = -1 EBADF (Bad file descriptor) [pid 6218] close(24) = -1 EBADF (Bad file descriptor) [pid 6218] close(25) = -1 EBADF (Bad file descriptor) [pid 6218] close(26) = -1 EBADF (Bad file descriptor) [pid 6218] close(27) = -1 EBADF (Bad file descriptor) [pid 6218] close(28) = -1 EBADF (Bad file descriptor) [pid 6218] close(29) = -1 EBADF (Bad file descriptor) [pid 6218] exit_group(0 [pid 6219] <... futex resumed>) = ? [pid 6218] <... exit_group resumed>) = ? [pid 6219] +++ exited with 0 +++ [pid 6220] +++ exited with 0 +++ [pid 6218] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1197, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] umount2("./399", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./399", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./399/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./399/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./399/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./399/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./399/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./399/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./399/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./399/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./399/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [ 72.853720][ T6219] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] rmdir("./399") = 0 [pid 5019] mkdir("./400", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1200 ./strace-static-x86_64: Process 6221 attached [pid 6221] set_robust_list(0x555556a426a0, 24) = 0 [pid 6221] chdir("./400") = 0 [pid 6221] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6221] setpgid(0, 0) = 0 [pid 6221] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6221] write(3, "1000", 4) = 4 [pid 6221] close(3) = 0 [pid 6221] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6221] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6221] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6221] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6221] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6221] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6221] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6221] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1201]}, 88) = 1201 [pid 6221] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6221] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6221] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6222 attached [pid 6222] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6222] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6222] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6222] memfd_create("syzkaller", 0) = 3 [pid 6222] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6222] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6222] munmap(0x7f15b9a45000, 524288) = 0 [pid 6222] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6222] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6222] close(3) = 0 [pid 6222] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6222] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6222] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6222] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6222] ioctl(4, LOOP_CLR_FD) = 0 [pid 6222] close(4) = 0 [pid 6222] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6221] <... futex resumed>) = 0 [pid 6221] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6221] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6222] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6221] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6221] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6221] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6222] <... mknodat resumed>) = 0 [pid 6222] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6222] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6221] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6221] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1202]}, 88) = 1202 [pid 6221] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6221] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6221] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6223 attached [pid 6223] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6223] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6223] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6223] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6223] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6223] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6223] chdir(".") = 0 [pid 6223] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6221] <... futex resumed>) = 0 [pid 6221] close(3) = 0 [pid 6221] close(4) = 0 [pid 6221] close(5) = -1 EBADF (Bad file descriptor) [pid 6221] close(6) = -1 EBADF (Bad file descriptor) [pid 6221] close(7) = -1 EBADF (Bad file descriptor) [pid 6221] close(8) = -1 EBADF (Bad file descriptor) [pid 6221] close(9) = -1 EBADF (Bad file descriptor) [pid 6221] close(10) = -1 EBADF (Bad file descriptor) [pid 6221] close(11 [pid 6223] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6221] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6221] close(12) = -1 EBADF (Bad file descriptor) [pid 6221] close(13) = -1 EBADF (Bad file descriptor) [pid 6221] close(14) = -1 EBADF (Bad file descriptor) [pid 6221] close(15) = -1 EBADF (Bad file descriptor) [pid 6221] close(16) = -1 EBADF (Bad file descriptor) [pid 6221] close(17) = -1 EBADF (Bad file descriptor) [pid 6221] close(18) = -1 EBADF (Bad file descriptor) [pid 6221] close(19) = -1 EBADF (Bad file descriptor) [pid 6221] close(20) = -1 EBADF (Bad file descriptor) [pid 6221] close(21) = -1 EBADF (Bad file descriptor) [pid 6221] close(22) = -1 EBADF (Bad file descriptor) [pid 6221] close(23) = -1 EBADF (Bad file descriptor) [pid 6221] close(24) = -1 EBADF (Bad file descriptor) [pid 6221] close(25) = -1 EBADF (Bad file descriptor) [pid 6221] close(26) = -1 EBADF (Bad file descriptor) [pid 6221] close(27) = -1 EBADF (Bad file descriptor) [pid 6221] close(28) = -1 EBADF (Bad file descriptor) [pid 6221] close(29) = -1 EBADF (Bad file descriptor) [pid 6221] exit_group(0 [pid 6223] <... futex resumed>) = ? [pid 6222] <... futex resumed>) = ? [pid 6221] <... exit_group resumed>) = ? [pid 6223] +++ exited with 0 +++ [pid 6222] +++ exited with 0 +++ [pid 6221] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1200, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./400", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./400", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./400/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./400/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./400/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./400/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./400/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./400/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./400/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./400/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./400/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./400") = 0 [pid 5019] mkdir("./401", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 72.935192][ T6222] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1203 ./strace-static-x86_64: Process 6224 attached [pid 6224] set_robust_list(0x555556a426a0, 24) = 0 [pid 6224] chdir("./401") = 0 [pid 6224] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6224] setpgid(0, 0) = 0 [pid 6224] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6224] write(3, "1000", 4) = 4 [pid 6224] close(3) = 0 [pid 6224] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6224] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6224] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6224] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6224] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6224] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6224] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6224] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6225 attached => {parent_tid=[1204]}, 88) = 1204 [pid 6224] rt_sigprocmask(SIG_SETMASK, [], [pid 6225] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6225] set_robust_list(0x7f15c1e659a0, 24 [pid 6224] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6225] <... set_robust_list resumed>) = 0 [pid 6225] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6225] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6224] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6224] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6225] <... futex resumed>) = 0 [pid 6225] memfd_create("syzkaller", 0) = 3 [pid 6225] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6225] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6225] munmap(0x7f15b9a45000, 524288) = 0 [pid 6225] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6225] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6225] close(3) = 0 [pid 6225] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6225] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6225] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6225] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6225] ioctl(4, LOOP_CLR_FD) = 0 [pid 6225] close(4) = 0 [pid 6225] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6224] <... futex resumed>) = 0 [pid 6224] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6224] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6224] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6224] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE [pid 6225] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6224] <... mprotect resumed>) = 0 [pid 6224] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6224] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1205]}, 88) = 1205 [pid 6224] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6224] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6224] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6226 attached [pid 6226] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6226] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6226] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6226] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6226] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6225] <... mknodat resumed>) = 0 [pid 6226] <... mount resumed>) = 0 [pid 6226] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6226] chdir(".") = 0 [pid 6226] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6224] <... futex resumed>) = 0 [pid 6226] <... futex resumed>) = 1 [pid 6226] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6225] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6225] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6224] close(3) = 0 [pid 6224] close(4) = 0 [pid 6224] close(5) = -1 EBADF (Bad file descriptor) [pid 6224] close(6) = -1 EBADF (Bad file descriptor) [pid 6224] close(7) = -1 EBADF (Bad file descriptor) [pid 6224] close(8) = -1 EBADF (Bad file descriptor) [pid 6224] close(9) = -1 EBADF (Bad file descriptor) [pid 6224] close(10) = -1 EBADF (Bad file descriptor) [pid 6224] close(11) = -1 EBADF (Bad file descriptor) [pid 6224] close(12) = -1 EBADF (Bad file descriptor) [pid 6224] close(13) = -1 EBADF (Bad file descriptor) [pid 6224] close(14) = -1 EBADF (Bad file descriptor) [pid 6224] close(15) = -1 EBADF (Bad file descriptor) [pid 6224] close(16) = -1 EBADF (Bad file descriptor) [pid 6224] close(17) = -1 EBADF (Bad file descriptor) [pid 6224] close(18) = -1 EBADF (Bad file descriptor) [pid 6224] close(19) = -1 EBADF (Bad file descriptor) [pid 6224] close(20) = -1 EBADF (Bad file descriptor) [pid 6224] close(21) = -1 EBADF (Bad file descriptor) [pid 6224] close(22) = -1 EBADF (Bad file descriptor) [pid 6224] close(23) = -1 EBADF (Bad file descriptor) [pid 6224] close(24) = -1 EBADF (Bad file descriptor) [pid 6224] close(25) = -1 EBADF (Bad file descriptor) [pid 6224] close(26) = -1 EBADF (Bad file descriptor) [pid 6224] close(27) = -1 EBADF (Bad file descriptor) [pid 6224] close(28) = -1 EBADF (Bad file descriptor) [pid 6224] close(29) = -1 EBADF (Bad file descriptor) [pid 6224] exit_group(0 [pid 6226] <... futex resumed>) = ? [pid 6225] <... futex resumed>) = ? [pid 6224] <... exit_group resumed>) = ? [pid 6226] +++ exited with 0 +++ [pid 6225] +++ exited with 0 +++ [pid 6224] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1203, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./401", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./401", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./401/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./401/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./401/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./401/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./401/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./401/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./401/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./401/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./401/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./401") = 0 [pid 5019] mkdir("./402", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1206 ./strace-static-x86_64: Process 6227 attached [pid 6227] set_robust_list(0x555556a426a0, 24) = 0 [pid 6227] chdir("./402") = 0 [pid 6227] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6227] setpgid(0, 0) = 0 [pid 6227] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6227] write(3, "1000", 4) = 4 [pid 6227] close(3) = 0 [pid 6227] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6227] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6227] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6227] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6227] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6227] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6227] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 73.020267][ T6225] loop0: detected capacity change from 0 to 1024 [pid 6227] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6228 attached [pid 6228] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6228] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6228] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6228] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6227] <... clone3 resumed> => {parent_tid=[1207]}, 88) = 1207 [pid 6227] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6227] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6228] <... futex resumed>) = 0 [pid 6228] memfd_create("syzkaller", 0 [pid 6227] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6228] <... memfd_create resumed>) = 3 [pid 6228] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6228] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6228] munmap(0x7f15b9a45000, 524288) = 0 [pid 6228] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6228] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6228] close(3) = 0 [pid 6228] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6228] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6228] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6228] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6228] ioctl(4, LOOP_CLR_FD) = 0 [pid 6228] close(4) = 0 [pid 6228] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6227] <... futex resumed>) = 0 [pid 6227] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6228] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6227] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6227] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6227] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6228] <... mknodat resumed>) = 0 [pid 6227] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6227] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} [pid 6228] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6229 attached [pid 6229] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6229] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6229] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6229] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6228] <... futex resumed>) = 0 [pid 6227] <... clone3 resumed> => {parent_tid=[1208]}, 88) = 1208 [pid 6227] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6227] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6229] <... futex resumed>) = 0 [pid 6227] <... futex resumed>) = 1 [pid 6227] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6229] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6228] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6229] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6229] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6229] chdir(".") = 0 [pid 6229] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6227] <... futex resumed>) = 0 [pid 6229] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6227] close(3) = 0 [pid 6227] close(4) = 0 [pid 6227] close(5) = -1 EBADF (Bad file descriptor) [pid 6227] close(6) = -1 EBADF (Bad file descriptor) [pid 6227] close(7) = -1 EBADF (Bad file descriptor) [pid 6227] close(8) = -1 EBADF (Bad file descriptor) [pid 6227] close(9) = -1 EBADF (Bad file descriptor) [pid 6227] close(10) = -1 EBADF (Bad file descriptor) [pid 6227] close(11) = -1 EBADF (Bad file descriptor) [pid 6227] close(12) = -1 EBADF (Bad file descriptor) [pid 6227] close(13) = -1 EBADF (Bad file descriptor) [pid 6227] close(14) = -1 EBADF (Bad file descriptor) [pid 6227] close(15) = -1 EBADF (Bad file descriptor) [pid 6227] close(16) = -1 EBADF (Bad file descriptor) [pid 6227] close(17) = -1 EBADF (Bad file descriptor) [pid 6227] close(18) = -1 EBADF (Bad file descriptor) [pid 6227] close(19) = -1 EBADF (Bad file descriptor) [pid 6227] close(20) = -1 EBADF (Bad file descriptor) [pid 6227] close(21) = -1 EBADF (Bad file descriptor) [pid 6227] close(22) = -1 EBADF (Bad file descriptor) [pid 6227] close(23) = -1 EBADF (Bad file descriptor) [pid 6227] close(24) = -1 EBADF (Bad file descriptor) [pid 6227] close(25) = -1 EBADF (Bad file descriptor) [pid 6227] close(26) = -1 EBADF (Bad file descriptor) [pid 6227] close(27) = -1 EBADF (Bad file descriptor) [pid 6227] close(28) = -1 EBADF (Bad file descriptor) [pid 6227] close(29) = -1 EBADF (Bad file descriptor) [pid 6227] exit_group(0 [pid 6229] <... futex resumed>) = ? [pid 6227] <... exit_group resumed>) = ? [pid 6228] <... futex resumed>) = ? [pid 6229] +++ exited with 0 +++ [pid 6228] +++ exited with 0 +++ [pid 6227] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1206, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./402", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./402", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./402/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./402/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./402/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 73.100818][ T6228] loop0: detected capacity change from 0 to 1024 [pid 5019] umount2("./402/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./402/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./402/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./402/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./402/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./402/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./402") = 0 [pid 5019] mkdir("./403", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1209 ./strace-static-x86_64: Process 6230 attached [pid 6230] set_robust_list(0x555556a426a0, 24) = 0 [pid 6230] chdir("./403") = 0 [pid 6230] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6230] setpgid(0, 0) = 0 [pid 6230] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6230] write(3, "1000", 4) = 4 [pid 6230] close(3) = 0 [pid 6230] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6230] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6230] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6230] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6230] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6230] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6230] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6230] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6231 attached [pid 6231] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053 [pid 6230] <... clone3 resumed> => {parent_tid=[1210]}, 88) = 1210 [pid 6231] <... rseq resumed>) = 0 [pid 6230] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6231] set_robust_list(0x7f15c1e659a0, 24 [pid 6230] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6231] <... set_robust_list resumed>) = 0 [pid 6230] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6231] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6231] memfd_create("syzkaller", 0) = 3 [pid 6231] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6231] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6231] munmap(0x7f15b9a45000, 524288) = 0 [pid 6231] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6231] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6231] close(3) = 0 [pid 6231] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6231] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6231] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6231] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6231] ioctl(4, LOOP_CLR_FD) = 0 [pid 6231] close(4) = 0 [pid 6231] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6231] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6230] <... futex resumed>) = 0 [pid 6230] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6230] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6230] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6231] <... futex resumed>) = 0 [pid 6231] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6230] <... mmap resumed>) = 0x7f15b9aa4000 [pid 6230] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6230] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6230] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1211]}, 88) = 1211 [pid 6230] rt_sigprocmask(SIG_SETMASK, [], [pid 6231] <... mknodat resumed>) = 0 [pid 6230] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6230] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6230] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6231] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6231] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6232 attached [pid 6232] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6232] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6232] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6232] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6232] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6232] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6232] chdir(".") = 0 [pid 6232] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6230] <... futex resumed>) = 0 [pid 6230] close(3) = 0 [pid 6230] close(4) = 0 [pid 6232] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6230] close(5) = -1 EBADF (Bad file descriptor) [pid 6230] close(6) = -1 EBADF (Bad file descriptor) [pid 6230] close(7) = -1 EBADF (Bad file descriptor) [pid 6230] close(8) = -1 EBADF (Bad file descriptor) [pid 6230] close(9) = -1 EBADF (Bad file descriptor) [pid 6230] close(10) = -1 EBADF (Bad file descriptor) [pid 6230] close(11) = -1 EBADF (Bad file descriptor) [pid 6230] close(12) = -1 EBADF (Bad file descriptor) [pid 6230] close(13) = -1 EBADF (Bad file descriptor) [pid 6230] close(14) = -1 EBADF (Bad file descriptor) [pid 6230] close(15) = -1 EBADF (Bad file descriptor) [pid 6230] close(16) = -1 EBADF (Bad file descriptor) [pid 6230] close(17) = -1 EBADF (Bad file descriptor) [pid 6230] close(18) = -1 EBADF (Bad file descriptor) [pid 6230] close(19) = -1 EBADF (Bad file descriptor) [pid 6230] close(20) = -1 EBADF (Bad file descriptor) [pid 6230] close(21) = -1 EBADF (Bad file descriptor) [pid 6230] close(22) = -1 EBADF (Bad file descriptor) [pid 6230] close(23) = -1 EBADF (Bad file descriptor) [pid 6230] close(24) = -1 EBADF (Bad file descriptor) [pid 6230] close(25) = -1 EBADF (Bad file descriptor) [pid 6230] close(26) = -1 EBADF (Bad file descriptor) [pid 6230] close(27) = -1 EBADF (Bad file descriptor) [pid 6230] close(28) = -1 EBADF (Bad file descriptor) [pid 6230] close(29) = -1 EBADF (Bad file descriptor) [pid 6230] exit_group(0 [pid 6231] <... futex resumed>) = ? [pid 6230] <... exit_group resumed>) = ? [pid 6231] +++ exited with 0 +++ [pid 6232] <... futex resumed>) = ? [pid 6232] +++ exited with 0 +++ [pid 6230] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1209, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5019] umount2("./403", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./403", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./403/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./403/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./403/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./403/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./403/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./403/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./403/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./403/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./403/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./403") = 0 [pid 5019] mkdir("./404", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6233 attached [ 73.180418][ T6231] loop0: detected capacity change from 0 to 1024 [pid 6233] set_robust_list(0x555556a426a0, 24) = 0 [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1212 [pid 6233] chdir("./404") = 0 [pid 6233] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6233] setpgid(0, 0) = 0 [pid 6233] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6233] write(3, "1000", 4) = 4 [pid 6233] close(3) = 0 [pid 6233] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6233] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6233] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6233] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6233] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6233] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6233] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6233] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1213]}, 88) = 1213 [pid 6233] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6233] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6233] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6234 attached [pid 6234] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6234] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6234] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6234] memfd_create("syzkaller", 0) = 3 [pid 6234] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6234] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6234] munmap(0x7f15b9a45000, 524288) = 0 [pid 6234] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6234] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6234] close(3) = 0 [pid 6234] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6234] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6234] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6234] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6234] ioctl(4, LOOP_CLR_FD) = 0 [pid 6234] close(4) = 0 [pid 6234] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6233] <... futex resumed>) = 0 [pid 6233] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6233] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6233] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6233] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6233] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6233] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1214]}, 88) = 1214 [pid 6233] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6233] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6233] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6234] <... futex resumed>) = 1 [pid 6234] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6235 attached [pid 6235] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6235] set_robust_list(0x7f15b9ac49a0, 24 [pid 6234] <... mknodat resumed>) = 0 [pid 6234] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6234] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6235] <... set_robust_list resumed>) = 0 [pid 6235] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6235] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6235] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6235] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6235] chdir(".") = 0 [pid 6235] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6233] <... futex resumed>) = 0 [pid 6233] close(3) = 0 [pid 6233] close(4) = 0 [pid 6233] close(5) = -1 EBADF (Bad file descriptor) [pid 6233] close(6) = -1 EBADF (Bad file descriptor) [pid 6233] close(7) = -1 EBADF (Bad file descriptor) [pid 6233] close(8) = -1 EBADF (Bad file descriptor) [pid 6233] close(9) = -1 EBADF (Bad file descriptor) [pid 6233] close(10) = -1 EBADF (Bad file descriptor) [pid 6233] close(11) = -1 EBADF (Bad file descriptor) [pid 6233] close(12) = -1 EBADF (Bad file descriptor) [pid 6235] <... futex resumed>) = 1 [pid 6233] close(13 [pid 6235] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6233] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6233] close(14) = -1 EBADF (Bad file descriptor) [pid 6233] close(15) = -1 EBADF (Bad file descriptor) [pid 6233] close(16) = -1 EBADF (Bad file descriptor) [pid 6233] close(17) = -1 EBADF (Bad file descriptor) [pid 6233] close(18) = -1 EBADF (Bad file descriptor) [pid 6233] close(19) = -1 EBADF (Bad file descriptor) [pid 6233] close(20) = -1 EBADF (Bad file descriptor) [pid 6233] close(21) = -1 EBADF (Bad file descriptor) [pid 6233] close(22) = -1 EBADF (Bad file descriptor) [pid 6233] close(23) = -1 EBADF (Bad file descriptor) [pid 6233] close(24) = -1 EBADF (Bad file descriptor) [pid 6233] close(25) = -1 EBADF (Bad file descriptor) [pid 6233] close(26) = -1 EBADF (Bad file descriptor) [pid 6233] close(27) = -1 EBADF (Bad file descriptor) [pid 6233] close(28) = -1 EBADF (Bad file descriptor) [pid 6233] close(29) = -1 EBADF (Bad file descriptor) [pid 6233] exit_group(0 [pid 6235] <... futex resumed>) = ? [pid 6234] <... futex resumed>) = ? [pid 6233] <... exit_group resumed>) = ? [pid 6235] +++ exited with 0 +++ [pid 6234] +++ exited with 0 +++ [pid 6233] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1212, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] umount2("./404", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./404", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./404/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./404/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./404/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./404/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./404/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./404/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./404/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./404/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./404/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./404") = 0 [pid 5019] mkdir("./405", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1215 ./strace-static-x86_64: Process 6236 attached [pid 6236] set_robust_list(0x555556a426a0, 24) = 0 [pid 6236] chdir("./405") = 0 [pid 6236] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6236] setpgid(0, 0) = 0 [pid 6236] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6236] write(3, "1000", 4) = 4 [pid 6236] close(3) = 0 [pid 6236] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6236] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6236] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6236] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6236] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6236] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6236] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6236] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6237 attached [pid 6237] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053 [pid 6236] <... clone3 resumed> => {parent_tid=[1216]}, 88) = 1216 [pid 6237] <... rseq resumed>) = 0 [pid 6237] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6237] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6237] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6236] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6236] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6237] <... futex resumed>) = 0 [ 73.254291][ T6234] loop0: detected capacity change from 0 to 1024 [pid 6236] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6237] memfd_create("syzkaller", 0) = 3 [pid 6237] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6237] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6237] munmap(0x7f15b9a45000, 524288) = 0 [pid 6237] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6237] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6237] close(3) = 0 [pid 6237] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6237] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6237] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6237] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6237] ioctl(4, LOOP_CLR_FD) = 0 [pid 6237] close(4) = 0 [pid 6237] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6237] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6236] <... futex resumed>) = 0 [pid 6236] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6237] <... futex resumed>) = 0 [pid 6237] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6236] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6236] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6236] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6236] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6237] <... mknodat resumed>) = 0 [pid 6236] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1217]}, 88) = 1217 [pid 6237] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6236] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6236] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6236] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6237] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6238 attached [pid 6238] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6238] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6238] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6238] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6237] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6238] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6238] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6238] chdir(".") = 0 [pid 6238] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6236] <... futex resumed>) = 0 [pid 6236] close(3) = 0 [pid 6236] close(4) = 0 [pid 6236] close(5) = -1 EBADF (Bad file descriptor) [pid 6236] close(6) = -1 EBADF (Bad file descriptor) [pid 6236] close(7) = -1 EBADF (Bad file descriptor) [pid 6236] close(8) = -1 EBADF (Bad file descriptor) [pid 6236] close(9) = -1 EBADF (Bad file descriptor) [pid 6236] close(10) = -1 EBADF (Bad file descriptor) [pid 6236] close(11) = -1 EBADF (Bad file descriptor) [pid 6236] close(12) = -1 EBADF (Bad file descriptor) [pid 6236] close(13) = -1 EBADF (Bad file descriptor) [pid 6236] close(14) = -1 EBADF (Bad file descriptor) [pid 6236] close(15) = -1 EBADF (Bad file descriptor) [pid 6236] close(16) = -1 EBADF (Bad file descriptor) [pid 6236] close(17) = -1 EBADF (Bad file descriptor) [pid 6236] close(18) = -1 EBADF (Bad file descriptor) [pid 6236] close(19 [pid 6238] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6236] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6236] close(20) = -1 EBADF (Bad file descriptor) [pid 6236] close(21) = -1 EBADF (Bad file descriptor) [pid 6236] close(22) = -1 EBADF (Bad file descriptor) [pid 6236] close(23) = -1 EBADF (Bad file descriptor) [pid 6236] close(24) = -1 EBADF (Bad file descriptor) [pid 6236] close(25) = -1 EBADF (Bad file descriptor) [pid 6236] close(26) = -1 EBADF (Bad file descriptor) [pid 6236] close(27) = -1 EBADF (Bad file descriptor) [pid 6236] close(28) = -1 EBADF (Bad file descriptor) [pid 6236] close(29) = -1 EBADF (Bad file descriptor) [pid 6236] exit_group(0) = ? [pid 6237] <... futex resumed>) = ? [pid 6238] <... futex resumed>) = ? [pid 6237] +++ exited with 0 +++ [pid 6238] +++ exited with 0 +++ [pid 6236] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1215, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./405", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./405", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./405/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./405/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./405/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./405/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./405/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./405/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./405/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./405/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./405/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./405") = 0 [pid 5019] mkdir("./406", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1218 ./strace-static-x86_64: Process 6239 attached [pid 6239] set_robust_list(0x555556a426a0, 24) = 0 [pid 6239] chdir("./406") = 0 [pid 6239] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6239] setpgid(0, 0) = 0 [pid 6239] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6239] write(3, "1000", 4) = 4 [pid 6239] close(3) = 0 [pid 6239] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6239] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6239] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6239] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6239] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6239] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6239] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6239] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1219]}, 88) = 1219 [pid 6239] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6239] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6239] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6240 attached [pid 6240] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6240] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6240] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6240] memfd_create("syzkaller", 0) = 3 [pid 6240] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6240] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6240] munmap(0x7f15b9a45000, 524288) = 0 [pid 6240] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 73.321845][ T6237] loop0: detected capacity change from 0 to 1024 [pid 6240] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6240] close(3) = 0 [pid 6240] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6240] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6240] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6240] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6240] ioctl(4, LOOP_CLR_FD) = 0 [pid 6240] close(4) = 0 [pid 6240] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6239] <... futex resumed>) = 0 [pid 6240] <... futex resumed>) = 1 [pid 6239] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6240] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6239] <... futex resumed>) = 0 [pid 6239] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6239] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6239] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6239] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6239] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1220]}, 88) = 1220 [pid 6239] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6239] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6239] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6241 attached [pid 6241] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6240] <... mknodat resumed>) = 0 [pid 6240] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6240] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6241] <... rseq resumed>) = 0 [pid 6241] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6241] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6241] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6241] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6241] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6241] chdir(".") = 0 [pid 6241] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6239] <... futex resumed>) = 0 [pid 6239] close(3 [pid 6241] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6239] <... close resumed>) = 0 [pid 6239] close(4) = 0 [pid 6239] close(5) = -1 EBADF (Bad file descriptor) [pid 6239] close(6) = -1 EBADF (Bad file descriptor) [pid 6239] close(7) = -1 EBADF (Bad file descriptor) [pid 6239] close(8) = -1 EBADF (Bad file descriptor) [pid 6239] close(9) = -1 EBADF (Bad file descriptor) [pid 6239] close(10) = -1 EBADF (Bad file descriptor) [pid 6239] close(11) = -1 EBADF (Bad file descriptor) [pid 6239] close(12) = -1 EBADF (Bad file descriptor) [pid 6239] close(13) = -1 EBADF (Bad file descriptor) [pid 6239] close(14) = -1 EBADF (Bad file descriptor) [pid 6239] close(15) = -1 EBADF (Bad file descriptor) [pid 6239] close(16) = -1 EBADF (Bad file descriptor) [pid 6239] close(17) = -1 EBADF (Bad file descriptor) [pid 6239] close(18) = -1 EBADF (Bad file descriptor) [pid 6239] close(19) = -1 EBADF (Bad file descriptor) [pid 6239] close(20) = -1 EBADF (Bad file descriptor) [pid 6239] close(21) = -1 EBADF (Bad file descriptor) [pid 6239] close(22) = -1 EBADF (Bad file descriptor) [pid 6239] close(23) = -1 EBADF (Bad file descriptor) [pid 6239] close(24) = -1 EBADF (Bad file descriptor) [pid 6239] close(25) = -1 EBADF (Bad file descriptor) [pid 6239] close(26) = -1 EBADF (Bad file descriptor) [pid 6239] close(27) = -1 EBADF (Bad file descriptor) [pid 6239] close(28) = -1 EBADF (Bad file descriptor) [pid 6239] close(29) = -1 EBADF (Bad file descriptor) [pid 6239] exit_group(0 [pid 6241] <... futex resumed>) = ? [pid 6240] <... futex resumed>) = ? [pid 6239] <... exit_group resumed>) = ? [pid 6240] +++ exited with 0 +++ [pid 6241] +++ exited with 0 +++ [pid 6239] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1218, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./406", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./406", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./406/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./406/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./406/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./406/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./406/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./406/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./406/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./406/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./406/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./406") = 0 [pid 5019] mkdir("./407", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1221 ./strace-static-x86_64: Process 6242 attached [pid 6242] set_robust_list(0x555556a426a0, 24) = 0 [pid 6242] chdir("./407") = 0 [pid 6242] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6242] setpgid(0, 0) = 0 [pid 6242] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6242] write(3, "1000", 4) = 4 [pid 6242] close(3) = 0 [ 73.385672][ T6240] loop0: detected capacity change from 0 to 1024 [pid 6242] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6242] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6242] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6242] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6242] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6242] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6242] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6242] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1222]}, 88) = 1222 [pid 6242] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6243 attached [pid 6243] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6243] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6243] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6243] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6242] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6242] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6243] <... futex resumed>) = 0 [pid 6242] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6243] memfd_create("syzkaller", 0) = 3 [pid 6243] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6243] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6243] munmap(0x7f15b9a45000, 524288) = 0 [pid 6243] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6243] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6243] close(3) = 0 [pid 6243] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6243] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6243] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6243] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6243] ioctl(4, LOOP_CLR_FD) = 0 [pid 6243] close(4) = 0 [pid 6243] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6242] <... futex resumed>) = 0 [pid 6242] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6242] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6242] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6242] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6242] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6242] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1223]}, 88) = 1223 [pid 6242] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6242] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6242] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6243] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6244 attached [pid 6244] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6244] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6244] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6244] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6244] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6243] <... mknodat resumed>) = 0 [pid 6243] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6243] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6244] <... mount resumed>) = 0 [pid 6244] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6244] chdir(".") = 0 [pid 6244] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6242] <... futex resumed>) = 0 [pid 6244] <... futex resumed>) = 1 [pid 6244] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6242] close(3) = 0 [pid 6242] close(4) = 0 [pid 6242] close(5) = -1 EBADF (Bad file descriptor) [pid 6242] close(6) = -1 EBADF (Bad file descriptor) [pid 6242] close(7) = -1 EBADF (Bad file descriptor) [pid 6242] close(8) = -1 EBADF (Bad file descriptor) [pid 6242] close(9) = -1 EBADF (Bad file descriptor) [pid 6242] close(10) = -1 EBADF (Bad file descriptor) [pid 6242] close(11) = -1 EBADF (Bad file descriptor) [pid 6242] close(12) = -1 EBADF (Bad file descriptor) [pid 6242] close(13) = -1 EBADF (Bad file descriptor) [pid 6242] close(14) = -1 EBADF (Bad file descriptor) [pid 6242] close(15) = -1 EBADF (Bad file descriptor) [pid 6242] close(16) = -1 EBADF (Bad file descriptor) [pid 6242] close(17) = -1 EBADF (Bad file descriptor) [pid 6242] close(18) = -1 EBADF (Bad file descriptor) [pid 6242] close(19) = -1 EBADF (Bad file descriptor) [pid 6242] close(20) = -1 EBADF (Bad file descriptor) [pid 6242] close(21) = -1 EBADF (Bad file descriptor) [pid 6242] close(22) = -1 EBADF (Bad file descriptor) [pid 6242] close(23) = -1 EBADF (Bad file descriptor) [pid 6242] close(24) = -1 EBADF (Bad file descriptor) [pid 6242] close(25) = -1 EBADF (Bad file descriptor) [pid 6242] close(26) = -1 EBADF (Bad file descriptor) [pid 6242] close(27) = -1 EBADF (Bad file descriptor) [pid 6242] close(28) = -1 EBADF (Bad file descriptor) [pid 6242] close(29) = -1 EBADF (Bad file descriptor) [pid 6242] exit_group(0 [pid 6244] <... futex resumed>) = ? [pid 6243] <... futex resumed>) = ? [pid 6242] <... exit_group resumed>) = ? [pid 6243] +++ exited with 0 +++ [pid 6244] +++ exited with 0 +++ [pid 6242] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1221, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./407", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./407", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./407/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./407/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./407/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./407/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./407/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./407/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./407/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./407/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./407/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./407") = 0 [pid 5019] mkdir("./408", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1224 ./strace-static-x86_64: Process 6245 attached [pid 6245] set_robust_list(0x555556a426a0, 24) = 0 [pid 6245] chdir("./408") = 0 [pid 6245] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6245] setpgid(0, 0) = 0 [pid 6245] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 73.459002][ T6243] loop0: detected capacity change from 0 to 1024 [pid 6245] write(3, "1000", 4) = 4 [pid 6245] close(3) = 0 [pid 6245] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6245] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6245] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6245] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6245] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6245] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6245] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6245] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6246 attached => {parent_tid=[1225]}, 88) = 1225 [pid 6246] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6246] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6246] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6246] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6245] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6245] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6246] <... futex resumed>) = 0 [pid 6245] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6246] memfd_create("syzkaller", 0) = 3 [pid 6246] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6246] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6246] munmap(0x7f15b9a45000, 524288) = 0 [pid 6246] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6246] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6246] close(3) = 0 [pid 6246] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6246] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6246] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6246] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6246] ioctl(4, LOOP_CLR_FD) = 0 [pid 6246] close(4) = 0 [pid 6246] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6245] <... futex resumed>) = 0 [pid 6245] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6245] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6245] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6245] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6245] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6245] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1226]}, 88) = 1226 [pid 6245] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6245] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6245] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6247 attached [pid 6246] <... futex resumed>) = 1 [pid 6246] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6247] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6246] <... mknodat resumed>) = 0 [pid 6246] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6246] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6247] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6247] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6247] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6247] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6247] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6247] chdir(".") = 0 [pid 6247] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6245] <... futex resumed>) = 0 [pid 6245] close(3 [pid 6247] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6245] <... close resumed>) = 0 [pid 6245] close(4) = 0 [pid 6245] close(5) = -1 EBADF (Bad file descriptor) [pid 6245] close(6) = -1 EBADF (Bad file descriptor) [pid 6245] close(7) = -1 EBADF (Bad file descriptor) [pid 6245] close(8) = -1 EBADF (Bad file descriptor) [pid 6245] close(9) = -1 EBADF (Bad file descriptor) [pid 6245] close(10) = -1 EBADF (Bad file descriptor) [pid 6245] close(11) = -1 EBADF (Bad file descriptor) [pid 6245] close(12) = -1 EBADF (Bad file descriptor) [pid 6245] close(13) = -1 EBADF (Bad file descriptor) [pid 6245] close(14) = -1 EBADF (Bad file descriptor) [pid 6245] close(15) = -1 EBADF (Bad file descriptor) [pid 6245] close(16) = -1 EBADF (Bad file descriptor) [pid 6245] close(17) = -1 EBADF (Bad file descriptor) [pid 6245] close(18) = -1 EBADF (Bad file descriptor) [pid 6245] close(19) = -1 EBADF (Bad file descriptor) [pid 6245] close(20) = -1 EBADF (Bad file descriptor) [pid 6245] close(21) = -1 EBADF (Bad file descriptor) [pid 6245] close(22) = -1 EBADF (Bad file descriptor) [pid 6245] close(23) = -1 EBADF (Bad file descriptor) [pid 6245] close(24) = -1 EBADF (Bad file descriptor) [pid 6245] close(25) = -1 EBADF (Bad file descriptor) [pid 6245] close(26) = -1 EBADF (Bad file descriptor) [pid 6245] close(27) = -1 EBADF (Bad file descriptor) [pid 6245] close(28) = -1 EBADF (Bad file descriptor) [pid 6245] close(29) = -1 EBADF (Bad file descriptor) [pid 6245] exit_group(0 [pid 6247] <... futex resumed>) = ? [pid 6246] <... futex resumed>) = ? [pid 6245] <... exit_group resumed>) = ? [pid 6247] +++ exited with 0 +++ [pid 6246] +++ exited with 0 +++ [pid 6245] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1224, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./408", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./408", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./408/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./408/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./408/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./408/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./408/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./408/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./408/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./408/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./408/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./408") = 0 [pid 5019] mkdir("./409", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 73.535103][ T6246] loop0: detected capacity change from 0 to 1024 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1227 ./strace-static-x86_64: Process 6248 attached [pid 6248] set_robust_list(0x555556a426a0, 24) = 0 [pid 6248] chdir("./409") = 0 [pid 6248] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6248] setpgid(0, 0) = 0 [pid 6248] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6248] write(3, "1000", 4) = 4 [pid 6248] close(3) = 0 [pid 6248] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6248] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6248] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6248] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6248] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6248] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6248] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6248] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1228]}, 88) = 1228 [pid 6248] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6248] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6248] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6249 attached [pid 6249] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6249] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6249] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6249] memfd_create("syzkaller", 0) = 3 [pid 6249] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6249] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6249] munmap(0x7f15b9a45000, 524288) = 0 [pid 6249] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6249] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6249] close(3) = 0 [pid 6249] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6249] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6249] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6249] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6249] ioctl(4, LOOP_CLR_FD) = 0 [pid 6249] close(4) = 0 [pid 6249] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6248] <... futex resumed>) = 0 [pid 6249] <... futex resumed>) = 1 [pid 6248] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6249] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6248] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6248] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6248] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6248] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6248] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1229]}, 88) = 1229 [pid 6248] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6248] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6248] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6249] <... mknodat resumed>) = 0 [pid 6249] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6249] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6250 attached [pid 6250] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6250] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6250] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6250] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6250] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6250] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6250] chdir(".") = 0 [pid 6250] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6248] <... futex resumed>) = 0 [pid 6248] close(3) = 0 [pid 6248] close(4) = 0 [pid 6248] close(5) = -1 EBADF (Bad file descriptor) [pid 6248] close(6) = -1 EBADF (Bad file descriptor) [pid 6248] close(7) = -1 EBADF (Bad file descriptor) [pid 6250] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6248] close(8) = -1 EBADF (Bad file descriptor) [pid 6248] close(9) = -1 EBADF (Bad file descriptor) [pid 6248] close(10) = -1 EBADF (Bad file descriptor) [pid 6248] close(11) = -1 EBADF (Bad file descriptor) [pid 6248] close(12) = -1 EBADF (Bad file descriptor) [pid 6248] close(13) = -1 EBADF (Bad file descriptor) [pid 6248] close(14) = -1 EBADF (Bad file descriptor) [pid 6248] close(15) = -1 EBADF (Bad file descriptor) [pid 6248] close(16) = -1 EBADF (Bad file descriptor) [pid 6248] close(17) = -1 EBADF (Bad file descriptor) [pid 6248] close(18) = -1 EBADF (Bad file descriptor) [pid 6248] close(19) = -1 EBADF (Bad file descriptor) [pid 6248] close(20) = -1 EBADF (Bad file descriptor) [pid 6248] close(21) = -1 EBADF (Bad file descriptor) [pid 6248] close(22) = -1 EBADF (Bad file descriptor) [pid 6248] close(23) = -1 EBADF (Bad file descriptor) [pid 6248] close(24) = -1 EBADF (Bad file descriptor) [pid 6248] close(25) = -1 EBADF (Bad file descriptor) [pid 6248] close(26) = -1 EBADF (Bad file descriptor) [pid 6248] close(27) = -1 EBADF (Bad file descriptor) [pid 6248] close(28) = -1 EBADF (Bad file descriptor) [pid 6248] close(29) = -1 EBADF (Bad file descriptor) [pid 6248] exit_group(0 [pid 6250] <... futex resumed>) = ? [pid 6249] <... futex resumed>) = ? [pid 6248] <... exit_group resumed>) = ? [pid 6249] +++ exited with 0 +++ [pid 6250] +++ exited with 0 +++ [pid 6248] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1227, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./409", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./409", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./409/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./409/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./409/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./409/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./409/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./409/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./409/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./409/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./409/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./409") = 0 [pid 5019] mkdir("./410", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 73.604095][ T6249] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1230 ./strace-static-x86_64: Process 6251 attached [pid 6251] set_robust_list(0x555556a426a0, 24) = 0 [pid 6251] chdir("./410") = 0 [pid 6251] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6251] setpgid(0, 0) = 0 [pid 6251] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6251] write(3, "1000", 4) = 4 [pid 6251] close(3) = 0 [pid 6251] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6251] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6251] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6251] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6251] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6251] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6251] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6251] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1231]}, 88) = 1231 [pid 6251] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6251] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6251] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6252 attached [pid 6252] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6252] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6252] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6252] memfd_create("syzkaller", 0) = 3 [pid 6252] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6252] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6252] munmap(0x7f15b9a45000, 524288) = 0 [pid 6252] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6252] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6252] close(3) = 0 [pid 6252] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6252] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6252] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6252] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6252] ioctl(4, LOOP_CLR_FD) = 0 [pid 6252] close(4) = 0 [pid 6252] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6251] <... futex resumed>) = 0 [pid 6252] <... futex resumed>) = 1 [pid 6251] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6252] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6251] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6251] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6251] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6251] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6251] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6253 attached => {parent_tid=[1232]}, 88) = 1232 [pid 6251] rt_sigprocmask(SIG_SETMASK, [], [pid 6252] <... mknodat resumed>) = 0 [pid 6253] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6251] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6253] <... rseq resumed>) = 0 [pid 6253] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6253] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6253] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6252] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6251] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6252] <... futex resumed>) = 0 [pid 6251] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6253] <... futex resumed>) = 0 [pid 6252] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6253] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6253] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6253] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6253] chdir(".") = 0 [pid 6253] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6251] <... futex resumed>) = 0 [pid 6251] close(3) = 0 [pid 6251] close(4) = 0 [pid 6251] close(5) = -1 EBADF (Bad file descriptor) [pid 6251] close(6) = -1 EBADF (Bad file descriptor) [pid 6251] close(7) = -1 EBADF (Bad file descriptor) [pid 6251] close(8) = -1 EBADF (Bad file descriptor) [pid 6251] close(9) = -1 EBADF (Bad file descriptor) [pid 6251] close(10) = -1 EBADF (Bad file descriptor) [pid 6251] close(11) = -1 EBADF (Bad file descriptor) [pid 6251] close(12) = -1 EBADF (Bad file descriptor) [pid 6251] close(13) = -1 EBADF (Bad file descriptor) [pid 6251] close(14) = -1 EBADF (Bad file descriptor) [pid 6251] close(15) = -1 EBADF (Bad file descriptor) [pid 6251] close(16) = -1 EBADF (Bad file descriptor) [pid 6251] close(17) = -1 EBADF (Bad file descriptor) [pid 6251] close(18) = -1 EBADF (Bad file descriptor) [pid 6251] close(19) = -1 EBADF (Bad file descriptor) [pid 6251] close(20) = -1 EBADF (Bad file descriptor) [pid 6251] close(21) = -1 EBADF (Bad file descriptor) [pid 6251] close(22) = -1 EBADF (Bad file descriptor) [pid 6251] close(23) = -1 EBADF (Bad file descriptor) [pid 6251] close(24) = -1 EBADF (Bad file descriptor) [pid 6251] close(25) = -1 EBADF (Bad file descriptor) [pid 6251] close(26 [pid 6253] <... futex resumed>) = 1 [pid 6251] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6253] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6251] close(27) = -1 EBADF (Bad file descriptor) [pid 6251] close(28) = -1 EBADF (Bad file descriptor) [pid 6251] close(29) = -1 EBADF (Bad file descriptor) [pid 6251] exit_group(0 [pid 6253] <... futex resumed>) = ? [pid 6252] <... futex resumed>) = ? [pid 6251] <... exit_group resumed>) = ? [pid 6253] +++ exited with 0 +++ [pid 6252] +++ exited with 0 +++ [pid 6251] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1230, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./410", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./410", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./410/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./410/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./410/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./410/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./410/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [ 73.684899][ T6252] loop0: detected capacity change from 0 to 1024 [pid 5019] close(4) = 0 [pid 5019] rmdir("./410/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./410/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./410/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./410/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./410") = 0 [pid 5019] mkdir("./411", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1233 ./strace-static-x86_64: Process 6254 attached [pid 6254] set_robust_list(0x555556a426a0, 24) = 0 [pid 6254] chdir("./411") = 0 [pid 6254] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6254] setpgid(0, 0) = 0 [pid 6254] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6254] write(3, "1000", 4) = 4 [pid 6254] close(3) = 0 [pid 6254] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6254] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6254] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6254] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6254] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6254] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6254] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6254] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6255 attached [pid 6255] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053 [pid 6254] <... clone3 resumed> => {parent_tid=[1234]}, 88) = 1234 [pid 6255] <... rseq resumed>) = 0 [pid 6254] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6255] set_robust_list(0x7f15c1e659a0, 24 [pid 6254] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6255] <... set_robust_list resumed>) = 0 [pid 6254] <... futex resumed>) = 0 [pid 6255] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6254] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6255] memfd_create("syzkaller", 0) = 3 [pid 6255] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6255] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6255] munmap(0x7f15b9a45000, 524288) = 0 [pid 6255] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6255] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6255] close(3) = 0 [pid 6255] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6255] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6255] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6255] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6255] ioctl(4, LOOP_CLR_FD) = 0 [pid 6255] close(4) = 0 [pid 6255] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6254] <... futex resumed>) = 0 [pid 6255] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6254] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6255] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6254] <... futex resumed>) = 0 [pid 6254] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6254] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6254] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6254] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6254] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6256 attached [pid 6256] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6256] set_robust_list(0x7f15b9ac49a0, 24 [pid 6254] <... clone3 resumed> => {parent_tid=[1235]}, 88) = 1235 [pid 6254] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6254] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6256] <... set_robust_list resumed>) = 0 [pid 6254] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6256] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6256] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6256] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6255] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 6255] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6255] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6256] <... mount resumed>) = 0 [pid 6256] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6256] chdir(".") = 0 [pid 6256] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6254] <... futex resumed>) = 0 [pid 6254] close(3) = 0 [pid 6254] close(4 [pid 6256] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6254] <... close resumed>) = 0 [pid 6254] close(5) = -1 EBADF (Bad file descriptor) [pid 6254] close(6) = -1 EBADF (Bad file descriptor) [pid 6254] close(7) = -1 EBADF (Bad file descriptor) [pid 6254] close(8) = -1 EBADF (Bad file descriptor) [pid 6254] close(9) = -1 EBADF (Bad file descriptor) [pid 6254] close(10) = -1 EBADF (Bad file descriptor) [pid 6254] close(11) = -1 EBADF (Bad file descriptor) [pid 6254] close(12) = -1 EBADF (Bad file descriptor) [pid 6254] close(13) = -1 EBADF (Bad file descriptor) [pid 6254] close(14) = -1 EBADF (Bad file descriptor) [pid 6254] close(15) = -1 EBADF (Bad file descriptor) [pid 6254] close(16) = -1 EBADF (Bad file descriptor) [pid 6254] close(17) = -1 EBADF (Bad file descriptor) [pid 6254] close(18) = -1 EBADF (Bad file descriptor) [pid 6254] close(19) = -1 EBADF (Bad file descriptor) [pid 6254] close(20) = -1 EBADF (Bad file descriptor) [pid 6254] close(21) = -1 EBADF (Bad file descriptor) [pid 6254] close(22) = -1 EBADF (Bad file descriptor) [pid 6254] close(23) = -1 EBADF (Bad file descriptor) [pid 6254] close(24) = -1 EBADF (Bad file descriptor) [pid 6254] close(25) = -1 EBADF (Bad file descriptor) [pid 6254] close(26) = -1 EBADF (Bad file descriptor) [pid 6254] close(27) = -1 EBADF (Bad file descriptor) [pid 6254] close(28) = -1 EBADF (Bad file descriptor) [pid 6254] close(29) = -1 EBADF (Bad file descriptor) [pid 6254] exit_group(0 [pid 6255] <... futex resumed>) = ? [pid 6254] <... exit_group resumed>) = ? [pid 6256] <... futex resumed>) = ? [pid 6255] +++ exited with 0 +++ [pid 6256] +++ exited with 0 +++ [pid 6254] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1233, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./411", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./411", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./411/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./411/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./411/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./411/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./411/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./411/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./411/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./411/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./411/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./411") = 0 [pid 5019] mkdir("./412", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 73.771799][ T6255] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1236 ./strace-static-x86_64: Process 6257 attached [pid 6257] set_robust_list(0x555556a426a0, 24) = 0 [pid 6257] chdir("./412") = 0 [pid 6257] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6257] setpgid(0, 0) = 0 [pid 6257] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6257] write(3, "1000", 4) = 4 [pid 6257] close(3) = 0 [pid 6257] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6257] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6257] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6257] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6257] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6257] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6257] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6257] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6258 attached [pid 6258] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6258] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6257] <... clone3 resumed> => {parent_tid=[1237]}, 88) = 1237 [pid 6257] rt_sigprocmask(SIG_SETMASK, [], [pid 6258] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6258] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6257] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6257] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6258] <... futex resumed>) = 0 [pid 6257] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6258] memfd_create("syzkaller", 0) = 3 [pid 6258] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6258] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6258] munmap(0x7f15b9a45000, 524288) = 0 [pid 6258] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6258] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6258] close(3) = 0 [pid 6258] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6258] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6258] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6258] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6258] ioctl(4, LOOP_CLR_FD) = 0 [pid 6258] close(4) = 0 [pid 6258] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6257] <... futex resumed>) = 0 [pid 6257] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6258] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6257] <... futex resumed>) = 0 [pid 6257] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6257] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6257] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6257] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6257] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6259 attached [pid 6258] <... mknodat resumed>) = 0 [pid 6257] <... clone3 resumed> => {parent_tid=[1238]}, 88) = 1238 [pid 6258] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6257] rt_sigprocmask(SIG_SETMASK, [], [pid 6258] <... futex resumed>) = 0 [pid 6257] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6258] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6257] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6259] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6257] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6259] <... rseq resumed>) = 0 [pid 6259] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6259] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6259] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6259] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6259] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6259] chdir(".") = 0 [pid 6259] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6257] <... futex resumed>) = 0 [pid 6259] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6257] close(3) = 0 [pid 6257] close(4) = 0 [pid 6257] close(5) = -1 EBADF (Bad file descriptor) [pid 6257] close(6) = -1 EBADF (Bad file descriptor) [pid 6257] close(7) = -1 EBADF (Bad file descriptor) [pid 6257] close(8) = -1 EBADF (Bad file descriptor) [pid 6257] close(9) = -1 EBADF (Bad file descriptor) [pid 6257] close(10) = -1 EBADF (Bad file descriptor) [pid 6257] close(11) = -1 EBADF (Bad file descriptor) [pid 6257] close(12) = -1 EBADF (Bad file descriptor) [pid 6257] close(13) = -1 EBADF (Bad file descriptor) [pid 6257] close(14) = -1 EBADF (Bad file descriptor) [pid 6257] close(15) = -1 EBADF (Bad file descriptor) [pid 6257] close(16) = -1 EBADF (Bad file descriptor) [pid 6257] close(17) = -1 EBADF (Bad file descriptor) [pid 6257] close(18) = -1 EBADF (Bad file descriptor) [pid 6257] close(19) = -1 EBADF (Bad file descriptor) [pid 6257] close(20) = -1 EBADF (Bad file descriptor) [pid 6257] close(21) = -1 EBADF (Bad file descriptor) [pid 6257] close(22) = -1 EBADF (Bad file descriptor) [pid 6257] close(23) = -1 EBADF (Bad file descriptor) [pid 6257] close(24) = -1 EBADF (Bad file descriptor) [pid 6257] close(25) = -1 EBADF (Bad file descriptor) [pid 6257] close(26) = -1 EBADF (Bad file descriptor) [pid 6257] close(27) = -1 EBADF (Bad file descriptor) [pid 6257] close(28) = -1 EBADF (Bad file descriptor) [pid 6257] close(29) = -1 EBADF (Bad file descriptor) [pid 6257] exit_group(0 [pid 6258] <... futex resumed>) = ? [pid 6257] <... exit_group resumed>) = ? [pid 6259] <... futex resumed>) = ? [pid 6258] +++ exited with 0 +++ [pid 6259] +++ exited with 0 +++ [pid 6257] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1236, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./412", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./412", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./412/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./412/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./412/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./412/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./412/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./412/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./412/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./412/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./412/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./412") = 0 [pid 5019] mkdir("./413", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1239 [ 73.853547][ T6258] loop0: detected capacity change from 0 to 1024 ./strace-static-x86_64: Process 6260 attached [pid 6260] set_robust_list(0x555556a426a0, 24) = 0 [pid 6260] chdir("./413") = 0 [pid 6260] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6260] setpgid(0, 0) = 0 [pid 6260] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6260] write(3, "1000", 4) = 4 [pid 6260] close(3) = 0 [pid 6260] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6260] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6260] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6260] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6260] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6260] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6260] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6260] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1240]}, 88) = 1240 ./strace-static-x86_64: Process 6261 attached [pid 6261] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6261] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6260] rt_sigprocmask(SIG_SETMASK, [], [pid 6261] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6261] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6260] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6260] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6261] <... futex resumed>) = 0 [pid 6260] <... futex resumed>) = 1 [pid 6260] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6261] memfd_create("syzkaller", 0) = 3 [pid 6261] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6261] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6261] munmap(0x7f15b9a45000, 524288) = 0 [pid 6261] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6261] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6261] close(3) = 0 [pid 6261] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6261] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6261] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6261] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6261] ioctl(4, LOOP_CLR_FD) = 0 [pid 6261] close(4) = 0 [pid 6261] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6260] <... futex resumed>) = 0 [pid 6260] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6260] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6260] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6260] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6260] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6260] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1241]}, 88) = 1241 [pid 6260] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6260] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6260] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6262 attached [pid 6262] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6262] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6262] rt_sigprocmask(SIG_SETMASK, [], [pid 6261] <... futex resumed>) = 1 [pid 6261] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6262] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6262] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6262] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6261] <... mknodat resumed>) = 0 [pid 6261] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6261] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6262] <... mount resumed>) = 0 [pid 6262] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6262] chdir(".") = 0 [pid 6262] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6260] <... futex resumed>) = 0 [pid 6262] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6260] close(3) = 0 [pid 6260] close(4) = 0 [pid 6260] close(5) = -1 EBADF (Bad file descriptor) [pid 6260] close(6) = -1 EBADF (Bad file descriptor) [pid 6260] close(7) = -1 EBADF (Bad file descriptor) [pid 6260] close(8) = -1 EBADF (Bad file descriptor) [pid 6260] close(9) = -1 EBADF (Bad file descriptor) [pid 6260] close(10) = -1 EBADF (Bad file descriptor) [pid 6260] close(11) = -1 EBADF (Bad file descriptor) [pid 6260] close(12) = -1 EBADF (Bad file descriptor) [pid 6260] close(13) = -1 EBADF (Bad file descriptor) [pid 6260] close(14) = -1 EBADF (Bad file descriptor) [pid 6260] close(15) = -1 EBADF (Bad file descriptor) [pid 6260] close(16) = -1 EBADF (Bad file descriptor) [pid 6260] close(17) = -1 EBADF (Bad file descriptor) [pid 6260] close(18) = -1 EBADF (Bad file descriptor) [pid 6260] close(19) = -1 EBADF (Bad file descriptor) [pid 6260] close(20) = -1 EBADF (Bad file descriptor) [pid 6260] close(21) = -1 EBADF (Bad file descriptor) [pid 6260] close(22) = -1 EBADF (Bad file descriptor) [pid 6260] close(23) = -1 EBADF (Bad file descriptor) [pid 6260] close(24) = -1 EBADF (Bad file descriptor) [pid 6260] close(25) = -1 EBADF (Bad file descriptor) [pid 6260] close(26) = -1 EBADF (Bad file descriptor) [pid 6260] close(27) = -1 EBADF (Bad file descriptor) [pid 6260] close(28) = -1 EBADF (Bad file descriptor) [pid 6260] close(29) = -1 EBADF (Bad file descriptor) [pid 6260] exit_group(0 [pid 6262] <... futex resumed>) = ? [pid 6261] <... futex resumed>) = ? [pid 6260] <... exit_group resumed>) = ? [pid 6261] +++ exited with 0 +++ [pid 6262] +++ exited with 0 +++ [pid 6260] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1239, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./413", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./413", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./413/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./413/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./413/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./413/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./413/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./413/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./413/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./413/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./413/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./413") = 0 [pid 5019] mkdir("./414", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1242 ./strace-static-x86_64: Process 6263 attached [pid 6263] set_robust_list(0x555556a426a0, 24) = 0 [pid 6263] chdir("./414") = 0 [pid 6263] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6263] setpgid(0, 0) = 0 [pid 6263] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6263] write(3, "1000", 4) = 4 [pid 6263] close(3) = 0 [pid 6263] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6263] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6263] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6263] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [ 73.935192][ T6261] loop0: detected capacity change from 0 to 1024 [pid 6263] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6263] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6263] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6263] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6264 attached => {parent_tid=[1243]}, 88) = 1243 [pid 6263] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6263] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6263] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6264] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6264] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6264] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6264] memfd_create("syzkaller", 0) = 3 [pid 6264] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6264] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6264] munmap(0x7f15b9a45000, 524288) = 0 [pid 6264] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6264] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6264] close(3) = 0 [pid 6264] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6264] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6264] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6264] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6264] ioctl(4, LOOP_CLR_FD) = 0 [pid 6264] close(4) = 0 [pid 6264] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6263] <... futex resumed>) = 0 [pid 6263] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6263] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6263] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6263] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6263] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6263] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1244]}, 88) = 1244 [pid 6263] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6263] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6263] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6264] <... futex resumed>) = 1 [pid 6264] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 6264] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6264] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6265 attached [pid 6265] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6265] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6265] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6265] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6265] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6265] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6265] chdir(".") = 0 [pid 6265] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6263] <... futex resumed>) = 0 [pid 6263] close(3) = 0 [pid 6263] close(4) = 0 [pid 6263] close(5) = -1 EBADF (Bad file descriptor) [pid 6263] close(6) = -1 EBADF (Bad file descriptor) [pid 6263] close(7) = -1 EBADF (Bad file descriptor) [pid 6265] <... futex resumed>) = 1 [pid 6265] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6263] close(8) = -1 EBADF (Bad file descriptor) [pid 6263] close(9) = -1 EBADF (Bad file descriptor) [pid 6263] close(10) = -1 EBADF (Bad file descriptor) [pid 6263] close(11) = -1 EBADF (Bad file descriptor) [pid 6263] close(12) = -1 EBADF (Bad file descriptor) [pid 6263] close(13) = -1 EBADF (Bad file descriptor) [pid 6263] close(14) = -1 EBADF (Bad file descriptor) [pid 6263] close(15) = -1 EBADF (Bad file descriptor) [pid 6263] close(16) = -1 EBADF (Bad file descriptor) [pid 6263] close(17) = -1 EBADF (Bad file descriptor) [pid 6263] close(18) = -1 EBADF (Bad file descriptor) [pid 6263] close(19) = -1 EBADF (Bad file descriptor) [pid 6263] close(20) = -1 EBADF (Bad file descriptor) [pid 6263] close(21) = -1 EBADF (Bad file descriptor) [pid 6263] close(22) = -1 EBADF (Bad file descriptor) [pid 6263] close(23) = -1 EBADF (Bad file descriptor) [pid 6263] close(24) = -1 EBADF (Bad file descriptor) [pid 6263] close(25) = -1 EBADF (Bad file descriptor) [pid 6263] close(26) = -1 EBADF (Bad file descriptor) [pid 6263] close(27) = -1 EBADF (Bad file descriptor) [pid 6263] close(28) = -1 EBADF (Bad file descriptor) [pid 6263] close(29) = -1 EBADF (Bad file descriptor) [pid 6263] exit_group(0 [pid 6265] <... futex resumed>) = ? [pid 6264] <... futex resumed>) = ? [pid 6263] <... exit_group resumed>) = ? [pid 6265] +++ exited with 0 +++ [pid 6264] +++ exited with 0 +++ [pid 6263] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1242, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./414", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./414", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./414/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./414/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./414/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./414/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./414/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./414/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./414/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./414/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./414/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./414") = 0 [pid 5019] mkdir("./415", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1245 ./strace-static-x86_64: Process 6266 attached [pid 6266] set_robust_list(0x555556a426a0, 24) = 0 [pid 6266] chdir("./415") = 0 [pid 6266] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6266] setpgid(0, 0) = 0 [pid 6266] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6266] write(3, "1000", 4) = 4 [pid 6266] close(3) = 0 [pid 6266] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6266] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6266] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6266] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6266] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6266] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [ 74.005571][ T6264] loop0: detected capacity change from 0 to 1024 [pid 6266] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6266] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6267 attached [pid 6267] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6267] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6267] rt_sigprocmask(SIG_SETMASK, [], [pid 6266] <... clone3 resumed> => {parent_tid=[1246]}, 88) = 1246 [pid 6267] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6267] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6266] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6266] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6267] <... futex resumed>) = 0 [pid 6266] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6267] memfd_create("syzkaller", 0) = 3 [pid 6267] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6267] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6267] munmap(0x7f15b9a45000, 524288) = 0 [pid 6267] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6267] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6267] close(3) = 0 [pid 6267] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6267] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6267] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6267] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6267] ioctl(4, LOOP_CLR_FD) = 0 [pid 6267] close(4) = 0 [pid 6267] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6266] <... futex resumed>) = 0 [pid 6267] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6266] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6266] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6267] <... mknodat resumed>) = 0 [pid 6266] <... futex resumed>) = 0 [pid 6266] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6266] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE [pid 6267] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6266] <... mprotect resumed>) = 0 [pid 6267] <... futex resumed>) = 0 [pid 6266] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6267] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6266] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6266] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6268 attached [pid 6268] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6268] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6268] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6268] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6266] <... clone3 resumed> => {parent_tid=[1247]}, 88) = 1247 [pid 6266] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6266] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6268] <... futex resumed>) = 0 [pid 6266] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6268] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6268] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6268] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6268] chdir(".") = 0 [pid 6268] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6266] <... futex resumed>) = 0 [pid 6266] close(3) = 0 [pid 6266] close(4) = 0 [pid 6266] close(5) = -1 EBADF (Bad file descriptor) [pid 6266] close(6) = -1 EBADF (Bad file descriptor) [pid 6266] close(7) = -1 EBADF (Bad file descriptor) [pid 6266] close(8) = -1 EBADF (Bad file descriptor) [pid 6266] close(9) = -1 EBADF (Bad file descriptor) [pid 6266] close(10) = -1 EBADF (Bad file descriptor) [pid 6266] close(11) = -1 EBADF (Bad file descriptor) [pid 6266] close(12) = -1 EBADF (Bad file descriptor) [pid 6266] close(13) = -1 EBADF (Bad file descriptor) [pid 6266] close(14) = -1 EBADF (Bad file descriptor) [pid 6266] close(15) = -1 EBADF (Bad file descriptor) [pid 6266] close(16) = -1 EBADF (Bad file descriptor) [pid 6266] close(17) = -1 EBADF (Bad file descriptor) [pid 6266] close(18) = -1 EBADF (Bad file descriptor) [pid 6266] close(19) = -1 EBADF (Bad file descriptor) [pid 6266] close(20) = -1 EBADF (Bad file descriptor) [pid 6266] close(21) = -1 EBADF (Bad file descriptor) [pid 6266] close(22) = -1 EBADF (Bad file descriptor) [pid 6266] close(23) = -1 EBADF (Bad file descriptor) [pid 6266] close(24) = -1 EBADF (Bad file descriptor) [pid 6266] close(25) = -1 EBADF (Bad file descriptor) [pid 6266] close(26) = -1 EBADF (Bad file descriptor) [pid 6266] close(27) = -1 EBADF (Bad file descriptor) [pid 6266] close(28 [pid 6268] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6266] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6266] close(29) = -1 EBADF (Bad file descriptor) [pid 6266] exit_group(0 [pid 6267] <... futex resumed>) = ? [pid 6266] <... exit_group resumed>) = ? [pid 6268] <... futex resumed>) = ? [pid 6267] +++ exited with 0 +++ [pid 6268] +++ exited with 0 +++ [pid 6266] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1245, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./415", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./415", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./415/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./415/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./415/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./415/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./415/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./415/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./415/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./415/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./415/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./415") = 0 [pid 5019] mkdir("./416", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1248 ./strace-static-x86_64: Process 6269 attached [pid 6269] set_robust_list(0x555556a426a0, 24) = 0 [pid 6269] chdir("./416") = 0 [pid 6269] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6269] setpgid(0, 0) = 0 [pid 6269] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6269] write(3, "1000", 4) = 4 [pid 6269] close(3) = 0 [pid 6269] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6269] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6269] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6269] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6269] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6269] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6269] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6269] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6270 attached [pid 6270] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053 [pid 6269] <... clone3 resumed> => {parent_tid=[1249]}, 88) = 1249 [ 74.076640][ T6267] loop0: detected capacity change from 0 to 1024 [pid 6270] <... rseq resumed>) = 0 [pid 6269] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6270] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6269] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6270] rt_sigprocmask(SIG_SETMASK, [], [pid 6269] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6270] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6270] memfd_create("syzkaller", 0) = 3 [pid 6270] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6270] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6270] munmap(0x7f15b9a45000, 524288) = 0 [pid 6270] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6270] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6270] close(3) = 0 [pid 6270] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6270] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6270] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6270] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6270] ioctl(4, LOOP_CLR_FD) = 0 [pid 6270] close(4) = 0 [pid 6270] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6269] <... futex resumed>) = 0 [pid 6270] <... futex resumed>) = 1 [pid 6269] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6270] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6269] <... futex resumed>) = 0 [pid 6269] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6269] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6269] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6269] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6269] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1250]}, 88) = 1250 ./strace-static-x86_64: Process 6271 attached [pid 6269] rt_sigprocmask(SIG_SETMASK, [], [pid 6271] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6269] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6269] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6271] <... rseq resumed>) = 0 [pid 6269] <... futex resumed>) = 0 [pid 6271] set_robust_list(0x7f15b9ac49a0, 24 [pid 6269] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6271] <... set_robust_list resumed>) = 0 [pid 6271] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6271] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6271] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6270] <... mknodat resumed>) = 0 [pid 6270] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6270] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6271] <... mount resumed>) = 0 [pid 6271] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6271] chdir(".") = 0 [pid 6271] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6269] <... futex resumed>) = 0 [pid 6271] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6269] close(3) = 0 [pid 6269] close(4) = 0 [pid 6269] close(5) = -1 EBADF (Bad file descriptor) [pid 6269] close(6) = -1 EBADF (Bad file descriptor) [pid 6269] close(7) = -1 EBADF (Bad file descriptor) [pid 6269] close(8) = -1 EBADF (Bad file descriptor) [pid 6269] close(9) = -1 EBADF (Bad file descriptor) [pid 6269] close(10) = -1 EBADF (Bad file descriptor) [pid 6269] close(11) = -1 EBADF (Bad file descriptor) [pid 6269] close(12) = -1 EBADF (Bad file descriptor) [pid 6269] close(13) = -1 EBADF (Bad file descriptor) [pid 6269] close(14) = -1 EBADF (Bad file descriptor) [pid 6269] close(15) = -1 EBADF (Bad file descriptor) [pid 6269] close(16) = -1 EBADF (Bad file descriptor) [pid 6269] close(17) = -1 EBADF (Bad file descriptor) [pid 6269] close(18) = -1 EBADF (Bad file descriptor) [pid 6269] close(19) = -1 EBADF (Bad file descriptor) [pid 6269] close(20) = -1 EBADF (Bad file descriptor) [pid 6269] close(21) = -1 EBADF (Bad file descriptor) [pid 6269] close(22) = -1 EBADF (Bad file descriptor) [pid 6269] close(23) = -1 EBADF (Bad file descriptor) [pid 6269] close(24) = -1 EBADF (Bad file descriptor) [pid 6269] close(25) = -1 EBADF (Bad file descriptor) [pid 6269] close(26) = -1 EBADF (Bad file descriptor) [pid 6269] close(27) = -1 EBADF (Bad file descriptor) [pid 6269] close(28) = -1 EBADF (Bad file descriptor) [pid 6269] close(29) = -1 EBADF (Bad file descriptor) [pid 6269] exit_group(0 [pid 6271] <... futex resumed>) = ? [pid 6270] <... futex resumed>) = ? [pid 6269] <... exit_group resumed>) = ? [pid 6270] +++ exited with 0 +++ [pid 6271] +++ exited with 0 +++ [pid 6269] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1248, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./416", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./416", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./416/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./416/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./416/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./416/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./416/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./416/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./416/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./416/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./416/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./416") = 0 [pid 5019] mkdir("./417", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [ 74.145627][ T6270] loop0: detected capacity change from 0 to 1024 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6272 attached [pid 6272] set_robust_list(0x555556a426a0, 24) = 0 [pid 6272] chdir("./417") = 0 [pid 6272] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6272] setpgid(0, 0) = 0 [pid 6272] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6272] write(3, "1000", 4) = 4 [pid 6272] close(3) = 0 [pid 6272] symlink("/dev/binderfs", "./binderfs" [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1251 [pid 6272] <... symlink resumed>) = 0 [pid 6272] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6272] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6272] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6272] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6272] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6272] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6272] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1252]}, 88) = 1252 ./strace-static-x86_64: Process 6273 attached [pid 6272] rt_sigprocmask(SIG_SETMASK, [], [pid 6273] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6273] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6273] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6273] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6272] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6272] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6273] <... futex resumed>) = 0 [pid 6272] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6273] memfd_create("syzkaller", 0) = 3 [pid 6273] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6273] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6273] munmap(0x7f15b9a45000, 524288) = 0 [pid 6273] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6273] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6273] close(3) = 0 [pid 6273] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6273] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6273] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6273] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6273] ioctl(4, LOOP_CLR_FD) = 0 [pid 6273] close(4) = 0 [pid 6273] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6273] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6272] <... futex resumed>) = 0 [pid 6272] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6273] <... futex resumed>) = 0 [pid 6272] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6273] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6272] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6272] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6272] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6272] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1253]}, 88) = 1253 [pid 6272] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6272] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6272] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6274 attached [pid 6274] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6274] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6274] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6274] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6274] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6273] <... mknodat resumed>) = 0 [pid 6273] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6273] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6274] <... mount resumed>) = 0 [pid 6274] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6274] chdir(".") = 0 [pid 6274] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6272] <... futex resumed>) = 0 [pid 6272] close(3) = 0 [pid 6272] close(4) = 0 [pid 6272] close(5) = -1 EBADF (Bad file descriptor) [pid 6272] close(6) = -1 EBADF (Bad file descriptor) [pid 6272] close(7) = -1 EBADF (Bad file descriptor) [pid 6272] close(8) = -1 EBADF (Bad file descriptor) [pid 6272] close(9) = -1 EBADF (Bad file descriptor) [pid 6272] close(10) = -1 EBADF (Bad file descriptor) [pid 6272] close(11) = -1 EBADF (Bad file descriptor) [pid 6272] close(12) = -1 EBADF (Bad file descriptor) [pid 6272] close(13) = -1 EBADF (Bad file descriptor) [pid 6272] close(14) = -1 EBADF (Bad file descriptor) [pid 6272] close(15) = -1 EBADF (Bad file descriptor) [pid 6272] close(16) = -1 EBADF (Bad file descriptor) [pid 6272] close(17) = -1 EBADF (Bad file descriptor) [pid 6272] close(18) = -1 EBADF (Bad file descriptor) [pid 6272] close(19) = -1 EBADF (Bad file descriptor) [pid 6272] close(20) = -1 EBADF (Bad file descriptor) [pid 6272] close(21) = -1 EBADF (Bad file descriptor) [pid 6272] close(22) = -1 EBADF (Bad file descriptor) [pid 6272] close(23) = -1 EBADF (Bad file descriptor) [pid 6272] close(24) = -1 EBADF (Bad file descriptor) [pid 6272] close(25) = -1 EBADF (Bad file descriptor) [pid 6272] close(26) = -1 EBADF (Bad file descriptor) [pid 6272] close(27) = -1 EBADF (Bad file descriptor) [pid 6272] close(28) = -1 EBADF (Bad file descriptor) [pid 6272] close(29) = -1 EBADF (Bad file descriptor) [pid 6272] exit_group(0) = ? [pid 6274] <... futex resumed>) = ? [pid 6274] +++ exited with 0 +++ [pid 6273] <... futex resumed>) = ? [pid 6273] +++ exited with 0 +++ [pid 6272] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1251, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] umount2("./417", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./417", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./417/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./417/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./417/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./417/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./417/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./417/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./417/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./417/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./417/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./417") = 0 [pid 5019] mkdir("./418", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 74.228045][ T6273] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1254 ./strace-static-x86_64: Process 6275 attached [pid 6275] set_robust_list(0x555556a426a0, 24) = 0 [pid 6275] chdir("./418") = 0 [pid 6275] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6275] setpgid(0, 0) = 0 [pid 6275] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6275] write(3, "1000", 4) = 4 [pid 6275] close(3) = 0 [pid 6275] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6275] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6275] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6275] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6275] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6275] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6275] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6275] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6276 attached [pid 6276] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6276] set_robust_list(0x7f15c1e659a0, 24 [pid 6275] <... clone3 resumed> => {parent_tid=[1255]}, 88) = 1255 [pid 6276] <... set_robust_list resumed>) = 0 [pid 6275] rt_sigprocmask(SIG_SETMASK, [], [pid 6276] rt_sigprocmask(SIG_SETMASK, [], [pid 6275] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6276] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6275] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6275] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6276] memfd_create("syzkaller", 0) = 3 [pid 6276] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6276] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6276] munmap(0x7f15b9a45000, 524288) = 0 [pid 6276] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6276] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6276] close(3) = 0 [pid 6276] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6276] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6276] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6276] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6276] ioctl(4, LOOP_CLR_FD) = 0 [pid 6276] close(4) = 0 [pid 6276] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6275] <... futex resumed>) = 0 [pid 6275] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6275] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6275] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6275] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6275] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6275] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1256]}, 88) = 1256 [pid 6275] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6275] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6275] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6277 attached [pid 6276] <... futex resumed>) = 1 [pid 6276] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6277] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6276] <... mknodat resumed>) = 0 [pid 6277] set_robust_list(0x7f15b9ac49a0, 24 [pid 6276] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6276] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6277] <... set_robust_list resumed>) = 0 [pid 6277] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6277] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6277] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6277] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6277] chdir(".") = 0 [pid 6277] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6275] <... futex resumed>) = 0 [pid 6275] close(3) = 0 [pid 6275] close(4) = 0 [pid 6275] close(5) = -1 EBADF (Bad file descriptor) [pid 6275] close(6) = -1 EBADF (Bad file descriptor) [pid 6275] close(7) = -1 EBADF (Bad file descriptor) [pid 6277] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6275] close(8) = -1 EBADF (Bad file descriptor) [pid 6275] close(9) = -1 EBADF (Bad file descriptor) [pid 6275] close(10) = -1 EBADF (Bad file descriptor) [pid 6275] close(11) = -1 EBADF (Bad file descriptor) [pid 6275] close(12) = -1 EBADF (Bad file descriptor) [pid 6275] close(13) = -1 EBADF (Bad file descriptor) [pid 6275] close(14) = -1 EBADF (Bad file descriptor) [pid 6275] close(15) = -1 EBADF (Bad file descriptor) [pid 6275] close(16) = -1 EBADF (Bad file descriptor) [pid 6275] close(17) = -1 EBADF (Bad file descriptor) [pid 6275] close(18) = -1 EBADF (Bad file descriptor) [pid 6275] close(19) = -1 EBADF (Bad file descriptor) [pid 6275] close(20) = -1 EBADF (Bad file descriptor) [pid 6275] close(21) = -1 EBADF (Bad file descriptor) [pid 6275] close(22) = -1 EBADF (Bad file descriptor) [pid 6275] close(23) = -1 EBADF (Bad file descriptor) [pid 6275] close(24) = -1 EBADF (Bad file descriptor) [pid 6275] close(25) = -1 EBADF (Bad file descriptor) [pid 6275] close(26) = -1 EBADF (Bad file descriptor) [pid 6275] close(27) = -1 EBADF (Bad file descriptor) [pid 6275] close(28) = -1 EBADF (Bad file descriptor) [pid 6275] close(29) = -1 EBADF (Bad file descriptor) [pid 6275] exit_group(0 [pid 6277] <... futex resumed>) = ? [pid 6276] <... futex resumed>) = ? [pid 6275] <... exit_group resumed>) = ? [pid 6277] +++ exited with 0 +++ [pid 6276] +++ exited with 0 +++ [pid 6275] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1254, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./418", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./418", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./418/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./418/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./418/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./418/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./418/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./418/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./418/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./418/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./418/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./418") = 0 [pid 5019] mkdir("./419", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1257 ./strace-static-x86_64: Process 6278 attached [pid 6278] set_robust_list(0x555556a426a0, 24) = 0 [pid 6278] chdir("./419") = 0 [pid 6278] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6278] setpgid(0, 0) = 0 [pid 6278] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6278] write(3, "1000", 4) = 4 [pid 6278] close(3) = 0 [pid 6278] symlink("/dev/binderfs", "./binderfs") = 0 [ 74.307562][ T6276] loop0: detected capacity change from 0 to 1024 [pid 6278] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6278] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6278] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6278] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6278] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6278] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6278] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6279 attached [pid 6279] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053 [pid 6278] <... clone3 resumed> => {parent_tid=[1258]}, 88) = 1258 [pid 6279] <... rseq resumed>) = 0 [pid 6278] rt_sigprocmask(SIG_SETMASK, [], [pid 6279] set_robust_list(0x7f15c1e659a0, 24 [pid 6278] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6279] <... set_robust_list resumed>) = 0 [pid 6278] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6279] rt_sigprocmask(SIG_SETMASK, [], [pid 6278] <... futex resumed>) = 0 [pid 6279] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6278] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6279] memfd_create("syzkaller", 0) = 3 [pid 6279] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6279] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6279] munmap(0x7f15b9a45000, 524288) = 0 [pid 6279] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6279] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6279] close(3) = 0 [pid 6279] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6279] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6279] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6279] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6279] ioctl(4, LOOP_CLR_FD) = 0 [pid 6279] close(4) = 0 [pid 6279] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6278] <... futex resumed>) = 0 [pid 6278] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6278] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6278] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6278] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6278] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6278] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1259]}, 88) = 1259 [pid 6278] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6279] <... futex resumed>) = 1 [pid 6278] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6279] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6278] <... futex resumed>) = 0 [pid 6278] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6280 attached [pid 6280] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6279] <... mknodat resumed>) = 0 [pid 6279] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6279] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6280] <... rseq resumed>) = 0 [pid 6280] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6280] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6280] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6280] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6280] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6280] chdir(".") = 0 [pid 6280] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6278] <... futex resumed>) = 0 [pid 6278] close(3) = 0 [pid 6278] close(4) = 0 [pid 6278] close(5) = -1 EBADF (Bad file descriptor) [pid 6278] close(6 [pid 6280] <... futex resumed>) = 1 [pid 6278] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6280] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6278] close(7) = -1 EBADF (Bad file descriptor) [pid 6278] close(8) = -1 EBADF (Bad file descriptor) [pid 6278] close(9) = -1 EBADF (Bad file descriptor) [pid 6278] close(10) = -1 EBADF (Bad file descriptor) [pid 6278] close(11) = -1 EBADF (Bad file descriptor) [pid 6278] close(12) = -1 EBADF (Bad file descriptor) [pid 6278] close(13) = -1 EBADF (Bad file descriptor) [pid 6278] close(14) = -1 EBADF (Bad file descriptor) [pid 6278] close(15) = -1 EBADF (Bad file descriptor) [pid 6278] close(16) = -1 EBADF (Bad file descriptor) [pid 6278] close(17) = -1 EBADF (Bad file descriptor) [pid 6278] close(18) = -1 EBADF (Bad file descriptor) [pid 6278] close(19) = -1 EBADF (Bad file descriptor) [pid 6278] close(20) = -1 EBADF (Bad file descriptor) [pid 6278] close(21) = -1 EBADF (Bad file descriptor) [pid 6278] close(22) = -1 EBADF (Bad file descriptor) [pid 6278] close(23) = -1 EBADF (Bad file descriptor) [pid 6278] close(24) = -1 EBADF (Bad file descriptor) [pid 6278] close(25) = -1 EBADF (Bad file descriptor) [pid 6278] close(26) = -1 EBADF (Bad file descriptor) [pid 6278] close(27) = -1 EBADF (Bad file descriptor) [pid 6278] close(28) = -1 EBADF (Bad file descriptor) [pid 6278] close(29) = -1 EBADF (Bad file descriptor) [pid 6278] exit_group(0 [pid 6280] <... futex resumed>) = ? [pid 6279] <... futex resumed>) = ? [pid 6278] <... exit_group resumed>) = ? [pid 6280] +++ exited with 0 +++ [pid 6279] +++ exited with 0 +++ [pid 6278] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1257, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] umount2("./419", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./419", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./419/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./419/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./419/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./419/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./419/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./419/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./419/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./419/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./419/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./419") = 0 [pid 5019] mkdir("./420", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1260 ./strace-static-x86_64: Process 6281 attached [pid 6281] set_robust_list(0x555556a426a0, 24) = 0 [pid 6281] chdir("./420") = 0 [pid 6281] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6281] setpgid(0, 0) = 0 [pid 6281] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6281] write(3, "1000", 4) = 4 [pid 6281] close(3) = 0 [pid 6281] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6281] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6281] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6281] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6281] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6281] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6281] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6281] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1261]}, 88) = 1261 [pid 6281] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6281] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6281] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6282 attached [pid 6282] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6282] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6282] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6282] memfd_create("syzkaller", 0) = 3 [pid 6282] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6282] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [ 74.382560][ T6279] loop0: detected capacity change from 0 to 1024 [pid 6282] munmap(0x7f15b9a45000, 524288) = 0 [pid 6282] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6282] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6282] close(3) = 0 [pid 6282] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6282] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6282] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6282] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6282] ioctl(4, LOOP_CLR_FD) = 0 [pid 6282] close(4) = 0 [pid 6282] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6281] <... futex resumed>) = 0 [pid 6282] <... futex resumed>) = 1 [pid 6281] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6282] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6281] <... futex resumed>) = 0 [pid 6281] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6281] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6281] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6281] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6281] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6283 attached [pid 6283] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6283] set_robust_list(0x7f15b9ac49a0, 24 [pid 6281] <... clone3 resumed> => {parent_tid=[1262]}, 88) = 1262 [pid 6281] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6281] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6281] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6283] <... set_robust_list resumed>) = 0 [pid 6283] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6283] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6283] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6282] <... mknodat resumed>) = 0 [pid 6282] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6283] <... mount resumed>) = 0 [pid 6282] <... futex resumed>) = 0 [pid 6283] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6282] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6283] chdir(".") = 0 [pid 6283] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6281] <... futex resumed>) = 0 [pid 6283] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6281] close(3) = 0 [pid 6281] close(4) = 0 [pid 6281] close(5) = -1 EBADF (Bad file descriptor) [pid 6281] close(6) = -1 EBADF (Bad file descriptor) [pid 6281] close(7) = -1 EBADF (Bad file descriptor) [pid 6281] close(8) = -1 EBADF (Bad file descriptor) [pid 6281] close(9) = -1 EBADF (Bad file descriptor) [pid 6281] close(10) = -1 EBADF (Bad file descriptor) [pid 6281] close(11) = -1 EBADF (Bad file descriptor) [pid 6281] close(12) = -1 EBADF (Bad file descriptor) [pid 6281] close(13) = -1 EBADF (Bad file descriptor) [pid 6281] close(14) = -1 EBADF (Bad file descriptor) [pid 6281] close(15) = -1 EBADF (Bad file descriptor) [pid 6281] close(16) = -1 EBADF (Bad file descriptor) [pid 6281] close(17) = -1 EBADF (Bad file descriptor) [pid 6281] close(18) = -1 EBADF (Bad file descriptor) [pid 6281] close(19) = -1 EBADF (Bad file descriptor) [pid 6281] close(20) = -1 EBADF (Bad file descriptor) [pid 6281] close(21) = -1 EBADF (Bad file descriptor) [pid 6281] close(22) = -1 EBADF (Bad file descriptor) [pid 6281] close(23) = -1 EBADF (Bad file descriptor) [pid 6281] close(24) = -1 EBADF (Bad file descriptor) [pid 6281] close(25) = -1 EBADF (Bad file descriptor) [pid 6281] close(26) = -1 EBADF (Bad file descriptor) [pid 6281] close(27) = -1 EBADF (Bad file descriptor) [pid 6281] close(28) = -1 EBADF (Bad file descriptor) [pid 6281] close(29) = -1 EBADF (Bad file descriptor) [pid 6281] exit_group(0 [pid 6282] <... futex resumed>) = ? [pid 6281] <... exit_group resumed>) = ? [pid 6282] +++ exited with 0 +++ [pid 6283] <... futex resumed>) = ? [pid 6283] +++ exited with 0 +++ [pid 6281] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1260, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./420", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./420", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./420/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./420/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./420/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./420/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./420/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./420/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./420/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./420/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./420/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./420") = 0 [pid 5019] mkdir("./421", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1263 [ 74.444724][ T6282] loop0: detected capacity change from 0 to 1024 ./strace-static-x86_64: Process 6284 attached [pid 6284] set_robust_list(0x555556a426a0, 24) = 0 [pid 6284] chdir("./421") = 0 [pid 6284] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6284] setpgid(0, 0) = 0 [pid 6284] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6284] write(3, "1000", 4) = 4 [pid 6284] close(3) = 0 [pid 6284] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6284] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6284] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6284] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6284] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6284] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6284] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6284] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6285 attached [pid 6285] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053 [pid 6284] <... clone3 resumed> => {parent_tid=[1264]}, 88) = 1264 [pid 6284] rt_sigprocmask(SIG_SETMASK, [], [pid 6285] <... rseq resumed>) = 0 [pid 6284] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6285] set_robust_list(0x7f15c1e659a0, 24 [pid 6284] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6285] <... set_robust_list resumed>) = 0 [pid 6284] <... futex resumed>) = 0 [pid 6285] rt_sigprocmask(SIG_SETMASK, [], [pid 6284] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6285] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6285] memfd_create("syzkaller", 0) = 3 [pid 6285] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6285] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6285] munmap(0x7f15b9a45000, 524288) = 0 [pid 6285] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6285] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6285] close(3) = 0 [pid 6285] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6285] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6285] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6285] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6285] ioctl(4, LOOP_CLR_FD) = 0 [pid 6285] close(4) = 0 [pid 6285] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6284] <... futex resumed>) = 0 [pid 6285] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6284] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6285] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6284] <... futex resumed>) = 0 [pid 6285] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6284] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6284] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6284] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6284] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6284] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1265]}, 88) = 1265 [pid 6284] rt_sigprocmask(SIG_SETMASK, [], [pid 6285] <... mknodat resumed>) = 0 [pid 6284] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6285] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6284] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6285] <... futex resumed>) = 0 [pid 6284] <... futex resumed>) = 0 [pid 6285] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6284] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6286 attached [pid 6286] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6286] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6286] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6286] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6286] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6286] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6286] chdir(".") = 0 [pid 6286] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6284] <... futex resumed>) = 0 [pid 6286] <... futex resumed>) = 1 [pid 6286] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6284] close(3) = 0 [pid 6284] close(4) = 0 [pid 6284] close(5) = -1 EBADF (Bad file descriptor) [pid 6284] close(6) = -1 EBADF (Bad file descriptor) [pid 6284] close(7) = -1 EBADF (Bad file descriptor) [pid 6284] close(8) = -1 EBADF (Bad file descriptor) [pid 6284] close(9) = -1 EBADF (Bad file descriptor) [pid 6284] close(10) = -1 EBADF (Bad file descriptor) [pid 6284] close(11) = -1 EBADF (Bad file descriptor) [pid 6284] close(12) = -1 EBADF (Bad file descriptor) [pid 6284] close(13) = -1 EBADF (Bad file descriptor) [pid 6284] close(14) = -1 EBADF (Bad file descriptor) [pid 6284] close(15) = -1 EBADF (Bad file descriptor) [pid 6284] close(16) = -1 EBADF (Bad file descriptor) [pid 6284] close(17) = -1 EBADF (Bad file descriptor) [pid 6284] close(18) = -1 EBADF (Bad file descriptor) [pid 6284] close(19) = -1 EBADF (Bad file descriptor) [pid 6284] close(20) = -1 EBADF (Bad file descriptor) [pid 6284] close(21) = -1 EBADF (Bad file descriptor) [pid 6284] close(22) = -1 EBADF (Bad file descriptor) [pid 6284] close(23) = -1 EBADF (Bad file descriptor) [pid 6284] close(24) = -1 EBADF (Bad file descriptor) [pid 6284] close(25) = -1 EBADF (Bad file descriptor) [pid 6284] close(26) = -1 EBADF (Bad file descriptor) [pid 6284] close(27) = -1 EBADF (Bad file descriptor) [pid 6284] close(28) = -1 EBADF (Bad file descriptor) [pid 6284] close(29) = -1 EBADF (Bad file descriptor) [pid 6284] exit_group(0) = ? [pid 6285] <... futex resumed>) = ? [pid 6286] <... futex resumed>) = ? [pid 6285] +++ exited with 0 +++ [pid 6286] +++ exited with 0 +++ [pid 6284] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1263, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./421", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./421", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./421/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./421/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./421/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./421/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./421/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./421/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./421/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./421/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./421/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./421") = 0 [pid 5019] mkdir("./422", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 74.526141][ T6285] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1266 ./strace-static-x86_64: Process 6287 attached [pid 6287] set_robust_list(0x555556a426a0, 24) = 0 [pid 6287] chdir("./422") = 0 [pid 6287] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6287] setpgid(0, 0) = 0 [pid 6287] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6287] write(3, "1000", 4) = 4 [pid 6287] close(3) = 0 [pid 6287] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6287] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6287] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6287] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6287] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6287] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6287] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6287] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6288 attached [pid 6288] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6288] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6288] rt_sigprocmask(SIG_SETMASK, [], [pid 6287] <... clone3 resumed> => {parent_tid=[1267]}, 88) = 1267 [pid 6288] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6287] rt_sigprocmask(SIG_SETMASK, [], [pid 6288] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6287] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6287] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6288] <... futex resumed>) = 0 [pid 6287] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6288] memfd_create("syzkaller", 0) = 3 [pid 6288] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6288] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6288] munmap(0x7f15b9a45000, 524288) = 0 [pid 6288] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6288] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6288] close(3) = 0 [pid 6288] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6288] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6288] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6288] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6288] ioctl(4, LOOP_CLR_FD) = 0 [pid 6288] close(4) = 0 [pid 6288] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6287] <... futex resumed>) = 0 [pid 6287] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6288] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6287] <... futex resumed>) = 0 [pid 6287] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6287] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6288] <... mknodat resumed>) = 0 [pid 6287] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6287] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6288] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6287] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6288] <... futex resumed>) = 0 [pid 6287] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} [pid 6288] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6289 attached [pid 6289] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6289] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6289] rt_sigprocmask(SIG_SETMASK, [], [pid 6287] <... clone3 resumed> => {parent_tid=[1268]}, 88) = 1268 [pid 6289] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6287] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6287] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6287] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6289] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6289] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6289] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6289] chdir(".") = 0 [pid 6289] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6287] <... futex resumed>) = 0 [pid 6287] close(3) = 0 [pid 6287] close(4) = 0 [pid 6287] close(5) = -1 EBADF (Bad file descriptor) [pid 6287] close(6) = -1 EBADF (Bad file descriptor) [pid 6287] close(7) = -1 EBADF (Bad file descriptor) [pid 6287] close(8) = -1 EBADF (Bad file descriptor) [pid 6287] close(9) = -1 EBADF (Bad file descriptor) [pid 6287] close(10) = -1 EBADF (Bad file descriptor) [pid 6287] close(11) = -1 EBADF (Bad file descriptor) [pid 6287] close(12) = -1 EBADF (Bad file descriptor) [pid 6287] close(13) = -1 EBADF (Bad file descriptor) [pid 6287] close(14) = -1 EBADF (Bad file descriptor) [pid 6287] close(15) = -1 EBADF (Bad file descriptor) [pid 6287] close(16) = -1 EBADF (Bad file descriptor) [pid 6287] close(17) = -1 EBADF (Bad file descriptor) [pid 6287] close(18) = -1 EBADF (Bad file descriptor) [pid 6287] close(19) = -1 EBADF (Bad file descriptor) [pid 6287] close(20) = -1 EBADF (Bad file descriptor) [pid 6287] close(21) = -1 EBADF (Bad file descriptor) [pid 6287] close(22) = -1 EBADF (Bad file descriptor) [pid 6287] close(23) = -1 EBADF (Bad file descriptor) [pid 6287] close(24) = -1 EBADF (Bad file descriptor) [pid 6287] close(25) = -1 EBADF (Bad file descriptor) [pid 6287] close(26) = -1 EBADF (Bad file descriptor) [pid 6287] close(27) = -1 EBADF (Bad file descriptor) [pid 6287] close(28) = -1 EBADF (Bad file descriptor) [pid 6287] close(29) = -1 EBADF (Bad file descriptor) [pid 6287] exit_group(0) = ? [pid 6288] <... futex resumed>) = ? [pid 6289] <... futex resumed>) = ? [pid 6288] +++ exited with 0 +++ [pid 6289] +++ exited with 0 +++ [pid 6287] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1266, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./422", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./422", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./422/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./422/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./422/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./422/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./422/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./422/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./422/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./422/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./422/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./422") = 0 [pid 5019] mkdir("./423", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1269 ./strace-static-x86_64: Process 6290 attached [pid 6290] set_robust_list(0x555556a426a0, 24) = 0 [pid 6290] chdir("./423") = 0 [pid 6290] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6290] setpgid(0, 0) = 0 [pid 6290] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6290] write(3, "1000", 4) = 4 [pid 6290] close(3) = 0 [pid 6290] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6290] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6290] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6290] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6290] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [ 74.603662][ T6288] loop0: detected capacity change from 0 to 1024 [pid 6290] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6290] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6290] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6291 attached => {parent_tid=[1270]}, 88) = 1270 [pid 6291] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053 [pid 6290] rt_sigprocmask(SIG_SETMASK, [], [pid 6291] <... rseq resumed>) = 0 [pid 6291] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6291] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6291] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6290] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6290] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6290] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6291] <... futex resumed>) = 0 [pid 6291] memfd_create("syzkaller", 0) = 3 [pid 6291] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6291] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6291] munmap(0x7f15b9a45000, 524288) = 0 [pid 6291] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6291] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6291] close(3) = 0 [pid 6291] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6291] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6291] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6291] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6291] ioctl(4, LOOP_CLR_FD) = 0 [pid 6291] close(4) = 0 [pid 6291] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6291] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6290] <... futex resumed>) = 0 [pid 6290] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6290] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6290] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6291] <... futex resumed>) = 0 [pid 6290] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE [pid 6291] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6290] <... mprotect resumed>) = 0 [pid 6290] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6291] <... mknodat resumed>) = 0 [pid 6290] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6291] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6290] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} [pid 6291] <... futex resumed>) = 0 [pid 6291] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6292 attached [pid 6290] <... clone3 resumed> => {parent_tid=[1271]}, 88) = 1271 [pid 6290] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6290] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6290] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6292] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6292] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6292] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6292] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6292] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6292] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6292] chdir(".") = 0 [pid 6292] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6290] <... futex resumed>) = 0 [pid 6290] close(3) = 0 [pid 6290] close(4) = 0 [pid 6290] close(5) = -1 EBADF (Bad file descriptor) [pid 6290] close(6) = -1 EBADF (Bad file descriptor) [pid 6290] close(7) = -1 EBADF (Bad file descriptor) [pid 6290] close(8) = -1 EBADF (Bad file descriptor) [pid 6290] close(9) = -1 EBADF (Bad file descriptor) [pid 6290] close(10) = -1 EBADF (Bad file descriptor) [pid 6290] close(11) = -1 EBADF (Bad file descriptor) [pid 6290] close(12) = -1 EBADF (Bad file descriptor) [pid 6290] close(13) = -1 EBADF (Bad file descriptor) [pid 6290] close(14) = -1 EBADF (Bad file descriptor) [pid 6290] close(15) = -1 EBADF (Bad file descriptor) [pid 6290] close(16) = -1 EBADF (Bad file descriptor) [pid 6290] close(17) = -1 EBADF (Bad file descriptor) [pid 6290] close(18) = -1 EBADF (Bad file descriptor) [pid 6290] close(19) = -1 EBADF (Bad file descriptor) [pid 6290] close(20 [pid 6292] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6290] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6290] close(21) = -1 EBADF (Bad file descriptor) [pid 6290] close(22) = -1 EBADF (Bad file descriptor) [pid 6290] close(23) = -1 EBADF (Bad file descriptor) [pid 6290] close(24) = -1 EBADF (Bad file descriptor) [pid 6290] close(25) = -1 EBADF (Bad file descriptor) [pid 6290] close(26) = -1 EBADF (Bad file descriptor) [pid 6290] close(27) = -1 EBADF (Bad file descriptor) [pid 6290] close(28) = -1 EBADF (Bad file descriptor) [pid 6290] close(29) = -1 EBADF (Bad file descriptor) [pid 6290] exit_group(0 [pid 6291] <... futex resumed>) = ? [pid 6290] <... exit_group resumed>) = ? [pid 6292] <... futex resumed>) = ? [pid 6291] +++ exited with 0 +++ [pid 6292] +++ exited with 0 +++ [pid 6290] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1269, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./423", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./423", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./423/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./423/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./423/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./423/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./423/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./423/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./423/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./423/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./423/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./423") = 0 [pid 5019] mkdir("./424", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1272 ./strace-static-x86_64: Process 6293 attached [pid 6293] set_robust_list(0x555556a426a0, 24) = 0 [pid 6293] chdir("./424") = 0 [pid 6293] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6293] setpgid(0, 0) = 0 [pid 6293] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6293] write(3, "1000", 4) = 4 [pid 6293] close(3) = 0 [pid 6293] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6293] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6293] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6293] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6293] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6293] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [ 74.669258][ T6291] loop0: detected capacity change from 0 to 1024 [pid 6293] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6293] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6294 attached => {parent_tid=[1273]}, 88) = 1273 [pid 6294] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6294] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6294] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6294] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6293] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6293] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6294] <... futex resumed>) = 0 [pid 6294] memfd_create("syzkaller", 0 [pid 6293] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6294] <... memfd_create resumed>) = 3 [pid 6294] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6294] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6294] munmap(0x7f15b9a45000, 524288) = 0 [pid 6294] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6294] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6294] close(3) = 0 [pid 6294] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6294] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6294] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6294] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6294] ioctl(4, LOOP_CLR_FD) = 0 [pid 6294] close(4) = 0 [pid 6294] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6293] <... futex resumed>) = 0 [pid 6294] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6293] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6293] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6293] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6294] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6293] <... mmap resumed>) = 0x7f15b9aa4000 [pid 6294] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6293] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6293] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6294] <... mknodat resumed>) = 0 [pid 6293] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} [pid 6294] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6295 attached ) = 0 [pid 6295] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6293] <... clone3 resumed> => {parent_tid=[1274]}, 88) = 1274 [pid 6295] <... rseq resumed>) = 0 [pid 6293] rt_sigprocmask(SIG_SETMASK, [], [pid 6295] set_robust_list(0x7f15b9ac49a0, 24 [pid 6293] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6295] <... set_robust_list resumed>) = 0 [pid 6293] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6295] rt_sigprocmask(SIG_SETMASK, [], [pid 6293] <... futex resumed>) = 0 [pid 6295] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6293] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6295] mkdir(".", 0777 [pid 6294] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6295] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 6295] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6295] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6295] chdir(".") = 0 [pid 6295] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6293] <... futex resumed>) = 0 [pid 6295] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6293] close(3) = 0 [pid 6293] close(4) = 0 [pid 6293] close(5) = -1 EBADF (Bad file descriptor) [pid 6293] close(6) = -1 EBADF (Bad file descriptor) [pid 6293] close(7) = -1 EBADF (Bad file descriptor) [pid 6293] close(8) = -1 EBADF (Bad file descriptor) [pid 6293] close(9) = -1 EBADF (Bad file descriptor) [pid 6293] close(10) = -1 EBADF (Bad file descriptor) [pid 6293] close(11) = -1 EBADF (Bad file descriptor) [pid 6293] close(12) = -1 EBADF (Bad file descriptor) [pid 6293] close(13) = -1 EBADF (Bad file descriptor) [pid 6293] close(14) = -1 EBADF (Bad file descriptor) [pid 6293] close(15) = -1 EBADF (Bad file descriptor) [pid 6293] close(16) = -1 EBADF (Bad file descriptor) [pid 6293] close(17) = -1 EBADF (Bad file descriptor) [pid 6293] close(18) = -1 EBADF (Bad file descriptor) [pid 6293] close(19) = -1 EBADF (Bad file descriptor) [pid 6293] close(20) = -1 EBADF (Bad file descriptor) [pid 6293] close(21) = -1 EBADF (Bad file descriptor) [pid 6293] close(22) = -1 EBADF (Bad file descriptor) [pid 6293] close(23) = -1 EBADF (Bad file descriptor) [pid 6293] close(24) = -1 EBADF (Bad file descriptor) [pid 6293] close(25) = -1 EBADF (Bad file descriptor) [pid 6293] close(26) = -1 EBADF (Bad file descriptor) [pid 6293] close(27) = -1 EBADF (Bad file descriptor) [pid 6293] close(28) = -1 EBADF (Bad file descriptor) [pid 6293] close(29) = -1 EBADF (Bad file descriptor) [pid 6293] exit_group(0 [pid 6295] <... futex resumed>) = ? [pid 6294] <... futex resumed>) = ? [pid 6293] <... exit_group resumed>) = ? [pid 6295] +++ exited with 0 +++ [pid 6294] +++ exited with 0 +++ [pid 6293] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1272, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./424", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./424", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./424/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./424/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./424/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./424/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./424/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./424/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./424/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./424/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 74.738944][ T6294] loop0: detected capacity change from 0 to 1024 [pid 5019] unlink("./424/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./424") = 0 [pid 5019] mkdir("./425", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6296 attached [pid 6296] set_robust_list(0x555556a426a0, 24) = 0 [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1275 [pid 6296] chdir("./425") = 0 [pid 6296] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6296] setpgid(0, 0) = 0 [pid 6296] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6296] write(3, "1000", 4) = 4 [pid 6296] close(3) = 0 [pid 6296] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6296] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6296] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6296] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6296] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6296] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6296] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6296] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6297 attached => {parent_tid=[1276]}, 88) = 1276 [pid 6297] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6297] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6297] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6297] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6296] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6296] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6296] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6297] <... futex resumed>) = 0 [pid 6297] memfd_create("syzkaller", 0) = 3 [pid 6297] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6297] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6297] munmap(0x7f15b9a45000, 524288) = 0 [pid 6297] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6297] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6297] close(3) = 0 [pid 6297] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6297] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6297] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6297] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6297] ioctl(4, LOOP_CLR_FD) = 0 [pid 6297] close(4) = 0 [pid 6297] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6296] <... futex resumed>) = 0 [pid 6296] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6296] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6296] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6296] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6296] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6296] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1277]}, 88) = 1277 [pid 6296] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6296] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6296] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6298 attached [pid 6298] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6298] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6298] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6298] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6298] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6298] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6298] chdir(".") = 0 [pid 6298] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6296] <... futex resumed>) = 0 [pid 6298] <... futex resumed>) = 1 [pid 6298] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6297] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 6297] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6296] close(3) = 0 [pid 6296] close(4) = 0 [pid 6296] close(5) = -1 EBADF (Bad file descriptor) [pid 6296] close(6) = -1 EBADF (Bad file descriptor) [pid 6296] close(7) = -1 EBADF (Bad file descriptor) [pid 6296] close(8) = -1 EBADF (Bad file descriptor) [pid 6296] close(9) = -1 EBADF (Bad file descriptor) [pid 6296] close(10) = -1 EBADF (Bad file descriptor) [pid 6296] close(11) = -1 EBADF (Bad file descriptor) [pid 6296] close(12) = -1 EBADF (Bad file descriptor) [pid 6296] close(13 [pid 6297] <... futex resumed>) = 0 [pid 6296] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6297] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6296] close(14) = -1 EBADF (Bad file descriptor) [pid 6296] close(15) = -1 EBADF (Bad file descriptor) [pid 6296] close(16) = -1 EBADF (Bad file descriptor) [pid 6296] close(17) = -1 EBADF (Bad file descriptor) [pid 6296] close(18) = -1 EBADF (Bad file descriptor) [pid 6296] close(19) = -1 EBADF (Bad file descriptor) [pid 6296] close(20) = -1 EBADF (Bad file descriptor) [pid 6296] close(21) = -1 EBADF (Bad file descriptor) [pid 6296] close(22) = -1 EBADF (Bad file descriptor) [pid 6296] close(23) = -1 EBADF (Bad file descriptor) [pid 6296] close(24) = -1 EBADF (Bad file descriptor) [pid 6296] close(25) = -1 EBADF (Bad file descriptor) [pid 6296] close(26) = -1 EBADF (Bad file descriptor) [pid 6296] close(27) = -1 EBADF (Bad file descriptor) [pid 6296] close(28) = -1 EBADF (Bad file descriptor) [pid 6296] close(29) = -1 EBADF (Bad file descriptor) [pid 6296] exit_group(0) = ? [pid 6297] <... futex resumed>) = ? [pid 6298] <... futex resumed>) = ? [pid 6297] +++ exited with 0 +++ [pid 6298] +++ exited with 0 +++ [pid 6296] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1275, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./425", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./425", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./425/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./425/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./425/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./425/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./425/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./425/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./425/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./425/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./425/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./425") = 0 [pid 5019] mkdir("./426", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1278 ./strace-static-x86_64: Process 6299 attached [pid 6299] set_robust_list(0x555556a426a0, 24) = 0 [pid 6299] chdir("./426") = 0 [pid 6299] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6299] setpgid(0, 0) = 0 [pid 6299] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6299] write(3, "1000", 4) = 4 [pid 6299] close(3) = 0 [pid 6299] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6299] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 74.824616][ T6297] loop0: detected capacity change from 0 to 1024 [pid 6299] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6299] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6299] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6299] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6299] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6299] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6300 attached => {parent_tid=[1279]}, 88) = 1279 [pid 6300] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6300] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6300] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6300] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6299] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6299] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6299] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6300] <... futex resumed>) = 0 [pid 6300] memfd_create("syzkaller", 0) = 3 [pid 6300] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6300] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\